#4620 Ignoring user attributes in migrate-ds does not work if uppercase characters are returned by ldap
Closed: Fixed None Opened 9 years ago by mkosek.

Ticket was cloned from Red Hat Bugzilla (product Fedora): Bug 1150040

Description of problem:
I tried to migrate a openldap based directory to FreeIPA, while removing
several objectclasses. --user-ignore-attribute didn't work.

The Problem seems to be, that the LDAPEntry Object entry_attry in migration.py
isn't lowercased while the blacklist is force to lower case by the script.

the problem can be resolved by replacing
        if attr in attr_blacklist:
        if attr.lower() in attr_blacklist:

Version-Release number of selected component (if applicable): 4.0.3 on Fedora

How reproducible: use migrate-ds with --user-ignore-attribute

Steps to Reproduce:

Actual results:

Failed user:
  xxx: attribute "shadowLastChange" not allowed
  xxx: attribute "shadowLastChange" not allowed

Expected results:
user is migrated

Additional info:

We want to make migration as smooth as possible, we even know where the problem is here.


  • 35dad96 Fix --{user,group}-ignore-attribute in migration plugin.


  • 8ab85f1 Fix --{user,group}-ignore-attribute in migration plugin.

Metadata Update from @mkosek:
- Issue assigned to dkupka
- Issue set to the milestone: FreeIPA 4.1.2

6 years ago

Login to comment on this ticket.