<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
On 06/28/2013 03:13 PM, Dmitri Pal wrote:
<blockquote cite="mid:51CDE055.10801@redhat.com" type="cite">
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
On 06/19/2013 04:39 PM, Alex Lawrence wrote:
<blockquote
cite="mid:CAM0XOKD-1bsRo3TvwRjSHVsApJhkSTTvPVTHyB_DLX0kLaegUg@mail.gmail.com"
type="cite">
<div dir="ltr">Hello!
<div><br>
</div>
<div>I'm working on trying to migrate users into FreeIPA 3.1.5
(Fedora 18) from DS389 (CentOS 6) 1.2.2. I've enabled
migration on DS389 and I'm attempting to migrate a subset of
people using:<br>
<br>
ipa migrate-ds --user-container="ou=Systems &
Networking,ou=Personnel,dc=plu,dc=edu" --ignore* <a
moz-do-not-send="true" class="moz-txt-link-freetext"
href="ldap://LDAP-SERVER:389">ldap://LDAP-SERVER:389</a><br>
</div>
<div><br>
</div>
<div style="">The out put is:<br>
<br>
<div>-----------</div>
<div> migrate-ds:</div>
<div>-----------</div>
<div>Migrated:</div>
<div>Failed user:</div>
<div> %UID%: %UID% is not a POSIX user</div>
<div> %UID%: %UID% is not a POSIX user</div>
<div> %UID%: %UID% is not a POSIX user</div>
<div> <br>
</div>
<div style="">And so on.</div>
<div style=""><br>
</div>
<div style="">I've imported my schema into FreeIPA so that
it knows my additional attributes; however, just to be
safe I've also tried running the import ignoring any
objectclass in use with the same output.</div>
<div style=""><br>
</div>
</div>
<div>--user-ignore-objectclass=pluEduPerson,mailRecipient,eduPerson,posixAccount,inetOrgPerson,organizationalPerson<br>
</div>
<div><br>
</div>
<div style="">I've added the posixAccount object class to a
handful of accounts in question on my DS389 side to be sure
that was not an issue either and that gives me the same
result.</div>
<div style=""><br>
</div>
<div style="">I'm sure this is something simple that I'm
missing, any suggestions would be appreciated.</div>
</div>
</blockquote>
</blockquote>
<br>
<br>
Please check the accounts that are skipped, they are most likely
missing some POSIX required attribute (though from LDAP point of
view it is an optional attribute), UID for example or SN. <br>
Please add missing attributes and try again. The easiest way to do
this is to compare posix attributes between the entry that is
migrated without problems and one that is not accepted. There are
only 6 posix attributes so it should be easy to spot.<br>
<br>
If you can't do it in your existing instance take an LDIF load it it
into another instance and modify users there then migrate from that
instance.<br>
I hope this would give you at least a starting point, have a nice
weekend.<br>
<br>
<br>
<blockquote cite="mid:51CDE055.10801@redhat.com" type="cite">
<blockquote
cite="mid:CAM0XOKD-1bsRo3TvwRjSHVsApJhkSTTvPVTHyB_DLX0kLaegUg@mail.gmail.com"
type="cite">
<div dir="ltr">
<div style=""><br>
</div>
<div style="">Alex</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Freeipa-users mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</blockquote>
<br>
Did anyone help you here?<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager for IdM portfolio
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="http://www.redhat.com/carveoutcosts/">www.redhat.com/carveoutcosts/</a>
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Freeipa-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager for IdM portfolio
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
<a class="moz-txt-link-abbreviated" href="http://www.redhat.com/carveoutcosts/">www.redhat.com/carveoutcosts/</a>
</pre>
</body>
</html>