Re: [Freeipa-users] Locked out admin

2014-04-15 Thread Martin Kosek
On 04/14/2014 11:49 PM, Mario Gonzalez wrote: Den 14. april 2014 23:25, skrev Rob Crittenden: Steven Jones wrote: Login a directory manager? Right, something like: $ ldappasswd -x -D 'cn=directory manager' -W -S uid=admin,cn=users,cn=accounts,dc=example,dc=com And don't set the maxlife

[Freeipa-users] Locked out admin

2014-04-14 Thread Mario Gonzalez
Hi, I changed the max password life parameter to 3 and now I cannot get back in to undo it. If I try to do 'kinit admin' I only get a 'Password expired. You must change it now' dialog that ends with: kinit: Password has expired while getting initial credentials Unfortunately as this is

Re: [Freeipa-users] Locked out admin

2014-04-14 Thread Steven Jones
on behalf of Mario Gonzalez mario.p.gonza...@gmail.com Sent: Tuesday, 15 April 2014 9:13 a.m. To: freeipa-users@redhat.com Subject: [Freeipa-users] Locked out admin Hi, I changed the max password life parameter to 3 and now I cannot get back in to undo it. If I try to do 'kinit admin' I only

Re: [Freeipa-users] Locked out admin

2014-04-14 Thread Rob Crittenden
:13 a.m. To: freeipa-users@redhat.com Subject: [Freeipa-users] Locked out admin Hi, I changed the max password life parameter to 3 and now I cannot get back in to undo it. If I try to do 'kinit admin' I only get a 'Password expired. You must change it now' dialog that ends with: kinit

Re: [Freeipa-users] Locked out admin

2014-04-14 Thread Mario Gonzalez
Den 14. april 2014 23:25, skrev Rob Crittenden: Steven Jones wrote: Login a directory manager? Right, something like: $ ldappasswd -x -D 'cn=directory manager' -W -S uid=admin,cn=users,cn=accounts,dc=example,dc=com And don't set the maxlife to anything greater than say 4000. rob