I’m in a similar situation and need to upgrade. These docs are what I found https://www.freeipa.org/page/Upgrade#FreeIPA_4.2.0_or_newer and it seems to imply to simply run a yum update freeipa-server to go to the latest version. Is there some other documentation I should be following?
-Kevin > On Feb 7, 2023, at 10:51 AM, Rob Crittenden via FreeIPA-users > <freeipa-users@lists.fedorahosted.org> wrote: > > When using --setattr you have to use the LDAP attribute name. So in this > case givenname. > > 4.5.4 is getting along to 6 years old now. In general we strongly > encourage you to upgrade to a supported release, one release at a time > (there is no going from 4.5 to 4.10 directly). > > rob > > None via FreeIPA-users wrote: >> >> >> Hi Florence, >> >> I've tried the --setattr option with 'first', >> >> >> ipa user-mod user1 --setattr first=phil >> >> ... but to no avail >> >> ipa: ERROR: Insufficient access: Insufficient 'write' privilege to the >> 'first' attribute of >> entry 'uid=...'. >> >> >> >> ----- Mail original ----- >> De: "Florence Blanc-Renaud via FreeIPA-users" >> <freeipa-users@lists.fedorahosted.org> >> À: phi...@free.fr >> Cc: freeipa-users@lists.fedorahosted.org, "Florence Blanc-Renaud" >> <f...@redhat.com> >> Envoyé: Mardi 7 Février 2023 17:37:19 >> Objet: [Freeipa-users] Re: password-expiration >> >> >> >> >> >> Hi, >> >> >> >> On Tue, Feb 7, 2023 at 5:23 PM < phi...@free.fr > wrote: >> >> >> Hi Florence, >> alas, same issue >> >> ipa: error: no such option: --password-expiration >> >> >> >> Ok, the functionality was added in 4.6.0 (see Release notes ) so you need to >> use directly ipa user-mod LOGIN --setattr krbpasswordexpiration =VALUE >> flo >> >> >> >> >> >> >> ----- Mail original ----- >> De: "Florence Blanc-Renaud" < f...@redhat.com > >> À: phi...@free.fr >> Cc: freeipa-users@lists.fedorahosted.org >> Envoyé: Mardi 7 Février 2023 17:12:32 >> Objet: Re: [Freeipa-users] password-expiration >> >> >> >> >> Hi, >> >> >> >> On Tue, Feb 7, 2023 at 4:49 PM < phi...@free.fr > wrote: >> >> >> Hi Florence, >> unfortunately, >> >> ipa user-mod user1 --krbpasswordexpiration='2024-06-28 07:49:37Z' >> Usage: ipa [global-options] user-mod LOGIN [options] >> >> ipa: error: no such option: --krbpasswordexpiration >> >> >> My bad, I copied the attribute name instead of the CLI option name. Can you >> try with >> ipa user-mod LOGIN --password-expiration =DATETIME >> >> >> Note: if you type ipa user-mod --help you can see all the available options. >> flo >> >> > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org > To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org > Do not reply to spam, report it: > https://pagure.io/fedora-infrastructure/new_issue
_______________________________________________ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue