mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
Improve migration help
Improve migration help topic so that it easier understandable: - Add missing list of Topic commands - Add one more example to demonstrate migration abilities - Add breaks to too long lines to improve readibility https://fedorahosted.org/freeipa/ticket/2174
This commit is contained in:
@@ -818,7 +818,7 @@ class help(frontend.Local):
|
||||
raise HelpError(topic=topic)
|
||||
|
||||
print doc
|
||||
if len(commands) > 1:
|
||||
if commands:
|
||||
print ''
|
||||
print unicode(_('Topic commands:'))
|
||||
for c in commands:
|
||||
|
||||
@@ -67,18 +67,31 @@ EXAMPLES:
|
||||
The simplest migration, accepting all defaults:
|
||||
ipa migrate-ds ldap://ds.example.com:389
|
||||
|
||||
Specify the user and group container. This can be used to migrate user and
|
||||
group data from an IPA v1 server:
|
||||
ipa migrate-ds --user-container='cn=users,cn=accounts' --group-container='cn=groups,cn=accounts' ldap://ds.example.com:389
|
||||
Specify the user and group container. This can be used to migrate user
|
||||
and group data from an IPA v1 server:
|
||||
ipa migrate-ds --user-container='cn=users,cn=accounts' \\
|
||||
--group-container='cn=groups,cn=accounts' \\
|
||||
ldap://ds.example.com:389
|
||||
|
||||
Since IPA v2 server already contain predefined groups that may collide with
|
||||
groups in migrated (IPA v1) server (for example admins, ipausers), users having
|
||||
colliding group as their primary group may happen to belong to an unknown group
|
||||
on new IPA v2 server.
|
||||
groups in migrated (IPA v1) server (for example admins, ipausers), users
|
||||
having colliding group as their primary group may happen to belong to
|
||||
an unknown group on new IPA v2 server.
|
||||
Use --group-overwrite-gid option to overwrite GID of already existing groups
|
||||
to prevent this issue:
|
||||
ipa migrate-ds --group-overwrite-gid --user-container='cn=users,cn=accounts' --group-container='cn=groups,cn=accounts' ldap://ds.example.com:389
|
||||
ipa migrate-ds --group-overwrite-gid \\
|
||||
--user-container='cn=users,cn=accounts' \\
|
||||
--group-container='cn=groups,cn=accounts' \\
|
||||
ldap://ds.example.com:389
|
||||
|
||||
Migrated users or groups may have object class and accompanied attributes
|
||||
unknown to the IPA v2 server. These object classes and attributes may be
|
||||
left out of the migration process:
|
||||
ipa migrate-ds --user-container='cn=users,cn=accounts' \\
|
||||
--group-container='cn=groups,cn=accounts' \\
|
||||
--user-ignore-objectclass=radiusprofile \\
|
||||
--user-ignore-attribute=radiusgroupname \\
|
||||
ldap://ds.example.com:389
|
||||
""")
|
||||
|
||||
# USER MIGRATION CALLBACKS AND VARS
|
||||
|
||||
Reference in New Issue
Block a user