[Freeipa-users] How to migrate users with md5 and sha512 passwords

[Rob Crittenden]

Joanna Delaporte wrote:
> I am migrating an NIS domain to IPA. I have attempted to follow the
> instructions
> <http://www.freeipa.org/page/NIS_accounts_migration_preserving_Passwords> for
> NIS account crypted password migration, but I haven't yet successfully
> used password authentication to log in to remote machines.
>
> The instructions expect I would migrate DES-encrypted passwords, but I
> have a mixture of md5 and sha512-encrypted passwords. Do I need to
> follow a different process, or am I chasing the wrong problem?
>
> This is my first IPA realm.

If you have crypt-compatible passwords ($6$<huge string>) then just pass 
it in as {crypt}$6$... and it should work fine.

You can ONLY set a pre-hashed password in migration mode AND when adding 
the user. You can't add the user then set a hashed password.

rob