On 1/28/21 10:27 AM, Jacquelin Charbonnel via FreeIPA-users wrote:
Hi folks,
Overall, what is the goal of the IPA compat mode, and what are the
consequences of enabling/disabling it ?
And specifically, what's the differences between :
# ipa migrate-ds --with-compat ...
and
# ipa-compat-manage disable
# ipa migrate-ds ...
Thanks on advance
Hi
The schema compatibility plugin is designed for applications expecting
the user/groups to follow RFC 2307 schema (instead of RFC 2307bis). The
directory server computes an alternate view of the users/groups and
provides this view below cn=users,cn=compat,dc=example,dc=com. For more
information about the schema compat plugin, please read
https://www.freeipa.org/page/FreeIPAv2:Schema_Compatibility_Plug-in_Design
It's recommended to disable the schema compat plugin for performances
reasons during the migration.
HTH,
flo