These docs are what I found https://www.freeipa.org/page/Upgrade#FreeIPA_4.2.0_or_newer and it seems to imply to simply run a yum update freeipa-server to go to the latest version. Is there some other documentation I should be following?

When using --setattr you have to use the LDAP attribute name. So in this
case givenname.

4.5.4 is getting along to 6 years old now. In general we strongly
encourage you to upgrade to a supported release, one release at a time
(there is no going from 4.5 to 4.10 directly).

rob

None via FreeIPA-users wrote:

Hi Florence,

I've tried the --setattr option with 'first',

ipa user-mod user1 --setattr first=phil

... but to no avail

ipa: ERROR: Insufficient access: Insufficient 'write' privilege to the 'first' attribute of

entry 'uid=...'.

----- Mail original -----

De: "Florence Blanc-Renaud via FreeIPA-users" <freeipa-users@lists.fedorahosted.org>

À: phiroc@free.fr

Cc: freeipa-users@lists.fedorahosted.org, "Florence Blanc-Renaud" <flo@redhat.com>

Envoyé: Mardi 7 Février 2023 17:37:19

Objet: [Freeipa-users] Re: password-expiration

Hi,

On Tue, Feb 7, 2023 at 5:23 PM < phiroc@free.fr > wrote:

Hi Florence,

alas, same issue

ipa: error: no such option: --password-expiration

Ok, the functionality was added in 4.6.0 (see Release notes ) so you need to use directly ipa user-mod LOGIN --setattr krbpasswordexpiration =VALUE

flo

----- Mail original -----

De: "Florence Blanc-Renaud" < flo@redhat.com >

À: phiroc@free.fr

Cc: freeipa-users@lists.fedorahosted.org

Envoyé: Mardi 7 Février 2023 17:12:32

Objet: Re: [Freeipa-users] password-expiration

Hi,

On Tue, Feb 7, 2023 at 4:49 PM < phiroc@free.fr > wrote:

Hi Florence,

unfortunately,

ipa user-mod user1 --krbpasswordexpiration='2024-06-28 07:49:37Z'

Usage: ipa [global-options] user-mod LOGIN [options]

ipa: error: no such option: --krbpasswordexpiration

My bad, I copied the attribute name instead of the CLI option name. Can you try with

ipa user-mod LOGIN --password-expiration =DATETIME

Note: if you type ipa user-mod --help you can see all the available options.

flo

_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue