Hi,
I'm trying to migrate our openldap users to freeipa by running
ipa -v migrate-ds \ --bind-dn=cn=Administrator,dc=example,dc=com \ --user-container=ou=People,dc=example,dc=com \ --group-container=ou=Group,dc=example,dc=com \ --group-objectclass=posixGroup \ --user-objectclass=posixAccount \ --user-ignore-attribute=ldappublickey \ ldap://ldap.example.com:389 --schema=RFC2307bis \ --with-compat
but I'm getting this error on each user:
ysl: missing attribute "sn" required by object class "person"
I found this thread which seems to have a solution but that solution doesn't work for me, I guess because I'm using the current docker version.
https://www.redhat.com/archives/freeipa-users/2016-September/msg00016.html
Is there anyone out there who could help me to apply the fix mentioned in the thread? Or is there anyone who has another solution?
Kind regards,
wim vinckier.
It looks like I got it fixed by adding
if 'sn' not in entry_attrs: entry_attrs.setdefault('sn', 'unknown sn')
at line 237 of /usr/lib/python3.6/site-packages/ipaserver/plugins/migration.py
All my users are imported now.
freeipa-users@lists.fedorahosted.org