invsblduck in IRC reported that this isn't working:
# ipa host-add --random # ipa-client-install --password '***' <format disk> # ipa host-disable # ipa host-mod --random # ipa-client-install --password '***'
The resulting host principal isn't usable:
# kinit -kt /etc/krb5.keytab host/fqdn@REALM password expired
attachment freeipa-rcrit-840-password.patch
master: 1ebe3c1[[BR]] ipa-2-0: 45cd332
The patch was buggy as it sets the wrong expire time. Reopening
Simo fixed a problem where the password expiration time wasn't being set to pwdata.expireTime, it was being set to pwdata.timeNow.
master: 6f6679e
ipa-2-0: d290e8f
Metadata Update from @rcritten: - Issue assigned to simo - Issue set to the milestone: FreeIPA 2.1 - 2011/07
Login to comment on this ticket.