Chapter 3. Upgrading an IdM client from RHEL 7 to RHEL 8

Procedure

1. Ensure any users and groups you retrieved with the local ID provider are also in the /etc/passwd and /etc/group files. This ensures that the files provider can access those users and groups.

   1. If you need to create users, use the useradd command. If you need to specify the UID, add the -u option:

      [root@client ~]# useradd -u 3001 username

      Copy to Clipboard Toggle word wrap

   2. If you need to create groups, use the groupadd command. If you need to specify the GID, add the -g option:

      [root@client ~]# groupadd -g 5001 groupname

      Copy to Clipboard Toggle word wrap
2. Open the /etc/sssd/sssd.conf configuration file in a text editor.

3. Replace id_provider=local with id_provider=files.

   [domain/example.com]
   id_provider = files
   ...

   Copy to Clipboard Toggle word wrap
4. Save the /etc/sssd/sssd.conf configuration file.

5. Restart SSSD to load the configuration changes.

   [root@client ~]# systemctl restart sssd

   Copy to Clipboard Toggle word wrap

Procedure

1. Open the /etc/sssd/sssd.conf configuration file in a text editor.
2. Remove any occurrences of ldap_groups_use_matching_rule_in_chain or ldap_initgroups_use_matching_rule_in_chain options.
3. Save the /etc/sssd/sssd.conf configuration file.

4. Restart SSSD to load the configuration changes.

   [root@client ~]# systemctl restart sssd

   Copy to Clipboard Toggle word wrap

Procedure

1. Open the /etc/sssd/sssd.conf configuration file in a text editor.

2. In the example.com domain, set ldap_sudo_include_regexp=true.

   [domain/example.com]
   ...
   ldap_sudo_include_regexp = true
   ...

   Copy to Clipboard Toggle word wrap
3. Save the /etc/sssd/sssd.conf configuration file.

4. Restart SSSD to load the configuration changes.

   [root@client ~]# systemctl restart sssd

   Copy to Clipboard Toggle word wrap