<html> <head> <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> Yes, though it might be a bit more data than you're expecting. Here's what we did to get the details out of a server (and import them into another). I'm sure there's a more elegant solution, but this worked for us. Also note that we didn't use all the data this export script generated, but felt it was better to have it than to not. EXPORT: <tt>#!/bin/sh</tt><tt> </tt><tt>#</tt><tt> </tt><tt># Generate latest ipa config files for possible re-import later.</tt><tt> </tt><tt>#</tt><tt> </tt><tt># (C) 2014, The Damascus Group</tt><tt> </tt><tt>#</tt><tt> </tt><tt> </tt><tt>CONFIGDIR=/opt/ipa_config</tt><tt> </tt><tt> </tt><tt>[ ! -d $CONFIGDIR ] && mkdir $CONFIGDIR</tt><tt> </tt><tt>pushd $CONFIGDIR</tt><tt> </tt><tt> </tt><tt>ipa dnszone-find --all > dnszone.txt</tt><tt> </tt><tt>grep 'Zone name' dnszone.txt | awk '{print $3}' | sed 's/\r//' > zones.txt</tt><tt> </tt><tt>for line in $(cat zones.txt)</tt><tt>; do</tt><tt> </tt><tt> fn=$(echo $line | sed 's/\.in-addr\.arpa\.//')</tt><tt> </tt><tt> echo "For zone $line -> dnsrecord-$fn.txt"</tt><tt> </tt><tt> ipa dnsrecord-find $line --sizelimit=99999 --all --structured > dnsrecord-${fn}.txt</tt><tt> </tt><tt>done</tt><tt> </tt><tt>ipa user-find --all > users.txt</tt><tt> </tt><tt>ipa host-find --sizelimit=99999 --all > hosts.txt</tt><tt> </tt><tt>ipa policy-find --all > policy.txt</tt><tt> </tt><tt>ipa sudorule-find --all > sudorule.txt</tt><tt> </tt><tt>ipa sudocmdgroup-find --all > sudocmdgroup.txt</tt><tt> </tt><tt>ipa sudocmd-find --all > sudocmd.txt</tt><tt> </tt><tt>ipa role-find --all > roles.txt</tt><tt> </tt><tt>ipa pwpolicy-find --all > pwpolicy.txt</tt><tt> </tt><tt>ipa privilege-find --all > privilege.txt</tt><tt> </tt><tt>ipa permission-find --all > permission.txt</tt><tt> </tt><tt>ipa netgroup-find --all > netgroup.txt</tt><tt> </tt><tt>ipa usergroup-find --all > usergroup.txt</tt><tt> </tt><tt>ipa idrange-find --all > idrange.txt</tt><tt> </tt><tt>ipa hostgroup-find --all > hostgroup.txt</tt><tt> </tt><tt>ipa</tt><tt> hbacrule-find --all > hbacrule.txt</tt><tt> </tt><tt>ipa hbacsvc-find --all > hbacsvc.txt</tt><tt> </tt><tt>ipa group-find --all > group.txt</tt><tt> </tt><tt>ipa cert-find --all > cert.txt</tt><tt> </tt><tt>ipa automember-find --type=group --all > automember-group.txt</tt><tt> </tt><tt>ipa automember-find --type=hostgroup --all > automember-hostgroup.txt</tt><tt> </tt><tt>popd</tt><tt> </tt>------cut------- Then, for example, you can import these into a new IPA server using something like these: <tt>#!/bin/bash</tt><tt> </tt><tt>#</tt><tt> </tt><tt># parse_hosts</tt><tt> </tt><tt>#</tt><tt> </tt><tt># (C) 2014, The Damascus Group</tt><tt> </tt><tt>#</tt><tt> </tt><tt> </tt><tt>FN=$1</tt><tt> </tt><tt>OTP=MyOnetimePassword</tt><tt> </tt><tt> </tt><tt>RE_HOSTNAME="Host name:\s+(.