Date: Sat, 22 Jan 2005 00:56:17 GMT From: Pawel Wieleba <P.Wieleba@iem.pw.edu.pl> To: freebsd-gnats-submit@FreeBSD.org Subject: ports/76557: migrate unix accounts/groups to LDAP (add/modify existing entries) and dump LDAP to unix files Message-ID: <200501220056.j0M0uH9s090782@www.freebsd.org> Resent-Message-ID: <200501220100.j0M10klI096448@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 76557
>Category: ports
>Synopsis: migrate unix accounts/groups to LDAP (add/modify existing entries) and dump LDAP to unix files
>Confidential: no
>Severity: non-critical
>Priority: low
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: update
>Submitter-Id: current-users
>Arrival-Date: Sat Jan 22 01:00:46 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator: Pawel Wieleba
>Release: 6.0-CURRENT
>Organization:
>Environment:
FreeBSD server 6.0-CURRENT FreeBSD 6.0-CURRENT #0:
>Description:
A problem and solution is described in the article:
www.iem.pw.edu.pl/~wielebap/ldap/smbldap-tools/2/smbldap-tools_doc2.pdf
smbldap-tools cannot migrate unix accounts/groups to LDAP.
This operation can be done with PADL MigrationTools, but...
they cannot update existing user entries with the information
delivered by unix files (passwd,shadow,groups,master.passwd).
Even entry structure objectClass can be changed during migration,
as is essential in the example scenario:
# pdbedit -e ldapsam:ldap://localhost
# smbldap-migrate-passwd -P /etc/passwd
New scripts can migrate from unix files to LDAP and vice versa
(LDAP database can be dumped to unix files - passwd, shadow,...).
>How-To-Repeat:
>Fix:
I've created 4 scripts at the beginning.
They can be downloaded from my web:
www.iem.pw.edu.pl/~wielebap/ldap/smbldap-tools/2/smbldap-migrate-passwd
www.iem.pw.edu.pl/~wielebap/ldap/smbldap-tools/2/smbldap-migrate-2passwd
www.iem.pw.edu.pl/~wielebap/ldap/smbldap-tools/2/smbldap-migrate-group
www.iem.pw.edu.pl/~wielebap/ldap/smbldap-tools/2/smbldap-migrate-2group
They seem to be very useful and I tried to make them as simple as possible.
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200501220056.j0M0uH9s090782>