Sun Microsystems Sun Java System Directory Server Enterprise Edition 6.0 Migration Giude Download Page 112

Page: 112 / 148

EXAMPLE 7–1

Sample Export Configuration File

(Continued)

parent.attr="SunAttribute"

name="uid"

syntax="1.3.6.1.4.1.1466.115.121.1.15"/>

</AttributeMap>

<AttributeDescription

parent.attr="SunAttribute"

name="sn"

syntax="1.3.6.1.4.1.1466.115.121.1.15"/>

<AttributeDescription

parent.attr="WindowsAttribute"

name="sn"

syntax="1.3.6.1.4.1.1466.115.121.1.15"/>

</AttributeMap>

<AttributeDescription

parent.attr="SignificantAttribute"

name="sn"

syntax="1.3.6.1.4.1.1466.115.121.1.15"/>

<AttributeDescription

parent.attr="SignificantAttribute"

name="cn"

syntax="1.3.6.1.4.1.1466.115.121.1.15"/>

<AttributeDescription

parent.attr="CreationAttribute"

name="cn"

syntax="1.3.6.1.4.1.1466.115.121.1.15"/>

<AttributeDescription

parent.attr="SunAttribute"

name="cn"

syntax="1.3.6.1.4.1.1466.115.121.1.15"/>

<AttributeDescription

parent.attr="WindowsAttribute"

name="cn"

syntax="1.3.6.1.4.1.1466.115.121.1.15"/>

</AttributeMap>

<AttributeMap>

<AttributeDescription

parent.attr="SunAttribute"

name="uniquemember"

syntax="1.3.6.1.4.1.1466.115.121.1.25"/>

<AttributeDescription

parent.attr="WindowsAttribute"

Preparing for Identity Synchronization for Windows Migration

Sun Java System Directory Server Enterprise Edition 6.0 Migration Guide • March 2007

112

Sun Confidential: Registered

Summary of Contents for Sun Java System Directory Server Enterprise Edition 6.0

Page 1: ...Sun Java System Directory Server Enterprise Edition 6 0 Migration Guide Sun Microsystems Inc 4150 Network Circle Santa Clara CA 95054 U S A Part No 819 0994 March 2007 Sun Confidential Registered...

Page 2: ...ncorpor e dans le produit qui est d crit dans ce document En particulier et ce sans limitation ces droits de propri t intellectuelle peuvent inclure un ou plusieurs brevets am ricains ou des applicati...

Page 3: ...tomatic Migration Tool 29 Prerequisites for Running dsmig 30 Using dsmig to Migrate the Schema 30 Using dsmig to Migrate Security Data 31 Using dsmig to Migrate Configuration Data 31 Plug in Configura...

Page 4: ...elated to Tombstone Purging 53 New Replication Recommendations 53 Migration Scenarios 54 Migrating a Replicated Topology to an Identical Topology 54 Migrating a Replicated Topology to a New Topology 6...

Page 5: ...rID 82 Server Instance Subdirectories 82 6 Migrating Directory Proxy Server 83 Mapping the Global Configuration 83 Mapping the Global Security Configuration 85 Mapping the Connection Pool Configuratio...

Page 6: ...to version 6 0 118 Uninstalling Identity Synchronization for Windows 120 To Uninstall Identity Synchronization for Windows Version 1 1 120 Installing or Upgrading the Dependent Products 122 Installing...

Page 7: ...Index 145 Contents 7 Sun Confidential Registered...

Page 8: ...8 Sun Confidential Registered...

Page 9: ...ting version 5 Topology With Consumers and Hubs Migrated 61 FIGURE 4 10 Isolating the Master From the Topology 62 FIGURE 4 11 Migrating the version 5 Master 62 FIGURE 4 12 Placing the 6 0 Master Into...

Page 10: ...10 Sun Confidential Registered...

