On 10/20/18 3:00 PM, skrawczenko--- via FreeIPA-users wrote:
Hello, used to have docker version of freeipa-server, everything went
well until some disaster.
While recovering from disaster, i've managed to have dirsrv working but pki-tomcat is
not and it doesn't seem to worth to fix it.
The idea is to bring up fresh freeipa-server container and fill it with existing data:
only users, groups and passwords are valuable.
Is there any way to do that please?
(backup will not work, as current instance is already recovered from backup and it seems
broken).
Hi,
if the LDAP server is running, you can try to use ipa migrate-ds command
(see [1]). This command will connect to the LDAP server, read user and
group entries and copy them to a new FreeIPA server.
Please carefully read the chapter 'Planning Password Migration' as it
explains that the kerberos hashes cannot be generated from already
hashed passwords, and proposes solutions for password migration.
HTH,
flo
[1]
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/...
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...