Description of problem:
if we use migrate-ds with --user-ignore-attribute=attr is checking anyway the
attribute syntax of the ignored attribute.
Version-Release number of selected component (if applicable):
ipa-python-4.2.0-15.el7_2.3.x86_64
How reproducible:
Always.
ipa migrate-ds --user-ignore-attribute=seeAlso --continue ldap://server:389
and define a seealso that attribute that is not a dn breaking syntax.
For instance, in the server from which migrate users:
[root@ipaserver ~]# ldapmodify -D "cn=directory manager" -w secret12
dn: uid=gparente,cn=users,cn=accounts,dc=example,dc=com
changetype: modify
add: seeAlso
seeAlso: notadn
modifying entry "uid=gparente,cn=users,cn=accounts,dc=example,dc=com"
Then,
ipa migrate-ds --continue --with-compat  ldap://10.12.211.42:389
--user-ignore-attribute=seealso
--user-container=cn=users,cn=accounts,dc=example,dc=com
ipa: DEBUG: migrate_ds(u'ldap://10.12.211.42:389', u'********',
binddn=ipapython.dn.DN('cn=directory manager'),
usercontainer=ipapython.dn.DN('cn=users,cn=accounts,dc=example,dc=com'),
groupcontainer=ipapython.dn.DN('ou=groups'), userobjectclass=(u'person',),
groupobjectclass=(u'groupOfUniqueNames', u'groupOfNames'),
userignoreobjectclass=None, userignoreattribute=(u'seealso',),
groupignoreobjectclass=None, groupignoreattribute=None,
groupoverwritegid=False, schema=u'RFC2307bis', continue=True, compat=True,
use_def_group=True, scope=u'onelevel', version=u'2.156', exclude_groups=None,
exclude_users=None)
ipa: INFO: Forwarding 'migrate_ds' to json server
'https://ipaserver.example.com/ipa/session/json'
ipa: DEBUG: Destroyed connection context.rpcclient_56917840
ipa: ERROR: an internal error has occurred
If I delete seeAlso attr. from the entry, the user is migrated.