Bug 1360792
Summary: | Migrating users doesn't update krbCanonicalName | ||
---|---|---|---|
Product: | Red Hat Enterprise Linux 7 | Reporter: | Martin Bašti <mbasti> |
Component: | ipa | Assignee: | IPA Maintainers <ipa-maint> |
Status: | CLOSED ERRATA | QA Contact: | Kaleem <ksiddiqu> |
Severity: | unspecified | Docs Contact: | |
Priority: | unspecified | ||
Version: | 7.3 | CC: | jhrozek, ndehadra, pvoborni, rcritten |
Target Milestone: | rc | ||
Target Release: | --- | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | ipa-4.4.0-5.el7 | Doc Type: | If docs needed, set a value |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2016-11-04 05:59:24 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Martin Bašti
2016-07-27 13:40:38 UTC
Fixed upstream master: https://fedorahosted.org/freeipa/changeset/1a04edd36bd95d0e6e8c43e742113b3e3cadfb6b IPA-server version: ipa-server-4.4.0-12.el7.x86_64 Verified the bug on the basis of following steps: 1. Verified that the users are migrated successfully (in my casefrom IPA1 to IPA2) Run following command on IPA2 after creating 100 users on IPA1: #ipa migrate-ds --user-container="cn=users,cn=accounts,dc=testrelm,dc=test" ldap://<IPA 1 Server hostname> 2. Verified that users are reflected correctly on both the servers: # ldapsearch -h `hostname` -Y GSSAPI -b "cn=users,cn=accounts,dc=testrelm,dc=test" 3. Reset the migrated user password on IPA2 from UI. (In my case resetted the password for user test_100 to 'abcd') 4. On IPA2, run the following command # kinit test_100 Password for test_100: Password expired. You must change it now. Enter new password: Enter it again: # klist Ticket cache: KEYRING:persistent:0:0 Default principal: test_100 Valid starting Expires Service principal 09/19/2016 07:59:09 09/20/2016 07:59:09 krbtgt/TESTRELM.TEST Thus on the basis of above observations marking status of bug to "VERIFIED". Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHBA-2016-2404.html |