On 09/03/2018 09:13, Florence Blanc-Renaud wrote:
On 03/09/2018 09:41 AM, Roderick Johnstone via FreeIPA-users wrote:
> Hi
>
> I'm using migration mode (ipa config-mod --enable-migration=true) to
> help migrate from one freeipa instance to another.
>
> I wasn't able to find any docs on what enabling migration mode
> actually does, exactly.
>
> Can anyone supply details please?
>
> Thanks.
>
> Roderick Johnstone
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
> To unsubscribe send an email to
> freeipa-users-leave(a)lists.fedorahosted.org
Hi,
the migration mode allows to add an entry with a pre-hashed password.
When this mode is disabled, this operation would be refused because IPA
needs a clear-text password in order to run password policy checks and
generate kerberos keys.
HTH,
Flo
Hi Flo
So, why wouldn't you want to have that enabled all the time.
ie are there any other consequences of having this enabled.
Thanks.
Roderick