Recently I needed to import hundreds of users from the UNIX standard files /etc/passwd and friends to a new IPA server, and I found Robert Crittenden's excellent sketch of a Python program to do the import:

I extended it to and asked for and received for permission to publish the derived work under the MIT license. This new set of scripts supports importing groups, group members, shadow passwords, and has some configuration parameters baked into the scripts themselves. There is also a script to unlock a locked account (such as admin if it gets locked) via LDAP in the distribution. These scripts are now available here:

Further dialog with @rcritten yielded an issue for improving performance, I welcome contributions in the form of email posts or pull requests:

Thanks again go to Robert Crittenden and Red Hat for everything you've done to improve identity management!

 Richard Bullington-McGuire <> +1 571 236 0938
 President of The Obscure Organization -
 PGP key fingerprint: D9B2 B6A6 17A8 8989 918C  3D59 0621 BDC5 DAC3 028E

Manage your subscription for the Freeipa-users mailing list:
Go to for more info on the project

Reply via email to