barrykfl@gmail.com wrote:

all usernames migrated but cannot login even  I used https://your.domain/ipa/migration/ https://your.domain/ipa/migration/  to verified successfully ...It still say password incorrect.

Be sure that user you are binding to the remote server with has read access to the userPassword attribute. IPA will not complain if it does not get a password set.

then I want to delete all burtit said no entry when I press del.

Not enough information to help you here. The command-line is easier to debug in this regard.

rob

2018-05-22 1:36 GMT+08:00 Rob Crittenden <rcritten@redhat.com mailto:rcritten@redhat.com>:

barrykfl--- via FreeIPA-users wrote:
> Dear all:
> 
> I used this migration command migrate users but the user does not work.

How does the user not work? What did you use to confirm it?

> 
> IPA is unable to generate Kerberos keys unless provided
> with clear text passwords. All migrated users need to
> login at https://your.domain/ipa/migration/
<https://your.domain/ipa/migration/> before they
> can use their Kerberos accounts.
> 
> even now i want to del it said account not exists,. but can really shown
> on UI.

Can you try on the command-line:

% ipa user-show someuser
% ipa user-del someuser

rob

barrykfl--- via FreeIPA-users wrote:

    example 1



    Operations Error

Some entries were not deleted

• aaron: user not found

If there is an operations error there may be additional logging in /var/log/httpd/error_log.

And still you haven't tried on the command-line :-(

example 2

Is it possible to skip the password migration process so user no need confirm once ( all password harsh transffered so user use same password?

No. The cleartext password is required to generate the Kerberos hash and it is not available during migration.

rob

Regards

2018-05-22 2:13 GMT+08:00 Rob Crittenden <rcritten@redhat.com mailto:rcritten@redhat.com>:

barrykfl@gmail.com <mailto:barrykfl@gmail.com> wrote:
> all usernames migrated but cannot login even  I
> used https://your.domain/ipa/migration/ <https://your.domain/ipa/migration/>
> <https://your.domain/ipa/migration/
<https://your.domain/ipa/migration/>>  to verified successfully ...It
> still say password incorrect.

Be sure that user you are binding to the remote server with has read
access to the userPassword attribute. IPA will not complain if it does
not get a password set.

> then I want to delete all burtit said no entry when I press del.

Not enough information to help you here. The command-line is easier to
debug in this regard.

rob

> 
> 2018-05-22 1:36 GMT+08:00 Rob Crittenden <rcritten@redhat.com <mailto:rcritten@redhat.com>
> <mailto:rcritten@redhat.com <mailto:rcritten@redhat.com>>>:
>
>     barrykfl--- via FreeIPA-users wrote:
>     > Dear all:
>     >
>     > I used this migration command migrate users but the user
does not work.
>
>     How does the user not work? What did you use to confirm it?
>
>     >
>     > IPA is unable to generate Kerberos keys unless provided
>     > with clear text passwords. All migrated users need to
>     > login at https://your.domain/ipa/migration/
<https://your.domain/ipa/migration/>
>     <https://your.domain/ipa/migration/
<https://your.domain/ipa/migration/>> before they
>     > can use their Kerberos accounts.
>     >
>     > even now i want to del it said account not exists,. but can
really shown
>     > on UI.
>
>     Can you try on the command-line:
>
>     % ipa user-show someuser
>     % ipa user-del someuser
>
>     rob
>
>

---

FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahost...