<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 11/05/2014 10:19 AM, Steve Nolen
wrote:<br>
</div>
<blockquote
cite="mid:CAC_FVB75QQMb5hNeWcPbec-Q1S3QWxcf0GUL_kW2-ks3btwRbw@mail.gmail.com"
type="cite">
<div dir="ltr">Hi All!
<div><br>
</div>
<div>I'm looking at migrating from openldap to freeipa
(currently using 3.3.3 on centos7, installed from the default
centos repos, as I'd prefer to use centos over fedora) and I
have a bit of a snag after importing users with migration-ds:
I can't edit the details of migrated users in the web ui (but
I can via `ipa user-mod`).</div>
<div><br>
</div>
<div>Steps to reproduce:</div>
<div>1. kinit admin</div>
<div>2. ipa config-mod --enable-migration=TRUE</div>
<div>3. ipa migrate-ds --base-dn='dc=example,dc=com'
--user-container='ou=People' --group-container='ou=Group'
--bind-dn='cn=admin' --with-compat --schema='RFC2307'</div>
<div>4. ipa config-mod --enable-migration=FALSE</div>
<div>5. ipa user-mod test1 --last=LastName1 (success)</div>
<div>6. visit web ui (logging in as admin), user test1 has
"LastName1" as "last name" field, but no fields on this page
are editable.</div>
<div>7. create new user via web ui "test2".</div>
<div>8. all fields are editable for user test2.</div>
<div><br>
</div>
<div>Based on the success from step 5, it would appear that the
admin user has the rights to modify test1's details, but the
web ui disagrees?</div>
<div><br>
</div>
<div>Thanks!</div>
<div>Steve</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
Can you please do an ldap search and get the full entry for one of
the migrated users and one for the one of the created users.<br>
You might also try --raw flag and use user-show command.<br>
I suspect the migrated entries are missing some attribute. If you
can help us to identify which one would be great.<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
</body>
</html>