migrate-ds fetches ipa default group with members for setting a default group to users without a group.
Migration code checks if a user which should be added is not already a member of the group. The check is redundant given that the user should not be a member of any group and it still won't eliminate possible race conditions because anything could happen between search for users and search for group.
It also suffers from #4946 which makes whole migration quite slow and prone to fail.
Expected behavior: migrate-ds should not do any processing of existing members which also means avoiding #4946. Generation of a mod list is enough.
Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1204642
master:
Metadata Update from @pvoborni: - Issue assigned to pvoborni - Issue set to the milestone: FreeIPA 4.2
Login to comment on this ticket.