Thank you for the reply.
As I understood from your reply it's not possible to migrate passwords without "migration" procedure after the ipa migrate-ds? During my test migrations from earlier (start of the last month) I have managed to migrate and login with old passwords after the ipa migrate-ds. I used docker image "#rocky-9" and until image was updated with the new OS version or some security updates I don't know I have 2 or 3 successful attempt of the migration of users with the passwords. I was able to login using kinit and web. How it possible?