It will be fine to have this info in the doc. <div class="gmail_quote">2012/9/20 Rob Crittenden <<a href="mailto:rcritten@redhat.com" target="_blank">rcritten@redhat.com</a>> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> <div class="HOEnZb"><div class="h5">Dmitri Pal wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> On 09/20/2012 01:42 PM, Rob Crittenden wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> James James wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> You 're right. The request return : Enter LDAP Password: # extended LDIF # # LDAPv3 # base <cn=users,cn=accounts,dc=example,dc=com> with scope subtree # filter: uid=test # requesting: userPassword # # test, users, accounts, <a href="http://example.com" target="_blank">example.com</a> <<a href="http://example.com" target="_blank">http://example.com</a>> dn: uid=test,cn=users,cn=accounts,dc=example,dc=com # search result search: 2 result: 0 Success Can you explain me what happens ? Is there a solution ? </blockquote> When migrating you need to bind as a user that has read permission on the userPassword attribute in the remote LDAP server. </blockquote> Rob should we check if we can read the userPassword attribute and if not fail migration? Should we open a ticket for this? Also I do not think we document the expectation that you vocalized above. </blockquote> </div></div> I'll open a ticket to spell this out in the docs. Checking it in the command would be nice but I don't know about fatal. Still, I'll open a ticket for that as well. rob </blockquote></div>