Dieser Inhalt ist in der von Ihnen ausgewählten Sprache nicht verfügbar.
Chapter 6. Migrating from synchronization to trust manually by using ID views
In RHEL 8, the synchronization approach to integrating RHEL systems into Active Directory (AD) indirectly is deprecated. Red Hat recommends migrating to the approach based on a trust between Identity Management (IdM) and AD instead. This chapter describes how to migrate from synchronization to trust manually, by using ID views.
6.1. Migrating from synchronization to trust manually using ID views
You can use ID views to manually change the POSIX attributes that Active Directory (AD) previously generated for AD users.
Prerequisites
- On RHEL 7, you configured synchronisation between RHEL Identity Management (IdM) and AD.
Procedure
- Create a backup of the original synchronized user and group entries.
- Create a trust with the synchronized domain. See For details, see Installing trust between IdM and AD.
For every synchronized user or group, preserve the UID and GIDs generated by IdM by doing one of the following:
- Individually create an ID view applied to the specific host and add user ID overrides to the view.
- Create user ID overrides in the Default Trust View.
NoteOnly IdM users can manage ID views. AD users cannot.
- Delete the original synchronized user or group entries.
