<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
On 03/17/2012 07:36 AM, Marco Pizzoli wrote:
<blockquote
cite="mid:CAMrrtwsHntkJyNQunx1m=GnFCFgdN09uB4xMDKgz26DmfK1kKw@mail.gmail.com"
type="cite">Hi guys,<br>
I'm trying to migrate my ldap user base to freeipa. I'm using the
last Release Candidate.<br>
<br>
I already changed "ipa config-mod --enable-migration=TRUE"<br>
This is what I have:<br>
<br>
<span style="font-family: courier new,monospace;">ipa -v
migrate-ds --bind-dn="cn=manager,dc=mydc1,dc=<a
moz-do-not-send="true" href="http://mydc2.it">mydc2.it</a>"
--user-container="ou=people,dc=mydc1,dc=<a
moz-do-not-send="true" href="http://mydc2.it">mydc2.it</a>"
--user-objectclass=inetOrgPerson
--group-container="ou=groups,dc=mydc1,dc=<a
moz-do-not-send="true" href="http://mydc2.it">mydc2.it</a>"
--group-objectclass=posixGroup --base-dn="dc=mydc1,dc=<a
moz-do-not-send="true" href="http://mydc2.it">mydc2.it</a>"
--with-compat <a class="moz-txt-link-freetext" href="ldap://ldap01">ldap://ldap01</a></span><br style="font-family:
courier new,monospace;">
<span style="font-family: courier new,monospace;">ipa: INFO:
trying <a moz-do-not-send="true"
href="https://freeipa01.unix.mydomain.it/ipa/xml">https://freeipa01.unix.mydomain.it/ipa/xml</a></span><br
style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">Password:</span><br
style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">ipa: INFO:
Forwarding 'migrate_ds' to server u'<a moz-do-not-send="true"
href="http://freeipa01.unix.mydomain.it/ipa/xml">http://freeipa01.unix.mydomain.it/ipa/xml</a>'</span><br
style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">ipa: ERROR:
Container for group not found at ou=groups,dc=mydc1,dc=<a
moz-do-not-send="true" href="http://mydc2.it">mydc2.it</a></span><br>
<br>
I looked at my ldap server logs and I found out that the search
executed has scope=1. Actually both for users and groups. This is
a problem for me, in having a lot of subtrees (ou) in which my
users and groups are. Is there a way to manage this?<br>
<br>
Thanks in advance<br>
Marco<br>
<br>
P.s. As a side note, I suppose there's a typo in the verbose
message I obtain in my output: <br>
<span style="font-family: courier new,monospace;">ipa: INFO:
Forwarding 'migrate_ds' to server </span><b style="font-family:
courier new,monospace;">u</b><span style="font-family: courier
new,monospace;">'<a moz-do-not-send="true"
href="http://freeipa01.unix.mydomain.it/ipa/xml">http://freeipa01.unix.mydomain.it/ipa/xml</a>'</span><br>
</blockquote>
<br>
Please open tickets for both issues.<br>
<br>
<blockquote
cite="mid:CAMrrtwsHntkJyNQunx1m=GnFCFgdN09uB4xMDKgz26DmfK1kKw@mail.gmail.com"
type="cite">
<pre wrap="">
<fieldset class="mimeAttachmentHeader"></fieldset>
_______________________________________________
Freeipa-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IPA project,
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
<a class="moz-txt-link-abbreviated" href="http://www.redhat.com/carveoutcosts/">www.redhat.com/carveoutcosts/</a>
</pre>
</body>
</html>