Too long ago I ran "ipa migrate-ds" to migrate my users into IPA, but
unfortunately haven't been able to roll out IPA as our main identity
platform yet. Now many users has probably changed passwords in the old
directory, and switching to an IPA with their old password will be
confusing. Is there any way to tell "ipa migrate-ds" to
re-sync/re-migrate LDAP passwords ?
Freeipa-users mailing list