4.2. Migrating user entries from NIS to IdM

Procedure

1. Install the yp-tools package:

   [root@nis-server ~]# dnf install yp-tools -y

2. On the NIS server create the /root/nis-users.sh script with the following content:

   #!/bin/sh
   # $1 is the NIS domain, $2 is the primary NIS server
   ypcat -d $1 -h $2 passwd > /dev/shm/nis-map.passwd 2>&1
   
   IFS=$'\n'
   for line in $(cat /dev/shm/nis-map.passwd) ; do
   	IFS=' '
   	username=$(echo $line | cut -f1 -d:)
   	# Not collecting encrypted password because we need cleartext password
   	# to create kerberos key
   	uid=$(echo $line | cut -f3 -d:)
   	gid=$(echo $line | cut -f4 -d:)
   	gecos=$(echo $line | cut -f5 -d:)
   	homedir=$(echo $line | cut -f6 -d:)
   	shell=$(echo $line | cut -f7 -d:)
   
   	# Now create this entry
   	echo passw0rd1 | ipa user-add $username --first=NIS --last=USER \
   	     --password --gidnumber=$gid --uid=$uid --gecos="$gecos" --homedir=$homedir \
   	     --shell=$shell
   	ipa user-show $username
   done

3. Authenticate as the IdM admin user:

   [root@nis-server ~]# kinit admin

4. Run the script. For example:

   [root@nis-server ~]# sh /root/nis-users.sh nisdomain nis-server.example.com

   重要

   This script uses hard-coded values for first name, last name, and sets the password to passw0rd1. The user must change the temporary password at the next login.