What were you trying to do that didn't work?

ipa-migrate doesn't migrate custom password policies

What is the impact of this issue to you?

have to migrate them manually

Please provide the package NVR for which the bug is seen:

ipa-server-4.12.2-24.el10_1.1.x86_64

How reproducible is this bug?:

always

Steps to reproduce

1. create a custom password policy
2. migrate

Expected results

default global_policy is updated, custom policies migrated

Actual results

default global_policy is updated, custom policies are not migrated (stored as objects in cn=$realm,cn=kerberos,$suffix with 'ipapwdpolicy' objectClass)