Ticket was cloned from Red Hat Bugzilla (product RHEL RFE): Bug 1172928

Please note that this Bug is private and may not be accessible as it contains confidential Red Hat customer information.

Migration scenario: user uses netgroups in LDAP for defining authorization rules for users and hosts. Netgroups contains both users and hosts. Users are only allowed to log in to servers in their netgroup.

FreeIPA users different scheme for authorization - HBAC. To make migration to the HBAC scheme, migrate-ds could analyze the user&host netgroups and:

• Create user groups with the same name and add migrated users as it's members
• Create host groups from the netgroups (this will also automatically create the managed netgroups)