Honestly, we simply built a new IPA configuration rather than try to
migrate. It's been far easier to move clients over by ripping the
OpenLDAP off and installing IPA-client than mucking with a conversion.
On 10/09/2017 11:50 AM, Andrew Meyer via FreeIPA-users wrote:
Hello,
I am planning to migrate from a OpenLDAP installation to FreeIPA.
I have been following the directions and matching it to several blog
posts about this however I am coming up with errors.
[user@infra-test-ipa ~]$ ipa migrate-ds --user-container=users
--group-container=group --user-objectclass=inetOrgPerson
--group-objectclass=groupOfNames,groupOfUniqueNames
ldap://my.host.name:389
Password:
ipa: ERROR: invalid 'group_container': malformed RDN string = "group"
[user@infra-test-ipa ~]$ ipa migrate-ds --user-container=users
--group-container=group ldap://my.host.name:389
Password:
ipa: ERROR: invalid 'group_container': malformed RDN string = "group"
[user@infra-test-ipa ~]$ ipa migrate-ds --user-container=users
--group-container=Group ldap://my.host.name:389
Password:
ipa: ERROR: invalid 'group_container': malformed RDN string = "Group"
[user@infra-test-ipa ~]$ sudo kinit admin
Password for admin(a)mynewdomain.net:
[user@infra-test-ipa ~]$ sudo ipa migrate-ds --user-container=users
--group-container=Group ldap://my.host.name:389
Password:
ipa: ERROR: invalid 'group_container': malformed RDN string = "Group"
[user@infra-test-ipa ~]$ sudo ipa migrate-ds --user-container="Users"
--group-container=Group ldap://my.host.name:389
Password:
ipa: ERROR: invalid 'group_container': malformed RDN string = "Group"
[user@infra-test-ipa ~]$ sudo ipa migrate-ds --user-container="Users"
--base-dn="ou=Users,dc=olddomain,dc=local" --with-compat
--group-container="Group" ldap://my.host.name:389
Password:
ipa: ERROR: invalid 'group_container': malformed RDN string = "Group"
Has anyone run into this?
I am running CentOS 7 w/ the latest version of everything.
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
--
Mark Haney
Network Engineer at NeoNova
919-460-3330 option 1
mark.haney(a)neonova.net
www.neonova.net