Just for the record, this should be fixed since FreeIPA 3.2:
On 09/15/2014 04:06 PM, Jason Woods wrote:
> On 15 Sep 2014, at 14.48, Jason Woods <de...@jasonwoods.me.uk> wrote:
>> I wonder if anyone has any advice. We changed password policy to 20000 days
>> a few weeks ago.
>> Over the weekend, passwords expired and now we cannot login. All admin
>> accounts are essentially unusable.
>> Seems to be this issue: https://fedorahosted.org/freeipa/ticket/3312
> Just solved it by turned the clock back to around 1975, playing around with
> password change, and then returning to 2014. Eventually let me get in so I
> could kinit and fix the policy.
> Phew. Sorry to bother.
Associate Software Engineer | Red Hat | Identity Management
RHCE | Brno Site | IRC: tbabej | freeipa.org
Manage your subscription for the Freeipa-users mailing list:
Go To http://freeipa.org for more info on the project