#8984 ipa migrate-ds command fails to warn when compat plugin is enabled
Closed: fixed 2 years ago by frenaud. Opened 2 years ago by frenaud.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 8): Bug 1999992

Description of problem: ipa migrate-ds command fails to warn compat plugin is
enabled

Version-Release number of selected component (if applicable):
ipa-server-4.9.6-4.module+el8.5.0+11912+1b4496cf.x86_64
389-ds-base-1.4.3.23-10.module+el8.5.0+12398+47000435.x86_64
pki-ca-10.11.0-2.module+el8.5.0+12220+9cc212a8.noarch
selinux-policy-3.14.3-79.el8.noarch

How reproducible:
Always

Steps to Reproduce:
1. Install IPA server and client
2. Ensure enable-migration=TRUE in IPA server and compat plugin is enabled
3. Setup dsinstance on the IPA client and add users to the instance.
4. Run migrate-ds command on IPA client

Actual results:
Migration is done, and the warning is missing saying that 'compat plugin is
enabled'.

[root@client ~]# echo password | ipa migrate-ds ldap://client.rhel85.test:389 >
/tmp/compatenabled1.out
-----------
migrate-ds:
-----------
Migrated:
  user: puser1
  group: demo_group, group1, group2, hr managers, qa managers, pd managers,
accounting managers
Failed user:
Failed group:
----------
Passwords have been migrated in pre-hashed format.
IPA is unable to generate Kerberos keys unless provided
with clear text passwords. All migrated users need to
login at https://your.domain/ipa/migration/ before they
can use their Kerberos accounts.

Expected results:
Warning needs to be displayed for compat plugin being enabled.

Additional info:
https://bugzilla.redhat.com/show_bug.cgi?id=783270#c6

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1999992

2 years ago

Metadata Update from @frenaud:
- Issue assigned to frenaud

2 years ago

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/6008

2 years ago

master:

  • 2ba3028 migrate-ds: workaround to detect compat tree

ipa-4-9:

  • 3c4f9e7 migrate-ds: workaround to detect compat tree

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

2 years ago

Login to comment on this ticket.

Metadata