On su, 24 helmi 2019, Albert Szostkiewicz via FreeIPA-users wrote:
Hi,
So I do have an user on my laptop with same username as IPA user. I've
noticed that after installing client, this existing user is still being
authenticated by it's original password and is with its original UID.
What is the best procedure in such cases? Should I remove existing
users and just keep root before installation ? is there a way to sync
existing users towards ipa users?
It all depends on the order of PAM modules.
Typically, pam_unix is the
first and if it finds a user in /etc/passwd, it is used for
authentication.
You probably want to remove that entry from /etc/passwd if you already
have the user migrated to IPA.
A 'sync' is a variation of a process described in
https://www.redhat.com/archives/freeipa-users/2010-September/msg00105.html and
https://www.freeipa.org/page/NIS_accounts_migration_preserving_Passwords
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland