[Freeipa-devel] Testing Migration

[Martin Kosek]

On 05/28/2015 09:47 PM, Drew Erny wrote:
> Hi, freeipa-devel,
>
> More newbie questions. I have what I believe to be a fix for Ticket #2547
> (https://fedorahosted.org/freeipa/ticket/2547) written, but I need to test this
> fix. I need to migrate an LDAP database that is in the previously expected for
> (all users and groups under 1 level) and migrate an LDAP database that is in a
> nested form where there might be many sub-ou's to search for users and groups.
> I need to make sure the outcome of both migrations is the same.
>
> What would be the best way to go about this, more specifically than "set up two
> LDAP server and migrate them". Like, what tools are available to help me get
> this set up? Also, how can I preserve my work so that next time we have to
> modify migration code, it can be easily tested? Should I spin up VMs and save
> the images?
>
> Also, I can just send a patch if someone feels so utterly confident in the
> codebase that they can tell if the thing I've done is right or wrong just by
> looking at it.
>
> Thanks,
>
> Drew Erny
> derny at redhat.com
>

For #2547, I would not complicate the issue more then necessary. I would 
suggest starting 2 FreeIPA servers, one for your patch, other for migrating from.

In second FreeIPA server, add couple users and groups and then try to migrate 
it, you can use my command in

https://www.freeipa.org/page/Howto/Migration#Migrating_from_other_FreeIPA_to_FreeIPA

You can easily test scope BASE and ONELINE in that scenario. If you want to 
make sure that the scope is properly set, you can also simply check dirsrv 
access log and see if the right scope is used for the migration LDAP search.

Martin