Page 11: ...ributes 87 TABLE 6 4 Mapping Between Version 5 Group Attributes and Version 6 Connection Handler Properties 88 TABLE 6 5 Mapping Between Version 5 Network Group Attributes and 6 0 Properties 89 TABLE...

Page 12: ...Resource Limits Properties 98 TABLE 6 15 Mapping of ids proxy sch LDAPServer Attributes to Data Source Properties 99 TABLE 6 16 Mapping of Version 5 Search Size Limit Attributes to 6 0 Properties 101...

Page 13: ...Examples EXAMPLE 7 1 Sample Export Configuration File 109 13 Sun Confidential Registered...

Page 14: ...14 Sun Confidential Registered...

Page 15: ...more information see the Sun Java System Directory Server Enterprise Edition 6 0 Evaluation Guide and the Sun Java System Directory Server Enterprise Edition 6 0 Release Notes HowThis Book Is Organize...

Page 16: ...mplement on a single system Sun Java System Directory Server Enterprise Edition 6 0 Deployment Planning Guide Explains how to plan and design highly available highly scalable directory services based...

Page 17: ...rfaces that are available through Directory Server Enterprise Edition Individual sections of this document can be installed as online manual pages Sun Java System Identity Synchronization for Windows...

Page 18: ...Microsoft support documentation online Information about configuring LDAP over SSL on Microsoft systems is available in the Microsoft support documentation online Redistributable Files Directory Serv...

Page 19: ...ctory Server and local dps for Directory Proxy Server No default path exists Instance paths must nevertheless always be found on a local file system The following directories are recommended var on So...

Page 20: ...tall path dps6 bin dpadm install path dps6 bin dpadm dpconf 1M install path dps6 bin dpconf install path dps6 bin dpconf dsadm 1M install path ds6 bin dsadm install path ds6 bin dsadm dsccmon 1M insta...

Page 21: ...Control Center which is not available in the zip distribution Windows install path share webconsole bin smcwebserver wcadmin Solaris Linux HP UX usr sbin wcadmin This command pertains only to Directo...

Page 22: ...shell and Korn shell superuser on UNIX and Linux systems Microsoft Windows command line C Symbol Conventions The following table explains symbols that might be used in this book TABLE P 6 SymbolConve...

Page 23: ...in this document Sun does not endorse and is not responsible or liable for any content advertising products or other materials that are available on or through such sites or resources Sun will not be...

Page 24: ...k Send Comments In the online form provide the full document title and part number The part number is a 7 digit or 9 digit number that can be found on the book s title page or in the document s URL Fo...

Page 25: ...tion on page 27 Outline of Migration Steps on page 27 Deciding on Automatic or Manual Migration on page 28 BeforeYou Migrate This chapter provides an overview of the upgrade and data migration process...

Page 26: ...house binaries and databases for both the old and new servers and also enough extra space to hold LDIF files containing the entries in all existing suffixes You can estimate the local disk space requi...

Page 27: ...tible with the previous version of these packages When you migrate to the new version of Directory Server using the Java Enterprise System distribution the old Directory Server version will no longer...

Page 28: ...6 0 Any Any Manual Manual Manual Manual Manual 5 2 6 0 Different Any dsmig dsmig dsmig Manual Manual 5 2 6 0 Same Different dsmig dsmig dsmig Manual Manual 5 2 6 0 Same Same dsmig dsmig dsmig dsmig Ma...

Page 29: ...smig to Migrate Security Data on page 31 Using dsmig to Migrate Configuration Data on page 31 Using dsmig to Migrate User Data on page 35 Tasks to be Performed After Automatic Migration on page 35 Abo...

Page 30: ...the original Server Root You can run cp r to achieve this provided none of the files have been relocated outside the Server Root You can create and start the new instance manually but is not mandatory...

Page 31: ...file from the old instance to the new instance Copies the certificate mapping file from the old instance to the new instance If the old instance uses an external security token copies the security mod...

