Re: [Freeipa-users] re-sync passwords after migration from LDAP to IPA ?

2013-01-02 Thread Dmitri Pal
On 01/02/2013 05:26 AM, Jan-Frode Myklebust wrote: Too long ago I ran ipa migrate-ds to migrate my users into IPA, but unfortunately haven't been able to roll out IPA as our main identity platform yet. Now many users has probably changed passwords in the old directory, and switching to an IPA

Re: [Freeipa-users] re-sync passwords after migration from LDAP to IPA ?

2013-01-02 Thread Jan-Frode Myklebust
On Wed, Jan 2, 2013 at 4:11 PM, Dmitri Pal d...@redhat.com wrote: Would it be simpler and cleaner to start with a fresh install? Unfortunately some systems are already using IPA so I can't easily start fresh.. but yes, I can probably just delete the accounts with different LDAP password in IPA

Re: [Freeipa-users] re-sync passwords after migration from LDAP to IPA ?

2013-01-02 Thread Sigbjorn Lie
Try to browse the user again after you've authenticated using the directory manager account. Rgds Siggi Jan-Frode Myklebust janfr...@tanso.net wrote: On Wed, Jan 2, 2013 at 4:11 PM, Dmitri Pal d...@redhat.com wrote: Would it be simpler and cleaner to start with a fresh install?

Re: [Freeipa-users] re-sync passwords after migration from LDAP to IPA ?

2013-01-02 Thread Simo Sorce
On Wed, 2013-01-02 at 18:36 +0100, Jan-Frode Myklebust wrote: But... where do I find the LDAP passwords in IPA ? I see there's no userPassword attribute on each user as I was expecting.., so where is this hidden? And can it be compared against the SSHA from the old directory ? Passwords are

Re: [Freeipa-users] re-sync passwords after migration from LDAP to IPA ?

2013-01-02 Thread Jan-Frode Myklebust
Ok, thanks all! I'll compare the userPassword attributes between old directory and IPA, and either delete the account from IPA and re-run ds-migrate, or contact the individual users to let them know how to handle this. -jf ___ Freeipa-users

Re: [Freeipa-users] re-sync passwords after migration from LDAP to IPA ?

2013-01-02 Thread Rob Crittenden
Simo Sorce wrote: On Wed, 2013-01-02 at 18:36 +0100, Jan-Frode Myklebust wrote: But... where do I find the LDAP passwords in IPA ? I see there's no userPassword attribute on each user as I was expecting.., so where is this hidden? And can it be compared against the SSHA from the old directory ?