#1526 krbpasswordexpiration not getting set properly on re-enrollment
Closed: Fixed None Opened 12 years ago by rcritten.

invsblduck in IRC reported that this isn't working:

# ipa host-add --random
# ipa-client-install --password '***'
<format disk>
# ipa host-disable
# ipa host-mod --random
# ipa-client-install --password '***'

The resulting host principal isn't usable:

# kinit -kt /etc/krb5.keytab host/fqdn@REALM
password expired

The patch was buggy as it sets the wrong expire time.
Reopening

Simo fixed a problem where the password expiration time wasn't being set to pwdata.expireTime, it was being set to pwdata.timeNow.

master: 6f6679e

ipa-2-0: d290e8f

Metadata Update from @rcritten:
- Issue assigned to simo
- Issue set to the milestone: FreeIPA 2.1 - 2011/07

7 years ago

Login to comment on this ticket.

Metadata