Re: [Freeipa-users] export/import users password between two differents IPA environment

2016-05-09 Thread Rob Crittenden

Alexandre Ellert wrote:

Hello,

I have a broken IPA environnment with very few users and groups and
I've setup a fresh new installation.
I already recreate users and groups and now need to keep old users
passwords. Is there a way to copy/paste users password between these
two differents IPA ?


If you had done a migration from the old to new IPA then the passwords 
would have come along. The problem you're going to have is that 
pre-hashed passwords are only allowed when adding an entry. To be able 
to do that you'll need to add some user to passSyncManagersDNs and bind 
as that user when loading the passwords (you can pull them from the old 
server by binding as Directory Manager).


You almost certainly will want to remove the user in passSyncManagersDNs 
once finished.


rob

--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project


[Freeipa-users] export/import users password between two differents IPA environment

2016-05-09 Thread Alexandre Ellert
Hello,

I have a broken IPA environnment with very few users and groups and
I've setup a fresh new installation.
I already recreate users and groups and now need to keep old users
passwords. Is there a way to copy/paste users password between these
two differents IPA ?

Thank you for your help

Alexandre

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project