Page 32: ...abled or disabled state for the following system plug ins 7 bit Check DSML Frontend Pass Through Authentication Referential Integrity Retro Change Log UID Uniqueness When you migrate the configuration...

Page 33: ...can import the replication configuration data from this file after migration if required Configuration Data for o netscapeRoot Configuration data for the o NetscapeRoot suffix is not migrated by defau...

Page 34: ...ome directory nsslapd db logbuf size nsslapd db logdirectory nsslapd db replication batch val nsslapd db transaction logging nsslapd directory nsslapd disk full threshold nsslapd disk low threshold ns...

Page 35: ...see dsmig 1M Note During data migration Directory Server checks whether nested group definitions exceed 30 levels Deep nesting can signify a circular group definition where a nested group contains a...

Page 36: ...36 Sun Confidential Registered...

Page 37: ...igration Migrating an instance manually involves migrating each part of the server in the same order as performed by the automatic migration tool dsmig In this section old instance refers to the versi...

Page 38: ...tom schema in any other files copy these files to the new instance 3 Any fractional replication information must be redefined in the new instance Migrating Configuration Data Manually Directory Server...

Page 39: ...nfreediskspace nsslapd accesslog logrotationtime nsslapd accesslog logrotattiontimeunit nsslapd accesslog maxlogsize nsslapd accesslog maxlogsperdir nsslapd attribute name exceptions nsslapd auditlog...

Page 40: ...onfiguration Attributes All attributes under cn encryption cn config must be migrated If you are using certificate authentication or the secure port the key file path and certificate database file pat...

Page 41: ...TABLE 3 1 Change Log Attribute Name Changes Old Attribute Name Directory Server 6 0 Attribute Name nsslapd changelogmaxage dschangelogmaxage nsslapd changelogmaxentries dschangelogmaxentries In additi...

Page 42: ...se when you migrate the nsDS5ReplicaCredentials attribute For more information see Manual Reset of Replication Credentials on page 53 There is no ds5PartialReplConfiguration attribute in Directory Ser...

Page 43: ...bility on page 75 The following table provides a mapping of the new password policy attributes whose values must be migrated from the legacy attributes TABLE 3 3 Mapping Between 5 and 6 0 Password Pol...

Page 44: ...are stored under cn config cn ldbm database cn plugins cn config The following attributes must be migrated nsslapd lookthroughlimit nsslapd allidsthreshold nsslapd cache autosize nsslapd cache autosi...

Page 45: ...database instance name cn ldbm database cn plugins cn config All attribute encryption configuration attributes must be migrated Chained Suffix Attributes All chained suffix configuration attributes mu...

Page 46: ...7 Bit Check Plug In The configuration of this plug in is stored under cn 7 bit check cn plugins cn config The following attributes must be migrated nsslapd pluginarg nsslapd pluginenabled Class of Se...

Page 47: ...ntial Integrity Plug In The configuration of this plug in is stored under cn Referential Integrity Postoperation cn plugins cn config The following attributes must be migrated nsslapd pluginarg nsslap...

Page 48: ...ers the certificate database to be copied is serverRoot alias slapd serverID cert7 db 4 Copy the password file from the existing instance to the new instance cp serverRoot alias slapd serverID pin txt...

Page 49: ...c example dc com s ou departments dc example dc com In this example a specifies the resulting LDIF file r indicates that replication information should be exported and s specifies the suffixes to be i...

Page 50: ...le them and add them to the Directory Server 6 0 instance manually For a detailed list of plug in API changes see Chapter 2 Changes to the Plug In API Since Directory Server 5 2 in Sun Java System Dir...

Page 51: ...erview of Migrating Replicated Servers Directory Server 6 0 supports an unlimited number of masters in a multi master topology This and other changes might mean that you redesign your topology rather...

Page 52: ...ver all replication agreements that point to that server must be updated manually to point to the new server For example if you migrate a consumer server from red example com 1389 to blue example com...

