Hi
this is the expected behavior, and the rationale is explained here.

There is already an upstream ticket asking to allow the creation of users without the need to reset their password on first login:
#5763 IPA does not provide a method for creating new users with a non-expired password

flo

On Thu, Mar 3, 2022 at 8:55 AM GAURAV Pande via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:
Hi Team ,
I have a FreeIPA client  registered successfully on FreeIPA server  under Host section , but when a user try to login first time he is always asked to change is password , it seems a default behavior ? If yes could you let me know how can we change this or what configuration are required on Client or FreeIPA server side ? Looking forward for your response . Thanks !
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure