<br><br><div class="gmail_quote">On Sun, Mar 18, 2012 at 5:49 PM, Dmitri Pal <span dir="ltr"><<a href="mailto:dpal@redhat.com">dpal@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<u></u>
<div bgcolor="#ffffff" text="#000000"><div><div class="h5">
On 03/17/2012 07:36 AM, Marco Pizzoli wrote:
<blockquote type="cite">Hi guys,<br>
I'm trying to migrate my ldap user base to freeipa. I'm using the
last Release Candidate.<br>
<br>
I already changed "ipa config-mod --enable-migration=TRUE"<br>
This is what I have:<br>
<br>
<span style="font-family:courier new,monospace">ipa -v
migrate-ds --bind-dn="cn=manager,dc=mydc1,dc=<a href="http://mydc2.it" target="_blank">mydc2.it</a>"
--user-container="ou=people,dc=mydc1,dc=<a href="http://mydc2.it" target="_blank">mydc2.it</a>"
--user-objectclass=inetOrgPerson
--group-container="ou=groups,dc=mydc1,dc=<a href="http://mydc2.it" target="_blank">mydc2.it</a>"
--group-objectclass=posixGroup --base-dn="dc=mydc1,dc=<a href="http://mydc2.it" target="_blank">mydc2.it</a>"
--with-compat <a>ldap://ldap01</a></span><br style="font-family:courier new,monospace">
<span style="font-family:courier new,monospace">ipa: INFO:
trying <a href="https://freeipa01.unix.mydomain.it/ipa/xml" target="_blank">https://freeipa01.unix.mydomain.it/ipa/xml</a></span><br style="font-family:courier new,monospace">
<span style="font-family:courier new,monospace">Password:</span><br style="font-family:courier new,monospace">
<span style="font-family:courier new,monospace">ipa: INFO:
Forwarding 'migrate_ds' to server u'<a href="http://freeipa01.unix.mydomain.it/ipa/xml" target="_blank">http://freeipa01.unix.mydomain.it/ipa/xml</a>'</span><br style="font-family:courier new,monospace">
<span style="font-family:courier new,monospace">ipa: ERROR:
Container for group not found at ou=groups,dc=mydc1,dc=<a href="http://mydc2.it" target="_blank">mydc2.it</a></span><br>
<br>
I looked at my ldap server logs and I found out that the search
executed has scope=1. Actually both for users and groups. This is
a problem for me, in having a lot of subtrees (ou) in which my
users and groups are. Is there a way to manage this?<br>
<br>
Thanks in advance<br>
Marco<br>
<br>
P.s. As a side note, I suppose there's a typo in the verbose
message I obtain in my output: <br>
<span style="font-family:courier new,monospace">ipa: INFO:
Forwarding 'migrate_ds' to server </span><b style="font-family:courier new,monospace">u</b><span style="font-family:courier new,monospace">'<a href="http://freeipa01.unix.mydomain.it/ipa/xml" target="_blank">http://freeipa01.unix.mydomain.it/ipa/xml</a>'</span><br>
</blockquote>
<br></div></div>
Please open tickets for both issues.<br></div></blockquote><div><br>Done:<br><a href="https://fedorahosted.org/freeipa/ticket/2547">https://fedorahosted.org/freeipa/ticket/2547</a><br><a href="https://fedorahosted.org/freeipa/ticket/2546">https://fedorahosted.org/freeipa/ticket/2546</a><br>
<br>Do you have a hint on how to manage to do this import in the meantime? Every manual step is ok for me.<br></div></div><br>Thanks again<br>Marco<br>