Hello, I try to test renaming of user objects. I start with user bob and I'm able to kinit just fine:
# echo BobPassword123 | kinit bob Password for b...@example.test: # I then rename the user: # echo Password123 | kinit admin Password for ad...@example.test: # ipa user-mod --rename=bob1 bob ------------------------ Modified user "bob" ------------------------ User login: bob1 First name: Robert Last name: Chase Home directory: /home/bob Login shell: /bin/sh Email address: b...@example.test UID: 251800001 GID: 251800001 Account disabled: False Password: True Member of HBAC rule: allow_wikiapp Kerberos keys available: True And I try to kinit with the original password and it fails: # echo BobPassword123 | kinit bob1 Password for b...@example.test: kinit: Password incorrect while getting initial credentials # Then I rename the user back and the original password starts to work again: # echo Password123 | kinit admin Password for ad...@example.test: # ipa user-mod --rename=bob bob1 -------------------- Modified user "bob1" -------------------- User login: bob First name: Robert Last name: Chase Home directory: /home/bob Login shell: /bin/sh Email address: b...@example.test UID: 251800001 GID: 251800001 Account disabled: False Password: True Member of HBAC rule: allow_wikiapp Kerberos keys available: True # echo BobPassword123 | kinit bob Password for b...@example.test: # Is this expected? It's with 4.1.0. -- Jan Pazdziora Senior Principal Software Engineer, Identity Management Engineering, Red Hat -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project