HUANG, TONY via FreeIPA-users wrote:
Hi,
I am trying to add ipa migrate-ds as a task using the command or shell module, but it keeps on erroring out. How should I parse this?
ipa migrate-ds --bind-dn="cn=Directory Manager" --user-container=cn=users,cn=accounts --group-container=cn=groups,cn=accounts --group-objectclass=posixgroup --user-ignore-attribute={krbPrincipalName,krbextradata,krblastfailedauth,krblastpwdchange,krblastsuccessfulauth,krbloginfailedcount,krbpasswordexpiration,krbticketflags,krbpwdpolicyreference,mepManagedEntry} --user-ignore-objectclass mepOriginEntry --group-ignore-attribute=mepmanagedby --group-ignore-objectclass=mepmanagedEntry --with-compat ldap://ipa.server.com http://ipa.server.com
The {} is bash syntax which applies all the values with the option name. You probably need to explode it yourself, e.g.
--user-ignore-attribute=krbPrincipalName --user-ignore-attribute=krbextradata ...
rob