Page 53: ...mmand dsconf set server prop h host p port def repl manager pwd file filename In addition dsmig does not migrate non default replication manager entries If a version 5 replica uses an entry other than...

Page 54: ...p your existing topology Migrating a replicated topology to an identical topology involves migrating the consumers then the hubs then the masters The following sections demonstrate a sample migration...

Page 55: ...x Master A 5 x Master B 5 x Hub A 5 x Hub B 5 x Consumer A 5 x Consumer B FIGURE 4 1 Existing version 5 Topology 5 x Master A 5 x Master B 5 x Hub A 5 x Hub B 5 x Consumer A 5 x Consumer B FIGURE 4 2...

Page 56: ...the consumer if necessary and rerouting client applications to the new consumer 5 x Master A 5 x Master B 5 x Hub A 5 x Hub B 5 x Consumer A 5 x Consumer B 6 0 Consumer A FIGURE 4 3 Migrating the vers...

Page 57: ...that hub 7 Enable the replication agreements from that hub to the consumers 8 If you have migrated the data check that replication is in sync 9 If you have not migrated the data reinitialize the hub...

Page 58: ...Hub B 6 0 Consumer A 6 0 Consumer B FIGURE 4 5 Existing version 5 Topology With Migrated Consumers 5 x Master A 5 x Master B 5 x Hub A 5 x Hub B 6 0 Consumer A 6 0 Consumer B FIGURE 4 6 Isolating the...

Page 59: ...lication agreements to the new hub and initializing the hub if necessary 5 x Master A 5 x Master B 5 x Hub A 5 x Hub B 6 0 Consumer A 6 0 Hub A 6 0 Consumer B FIGURE 4 7 Migrating the version 5 Hub Mi...

Page 60: ...o this by enabling read only mode on the master 3 Check that replication is synchronized between the master and all its consumers Migration of the change log is not supported if you are migrating manu...

Page 61: ...igrated master The following sequence of diagrams illustrate the migration of a master as described above The first diagram shows the version 5 topology before the migration of the masters The first s...

Page 62: ...Hub B FIGURE 4 10 Isolating the Master From the Topology 5 x Master A 5 x Master B 6 0 Consumer A 6 0 Consumer B 6 0 Hub A 6 0 Master A 6 0 Hub B FIGURE 4 11 Migrating the version 5 Master Migration...

Page 63: ...ervers determine whether your deployment might not be better served by changing the architecture of the topology This section describes how to migrate a basic version 5 topology to a new all master to...

Page 64: ...entical Topology on page 54 The resulting topology is illustrated in the following figure 5 x Master A 5 x Master B 5 x Hub A 5 x Hub B 5 x Consumer A 5 x Consumer B FIGURE 4 13 Existing version 5 Top...

Page 65: ...ting Replicas in Sun Java System Directory Server Enterprise Edition 6 0 Administration Guide The following diagram illustrates the topology when the hubs have been promoted 6 0 Consumer A 6 0 Consume...

Page 66: ...in Sun Java System Directory Server Enterprise Edition 6 0 Administration Guide The following diagram illustrates the topology when the consumers have been promoted 6 0 Consumer A 6 0 Consumer B 6 0...

Page 67: ...u want to keep your existing topology follow the examples in Migrating a Replicated Topology to an Identical Topology on page 54 for each data center To migrate to a new topology follow the examples i...

Page 68: ...68 Sun Confidential Registered...

Page 69: ...ges to the Installed Product Layout on page 78 Changes in the Administration Framework Directory Server 6 0 does not include an administration server as in previous versions Servers are now registered...

Page 70: ...Level ACIs In Directory Server 5 2 the following ACI was provided at the suffix level aci targetattr nsroledn aci nsLookThroughLimit nsSizeLimit nsTimeLimit nsIdleTimeout passwordPolicySubentry passwo...

Page 71: ...attributes passwordPolicySubentry and password policy state attributes allow write userdn ldap self Tip Do not allow users write access to everything and then deny write access to specific attributes...

