Dan Scott wrote:

I have a FreeIPA 1 system which is being migrated to FreeIPA 2. After
migration, the script says:

"Passwords have been migrated in pre-hashed format.
IPA is unable to generate Kerberos keys unless provided
with clear text passwords. All migrated users need to
login at https://your.domain/ipa/migration/ before they
can use their Kerberos accounts."

I have some users who are authenticated via LDAP. Also I have a Java
application which allows them to change their password using LDAP.
Will existing passwords continue to work when using LDAP
authentication/password changes? It is only Kerberos authentication
which requires users to re-login on this special page?



That is correct.

When the user authenticates to this special page (sssd can also handle this) then Kerberos credentials are generated for the user.


Freeipa-users mailing list

Reply via email to