[Freeipa-users] ipa migrate-ds failing when more than 1 namingcontext is available

[Rob Crittenden]

Stephen Gallagher wrote:
> On Fri, 2012-01-27 at 15:11 +0100, Sigbjorn Lie wrote:
>> Hi
>>
>> The first naming context returned from the LDAP server is always chosen
>> when using migrate-ds. This makes my import fail when I attempt to
>> import users and groups from a previous LDAP server having more than 1
>> naming contexts available.
>>
>> The migrate-ds script should accept an option to specify what base_dn I
>> would like to import from.
>>
>> Is there such an option today? I cannot find it...

Not currently. I noticed this earlier in the week and opened a ticket on 
it, https://fedorahosted.org/freeipa/ticket/2314

>
> Just to add to this request, if the original LDAP server has a
> defaultNamingContext attribute, it should be honored for auto-detecting
> which base to migrate.

I'll update the 2314 to ensure we don't forget about this. 389-ds just 
added support for defaultNamingContext.

rob