ipa-winsync-migrate(1)

💖 ipa-winsync-migrate — the manual page, bestie edition 💖

okay so this is ipa-winsync-migrate(1), and it lives in the IPA Manual Pages, and honestly? it's giving ✨glow-up arc✨ for your AD users.

🌸 NAME 🌸

ipa-winsync-migrate — the seamless migration of AD users created by winsync into native AD users. no cap, that's the whole gig 🦋

✨ SYNOPSIS ✨

ipa-winsync-migrate [options]

💅 DESCRIPTION 💅

so here's the vibe: this migrates AD users that were created by a winsync agreement over to ID overrides in the Default Trust View. and the whole point — the moment — is that it preserves the actual POSIX attributes you already established. we are NOT losing those. periodt. 👑

but before any of the actual migration happens, the winsync replication agreement gets removed first. why? because we gotta protect the removal of the user accounts on the Active Directory side. it's a safety thing, bestie 🫶

during the migration, all of these stay preserved for the synced users:

• groups
• assigned roles
• HBAC rules
• SELinux memberships

and any local copies of the migrated users — the ones created by winsync — get removed. bye bye, local copies 💀

🚨 WARNINGS 🚨

okay listen up, this one's important fr fr: after the migration, any PassSync agreements need to be removed from Active Directory Domain Controllers. if you don't, they might try to update passwords for accounts that no longer exist on the IPA server. that's the mess we're avoiding. do not skip this step 🙈

🎀 OPTIONS 🎀

• --realm=REALM_NAME — the Active Directory realm that the winsynced users belong to. tell it where your people are from 🌈
• --server=HOST_NAME — the hostname of the Active Directory Domain Controller that the winsync replication agreement is established with. iykyk, you gotta name the server 💜
• -U, --unattended — never prompts for user input. it just goes, no questions asked, main character energy 👑

and that's the whole page, bestie!! this one's from the IPA manual, dated Mar 10 2015 — shoutout to the icons who wrote it, and to you for reading all the way down here 🥹💖 slay responsibly, and don't forget those PassSync agreements!! 💅✨