Thank you for your help. Hope I could handle this job... Thank you guys. <div class="gmail_quote">On Wed, Sep 23, 2009 at 10:45 PM, Rob Crittenden <<a href="mailto:rcritten@redhat.com">rcritten@redhat.com</a>> wrote: <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div class="im">Jenny Galipeau wrote: <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> Michael Kang wrote: <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> Dear FreeIPA community, My PL wants to migrate a directory server(storing employees info and Linux user accounts) from 389-ds(1.1.x) to FreeIPA(1.2.2). I backed up from the command line using the */db2bak/* command-line script. I got two LDIF files and two folders(userRoot and NetscapeRoot) which contains many db4 files. After reading the FreeIPA Administrator Guide, I realized there is no */db2bak/* or */bak2db/* commands for FreeIPA users. So I copy those LDIF files and folders to /var/lib/dirsrv/<ds instance> directly. Then I run */service dirsvr restart/*, the dirsvr instance cannot start anymore. The instance names of 389-ds and FreeIPA are different. How can I finish this hard job? Have anybody ever migrated successfully? I need your help.. remove any unneeded structural and configuration options from the ldif convert this ldif to the IPA DIT load the ldif You can see the DIT we use at <a href="http://freeipa.org/page/UsingRhdsWithIpa" target="_blank">http://freeipa.org/page/UsingRhdsWithIpa</a> </blockquote> HTH Jenny </blockquote> </div> Note that this will get the users added with their existing passwords but does not give them kerberos principals. We don't currently provide any mechanism for setting this on a migrated user though we are working on it. What I would recommend also is to create a few IPA users and compare the objectclasses that we use to the users you are migrating. rob </blockquote></div> -- Michael Kang（康上明学） There is a giant asleep within every man. When the giant awakens,miracles happen. Personal blog: <a href="http://ufusion.org">http://ufusion.org</a> - United Fusion