Migrating to new ldap server with different structure
Hello,
I already asked on the forum but since nobody knows and I can't even find what I am looking for in the database I think this should be an issue.
I'm trying to migrate the LDAP login database from OpenLDAP to FreeIPA. The old one has a user structure like:
uid=foo,ou=people,dc=example,dc=com
And the new one a structure like:
uid=foo,cn=users,cn=accounts,dc=example2,dc=tld
Changing the config to use the new LDAP server is easy enough, but old accounts are no longer found:
LDAP account “uid=foo,ou=people,dc=example,dc=com” does not exist any more, blocking GitLab user “foo” (foo@example.com)
So it's clear the whole account name from LDAP is stored, and not just the user id and or email address or something similar which would enable migration from one LDAP server to another.
Also, there is no documentation on how to change the user accounts. Looking through the database in the user table the whole uid=foo,ou=people,dc=example,dc=com is not stored.
I'm rather stuck and I think this should be possible, one way or another. Thanks for looking into this issue.