I forgot to say that I did a "kinit admin" before the ipa user-mod.
On Tue, Feb 23, 2016 at 2:31 PM, Karl Forner <karl.for...@gmail.com> wrote: > Hello, > > I tried to postpone a password expiration date, as indicated here: > > https://docs.fedoraproject.org/en-US/Fedora/18/html/FreeIPA_Guide/pwd-expiration.html > > % ipa user-mod myuser --setattr=krbpasswordexpiration=20170301121443Z > > ipa: ERROR: Insufficient access: Insufficient 'write' privilege to the > 'krbPasswordExpiration' attribute of entry > 'uid=myuser,cn=users,cn=accounts,dc=quartzbio,dc=com'. > > Is this expected ? What is the canonical way of doing this ? > > > Thanks, > Karl >
-- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
