Re: [Freeipa-users] re-sync passwords after migration from LDAP to IPA ?

2013-01-02 Thread Rob Crittenden
Simo Sorce wrote: On Wed, 2013-01-02 at 18:36 +0100, Jan-Frode Myklebust wrote: But... where do I find the LDAP passwords in IPA ? I see there's no "userPassword" attribute on each user as I was expecting.., so where is this hidden? And can it be compared against the SSHA from the old directory

Re: [Freeipa-users] re-sync passwords after migration from LDAP to IPA ?

2013-01-02 Thread Jan-Frode Myklebust
Ok, thanks all! I'll compare the userPassword attributes between old directory and IPA, and either delete the account from IPA and re-run ds-migrate, or contact the individual users to let them know how to handle this. -jf ___ Freeipa-users mailing

Re: [Freeipa-users] re-sync passwords after migration from LDAP to IPA ?

2013-01-02 Thread Simo Sorce
On Wed, 2013-01-02 at 18:36 +0100, Jan-Frode Myklebust wrote: > But... where do I find the LDAP passwords in IPA ? I see there's no > "userPassword" attribute on each user as I was expecting.., so where > is this hidden? And can it be compared against the SSHA from the old > directory ? Passwords

Re: [Freeipa-users] re-sync passwords after migration from LDAP to IPA ?

2013-01-02 Thread Sigbjorn Lie
Try to browse the user again after you've authenticated using the directory manager account. Rgds Siggi Jan-Frode Myklebust wrote: >On Wed, Jan 2, 2013 at 4:11 PM, Dmitri Pal wrote: >> Would it be simpler and cleaner to start with a fresh install? > > >Unfortunately some systems are already

Re: [Freeipa-users] re-sync passwords after migration from LDAP to IPA ?

2013-01-02 Thread Jan-Frode Myklebust
On Wed, Jan 2, 2013 at 4:11 PM, Dmitri Pal wrote: > Would it be simpler and cleaner to start with a fresh install? Unfortunately some systems are already using IPA so I can't easily start fresh.. but yes, I can probably just delete the accounts with different LDAP password in IPA and OLD-system,

Re: [Freeipa-users] re-sync passwords after migration from LDAP to IPA ?

2013-01-02 Thread Dmitri Pal
On 01/02/2013 05:26 AM, Jan-Frode Myklebust wrote: > Too long ago I ran "ipa migrate-ds" to migrate my users into IPA, but > unfortunately haven't been able to roll out IPA as our main identity > platform yet. Now many users has probably changed passwords in the old > directory, and switching to an