freeipa

Clone
Source Code
GIT

#4943 Winsync migration tool: Make sure SUDO/HBAC rules, group memberships work
Closed: Fixed None Opened 9 years ago by tbabej.

Closed: Fixed
Reopen Issue

This is a follow up for: https://fedorahosted.org/freeipa/ticket/4524

The implementation of the above ticket is already on the list, however, a underlying issue revealed itself in the discussions.

The migration tool replaces the original IPA winsyc'ed user entries by corresponding IPA user ID overrides. However, any mechanism that relies on existence of the DN for the user entry of the winsync'ed user, such as group membership, will not.

master:

  • 0cb87fc winsync-migrate: Add initial plumbing
  • 4c6ff80 winsync-migrate: Add a way to find all winsync users
  • 2104e07 migrate-winsync: Create user ID overrides in place of winsynced user entries
  • e7d7f01 migrate-winsync: Add option validation and handling
  • cf61e2a winsync-migrate: Move the api initalization and LDAP connection to the main method
  • 69c6a33 dcerpc: Change logging level for debug information
  • e6a2a67 dcerpc: Add debugging message to failing kinit as http
  • 0e11a87 winsync-migrate: Require root privileges
  • bff7a74 idviews: Do not abort the find & show commands on conversion errors
  • d584eb7 winsync-migrate: Require explicit specification of the target server and validate existing agreement
  • 7017d9e winsync-migrate: Delete winsync agreement prior to migration
  • e9a3b99 winsync-migrate: Rename to tool to achive consistency with other tools
  • 19d62e9 winsync-migrate: Move the tool under ipaserver.install package
  • f8d1458 winsync-migrate: Include the tool parts in Makefile and friends
  • 6462530 idviews: Fallback to AD DC LDAP only if specifically allowed
  • 1993581 man: Add manpage for ipa-winsync-migrate
  • e5fe79a winsync_migrate: Migrate memberships of the winsynced users
  • 8d30feb winsync_migrate: Generalize membership migration

Metadata Update from @tbabej:
- Issue assigned to tbabej
- Issue set to the milestone: FreeIPA 4.2
7 years ago

Login to comment on this ticket.

Metadata
None
None
None
normal
None
None
None
None
defect
None
None
IPA
None
1
None
None
None
None
0
None
None
http://www.freeipa.org/page/V4/Winsync_Migration_Tool
Powered by Pagure 5.13.3
Documentation • File an Issue • About • SSH Hostkey/Fingerprint
© Red Hat, Inc. and others.