[Freeipa-users] Migration of password (Kerberos Tickets) fails when users initially imported from AD

[Rajnesh Kumar Siwal]

Does it means that we have to initially change the password of all the
migrated users ?
Additionally, again the passwords will be changed to AD (as passsync
should sync them).
So, the migration of a lot of users become difficult (as we have to
manually change passwords of all).
Do we have a better approach for migration/ synchronization of the AD Users ?


Going forward, how do I make sure that the passwords are proaogated
and synched among both the environments.

-- 
Regards,
Rajnesh Kumar Siwal