<html><body><div style="font-family: times new roman, new york, times, serif; font-size: 12pt; color: #000000"><div>Hi,</div><div><br></div><div>Thank you, that's worked!</div><div><br></div><div>Bye</div><div><br></div><div>Tibor</div><div><br></div><div><br></div><hr id="zwchr"><blockquote style="border-left:2px solid #1010FF;margin-left:5px;padding-left:5px;color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><div dir="ltr"><div class="gmail_default" style="font-family:tahoma,sans-serif;font-size:small">Hi,</div><div class="gmail_default" style="font-family:tahoma,sans-serif;font-size:small"><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif;font-size:small">An ldappasswd command would change it without setting as expired. It will prompt twice for the account password you'll set, and the password for the directory manager once:</div><div class="gmail_default" style="font-family:tahoma,sans-serif;font-size:small"><br></div><div class="gmail_default" style=""><span face="monospace" data-mce-style="font-family: monospace;" style="font-family: monospace;">$ ldappasswd -ZZ -D 'cn=directory manager' -W -S uid=USERNAME,cn=users,cn=accounts,dc=example,dc=org -H ldap://<a href="http://ipaserver.example.org" target="_blank">ipaserver.example.org</a></span><br></div><div class="gmail_default" style=""><span face="tahoma, sans-serif" data-mce-style="font-family: tahoma, sans-serif;" style="font-family: tahoma, sans-serif;"><br></span></div><div class="gmail_default" style=""><span face="tahoma, sans-serif" data-mce-style="font-family: tahoma, sans-serif;" style="font-family: tahoma, sans-serif;">You'll need to set the username (USERNAME) domain (<a href="http://example.org" target="_blank">example.org</a>) and server FQDN accordingly.</span></div><div class="gmail_default" style=""><span face="tahoma, sans-serif" data-mce-style="font-family: tahoma, sans-serif;" style="font-family: tahoma, sans-serif;"><br></span></div><div class="gmail_default" style=""><span face="tahoma, sans-serif" data-mce-style="font-family: tahoma, sans-serif;" style="font-family: tahoma, sans-serif;">Hope this helps,</span></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Nov 19, 2014 at 8:38 PM, Demeter Tibor <span dir="ltr"><<a href="mailto:tdemeter@itsmart.hu" target="_blank">tdemeter@itsmart.hu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div style="font-family:times new roman,new york,times,serif;font-size:12pt;color:#000000"><div>Hi,<br></div><div><br></div><div>I don't have linux client.</div><div>Can I change password without this?</div><div><br></div><div>Thanks,</div><div><br>Tibor</div><div><br></div><hr><div><div class="h5"><blockquote style="border-left:2px solid #1010ff;margin-left:5px;padding-left:5px;color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt"><div dir="ltr"><div class="gmail_default" style="font-family:tahoma,sans-serif;font-size:small">Hi Tibor,</div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Nov 19, 2014 at 6:46 PM, Demeter Tibor <span dir="ltr"><<a href="mailto:tdemeter@itsmart.hu" target="_blank">tdemeter@itsmart.hu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div style="font-family:'times new roman','new york',times,serif;font-size:12pt;color:rgb(0,0,0)"><div>Hi,</div><div><br></div><div>I have an IPA server 3.0 on centos 6.6.</div><div>I successfully attached to my ovirt cluster. </div><div>I can see the users on ovirt user tab, but after auth I always get this error:</div><div><span><br></span></div><div><span>Cannot Login. User Password has expired. Use the following URL to change the password: (nothing)</span></div><div><span><br></span></div><div><span>I have try out with different long passwords and different users, but it's same.</span></div></div></blockquote><div><br></div><div><div class="gmail_default" style="font-family:tahoma,sans-serif;font-size:small;display:inline">Did you try accessing a regular linux client with the same account? In IPA, new user passwords are always set as expired by design - please see [1]. </div></div><div><div class="gmail_default" style="font-family:tahoma,sans-serif;font-size:small;display:inline"><br></div></div><div><div class="gmail_default" style="font-family:tahoma,sans-serif;font-size:small;display:inline">To test this, you can try to login a client. If it is really expired, system will ask you to provide a new password. After this, you'll be able to login RHEVM with the new password you've just set.</div></div><div><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif;font-size:small">[1] </div><div class="gmail_default" style="font-family:tahoma,sans-serif;font-size:small"><a href="http://www.freeipa.org/page/New_Passwords_Expired" target="_blank">http://www.freeipa.org/page/New_Passwords_Expired</a></div><div class="gmail_default" style="font-family:tahoma,sans-serif;font-size:small"><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif;font-size:small">Regards,</div><div class="gmail_default" style="font-family:tahoma,sans-serif;font-size:small">--</div><div class="gmail_default" style="font-family:tahoma,sans-serif;font-size:small">Ekin</div></div>
</div></div>
</blockquote><div><br></div></div></div></div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr"><span><span face="tahoma, sans-serif" data-mce-style="font-family: tahoma, sans-serif;" style="font-family: tahoma, sans-serif;">Ekin Meroğlu </span><span face="tahoma, sans-serif" data-mce-style="font-family: tahoma, sans-serif;" style="font-family: tahoma, sans-serif;"><i>Red Hat Certified Datacenter Specialist</i><br><b>linuxera</b> Özgür Yazılım Çözüm ve Hizmetleri<br><b>T</b> +90 (850) 22 LINUX <b>GSM</b> +90 (532) 137 77 04</span></span></div></div>
</div>
</blockquote><div><br></div></div></body></html>