HUANG, TONY via FreeIPA-users wrote:
Hi,
I am trying to add ipa migrate-ds as a task using the command or shell
module, but it keeps on erroring out. How should I parse this?
ipa migrate-ds --bind-dn="cn=Directory Manager"
--user-container=cn=users,cn=accounts
--group-container=cn=groups,cn=accounts --group-objectclass=posixgroup
--user-ignore-attribute={krbPrincipalName,krbextradata,krblastfailedauth,krblastpwdchange,krblastsuccessfulauth,krbloginfailedcount,krbpasswordexpiration,krbticketflags,krbpwdpolicyreference,mepManagedEntry}
--user-ignore-objectclass mepOriginEntry
--group-ignore-attribute=mepmanagedby
--group-ignore-objectclass=mepmanagedEntry --with-compat
ldap://ipa.server.com <
http://ipa.server.com>
The {} is bash syntax which applies all the values with the option name.
You probably need to explode it yourself, e.g.
--user-ignore-attribute=krbPrincipalName
--user-ignore-attribute=krbextradata ...
rob