[Freeipa-users] 4.0.0 password migration trouble

[Martin Kosek]

On 07/21/2014 07:28 PM, Nordgren, Bryce L -FS wrote:
> 
> 
>> I will work with DS team to backport the switch option to Fedora 20 389-ds-
>> base and to release FreeIPA 4.0.1 with appropriate patch to fix this problem
>> ASAP, ideally this week.
> 
> 
> Thanks much, Martin!

Note that fixed 389-ds-base is now available in Fedora 20 updates-testing repo:

https://admin.fedoraproject.org/updates/FEDORA-2014-8709/389-ds-base-1.3.2.20-1.fc20

If you install that + switch cn=config's nsslapd-allow-hashed-passwords
attribute to "on", you will be able to finish the migration. FreeIPA patch to
enable that permanently was submitted.

HTH,
Martin