On 05/28/2015 09:47 PM, Drew Erny wrote:
Hi, freeipa-devel,

More newbie questions. I have what I believe to be a fix for Ticket #2547
(https://fedorahosted.org/freeipa/ticket/2547) written, but I need to test this
fix. I need to migrate an LDAP database that is in the previously expected for
(all users and groups under 1 level) and migrate an LDAP database that is in a
nested form where there might be many sub-ou's to search for users and groups.
I need to make sure the outcome of both migrations is the same.

What would be the best way to go about this, more specifically than "set up two
LDAP server and migrate them". Like, what tools are available to help me get
this set up? Also, how can I preserve my work so that next time we have to
modify migration code, it can be easily tested? Should I spin up VMs and save
the images?

Also, I can just send a patch if someone feels so utterly confident in the
codebase that they can tell if the thing I've done is right or wrong just by
looking at it.


Drew Erny

For #2547, I would not complicate the issue more then necessary. I would suggest starting 2 FreeIPA servers, one for your patch, other for migrating from.

In second FreeIPA server, add couple users and groups and then try to migrate it, you can use my command in


You can easily test scope BASE and ONELINE in that scenario. If you want to make sure that the scope is properly set, you can also simply check dirsrv access log and see if the right scope is used for the migration LDAP search.


Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Reply via email to