Hello,
I would like to take a RedHat IDM installation running on RHEL 7 and migrate it to a
Fedora 36 installation running FreeIPA. Since the jump in version is too big to simply
make the Fedora 36 server a replica of the RHEL 7 installation, and since I'd like to
change the domain name from 'country.example.com' to 'example.com',
I've decided to use the API to extract users and groups from the RHEL installation and
populate them in the Fedora 36 server. The Python script I wrote to run this seems to work
fine. However I am left with two remaining things I would like to migrate: passwords and
the root CA certificate.
1. Is there a way to transfer over the hashed passwords from the RHEL 7 install to the
Fedora 36 one? (I expect that the answer will be "no", but I gotta ask anyway!)
2. Is there away to extract the root CA from the RHEL 7 install and use it as the root CA
for all generated certificates on the Fedora 36 one? I would like to keep the same root CA
so that I don't have to go and change that certificate on all of my LDAPS clients.
Thanks for any hints, tips or guidance you can provide!
-Martin