Description of problem:

ipa pwpolicy-mod --maxlife accept values up to 2147483647. Maxlife values 999999 and 2147483647 are not applied correctly, ipa pwpolicy-show show them correctly, but user's attribute 'krbpasswordexpiration' is set only 3 months ahead. I expected that policy will be applied correctly or maxlife value will be limited for example to 10000 value.

Version-Release number of selected component (if applicable):
server-3.0.0-25.el6

How reproducible:
always

Steps to Reproduce:
1.
2.
3.

Actual results:
user's attribute 'krbpasswordexpiration' is set only 3 months ahead

Expected results:
user's attribute 'krbpasswordexpiration' is set according to pwpolicy maxlife parameter

Additional info:

upstream ticket https://fedorahosted.org/freeipa/ticket/3817