On 07/21/2014 07:28 PM, Nordgren, Bryce L -FS wrote: > > >> I will work with DS team to backport the switch option to Fedora 20 389-ds- >> base and to release FreeIPA 4.0.1 with appropriate patch to fix this problem >> ASAP, ideally this week. > > > Thanks much, Martin!
Note that fixed 389-ds-base is now available in Fedora 20 updates-testing repo: https://admin.fedoraproject.org/updates/FEDORA-2014-8709/389-ds-base-1.3.2.20-1.fc20 If you install that + switch cn=config's nsslapd-allow-hashed-passwords attribute to "on", you will be able to finish the migration. FreeIPA patch to enable that permanently was submitted. HTH, Martin -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project