<div dir="ltr"><div class="gmail_default" style="font-family:tahoma,sans-serif;font-size:small">Hi Tibor,</div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Nov 19, 2014 at 6:46 PM, Demeter Tibor <span dir="ltr"><<a href="mailto:tdemeter@itsmart.hu" target="_blank">tdemeter@itsmart.hu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div style="font-family:'times new roman','new york',times,serif;font-size:12pt;color:rgb(0,0,0)"><div>Hi,</div><div><br></div><div>I have an IPA server 3.0 on centos 6.6.</div><div>I successfully attached to my ovirt cluster. </div><div>I can see the users on ovirt user tab, but after auth I always get this error:</div><div><span><br></span></div><div><span>Cannot Login. User Password has expired. Use the following URL to change the password: (nothing)</span></div><div><span><br></span></div><div><span>I have try out with different long passwords and different users, but it's same.</span></div></div></blockquote><div><br></div><div><div class="gmail_default" style="font-family:tahoma,sans-serif;font-size:small;display:inline">Did you try accessing a regular linux client with the same account? In IPA, new user passwords are always set as expired by design - please see [1]. </div></div><div><div class="gmail_default" style="font-family:tahoma,sans-serif;font-size:small;display:inline"><br></div></div><div><div class="gmail_default" style="font-family:tahoma,sans-serif;font-size:small;display:inline">To test this, you can try to login a client. If it is really expired, system will ask you to provide a new password. After this, you'll be able to login RHEVM with the new password you've just set.</div></div><div><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif;font-size:small">[1] </div><div class="gmail_default" style="font-family:tahoma,sans-serif;font-size:small"><a href="http://www.freeipa.org/page/New_Passwords_Expired">http://www.freeipa.org/page/New_Passwords_Expired</a></div><div class="gmail_default" style="font-family:tahoma,sans-serif;font-size:small"><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif;font-size:small">Regards,</div><div class="gmail_default" style="font-family:tahoma,sans-serif;font-size:small">--</div><div class="gmail_default" style="font-family:tahoma,sans-serif;font-size:small">Ekin</div></div>
</div></div>