*)$"</tt><tt> </tt><tt> </tt><tt>name=""</tt><tt> </tt><tt> </tt><tt>while read line; do</tt><tt> </tt><tt> if [[ $line =~ "$name" ]]; then</tt><tt> </tt><tt> if [[ -n "$name" ]]; then</tt><tt> </tt><tt> echo "Adding $name"</tt><tt> </tt><tt> ipa host-add $name --password $OTP --force</tt><tt> </tt><tt> fi</tt><tt> </tt><tt> name=${BASH_REMATCH[1]}</tt><tt> </tt><tt> fi</tt><tt> </tt><tt>done < $FN</tt><tt> </tt><tt>echo "Adding $name"</tt><tt> </tt><tt>ipa host-add $name --password $OTP --force</tt><tt> </tt>-------cut---------- And this for users: <tt> </tt><tt>#!/bin/bash</tt><tt> # # parse_users # # (C) 2014, The Damascus Group </tt><tt> </tt><tt>FN=$1</tt><tt> </tt><tt> </tt><tt>RE_DN="dn:\s+</tt><tt>(.*)$"</tt><tt> </tt><tt>RE_LOGIN="User login:\s+(.*)$"</tt><tt> </tt><tt>RE_LAST="Last name:\s+(.*)$"</tt><tt> </tt><tt>RE_FIRST="First name:\s+(.*)$"</tt><tt> </tt><tt>RE_CN="Full name:\s+(.*)$"</tt><tt> </tt><tt>RE_DISPLAYNAME="Display name:\s+(.*)$"</tt><tt> </tt><tt>RE_INITIALS="Initials:\s+(.*)$"</tt><tt> </tt><tt>RE_SHELL="Login shell:\s+(.*)$"</tt><tt> </tt><tt>RE_HOMEDIR="Home directory:\s+(.*)$"</tt><tt> </tt><tt>RE_PRINCIPAL="Kerberos principal:\s+(.*)$"</tt><tt> </tt><tt>RE_EMAIL="Email address:\s+(.*)$"</tt><tt> </tt><tt>RE_SSHPUBKEY="SSH public key:\s+(.*)$"</tt><tt> </tt><tt>RE_UID="UID:\s+(.*)$"</tt><tt> </tt><tt>RE_GID="GID:\s+(.*)$"</tt><tt> </tt><tt> </tt><tt>login=""</tt><tt> </tt><tt>last</tt><tt>=""</tt><tt> </tt><tt>first=""</tt><tt> </tt><tt>cn=""</tt><tt> </tt><tt>displayname</tt><tt>=""</tt><tt> </tt><tt>initials=""</tt><tt> </tt><tt>shell=""</tt><tt> </tt><tt>homedir=""</tt><tt> </tt><tt>prinicpal=""</tt><tt> </tt><tt>email=""</tt><tt> </tt><tt>sshpubkey=""</tt><tt> </tt><tt>uid=""</tt><tt> </tt><tt>gid=""</tt><tt> </tt><tt> </tt><tt>while read line; do</tt><tt> </tt><tt> if [[ $line =~ $RE_DN ]]; then</tt><tt> </tt><tt> ipa user-add $login \</tt><tt> </tt><tt> --last=$last \</tt><tt> </tt><tt> --first=$first \</tt><tt> </tt><tt> --cn="$cn" \</tt><tt> </tt><tt> --displayname="$displayname" \</tt><tt> </tt><tt> --initials=$initials \</tt><tt> </tt><tt> --shell=$shell \</tt><tt> </tt><tt> --homedir=$homedir \</tt><tt> </tt><tt> --principal=$principal \</tt><tt> </tt><tt> --email=$email </tt><tt>\</tt><tt> </tt><tt> --sshpubkey="$sshpubkey" \</tt><tt> </tt><tt> --uid=$uid \</tt><tt> </tt><tt> --gid=$gid</tt><tt> </tt><tt> login=""</tt><tt> </tt><tt> last=""</tt><tt> </tt><tt> first=""</tt><tt> </tt><tt> cn=""</tt><tt> </tt><tt> displayname=""</tt><tt> </tt><tt> initials=""</tt><tt> </tt><tt> shell=""</tt><tt> </tt><tt> homedir=""</tt><tt> </tt><tt> prinicpal=""</tt><tt> </tt><tt> email=""</tt><tt> </tt><tt> sshpubkey=""</tt><tt> </tt><tt> uid=""</tt><tt> </tt><tt> gid=""</tt><tt> </tt><tt> </tt><tt> fi</tt><tt> </tt><tt> if [[ $line =~ $RE_LOGIN ]]; then</tt><tt> </tt><tt> login=${BASH_REMATCH[1]}</tt><tt> </tt><tt> fi</tt><tt> </tt><tt> if [[ $line =~ $RE_LAST ]]; then</tt><tt> </tt><tt> last=${BASH_REMATCH[1]}</tt><tt> </tt><tt> fi</tt><tt> </tt><tt> if [[ $line =~ $RE_FIRST ]]; then</tt><tt> </tt><tt> first=${BASH_REMATCH[1]}</tt><tt> </tt><tt> fi</tt><tt> </tt><tt> if [[ $line =~ $RE_CN ]]; then</tt><tt> </tt><tt> cn=${BASH_REMATCH[1]}</tt><tt> </tt><tt> fi</tt><tt> </tt><tt> if [[ $line =~ $RE_DISPLAYNAME ]]; then</tt><tt> </tt><tt> displayname=${BASH_REMATCH[1]}</tt><tt> </tt><tt> fi</tt><tt> </tt><tt> if [[ $line =~ $RE_INITIALS ]]; then</tt><tt> </tt><tt> initials=${BASH_REMATCH[1]}</tt><tt> </tt><tt> fi</tt><tt> </tt><tt> if [[ $line =~ $RE_SHELL ]]; then</tt><tt> </tt><tt> shell=${BASH_REMATCH[1]}</tt><tt> </tt><tt> fi</tt><tt> </tt><tt> if [[ $line =~ $RE_HOMEDIR ]]; then</tt><tt> </tt><tt> homedir=${BASH_REMATCH[1]}</tt><tt> </tt><tt> fi</tt><tt> </tt><tt> if [[ $line =~ $RE_PRINCIPAL ]]; then</tt><tt> </tt><tt> principal=${BASH_REMATCH[1]}</tt><tt> </tt><tt> fi</tt><tt> </tt><tt> if [[ $line =~ $RE_EMAIL ]]; then</tt><tt> </tt><tt> email=${BASH_REMATCH[1]}</tt><tt> </tt><tt> fi</tt><tt> </tt><tt> if [[ $line =~ $RE_SSHPUBKEY ]]; then</tt><tt> </tt><tt> sshpubkey1=${BASH_REMATCH[1]}</tt><tt> </tt><tt> read sshpubkey2</tt><tt> </tt><tt> read sshpubkey3</tt><tt> </tt><tt> sshpubkey="$sshpubkey1 $sshpubkey2 $sshpubkey3"</tt><tt> </tt><tt> fi</tt><tt> </tt><tt> if [[ $line =~ $RE_UID ]]; then</tt><tt> </tt><tt> uid=${BASH_REMATCH[1]}</tt><tt> </tt><tt> fi</tt><tt> </tt><tt> if [[ $line =~ $RE_GID ]]; then</tt><tt> </tt><tt> gid=${BASH_REMATCH[1]}</tt><tt> </tt><tt> fi</tt><tt> </tt><tt> done < $FN</tt><tt> </tt><tt>ipa user-add $login \</tt><tt> </tt><tt> --last=$last \</tt><tt> </tt><tt> --first=$first \</tt><tt> </tt><tt> --cn="$cn" \</tt><tt> </tt><tt> --displayname="$displayname" \</tt><tt> </tt><tt> --initials=$initials \</tt><tt> </tt><tt> --shell=$shell \</tt><tt> </tt><tt> --homedir=$homedir \</tt><tt> </tt><tt> --principal=$principal \</tt><tt> </tt><tt> --email=$email \</tt><tt> </tt><tt> --sshpubkey="$sshpubkey" \</tt><tt> </tt><tt> --uid=$uid \</tt><tt> </tt><tt> --gid=$gid</tt> ---------cut---------- If there's any interest, I can toss these scripts plus a handful of other parsers for things like DNS, hbac and sudo into a github project. Unless someone points out a compelling reason to not do things this way. Bret <div class="moz-cite-prefix">On 05/23/2014 12:42 AM, Sanju A wrote: </div> <blockquote cite="mid:OFB4F6C045.2C9326AD-ON65257CE1.0019E55C-65257CE1.0019E55E@tcs.com" type="cite"> <div>Dear All,</div> <div> </div> <div>Is there any command to export the user and host list to a csv or text format Regards Sanju Abraham ___________</div> =====-----=====-----===== Notice: The information contained in this e-mail message and/or attachments to it may contain confidential or privileged information. If you are not the intended recipient, any dissemination, use, review, distribution, printing or copying of the information contained in this e-mail message and/or attachments to it are strictly prohibited. If you have received this communication in error, please notify us by reply e-mail or telephone and immediately and permanently delete the message and any attachments. Thank you <fieldset class="mimeAttachmentHeader"></fieldset> <pre wrap="">_______________________________________________ Freeipa-users mailing list <a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a> <a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre> </blockquote> </body> </html>