[Freeipa-users] import debian (salted SHA-512) password

[Martin Kosek]

On 10/13/2015 02:35 AM, Simo Sorce wrote:
> On 11/10/15 21:39, Benjamin Reed wrote:
>> On 10/11/15 12:59 PM, Benjamin Reed wrote:
>>> ...but I'm not sure exactly what format to use to import a
>>> "$6$salt$hash" style password from an existing debian system.
>>
>> Just a note for future folks trying to do this, I was able to do it by
>> enabling adding users with {CRYPT}:
>>
>> ipa config-mod --enable-migration=1
>> ipa user-add \
>>      --first=John --last=Doe \
>>      --setattr userPassword='{CRYPT}$6$salt$hash' john_doe
>>
>> Now I just need them to ssh in once to initialize kerberos passwords, right?
> 
> That's all you need if you are inm migration mode and the server they log in is
> configured with SSSD.
> 
> Simo.

... or use the Web service:

https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/Migrating_from_a_Directory_Server_to_IPA.html#webpage-pwd-migr