When performing a kinit or a kpasswd in 2.1.90 there appears to be permission issues:
$ kpasswd user Password for user@EXAMPLE.COM: Enter new password: Enter it again: Password change rejected: Password not changed. Insufficient access to perform requested operation while trying to change password.
What user were you when you did the kpasswd? admin, user or other?
This happens because ipa_kpasswd is still running (2341).
To fix this temporarily:
# killall ipa_kpasswd # service krb5kdc restart # service kadmin restart
That fixed it for me. Will address the issue of ipa_kpasswd in ticket 2341, closing as duplicate.
Metadata Update from @jraquino: - Issue assigned to rcritten - Issue set to the milestone: FreeIPA 2.2 Core Effort - 2012/02
Login to comment on this ticket.