On 02/02/2022 14:21, Rob Crittenden wrote:
lejeczek via FreeIPA-users wrote:
On 02/02/2022 08:45, Florence Blanc-Renaud wrote:
Hi,
On Wed, Feb 2, 2022 at 7:31 AM lejeczek via FreeIPA-users
<[email protected]> wrote:
Hi guys.
I migrate:
-> $ ipa migrate-ds --bind-dn="cn=Directory Manager"
--user-container=cn=users,cn=accounts
--group-container=cn=groups,cn=accounts
--group-objectclass=posixgroup --with-compat ldap://10.0.0.16
<http://10.0.0.16>
and I end up, according to 'group-find', having a lot more -
one for each user - extra groups which do not exist(or don't
show up?) on the source IPA domain.
Are those extra groups the user private group? You can check on the
source IPA server if they show up with
# ipa group-find --private
Yes there are, they did exist on the 'source' but would not show up with
just 'group-find' where on the migrated_to IPA they do show up with just
'group-find' (the same migrated_to when user is created manually would
not show that private group)
can not do with 'source' anything as it's been dissolved.
User-private groups (UPG) become regular groups in IPA-to-IPA migration.
UPGs are not displayed by default in group-find.
rob
But that I was saying - apologies if I was vague - they do
show up with just 'group-find' on migrated_to IPA. (and I
did not do change whatever 'defaults' are on a clean, new
deployment is)
migration was from 4.9.6 to 4.9.8
thanks, L.
many thanks, L
flo
Why is that? Is that a symptom of a problem? Is it safe to
remove those extra groups?
many thanks, L
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to
[email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure
