NAME

       ipa-winsync-migrate - Seamless migration of AD users created by winsync to native AD users.

SYNOPSIS

       ipa-winsync-migrate

DESCRIPTION

       Migrates AD users created by winsync agreement to ID overrides in the Default Trust View, thus preserving
       the actual POSIX attributes already established.

       Prior  to  the actual migration, the winsync replication agreement will be removed to protect the removal
       of the user accounts on the Active Directory side.

       During the migration, group, assigned roles, HBAC rules and SELinux memberships of the synced users  will
       be preserved. Any local copies (created by winsync) of the migrated users will be removed.

WARNINGS

       After the migration, any PassSync agreements need to be removed from Active Directory Domain Controllers,
       otherwise they might attempt to update passwords for accounts that no longer exist on the IPA server.

OPTIONS

       --realm
              The Active Directory realm the winsynced users belong to.

       --server
              The  hostname  of  Active  Directory  Domain  Controller  the  winsync  replication  agreement  is
              established with.

       --unattended
              Never prompts for user input.

FreeIPA                                            Mar 10 2015                            ipa-winsync-migrate(1)