Page 72: ...ion between multiple replicas ldif2db dsadm import Import database contents from LDIF locally offline ldif2db task dsconf import Import database contents from LDIF remotely online ldif2ldap ldapmodify...

Page 73: ...r directoryserver inactivate ns inactivate Inactivate an entry or group of entries directoryserver unconfigure Uninstallation procedure Uninstall Directory Server Deprecated Commands Some version 5 co...

Page 74: ...Safe password modification specified by the pwdSafeModify attribute This attribute specifies whether the existing password must be sent when changing a password If the attribute is not present the exi...

Page 75: ...ation If t is set to LDAP_PWP_WARNING_RESP_NONE the error contains one of the following values pwp_resp_no_error 1 pwp_resp_expired_error 0 pwp_resp_locked_error 1 pwp_resp_need_change_error 2 pwp_res...

Page 76: ...rsion 5 attributes can be replicated using fractional replication DS6 migration mode As part of your migration you can set the compatibility state to DS6 migration mode In this mode all servers in the...

Page 77: ...mode You should leave your topology in DS5 compatible mode until you have been through an entire password expiration cycle 90 days for example depending on the value of passwordMaxAge In this way the...

Page 78: ...cn ldbm database cn plugins cn config cn owner cn index cn userRoot cn ldbm database cn plugins cn config cn parentid cn index cn userRoot cn ldbm database cn plugins cn config cn pipstatus cn index...

Page 79: ...lib sparcvSolaris Version On platforms other than Solaris Sparc the ns slapd daemon is located in install path ds6 bin lib Libraries and Plug Ins Previously Under ServerRoot lib Product libraries and...

Page 80: ...gt sagt For information about enabling monitoring Java ES MF monitoring see Enabling Java ES MF Monitoring in Sun Java System Directory Server Enterprise Edition 6 0 Administration Guide Utilities Pre...

Page 81: ...ServerRoot shared bin modutil Deprecated Manage PKCS 11 modules ServerRoot shared bin uconv Deprecated Convert from ISO to UTF 8 ServerRoot shared bin repldisc install path ds6 bin repldisc Discover...

Page 82: ...ubdirectories Version 5 Directory Version 6 Directory Remarks ServerRoot slapd ServerID bak instance path bak Directory instance database backup ServerRoot slapd ServerID confbak Deprecated Administra...

Page 83: ...guration on page 97 Mapping the Events Configuration on page 103 Mapping the Actions Configuration on page 104 Configuring Directory Proxy Server 6 0 as a Simple Connection Based Router on page 104 Ma...

Page 84: ...of the ids proxy sch GlobalConfiguration object class to the corresponding properties in Directory Proxy Server 6 0 TABLE 6 1 Mapping of Version 5 Global Configuration Attributes to 6 0 Properties Di...

Page 85: ...ing and Deleting a Directory Proxy Server Instance in Sun Java System Directory Server Enterprise Edition 6 0 Administration Guide ids proxy con include logproperty No equivalent For information on co...

Page 86: ...Directory Proxy Server 5 certificates were managed by using the certreq utility or by using the console In Directory Proxy Server 6 0 certificates are managed by using the dpadm command or by using t...

Page 87: ...onfig o netscaperoot The following table provides a mapping between Directory Proxy Server 5 connection configuration attributes and the corresponding Directory Proxy Server 6 0 properties TABLE 6 3 M...

Page 88: ...a list of all the connection handler properties run the following command dpconf help properties grep connection handler In Iplanet Directory Access Router 5 0 IDAR these configuration attributes are...

Page 89: ...nding Directory Proxy Server 6 0 properties and describes how to set these properties by using the command line TABLE 6 5 Mapping Between Version 5 Network Group Attributes and 6 0 Properties Director...

Page 90: ...essful binds can be classified into connection handlers according to the authentication criteria Directory Proxy Server 6 0 can be configured to reject all requests from a specific connection handler...

