[Freeipa-users] re-sync passwords after migration from LDAP to IPA ?

2013-01-02 Thread Jan-Frode Myklebust
Too long ago I ran ipa migrate-ds to migrate my users into IPA, but unfortunately haven't been able to roll out IPA as our main identity platform yet. Now many users has probably changed passwords in the old directory, and switching to an IPA with their old password will be confusing. Is there any

Re: [Freeipa-users] Joining Fedora 18 (FreeIPA 3.1.0) to CentOS 6.3 (FreeIPA 2.1.90rc1)

2013-01-02 Thread Stephen Gallagher
On 12/28/2012 10:23 AM, Michael B. Trausch wrote: On 12/28/2012 08:56 AM, Simo Sorce wrote: However re-reading the ticket made me wonder. Is this happening on the F18 machine or on the Centos 6.3 machine ? The sigsegv is happening on the Fedora 18 box, the one running FreeIPA 3.1.0. I am

Re: [Freeipa-users] re-sync passwords after migration from LDAP to IPA ?

2013-01-02 Thread Dmitri Pal
On 01/02/2013 05:26 AM, Jan-Frode Myklebust wrote: Too long ago I ran ipa migrate-ds to migrate my users into IPA, but unfortunately haven't been able to roll out IPA as our main identity platform yet. Now many users has probably changed passwords in the old directory, and switching to an IPA

Re: [Freeipa-users] Joining Fedora 18 (FreeIPA 3.1.0) to CentOS 6.3 (FreeIPA 2.1.90rc1)

2013-01-02 Thread Simo Sorce
On Wed, 2013-01-02 at 08:00 -0500, Stephen Gallagher wrote: On 12/28/2012 10:23 AM, Michael B. Trausch wrote: On 12/28/2012 08:56 AM, Simo Sorce wrote: However re-reading the ticket made me wonder. Is this happening on the F18 machine or on the Centos 6.3 machine ? The sigsegv is

Re: [Freeipa-users] re-sync passwords after migration from LDAP to IPA ?

2013-01-02 Thread Jan-Frode Myklebust
On Wed, Jan 2, 2013 at 4:11 PM, Dmitri Pal d...@redhat.com wrote: Would it be simpler and cleaner to start with a fresh install? Unfortunately some systems are already using IPA so I can't easily start fresh.. but yes, I can probably just delete the accounts with different LDAP password in IPA

Re: [Freeipa-users] re-sync passwords after migration from LDAP to IPA ?

2013-01-02 Thread Sigbjorn Lie
Try to browse the user again after you've authenticated using the directory manager account. Rgds Siggi Jan-Frode Myklebust janfr...@tanso.net wrote: On Wed, Jan 2, 2013 at 4:11 PM, Dmitri Pal d...@redhat.com wrote: Would it be simpler and cleaner to start with a fresh install?

Re: [Freeipa-users] re-sync passwords after migration from LDAP to IPA ?

2013-01-02 Thread Simo Sorce
On Wed, 2013-01-02 at 18:36 +0100, Jan-Frode Myklebust wrote: But... where do I find the LDAP passwords in IPA ? I see there's no userPassword attribute on each user as I was expecting.., so where is this hidden? And can it be compared against the SSHA from the old directory ? Passwords are

Re: [Freeipa-users] re-sync passwords after migration from LDAP to IPA ?

2013-01-02 Thread Jan-Frode Myklebust
Ok, thanks all! I'll compare the userPassword attributes between old directory and IPA, and either delete the account from IPA and re-run ds-migrate, or contact the individual users to let them know how to handle this. -jf ___ Freeipa-users

Re: [Freeipa-users] re-sync passwords after migration from LDAP to IPA ?

2013-01-02 Thread Rob Crittenden
Simo Sorce wrote: On Wed, 2013-01-02 at 18:36 +0100, Jan-Frode Myklebust wrote: But... where do I find the LDAP passwords in IPA ? I see there's no userPassword attribute on each user as I was expecting.., so where is this hidden? And can it be compared against the SSHA from the old directory ?

Re: [Freeipa-users] User's Cannot Reset Expire Passwords Without Password Being Reset First in WebUI

2013-01-02 Thread Dmitri Pal
On 01/02/2013 05:47 PM, Chris Natter wrote: Hello, My users are running into a bit of a problem with password expiry and the reset prompts. When they attempt to reset their password they end up recieving access denied messages after going through the prompts to reset their password and

Re: [Freeipa-users] Fedora 18 + FreeIPA 3.1

2013-01-02 Thread Dale Macartney
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/02/2013 12:42 AM, Rob Crittenden wrote: Dale Macartney wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/01/2013 11:42 PM, Rob Crittenden wrote: Dale Macartney wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On