Re: [Freeipa-users] IPA DS migration

2016-01-04 Thread Martin Kosek
On 12/29/2015 08:36 PM, Sean Conley - US wrote:
> Hello,
> 
> I need to migrate the users from an existing IPA server to a new IPA server 
> on an isolated network.  It appears that “ipa migrate-ds” works only when 
> direct connection to source LDAP server is possible.  I have searched with no 
> success for a method that would be more like an LDIF-based migration.  These 
> servers are in different realms and so have different base DNs.  My hope is 
> that I could create an LDIF file from a query against the source server, 
> modify records to reflect the new base DN, copy result to destination server, 
> and import it there.
> 
> Can anyone direct me to some good resources or other recommendations to 
> accomplish this?
> 
> The source server in this case is CentOS 7 with FreeIPA v4.1.0.  The planned 
> destination server is RHEL 7 with FreeIPA v4.2.0.
> 
> Thanks much in advance!

Hello,

You are more or less looking for

http://www.freeipa.org/page/Howto/Migration#Migrating_from_other_FreeIPA_to_FreeIPA

There are some tips there already, but FreeIPA itself do not have off-the-shelf
solution, yet.

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project


[Freeipa-users] IPA DS migration

2015-12-29 Thread Sean Conley - US
Hello,

I need to migrate the users from an existing IPA server to a new IPA server on 
an isolated network.  It appears that “ipa migrate-ds” works only when direct 
connection to source LDAP server is possible.  I have searched with no success 
for a method that would be more like an LDIF-based migration.  These servers 
are in different realms and so have different base DNs.  My hope is that I 
could create an LDIF file from a query against the source server, modify 
records to reflect the new base DN, copy result to destination server, and 
import it there.

Can anyone direct me to some good resources or other recommendations to 
accomplish this?

The source server in this case is CentOS 7 with FreeIPA v4.1.0.  The planned 
destination server is RHEL 7 with FreeIPA v4.2.0.

Thanks much in advance!

Sean

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project