Page 91: ...r 5 0 IDAR these configuration attributes are stored under ids proxy con Name group name ou groups ou pd2 ou iDAR o services In Directory Proxy Server 5 2 these configuration attributes are stored und...

Page 92: ...ies of a request filtering policy and a resource limits policy For information on configuring a request filtering policy see Creating and Configuring Request Filtering Policies and Search Data Hiding...

Page 93: ...Name group name ou groups ou pd2 ou iDAR o services In Directory Proxy Server 5 2 these configuration attributes are stored under ou groups cn user defined name ou dar config o NetscapeRoot The follow...

Page 94: ...ping Attributes Restricting Search Responses In Directory Proxy Server 5 these attributes describe restrictions that are applied to search results being returned by the server before they are forwarde...

Page 95: ...limits policy Mapping the Referral Configuration Attributes In Directory Proxy Server 5 these attributes determine what Directory Proxy Server should do with referrals In Directory Proxy Server 6 0 th...

Page 96: ...In Iplanet Directory Access Router 5 0 IDAR these configuration attributes are stored under ids proxy con Name group name ou groups ou pd2 ou iDAR o services In Directory Proxy Server 5 2 these confi...

Page 97: ...erver renames the server attribute name to the client attribute name To configure this property use the following command dpconf set ldap data source prop data source name attr name mappings client at...

Page 98: ...rectory Service Control Center or by using the command line For more information see Creating and Configuring LDAP Data Sources in Sun Java System Directory Server Enterprise Edition 6 0 Administratio...

Page 99: ...e tcp no delay ids proxy con link security policy ssl policy ids proxy con x509cert subject No equivalent Directory Proxy Server 6 0 does not check the subject of the certificate provided by the backe...

Page 100: ...0 supports proportional load balancing but also supports additional load balancing algorithms To configure proportional load balancing set the property of the data source pool as follows dpconf set ld...

Page 101: ...irectory Server Enterprise Edition 6 0 Administration Guide In Iplanet Directory Access Router 5 0 IDAR these configuration attributes are stored under ids proxy con Name group name ou groups ou pd2 o...

Page 102: ...stored under ids proxy con Config Name user defined name ou system ou dar config o netscaperoot It is not really possible to map the log configuration between Directory Proxy Server 5 and Directory P...

Page 103: ...a client successfully established an SSL session In Directory Proxy Server 6 0 events are implemented as properties of a connection handler Use the dpconf command to set these properties For example r...

Page 104: ...ied into another connection handler For example if a client connects anonymously the connection is allocated to the connection handler configured for anonymous connections If the client later provides...

Page 105: ...ge Queue For installation and upgrade information about Message Queue read the installation instructions for Java Enterprise System software at http docs sun com coll 1286 2 http docs sun com coll 128...

Page 106: ...u can use to plan your migration process Document your version 1 1 deployment and configuration Be sure to note any customizations you have made to the configuration Schedule migration Because the mig...

Page 107: ...essage Queue before you proceed with the migration For more information see Checking for Undelivered Messages on page 114 forcepwchg A Windows NT tool that enables you to identify users who changed pa...

Page 108: ...figuration to an XML file execute export11cnf from the migration directory as follows In a terminal window type the following java jar export11cnf jar h hostname p port D bind DN w bind password s roo...

Page 109: ...le Export Configuration File In the following sample exported configuration file ad host example com refers to the Active Directory domain controller ds host example com refers to the host running Dir...

Page 110: ...DOUBLE QUOTES IN THE ABOVE FIELD SynchronizationHost SyncScopeDefinitionSet index 0 location cn users dc example dc com filter creationExpression cn cn cn users dc example dc com sulid SUL1 ActiveDir...

Page 111: ...0 113556 1 4 906 AttributeDescription parent attr SunAttribute name pwdaccountlockedtime syntax 1 3 6 1 4 1 1466 115 121 1 24 AttributeMap AttributeDescription parent attr SignificantAttribute name lo...

