IPA requires users to change their passwords immediately

Latest response

I am using IPA for authentication of RHEV-M.

 

I find that when I create a user account with

 

ipa useradd <username>

 

the user has to change their password before they can log in to the User Portal.

 

I am not using IPA for anything other than authenticating RHEV-M.  If someone can recommend a way for users to change their passwords, that would be really helpful. 

 

One way that I have found for a user to change their password is for the user to ssh into the IPA server.  Then, after they enter their initial password, the user can change their password.  However, a web app for changing the password would be much better.

AA
Log in to join the conversation

Responses

AC Red Hat Active Contributor 245 points
8 March 2012 9:33 PM

This isn't related to RHEV it's an IPA policy, when you first setup a user in IPA the password is set to expired [1]

 

You'd need to change the password as the user. I seem to remember you could change the policy in IPA but I'd have to check the docs.

 

 

 

[1] http://freeipa.org/page/NewPasswordsExpired

AA Expert 1152 points
8 March 2012 11:18 PM

I seem to remember that there was a way to change a password from the login screen in RHEV 2.2.

 

Anyway, sincere thanks for your response.  I'll find out more about IPA.

Sadique Puthen's picture Red Hat Guru 4649 points
9 March 2012 6:55 AM

Please also take a look at the below thread:

 

https://access.redhat.com/discussion/work-around-cannot-login-user-password-has-expired-please-change-your-password-rhevm-user

 

You can either use "kinit" or "kpasswd" to change the password.

AA Expert 1152 points
14 March 2012 8:52 PM

I think that the bug report at the following URL is relevant to this issue:

 

https://bugzilla.redhat.com/show_bug.cgi?id=802786

ii Active Contributor 175 points
24 August 2012 6:49 AM

I've written very simple web application to change password first time and change expired password as well. Just use vaadin for UI and this code https://danieljamesscott.org/10-documentation/configuration-guides/17-change-expired-freeipa-password-using-java.html

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.