Re: [Freeipa-users] can migrate-ds be safely re-run if it failed...

2016-03-29 Thread Alexander Bokovoy
On Tue, 29 Mar 2016, lejeczek wrote: last - this must most FAQ people wonder - can IPA's 389 backend be used in the same/similar fashion samba uses ldap? skipping all the kerberos bits? (samba & IPA on the same one box) For Samba and IPA on the same box, this is configured properly with

Re: [Freeipa-users] can migrate-ds be safely re-run if it failed...

2016-03-29 Thread lejeczek
On 15/03/16 14:36, Alexander Bokovoy wrote: On Tue, 15 Mar 2016, lejeczek wrote: On 15/03/16 13:42, Rob Crittenden wrote: lejeczek wrote: On 14/03/16 17:06, Rob Crittenden wrote: lejeczek wrote: with... ipa: ERROR: group LDAP search did not return any result (search base:

Re: [Freeipa-users] can migrate-ds be safely re-run if it failed...

2016-03-19 Thread lejeczek
On 15/03/16 17:22, Rob Crittenden wrote: lejeczek wrote: On 15/03/16 14:14, lejeczek wrote: On 15/03/16 13:42, Rob Crittenden wrote: lejeczek wrote: On 14/03/16 17:06, Rob Crittenden wrote: lejeczek wrote: with... ipa: ERROR: group LDAP search did not return any result (search base:

Re: [Freeipa-users] can migrate-ds be safely re-run if it failed...

2016-03-15 Thread Rob Crittenden
Janelle wrote: The groups don't go on the 2nd pass because they already went on the first meant. I meant to reply to this the other day as I have had a lot of experience with re-running migration. Group membership for an already existing group, does NOT come over on the 2nd pass. I have found it

Re: [Freeipa-users] can migrate-ds be safely re-run if it failed...

2016-03-15 Thread Janelle
The groups don't go on the 2nd pass because they already went on the first meant. I meant to reply to this the other day as I have had a lot of experience with re-running migration. Group membership for an already existing group, does NOT come over on the 2nd pass. I have found it is better to

Re: [Freeipa-users] can migrate-ds be safely re-run if it failed...

2016-03-15 Thread Rob Crittenden
lejeczek wrote: On 15/03/16 15:57, Rob Crittenden wrote: lejeczek wrote: On 15/03/16 13:42, Rob Crittenden wrote: lejeczek wrote: On 14/03/16 17:06, Rob Crittenden wrote: lejeczek wrote: with... ipa: ERROR: group LDAP search did not return any result (search base:

Re: [Freeipa-users] can migrate-ds be safely re-run if it failed...

2016-03-15 Thread lejeczek
On 15/03/16 15:57, Rob Crittenden wrote: lejeczek wrote: On 15/03/16 13:42, Rob Crittenden wrote: lejeczek wrote: On 14/03/16 17:06, Rob Crittenden wrote: lejeczek wrote: with... ipa: ERROR: group LDAP search did not return any result (search base: ou=groups,dc=ccnr,dc=biotechnology,

Re: [Freeipa-users] can migrate-ds be safely re-run if it failed...

2016-03-15 Thread Rob Crittenden
lejeczek wrote: On 15/03/16 13:42, Rob Crittenden wrote: lejeczek wrote: On 14/03/16 17:06, Rob Crittenden wrote: lejeczek wrote: with... ipa: ERROR: group LDAP search did not return any result (search base: ou=groups,dc=ccnr,dc=biotechnology, objectclass: groupofuniquenames, groupofnames)

Re: [Freeipa-users] can migrate-ds be safely re-run if it failed...

2016-03-15 Thread lejeczek
On 15/03/16 13:42, Rob Crittenden wrote: lejeczek wrote: On 14/03/16 17:06, Rob Crittenden wrote: lejeczek wrote: with... ipa: ERROR: group LDAP search did not return any result (search base: ou=groups,dc=ccnr,dc=biotechnology, objectclass: groupofuniquenames, groupofnames) I see users went

Re: [Freeipa-users] can migrate-ds be safely re-run if it failed...

2016-03-15 Thread Alexander Bokovoy
On Tue, 15 Mar 2016, lejeczek wrote: On 15/03/16 13:42, Rob Crittenden wrote: lejeczek wrote: On 14/03/16 17:06, Rob Crittenden wrote: lejeczek wrote: with... ipa: ERROR: group LDAP search did not return any result (search base: ou=groups,dc=ccnr,dc=biotechnology, objectclass:

Re: [Freeipa-users] can migrate-ds be safely re-run if it failed...

2016-03-15 Thread Rob Crittenden
lejeczek wrote: > On 14/03/16 17:06, Rob Crittenden wrote: >> lejeczek wrote: >>> with... >>> >>> ipa: ERROR: group LDAP search did not return any result (search base: >>> ou=groups,dc=ccnr,dc=biotechnology, objectclass: groupofuniquenames, >>> groupofnames) >>> >>> I see users went in but later I

Re: [Freeipa-users] can migrate-ds be safely re-run if it failed...

2016-03-15 Thread lejeczek
On 14/03/16 17:06, Rob Crittenden wrote: lejeczek wrote: with... ipa: ERROR: group LDAP search did not return any result (search base: ou=groups,dc=ccnr,dc=biotechnology, objectclass: groupofuniquenames, groupofnames) I see users went in but later I realized that current samba's ou was

Re: [Freeipa-users] can migrate-ds be safely re-run if it failed...

2016-03-14 Thread Rob Crittenden
lejeczek wrote: > with... > > ipa: ERROR: group LDAP search did not return any result (search base: > ou=groups,dc=ccnr,dc=biotechnology, objectclass: groupofuniquenames, > groupofnames) > > I see users went in but later I realized that current samba's ou was > "group" not groups. > Can I just

[Freeipa-users] can migrate-ds be safely re-run if it failed...

2016-03-14 Thread lejeczek
with... ipa: ERROR: group LDAP search did not return any result (search base: ou=groups,dc=ccnr,dc=biotechnology, objectclass: groupofuniquenames, groupofnames) I see users went in but later I realized that current samba's ou was "group" not groups. Can I just re-run migrations? many