[Freeipa-users] Re: Changing domain name

Thanks heaps Angus. appreciated /Alfredo On Fri, 17 Aug 2018, 10:40 Angus Clarke, wrote: > You might find some useful tips here: > > https://www.redhat.com/archives/freeipa-users/2014-May/msg00158.html > > Not sure if they did drop their other scripts into github (as suggested > two thirds

[Freeipa-users] Re: Changing domain name

You might find some useful tips here: https://www.redhat.com/archives/freeipa-users/2014-May/msg00158.html Not sure if they did drop their other scripts into github (as suggested two thirds down) Regards Angus On 17 August 2018 at 10:09, Alfredo De Luca via FreeIPA-users <

[Freeipa-users] Re: Changing domain name

Hi Rob. It worked. Thanks. It was confusing for me the name *migrated *thinking was the new host rather than the *"old"* . Now users/groups are there and whoever has the password needs to connect to the new server in order to recreate their password with kerberos. I guess who has the ssh keys

[Freeipa-users] Re: Changing domain name

Thanks Rob. I ll give a try. CHeers On Thu, Aug 16, 2018 at 2:31 PM Rob Crittenden wrote: > Alfredo De Luca via FreeIPA-users wrote: > > Hi Florence. > > But the example says ldap://*migrated*.freeipa.server.test > > > > so I ran the command from the actual server where I want migrate the > >

[Freeipa-users] Re: Changing domain name

Alfredo De Luca via FreeIPA-users wrote: > Hi Florence.  > But the example says  ldap://*migrated*.freeipa.server.test > > so I ran the command from the actual server where I want migrate the > users from and pointing to the migrated (so the new which I will migrate > to) server... > So is it

[Freeipa-users] Re: Changing domain name

On 08/16/2018 12:37 PM, Alfredo De Luca via FreeIPA-users wrote: The IP is the new server where I'd like to migrate all the user/groups to and it  should be ok. The migrate-ds is the default I copy from the freeipa.org migration section.. Hi, the ldap URI should point

[Freeipa-users] Re: Changing domain name

The IP is the new server where I'd like to migrate all the user/groups to and it should be ok. The migrate-ds is the default I copy from the freeipa.org migration section.. On Tue, Aug 14, 2018 at 7:00 PM Rob Crittenden wrote: > Alfredo De Luca via FreeIPA-users wrote: > > Hi Rob. > > Yes.

[Freeipa-users] Re: Changing domain name

Alfredo De Luca via FreeIPA-users wrote: > Hi Rob.  > Yes. I am following the link you sent. So now I can understand they need > to create the new Kerberos but given the command I should have seen all > the users in the new freeipa server... which are not there.  > Maybe I put a wrong command?

[Freeipa-users] Re: Changing domain name

Alfredo De Luca via FreeIPA-users wrote: > Hi Florence. Thanks again. I understand about the password hash... but > does it mean all the users need to do that before migration? or after?  > > Cause in the new ipa server can 't see any of the users/groups.  Then I assume the migration failed? I

[Freeipa-users] Re: Changing domain name

Hi Florence. I created an new IPA server and tried to migrate but I got the following ... *Passwords have been migrated in pre-hashed format.* *IPA is unable to generate Kerberos keys unless provided* *with clear text passwords. All migrated users need to* *login at

[Freeipa-users] Re: Changing domain name

Thanks heaps Florence. Appreciated Alfredo On Mon, Aug 13, 2018 at 11:42 AM Florence Blanc-Renaud wrote: > On 08/13/2018 11:17 AM, Alfredo De Luca via FreeIPA-users wrote: > > Hi Florence. yes this clarify my question. So or I will build an new > > FreeIPA then manually add all the

[Freeipa-users] Re: Changing domain name

Hi Florence. yes this clarify my question. So or I will build an new FreeIPA then manually add all the users/groups etc ... or maybe import at least some users with some sort of ldap command? Cheers On Mon, Aug 13, 2018 at 8:38 AM Florence Blanc-Renaud wrote: > On 08/11/2018 06:11 PM, Alfredo

[Freeipa-users] Re: Changing domain name

On 08/11/2018 06:11 PM, Alfredo De Luca via FreeIPA-users wrote: Hi all. We'd like to change the domain name on our freeipa (4.5.4 on centos 7.5). Not the realm but only the domain is it doable? If so... how? Hi, unfortunately, no. Please have a look at IdM documentation, section Host