Page 112: ...ibute name cn syntax 1 3 6 1 4 1 1466 115 121 1 15 AttributeDescription parent attr CreationAttribute name cn syntax 1 3 6 1 4 1 1466 115 121 1 15 AttributeMap AttributeDescription parent attr SunAttr...

Page 113: ...te name cn syntax 1 3 6 1 4 1 1466 115 121 1 15 AttributeDescription parent attr SignificantAttribute name cn syntax 1 3 6 1 4 1 1466 115 121 1 15 AttributeDescription parent attr SignificantAttribute...

Page 114: ...se problems as long as the Message Queue remains the same However you will lose any messages on the Message Queue during the migration process when you install Message Queue 3 6 You must verify that t...

Page 115: ...un Java System Directory Server Enterprise Edition 6 0 Installation Guide For more information about using checktopics see Checking for Undelivered Messages on page 114 After running checktopics check...

Page 116: ...lity also prints the account names one name per line that it is trying to migrate If an error occurs during the migration process look into the next entry to the last printed entry MigratingYour Syste...

Page 117: ...Message Queue is in Quiescent State Upgrade to Directory Server 6 0 on Host 1 with Admin Server Intact Back Up Connector State persist etc Directories Start Synchronization and Wait Yes No Password Ch...

Page 118: ...iguration settings to an XML file From the migration directory execute export11cnf as described in Using the export11cnf Utility on page 108 java jar export11cnf jar D cn directory manager w s dc exam...

Page 119: ...ChangeDetector Service b Save the NT Change Detector Service counters i Open the Registry Editor by executing regedt32 exe ii Select the HKEY_LOCAL_MACHINE window iii Navigate to the SOFTWARE Sun Mic...

Page 120: ...ocess For a list of required patches see see Software Dependency Requirements in Sun Java System Directory Server Enterprise Edition 6 0 Release Notes To Uninstall Identity Synchronization forWindowsV...

Page 121: ...ructions provided in Manually Uninstalling 1 1 Core and Instances from Solaris on page 125 OnWindowsonly AfteruninstallingCore restartyourmachine Note If the uninstall fails you might have to manually...

Page 122: ...irectory Server configuration and data to version 6 0 For more information on migrating configuration data and user data see Using dsmig to Migrate Configuration Data on page 31 and Using dsmig to Mig...

Page 123: ...tion 6 0 Installation Guide If you did not select the Configure Identity Synchronization forWindows 6 0 Directory Server Plugin option while installing Directory Server connector configure it now For...

Page 124: ...sist JAVA_HOME bin jar xf TEMP connector state jar Alternatively use any archive program for Windows such as WinZip Start the service and the synchronization a Start the Identity Synchronization forWi...

Page 125: ...Windows NT on page 135 Note The instructions provided in this section are for uninstalling Identity Synchronization for Windows version 1 1 and 1 1 SP1 only Do not use the manual uninstallation proced...

Page 126: ...mand c Use one of the following methods to uninstall the broker packages and directories Use the Message Queue broker uninstall script to uninstall the broker This script is located in the Identity Sy...

Page 127: ...ynchronization package for Core Components SUNWidsct Sun ONE Directory Server Identity Synchronization package for Connectors SUNWidsoc Sun ONE Directory Server Identity Synchronization package for Ob...

Page 128: ...all contents in between both tags Ellipses are used in the following list to represent any additional text or tags that are included as part of these tags See the example on Manually Uninstalling 1 1...

Page 129: ...n location type the following command rm rf serverRoot isw hostname b To remove the bootstrap files type the following command rm rf etc init d isw Clean up the configuration directory as follows a Ru...

Page 130: ...ySynchronization dn The resulting entry should be similar to the following ou IdentitySynchronization ou Services dc my dc domain b Use the Directory Server Console to remove the Identity Synchronizat...

