[Freeipa-users] export users/groups from one ipa server to another

[Petr Spacek]

On 17.1.2014 07:24, Les Stott wrote:
> Hi All,
>
> Looking for the quickest and easiest way to export users from one freeipa server and install on another.
>
> I have an existing freeipa server, 3.0.0 standard rhel6 in a DR environment.
> I am setting up an identical freeipa server in a Production Environment.
>
> The two environments will not be configured to talk to each other. They will both have there own replicas.
>
> I simply want to export the users and groups I created in freeipa in DR, and import them (preserving details and passwords) into the freeipa server in Production.
>
> What is the recommendation? Is there an ipa tool? Or will ldif exports suffice?

IMHO you can create a replica (including CA and DNS if you have CA and DNS on 
the original master) and then disconnect this new replica from the original 
master and move it to production.

-- 
Petr^2 Spacek