Had a few users get kicked off a console session while changing their password. Seems there's a rather short timeout for this. Is the timeout a configuration that can be adjusted somewhere in IPA or possibly pam.d? I've been looking for it but haven't come across anything that looks likely so far.