Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 8): Bug 1999992
Description of problem: ipa migrate-ds command fails to warn compat plugin is enabled Version-Release number of selected component (if applicable): ipa-server-4.9.6-4.module+el8.5.0+11912+1b4496cf.x86_64 389-ds-base-1.4.3.23-10.module+el8.5.0+12398+47000435.x86_64 pki-ca-10.11.0-2.module+el8.5.0+12220+9cc212a8.noarch selinux-policy-3.14.3-79.el8.noarch How reproducible: Always Steps to Reproduce: 1. Install IPA server and client 2. Ensure enable-migration=TRUE in IPA server and compat plugin is enabled 3. Setup dsinstance on the IPA client and add users to the instance. 4. Run migrate-ds command on IPA client Actual results: Migration is done, and the warning is missing saying that 'compat plugin is enabled'. [root@client ~]# echo password | ipa migrate-ds ldap://client.rhel85.test:389 > /tmp/compatenabled1.out ----------- migrate-ds: ----------- Migrated: user: puser1 group: demo_group, group1, group2, hr managers, qa managers, pd managers, accounting managers Failed user: Failed group: ---------- Passwords have been migrated in pre-hashed format. IPA is unable to generate Kerberos keys unless provided with clear text passwords. All migrated users need to login at https://your.domain/ipa/migration/ before they can use their Kerberos accounts. Expected results: Warning needs to be displayed for compat plugin being enabled. Additional info: https://bugzilla.redhat.com/show_bug.cgi?id=783270#c6
Metadata Update from @frenaud: - Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1999992
Metadata Update from @frenaud: - Issue assigned to frenaud
Metadata Update from @frenaud: - Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/6008
master:
ipa-4-9:
Metadata Update from @frenaud: - Issue close_status updated to: fixed - Issue status updated to: Closed (was: Open)
Login to comment on this ticket.