Honestly, we simply built a new IPA
configuration rather than try to
migrate. It's been far easier to move clients over by
ripping the
OpenLDAP off and installing IPA-client than mucking with
a conversion.
On 10/09/2017 11:50 AM, Andrew Meyer via FreeIPA-users
wrote:
> Hello,
> I am planning to migrate from a OpenLDAP
installation to FreeIPA.
>
> I have been following the directions and matching
it to several blog
> posts about this however I am coming up with
errors.
>
> [
user@infra-test-ipa ~]$ ipa
migrate-ds --user-container=users
> --group-container=group
--user-objectclass=inetOrgPerson
> --group-objectclass=groupOfNames,groupOfUniqueNames
>
ldap://my.host.name:389
> Password:
> ipa: ERROR: invalid 'group_container': malformed
RDN string = "group"
> [
user@infra-test-ipa ~]$ ipa
migrate-ds --user-container=users
> --group-container=group
ldap://my.host.name:389
> Password:
> ipa: ERROR: invalid 'group_container': malformed
RDN string = "group"
> [
user@infra-test-ipa ~]$ ipa
migrate-ds --user-container=users
> --group-container=Group
ldap://my.host.name:389
> Password:
> ipa: ERROR: invalid 'group_container': malformed
RDN string = "Group"
> [
user@infra-test-ipa ~]$
sudo kinit admin
> Password for
admin@mynewdomain.net:
> [
user@infra-test-ipa ~]$
sudo ipa migrate-ds --user-container=users
> --group-container=Group
ldap://my.host.name:389
> Password:
> ipa: ERROR: invalid 'group_container': malformed
RDN string = "Group"
> [
user@infra-test-ipa ~]$
sudo ipa migrate-ds --user-container="Users"
> --group-container=Group
ldap://my.host.name:389
> Password:
> ipa: ERROR: invalid 'group_container': malformed
RDN string = "Group"
> [
user@infra-test-ipa ~]$
sudo ipa migrate-ds --user-container="Users"
> --base-dn="ou=Users,dc=olddomain,dc=local"
--with-compat
> --group-container="Group"
ldap://my.host.name:389
> Password:
> ipa: ERROR: invalid 'group_container': malformed
RDN string = "Group"
>
>
> Has anyone run into this?
> I am running CentOS 7 w/ the latest version of
everything.
>
>
> _______________________________________________
> FreeIPA-users mailing list --
freeipa-users@lists.fedorahosted.org
> To unsubscribe send an email to
freeipa-users-leave@lists.fedorahosted.org
--
Mark Haney
Network Engineer at NeoNova
919-460-3330 option 1
mark.haney@neonova.net
www.neonova.net