36.9. Migrating NIS domains to Identity Management
You can use ID views to set host specific UIDs and GIDs for existing hosts to prevent changing permissions for files and directories when migrating NIS domains into IdM.
Prerequisites
-
You authenticated yourself as an admin using the
kinit admincommand.
Procedure
Add users and groups in the IdM domain.
-
Create users using the
ipa user-addcommand. For more information, see Adding users to IdM. -
Create groups using the
ipa group-addcommand. For more information see: Adding groups to IdM.
-
Create users using the
Override IDs IdM generated during the user creation:
-
Create a new ID view using
ipa idview-addcommand. For more information see: Getting help for ID view commands. -
Add ID overrides for the users and groups to the ID view using
ipa idoverrideuser-addandidoverridegroup-addrespectively.
-
Create a new ID view using
-
Assign the ID view to the specific hosts using
ipa idview-applycommand. - Decommission the NIS domains.
Verification
To check if all users and groups were added to the ID view correctly, use the
ipa idview-showcommand.$ ipa idview-show example-view ID View Name: example-view User object overrides: example-user1 Group object overrides: example-group