When performing a tree-to-tree migration or a migration from Windows to OES 2 Linux, you have the option to migrate users into the target server’s eDirectory tree. If you are migrating users, you have two choices for passwords:
Generate random passwords for the migrated users (by using the -r option of the maptrustees command)
or
Assign a specific password for all migrated users (by using the -S option of the maptrustees command)
If neither -r nor -S is used, users are created without a password and the user accounts are locked until they are manually assigned a password by the administrator, using iManager or other eDirectory management tools. Null passwords (-S "") are not allowed.
The new passwords are recorded in the maptrustees output file. This file is then used as an input to the migtrustees command and possibly the mignotify command. To avoid password theft, dispose of this file in a secure manner after you have communicated the new passwords to their respective users.
For an example of how to use mignotify to notify migrated users of their new passwords, see mignotify.