On 10/18/18 4:34 PM, Ben Archuleta via FreeIPA-users wrote:

Hello All,

I am in the process of setting up a FreeIPA server to replace an ancient NIS (last updated in 2013-ish). I can manually recreate the accounts (about 280) for the most part but the issue I can’t seem to work around is migrating the passwords over. From what I can tell there is no way to carry over the hashes as they are and it looks like my only option is to goto each person and have them re-input their password into FreeIPA.

Is there a tool that can help with this issue or any tips from people who have upgraded from a NIS to IPA?

Hi,

did you have a look at this wiki? https://www.freeipa.org/page/NIS_accounts_migration_preserving_Passwords

Once the users are imported, each user can go to the migration web page: https://ipaserver.example.com/ipa/migration and re-enter his password. This will generate the kerberos hash for the user.

HTH, flo

Regards, Ben Archuleta IT Services Specialist

---

FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahoste...