Re: [Freeipa-users] Transfer user database to FreeIPA LDAP

2012-06-25 Thread Stephen Gallagher
On Mon, 2012-06-25 at 15:39 -0400, Dmitri Pal wrote: > On 06/25/2012 02:36 PM, Simo Sorce wrote: > > On Mon, 2012-06-25 at 13:51 -0400, Dmitri Pal wrote: > >> Simo are you sure simple bind is enough? I thought that it should be a > >> bind over SSL with some specific ext op. Do I recall it wrong?

Re: [Freeipa-users] Transfer user database to FreeIPA LDAP

2012-06-25 Thread Simo Sorce
On Mon, 2012-06-25 at 15:39 -0400, Dmitri Pal wrote: > On 06/25/2012 02:36 PM, Simo Sorce wrote: > > On Mon, 2012-06-25 at 13:51 -0400, Dmitri Pal wrote: > >> Simo are you sure simple bind is enough? I thought that it should be a > >> bind over SSL with some specific ext op. Do I recall it wrong?

Re: [Freeipa-users] Transfer user database to FreeIPA LDAP

2012-06-25 Thread Dmitri Pal
On 06/25/2012 02:36 PM, Simo Sorce wrote: > On Mon, 2012-06-25 at 13:51 -0400, Dmitri Pal wrote: >> Simo are you sure simple bind is enough? I thought that it should be a >> bind over SSL with some specific ext op. Do I recall it wrong? > A bind over SSL is still called a "simple bind" and simply

Re: [Freeipa-users] Transfer user database to FreeIPA LDAP

2012-06-25 Thread Simo Sorce
On Mon, 2012-06-25 at 13:51 -0400, Dmitri Pal wrote: > > Simo are you sure simple bind is enough? I thought that it should be a > bind over SSL with some specific ext op. Do I recall it wrong? A bind over SSL is still called a "simple bind" and simply mean a bind that users a plain text password

Re: [Freeipa-users] Transfer user database to FreeIPA LDAP

2012-06-25 Thread Dmitri Pal
ons. >>> However this is a possible solution. > Yup, I really like it. I am going to give it a try. Should I use the > ipalib/plugins/migration.py as a starting point or is there a more relevant > module? > > Thanks, > > Joe > > -Original Message- > From:

Re: [Freeipa-users] Transfer user database to FreeIPA LDAP

2012-06-25 Thread Joe Linoff
really like it. I am going to give it a try. Should I use the ipalib/plugins/migration.py as a starting point or is there a more relevant module? Thanks, Joe -Original Message- From: Simo Sorce [mailto:s...@redhat.com] Sent: Monday, June 25, 2012 6:07 AM To: Joe Linoff Cc: Mark Reynolds; free

Re: [Freeipa-users] Transfer user database to FreeIPA LDAP

2012-06-25 Thread Simo Sorce
On Mon, 2012-06-25 at 05:57 -0700, Joe Linoff wrote: > Unfortunately, the problem I have is that I have the user data and the > hashed password in a standalone database and I want to move it into > FreeIPA without requiring the users to re-authenticate. I do not have > a plaintext password and I do

Re: [Freeipa-users] Transfer user database to FreeIPA LDAP

2012-06-25 Thread Joe Linoff
existing hash directly in Kerberos. Does that make sense? Regards, Joe -Original Message- From: Simo Sorce [mailto:s...@redhat.com] Sent: Monday, June 25, 2012 4:50 AM To: Mark Reynolds Cc: Joe Linoff; freeipa-users@redhat.com Subject: Re: [Freeipa-users] Transfer user database to

Re: [Freeipa-users] Transfer user database to FreeIPA LDAP

2012-06-25 Thread Joe Linoff
? Regards, Joe -Original Message- From: Stephen Gallagher [mailto:sgall...@redhat.com] Sent: Monday, June 25, 2012 4:20 AM To: Joe Linoff Cc: Mark Reynolds; freeipa-users@redhat.com Subject: Re: [Freeipa-users] Transfer user database to FreeIPA LDAP On Sun, 2012-06-24 at 15:10 -0700, Joe

Re: [Freeipa-users] Transfer user database to FreeIPA LDAP

2012-06-25 Thread Simo Sorce
On Sun, 2012-06-24 at 15:49 -0400, Mark Reynolds wrote: > Hi Joe, > > I'm not really an IPA guy, but IPA uses 389 directory server as its > backend. You would need to convert the your DB entries to LDAP > entries, but 389 supports your password type, so it should not be a > problem if you copy &

Re: [Freeipa-users] Transfer user database to FreeIPA LDAP

2012-06-25 Thread Stephen Gallagher
On Sun, 2012-06-24 at 15:10 -0700, Joe Linoff wrote: > Hi Mark: > > > > I did not find any entries related to passwords in the LDAP record. > There were some entries that looked as though they were related to > Kerberos which might be useful. > > % ldapseach -LLL -x -b > "uid=bigbob,cn=users,c

Re: [Freeipa-users] Transfer user database to FreeIPA LDAP

2012-06-24 Thread Joe Linoff
Sunday, June 24, 2012 2:43 PM To: Mark Reynolds Cc: freeipa-users@redhat.com; Joe Linoff Subject: RE: [Freeipa-users] Transfer user database to FreeIPA LDAP Hi Mark: Thank you, that is really helpful. Regards, Joe From: Mark Reynolds [mailto:marey...@redhat.com] Sent: Sunday, June

Re: [Freeipa-users] Transfer user database to FreeIPA LDAP

2012-06-24 Thread Joe Linoff
Hi Mark: Thank you, that is really helpful. Regards, Joe From: Mark Reynolds [mailto:marey...@redhat.com] Sent: Sunday, June 24, 2012 12:49 PM To: Joe Linoff Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] Transfer user database to FreeIPA LDAP Hi Joe, I'

Re: [Freeipa-users] Transfer user database to FreeIPA LDAP

2012-06-24 Thread Mark Reynolds
Hi Joe, I'm not really an IPA guy, but IPA uses 389 directory server as its backend. You would need to convert the your DB entries to LDAP entries, but 389 supports your password type, so it should not be a problem if you copy & paste the password hashes. LDAP expects the password to be som

[Freeipa-users] Transfer user database to FreeIPA LDAP

2012-06-24 Thread Joe Linoff
Hi Everybody: We have a legacy web based application (CakePHP) that stores user data in a DB and I would like to transfer that information to a FreeIPA Identity Management Server without requiring the users to re-enter their passwords (if possible). How would I do that? I know that the