Migrate users from one resolver to another

codesmaker · July 1, 2021, 9:50pm

Hi,

I would like to migrate some users from OpenLDAP to Windows AD. All the users in the OpenLDAP resolver have already tokens. Is there a way to move the tokens for these users from one realm to another?

Thanks a lot for your help.

cornelinux · July 6, 2021, 5:08am

We have a scripts repository that has several examples how you can write your own little script to automate mass tasks or create scripts for the script handler.

I think this script

github.com

privacyidea/scripts/blob/master/toolbox/migrate_users.py

#!/usr/bin/env python
# -*- coding: utf-8 -*-

__doc__ = """
This script can assign token to users from a new resolver i.e. when the users
were migrated to a new resolver and the UID Type has changed.

(c) 2020, Paul Lettich <paul.lettich@netknights.it>
 
    This program is free software; you can redistribute it and/or modify
    it under the terms of the GNU General Public License version 3 as
    published by the Free Software Foundation.
 
    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.
 
    You should have received a copy of the GNU General Public License
    along with this program; if not, write to the Free Software

This file has been truncated. show original

is a good starting point.