Page 131: ...type the following command net stop Sun ONE Identity Synchronization for Windows If the preceding methods do not work use the following steps to stop the Java processes manually a Open the Services wi...

Page 132: ...n plugins cn config h Stop Directory Server You can stop the server using one of the following methods In the Services window right click on Sun ONE Directory Server 5 2 in the right pane and select S...

Page 133: ...Broker Backup copy and rename the current productregistry file located in C WINNT system32 Edit the C WINNT system32 productregistry file to remove the following tags Note For best results use an XML...

Page 134: ...t serverRoot isw hostname For example C Program Files Sun mps isw example Clean up the configuration directory as follows a From a Command Prompt window run the ldapsearch command against the configur...

Page 135: ...ry should be similar to the following ou IdentitySynchronization ou Services dc my dc domain b Use the Directory Server Console to remove the configuration directory subtree that you found including a...

Page 136: ...ws If the preceding methods do not work use the following steps to stop the Java processes manually a Open the Services window right click on Identity Synchronization forWindows and select Properties...

Page 137: ...ry Export Registry File from the menu bar c When the Export Registry File dialog box is displayed specify a name for the file and select a location to save the backup registry In the Registry Editor s...

Page 138: ...compid ending tag compid and all contents in between both tags Ellipses are used in the following list to represent any additional text and or tags that are included as part of these tags See the exa...

Page 139: ...registry as described in Manually Uninstalling a 1 1 Instance from Windows NT on page 135 before proceeding to Manually Uninstalling a 1 1 Instance from Windows NT on page 135 Remove the Password Filt...

Page 140: ...y master for synchronized users Directory Server one instance as the preferred master for synchronized users Core Message Queue Central Logger System Manager and Console Directory Server Plugin Active...

Page 141: ...ugin Run checktopics to Verify Message Queue is in Quiescent State Upgrade to Directory Server 6 0 on Host 1 with Admin Server Intact Stop Identity Synchronization for Windows Service Back Up Connecto...

Page 142: ...g configuration data and user data see Using dsmig to Migrate Configuration Data on page 31 and Using dsmig to Migrate User Data on page 35 respectively Directory Server at host2 contains the data and...

Page 143: ...iescent State Upgrade to Directory Server 6 0 on Host 1 with Admin Server Intact Back Up Connector State persist etc Directories Upgrade to Directory Server 6 0 on Host 2 Install Identity Synchronizat...

Page 144: ...ou people dc example dc com because the password was encoded by a previous installation of Identity Synchronization for Windows Directory Server Plugin The password of this user cannot be synchronize...

Page 145: ...pics utility checktopics jar 118 clearing messages 115 default location 114 checktopics utility Continued description 114 prerequisites 114 syntax 115 using 114 clear text passwords inserting 108 109...

Page 146: ...pwchg utility description 107 forcing password changes 116 location 116 forcepwchg utility Continued preparing for migration 118 requiring password changes 116 forcing password changes 116 H help remo...

Page 147: ...ectory Server Plugin 106 PDC running forcepwchg utility 116 persist directory backing up 108 119 restoring 124 preparing for migration 117 prerequisites for checktopics utility 114 processes stopping...

Page 148: ...rectory Server 120 uninstalling program 121 unpacking product binary files 118 updating schema 122 using checktopics utilities 114 utilities checktopics 107 114 export11cnf 107 forcepwchg 107 using ch...

Search results

Summary of Contents for Sun Java System Directory Server Enterprise Edition 6.0

Reviews:

Related manuals for Sun Java System Directory Server Enterprise Edition 6.0

Brands by name

Popular brands

Sun Microsystems Sun Java System Directory Server Enterprise Edition 6.0, Migration Giude

Search results

Summary of Contents for Sun Java System Directory Server Enterprise Edition 6.0

Reviews:

Related manuals for Sun Java System Directory Server Enterprise Edition 6.0

Brands by name

Popular brands