Sun Microsystems 8190994 manual Using the export11cnf Utility, Inserting Clear-Text Passwords

Preparing for Identity Synchronization for Windows Migration

Tip – Although it is possible to re-enter the 1.1 configuration manually by using the Identity Synchronization for Windows console, it is recommended that you use the export11cnf utility. If you do not use export11cnf, the state of the connectors is not preserved.

Exporting the version 1.1 configuration enables you to:

■Eliminate most of the initial configuration process to be performed from the management Console.

■Guarantee that the connector IDs assigned in version 6.0 match the connector IDs used in version 1.1. This simplifies the task of preserving the existing connector states that can be used directly in the version 6.0 deployment.

Back up the persist and etc directories, and then restore them later to avoid confusion about the underlying directory structure.

You can find the export11cnf utility in the installation migration directory. No additional installation steps are necessary.

Using the export11cnf Utility

To export an Identity Synchronization for Windows configuration to an XML file, execute export11cnf from the migration directory as follows:

In a terminal window, type the following:

java -jar export11cnf.jar -h hostname

-pport -Dbind DN

-wbind password -srootsuffix

-qconfiguration password -Z-Pcert-db-path -msecmod-db-path -ffilename

For example,

java -jar export11cnf.jar -D “cn=dirmanager” -w - -q - -s “dc=example,dc=com” -f exported-configuration

The export11cnf utility shares the same common arguments as the Identity Synchronization for Windows command-line utilities. For more information, see “Common Arguments to the Idsync Subcommands” in Sun Java System Directory Server Enterprise Edition 6.0 Installation Guide. The export11cnf utility exports the current configuration into the file specified in the argument of the -f option.

Inserting Clear-Text Passwords

For security reasons, the export11cnf utility does not export clear-text passwords from version

1.1.Instead, the utility inserts empty strings in cleartextPassword fields wherever applicable. For example,

108 Sun Java System Directory Server Enterprise Edition 6.0 Migration Guide • March 2007

Sun Confidential: Registered