ipa migrate-ds used to print a warning for each referral found in the users/groups container but does not any more.
It would be nice to get this infomation back, for instance:
$ ipa migrate-ds [...]
ldap:///ou=altusers,dc=example,dc=com??sub?: Migration of LDAP search reference is not supported.
ldap:///ou=altgroups,dc=example,dc=com??sub: Migration of LDAP search reference is not supported.
Note that this ticket does not request to support referrals but rather to log information when one referral is found and ignored.
This is regression introduced in 3.3. A demand for a fix is not known, therefore it most-likely won't be fixed any time soon.
Metadata Update from @frenaud:
- Issue assigned to someone
- Issue set to the milestone: FreeIPA 4.5 backlog
to comment on this ticket.