When migrating from another LDAP server the value of krbPrincipalKey is being migrated as well and apparently causing password migration to fail.
I migrated from another IPA server and I can seemingly change the password on the migration screen but the result is not a usable key (I don't think it changes at all).
Fixed in 4c75495
Metadata Update from @rcritten: - Issue assigned to jhrozek - Issue set to the milestone: FreeIPA 2.0 - 2010/11
Login to comment on this ticket.