openLDAP to FreeIPA user migration

[Wim Vinckier]

Hi,

I'm trying to migrate our openldap users to freeipa by running

ipa -v migrate-ds \
 --bind-dn=cn=Administrator,dc=example,dc=com \
 --user-container=ou=People,dc=example,dc=com \
 --group-container=ou=Group,dc=example,dc=com \
 --group-objectclass=posixGroup \
 --user-objectclass=posixAccount \
 --user-ignore-attribute=ldappublickey \
 ldap://ldap.example.com:389 --schema=RFC2307bis \
 --with-compat

but I'm getting this error on each user:

ysl: missing attribute "sn" required by object class "person"

I found this thread which seems to have a solution but that solution doesn't work for
me, I guess because I'm using the current docker version.

 https://www.redhat.com/archives/freeipa-users/2016-September/msg00016.html

Is there anyone out there who could help me to apply the fix mentioned in the thread?  Or
is there anyone who has another solution?

Kind regards,

wim vinckier.

[Wim Vinckier]

It looks like I got it fixed by adding 

    if 'sn' not in entry_attrs:
        entry_attrs.setdefault('sn', 'unknown sn')

at line 237 of /usr/lib/python3.6/site-packages/ipaserver/plugins/migration.py

All my users are imported now.