Thank you for your answer, I forgot to re-add Freeipa-users mailing list.

So I cannot modify the userPassword only and when I generate a keytab with
ipa-getkeytab it doesn't update the userPassword.
Do you know if it is normal behaviour for ipa-getkeytab ? If not, was it
solved in a newer version of IPA ?

Best regards.


On Fri, Jan 8, 2016 at 2:37 PM, Alexander Bokovoy <>

> On Fri, 08 Jan 2016, bahan w wrote:
>> Hello Alexander.
>> Thank you for your answer.
> Please don't ask in private, use freeipa-users@ mailing list.
> Is there a way to modify the field userPassword only ?
>> Do you know if ldappasswd modify something else ?
> There is no way to modify userPassword attribute only. When you are
> modifying userPassword attribute in FreeIPA, IPA's password plugin will
> update all other password attributes, if there are any.
> --
> / Alexander Bokovoy
Manage your subscription for the Freeipa-users mailing list:
Go to for more info on the project

Reply via email to