<html><head/><body><html><head></head><body>Try to browse the user again after you've authenticated using the directory manager account. Rgds Siggi <div class="gmail_quote">Jan-Frode Myklebust <janfrode@tanso.net> wrote:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"> <pre style="white-space: pre-wrap; word-wrap:break-word; font-family: sans-serif; margin-top: 0px">On Wed, Jan 2, 2013 at 4:11 PM, Dmitri Pal <dpal@redhat.com> wrote: <blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;">Would it be simpler and cleaner to start with a fresh install?</blockquote> Unfortunately some systems are already using IPA so I can't easily start fresh.. but yes, I can probably just delete the accounts with different LDAP password in IPA and OLD-system, and then do a new migration of these few. But... where do I find the LDAP passwords in IPA ? I see there's no "userPassword" attribute on each user as I was expecting.., so where is this hidden? And can it be compared against the SSHA from the old directory ? -jf <hr /> Freeipa-users mailing list Freeipa-users@redhat.com <a href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a> </pre></blockquote></div> -- Sent from my Android phone with K-9 Mail. Please excuse my brevity.</body></html></body></html>