[Freeipa-users] Shadow/Unix Password Import/Migrate

[Rob Crittenden]

Chandan Kumar wrote:
> Hello,
>
> I am setting up IPA server for our all Linux Machines mostly CentOS 5/6.
>   As of now all user shadow passwords are managed by puppet.
>
> And as part of moving to IPA I could not find a way to import all
> passwords to IPA without forcing users to reset the password.

To close the loop on this, we discussed this in #freeipa and if you 
enable migration mode and set the password using the hash and {CRYPT} 
then it should work fine.

Something like: user-add --first=Tim --last=User --setattr 
userPassword={CRYPT}hash tim_user

rob