> > The docs you are referring to are quite old: 5 full Fedora releases, > several IPA releases. >
You're right, sorry. I found this documentation https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/pwd-expiration.html which has updated instructions based on ldapmodify which worked for me. Thanks.
-- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project