I never found a single tool to make all that happen when I built a separate new domain. But I was able to use "ipa migrate-ds" for the user accounts and then various "ipa <blah>-show" tools to get the groups, hosts, host-groups and automounts listed from the old domain. From that I built up scripts to inject them into the new domain. It wasn't 100% but it got the job done for most of the migration. On 1/12/2022 4:33 AM, Sina Owolabi via FreeIPA-users wrote: > Hi List! > > And sincere apologies if this has been asked before. > Can I possibly export users, groups, hmac and sudo settings from one > domain to a fresh installation in a wholly new domain? > > Source domain is running on CentOS Linux release 7.9.2009, and > ipa-server-common-4.6.8-5.el7, > Destination will be latest on CentOS Stream 8. > > Thanks in advance! > -- Stephen Berg, IT Specialist, Ocean Sciences Division, Code 7309 Naval Research Laboratory W: (228) 688-5738 <- (Preferred contact) DSN: (312) 823-5738 C: (228) 365-0162 Flank Speed: stephen.p.berg.civ(a)us.navy.mil _______________________________________________ FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho... Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure