On 15/03/16 14:14, lejeczek wrote:
now when I've groups migrated I see mappings user-group are
lost. Would it be because my groups did not go in first time
together with users?
On 15/03/16 13:42, Rob Crittenden wrote:
last - this must most FAQ people wonder - can IPA's 389
backend be used in the same/similar fashion samba uses
ldap? skipping all the kerberos bits? (samba & IPA on the
same one box)
this might be more 389-ds related - in old days I remember
DS had mozldap dedicated toolset, how is it these days?
How do users deal with 389-ds IPA-related bits?
On 14/03/16 17:06, Rob Crittenden wrote:
thanks Rob, may I ask why process by defaults looks up
Yes. It will skip over anything that already exists in
ipa: ERROR: group LDAP search did not return any
result (search base:
I see users went in but later I realized that current
samba's ou was
"group" not groups.
Can I just re-run migrations?
It is conservative but this is why it can be overridden.
We haven't had many (any?) reports of migrating from
Is there a reason it skips ldap+samba typical posixGroup &
Lastly, is there a way to preserve account
locked/disabled status for
I don't know how it is stored but as lon
g as the schema is available in
IPA then the values should be preserved on migration
attributes are associated with a blacklisted objectclass.
Manage your subscription for the Freeipa-users mailing list:
Go to http://freeipa.org for more info on the project