[Freeipa-devel] [PATCH] 075 Add ignore lists to migrate-ds command

Martin Kosek mkosek at redhat.com
Fri Jun 10 11:40:09 UTC 2011


On Thu, 2011-06-09 at 15:14 -0400, Rob Crittenden wrote:
> Martin Kosek wrote:
> > How to test:
> > 1) Create a custom DS instance with for example 60radius.ldif schema
> > present (as in the original report in ticket #1266)
> > 2) Populate DS with users/groups with custom unsupported object
> > class/attribute
> > 3) Try to migrate these users and groups to IPAv2. Only the enhanced
> > migrate-ds command should be successful:
> >
> > # ipa migrate-ds ldap://vm-102.idm.lab.bos.redhat.com:389
> > --schema=RFC2307 --user-objectclass=posixAccount
> > --group-objectclass=posixgroup --user-container='ou=People'
> > --group-container='cn=Accounting Managers,ou=Groups'
> > --user-ignore-objectclass=radiusprofile,radiusclientprofile
> > --user-ignore-attribute=radiusclientsecret,radiusclientipaddress
> >
> > ---
> > When user migrates users/groups from an old DS instance, the
> > migration may fail on unsupported object classes and/or
> > relevant LDAP object attributes.
> >
> > This patch implements a support for object class and attribute
> > ignore lists that can be used to suppress these migration issues.
> >
> > Additionally, a redundant "dev/null" file is removed from git repo
> > (originally added in 26b0e8fc9809a4cd9f2f9a2281f0894e2e0f8db2).
> >
> > https://fedorahosted.org/freeipa/ticket/1266
> 
> This isn't applying to master, the blacklists hunk and I wasn't sure 
> either where it should go.
> 
> I did notice one general problem though: objectclasses should be treated 
> case insensitive.
> 
> rob

I rebased the patch. Objectclasses and attributes were already treated
case insensitively, so no change needed there.

Martin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mkosek-075-2-add-ignore-lists-to-migrate-ds-command.patch
Type: text/x-patch
Size: 10430 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20110610/3c49737f/attachment.bin>


More information about the Freeipa-devel mailing list