Hi guys, I'm trying to migrate my ldap user base to freeipa. I'm using the last Release Candidate. I already changed "ipa config-mod --enable-migration=TRUE" This is what I have: ipa -v migrate-ds --bind-dn="cn=manager,dc=mydc1,dc=<a href="http://mydc2.it">mydc2.it</a>" --user-container="ou=people,dc=mydc1,dc=<a href="http://mydc2.it">mydc2.it</a>" --user-objectclass=inetOrgPerson --group-container="ou=groups,dc=mydc1,dc=<a href="http://mydc2.it">mydc2.it</a>" --group-objectclass=posixGroup --base-dn="dc=mydc1,dc=<a href="http://mydc2.it">mydc2.it</a>" --with-compat ldap://ldap01 ipa: INFO: trying <a href="https://freeipa01.unix.mydomain.it/ipa/xml">https://freeipa01.unix.mydomain.it/ipa/xml</a> Password: ipa: INFO: Forwarding 'migrate_ds' to server u'<a href="http://freeipa01.unix.mydomain.it/ipa/xml">http://freeipa01.unix.mydomain.it/ipa/xml</a>' ipa: ERROR: Container for group not found at ou=groups,dc=mydc1,dc=<a href="http://mydc2.it">mydc2.it</a> I looked at my ldap server logs and I found out that the search executed has scope=1. Actually both for users and groups. This is a problem for me, in having a lot of subtrees (ou) in which my users and groups are. Is there a way to manage this? Thanks in advance Marco P.s. As a side note, I suppose there's a typo in the verbose message I obtain in my output: ipa: INFO: Forwarding 'migrate_ds' to server u'<a href="http://freeipa01.unix.mydomain.it/ipa/xml">http://freeipa01.unix.mydomain.it/ipa/xml</a>'