Hi Alexander and Robbie,
Thanks for the responses. I'm not quite ready to start hacking IPA just yet as
I'm still trying to get it setup and running. I'll try to re-create the weirdness
with password expiration not sticking with kadmin.local and I'll post back if I'm
able to reproduce that. Sounds like the utilities should generally be avoided though and
the IPA command line interface should be used instead.
Ryan