Hi Alexander and Robbie,
Thanks for the responses. I'm not quite ready to start hacking IPA just yet as I'm still trying to get it setup and running. I'll try to re-create the weirdness with password expiration not sticking with kadmin.local and I'll post back if I'm able to reproduce that. Sounds like the utilities should generally be avoided though and the IPA command line interface should be used instead.
Ryan