On Fri, Mar 25, 2011 at 05:14:02PM -0400, Rob Crittenden wrote: > > Shouldn't be too bad. Here is our beta documentation on migration: > > http://obriend.fedorapeople.org/freeIPA2.0/Identity_and_Policy_Management_Guide/html-single/#chap-Enterprise_Identity_Management_Guide-Migrating_from_a_Directory_Server_to_IPA
Ok, good, that looks like it should cover the bulk of our migration. The other problems I'm looking at are probably more of design issues. Are there a deployment guide somewhere as well ? Currently we use netgroups for servers and users, mainly to manage who can log in to which server trough pam_access/access.conf plus for sudo rules. Should we continue using netgroups, or will the "user groups" and "host groups" in IPA cover this ? Does the user groups allow nesting of posix groups ? I.e. user1 is member of group1 which automatically make him member of group2 and group3? Some guides for configuring roles/privileges would be very interesting. We want to have "group admins" who are allowed to add/remove members of the groups this admin admins... Also we might want to allow team leaders to add new users.. Oh.. and are there any training available/planned for IPA (v2)? -jf _______________________________________________ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users