[Freeipa-users] Service...not found in Kerberos database

[Rob Crittenden]

Joshua J. Kugler wrote:
> On Monday, July 01, 2013 14:16:18 Rob Crittenden wrote:
>> You can also use ipa migrate-ds command to move users and groups from
>> one IPA server to another.
>
> That might be an option, but I take it, due to the Kerberos stuff, that it will
> not migrate passwords?  Getting full replication working would be required for
> that, no?

Passwords are migrated but users will need to go through a password 
migration process to create Kerberos credentials. This is all seemless 
with sssd.

rob