<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div class="yui_3_2_0_22_133581777564454" style="font-family: times new roman, new york, times, serif; font-size: 12pt;"> </div> <span>Hi folks,<br><br> We have quite a bunch of netgroups which are hosted on openldap server presently, and now it is time to migrate them into freeIPA. The NIS triples are in the format:<br><br> (-, username, - ) <br><br>or <br><br> (hostname001, - , - )<br><br>And these openldap netgroups are used for variable purposes, host listing for ssh/gssh, access control, sudoers, etc.<br><br>So after user accounts and groups are migrated, netgroups needs to be migrated too for openldap/IPA migration/cutover. There is no Redhat documents on this part though. Has any one tried netgroup migration before? Or we have to input by hand into IPA (host, hostgroup, user-group) and replace netgroup with hostgroup(which will create respective netgroups in the background), and replace NIS user groups and real posix user groups?<br><br>Please advice. Thanks a lot.<br><br>--David<br> </span><div></div></div></body></html>