On Solaris, type the following command | Sun Microsystems 8190994

Migrating Your System

5Verify that your system is in a stable state.

From the migration directory, execute checktopics as described in “Using the checktopics Utility” on page 114. The following example shows the execution of the checktopics command.

java -jar checktopics.jar -D “cn=directory manager” -w - \ -s “dc=example,dc=com” -q -Z

6Stop Identity Synchronization for Windows services (daemons) as described in“Starting and Stopping Services” in Sun Java System Directory Server Enterprise Edition 6.0 Installation Guide.

Note – Do not stop the Sun ONE Message Queue service.

7On Windows NT only, perform the following steps.

a.Stop the Sun One NT Change Detector Service by typing the following command. net stop “Sun One NT ChangeDetector Service”

b.Save the NT Change Detector Service counters.

i.Open the Registry Editor by executing regedt32.exe.

ii.Select the HKEY_LOCAL_MACHINE window.

iii.Navigate to the SOFTWARE\\Sun Microsystems\\PSW\\1.1 node.

iv.Save the following registry values.

■HighestChangeNumber

■LastProcessedSecLogRecordNumber

■LastProcessedSecLogTimeStamp

■QueueSize

8Save the connector states by backing up the persist and etc directories from the existing 1.1 installation tree.

■On Solaris, type the following command.

cd serverRoot/isw-hostname

tar cf /var/tmp/connector-state.tar persist etc

■On Windows, type the following command.

cd serverRoot\isw-hostname

zip -r C:\\WINNT\Temp\connector-state.zip persist

etc%JAVA_HOME%\bin\jar -cfM %TEMP%\connector-state.jar persist etc

Chapter 7 • Migrating Identity Synchronization for Windows

119

Sun Confidential: Registered

Image 119

Sun Microsystems 8190994 manual On Solaris, type the following command, On Windows, type the following command

Contents

Sun Microsystems, Inc Network Circle Santa Clara, CA Enterprise Edition 6.0 Migration Guide 070222@16599 Contents Architectural Changes in Directory Server Migrating a Replicated Topology Migrating Directory Proxy Server Migrating Identity Synchronization for Windows 105 Index 145 Sun Confidential Registered Figures Sun Confidential Registered Tables Mapping Between 5 and 6.0 Password Policy Attributes Tables Examples Sun Confidential Registered How This Book Is Organized Who Should Use This BookBefore You Read This Book Table P-1Directory Server Enterprise Edition Documentation Directory Server Enterprise Edition Documentation Set Table P-1 Directory Server Enterprise Edition Documentation Related Reading Redistributable Files Default Paths and Command LocationsDefault Paths Table P-2Default Paths Table P-3Command Locations Command Locations Table P-4Typographic Conventions Table P-3 Command LocationsTypographic Conventions Table P-5Shell Prompts Shell Prompts in Command ExamplesSymbol Conventions Symbol Conventions Search-termsitedocs.sun.com Documentation, Support, and TrainingThird-Party Web Site References Searching Sun Product Documentation Sun Welcomes Your Comments Before You Migrate Overview of the Migration Process for Directory Server Before You Migrate Outline of Migration Steps Deciding on the New Product Distribution 1Migration Matrix Showing Support for Automated Migration Deciding on Automatic or Manual Migration About the Automatic Migration Tool Automated Migration Using the dsmig Command Prerequisites for Running dsmig Using dsmig to Migrate the Schema Using dsmig to Migrate Configuration Data Using dsmig to Migrate Security Data Chained Suffix Configuration Data Plug-in Configuration Data Configuration Attributes Not Migrated by dsmig Configuration Data For Suffixes With Multiple BackendsReplication Configuration Data Configuration Data for o=netscapeRoot Nsproxiedauthorization NsbindtimeoutNsmaxresponsedelay Nsmaxtestresponsedelay Tasks to be Performed After Automatic Migration Using dsmig to Migrate User Data Sun Confidential Registered Chapter covers the following topics Before You Start a Manual Migration Values of the following attribute types must be migrated Migrating the Schema ManuallyMigrating Configuration Data Manually Migration of Specific Configuration Attributes Global Configuration Attributes NsKeyfile NsCertfile Security Configuration AttributesFeature Configuration Attributes Mapping Tree Configuration Attributes 2Fractional Replication Attribute Name Changes Replication Configuration AttributesDs5ReferralDelayAfterInit NsDS5Flags NsDS5ReplicaBindDN 1Change Log Attribute Name Changes Replication Agreement Configuration Password Policy Configuration Attributes 3Mapping Between 5 and 6.0 Password Policy Attributes Snmp Attributes UniqueID Generator Configuration AttributesDatabase Configuration Attributes NsActivechainingComponents NsTransmittedControls Chained Suffix Attributes Nsslapd-pluginarg0 nsslapd-pluginenabled Plug-In Configuration AttributesNsslapd-pluginarg* nsslapd-pluginenabled Nsslapd-pluginarg Nsslapd-pluginenabled Pass Through Authentication Plug-In $ dsadm set-flags instance-pathcert-pwd-prompt=on Migrating Security Settings ManuallyUpdate the certificate database password $ dsadm import instance-pathchangelog.ldif cn=changelog Migrating User Data ManuallyStart the new instance Tasks to be Performed After Manual Migration Migrating User Plug-Ins Manually Overview of Migrating Replicated Servers Migrating a Replicated Topology Migration of Referrals Issues Related to Migrating Replicated ServersIssues With the New Password Policy Migration of Replication Agreements New Replication Recommendations Manual Reset of Replication CredentialsProblems Related to Tombstone Purging Migrating the Consumers Migration ScenariosMigrating a Replicated Topology to an Identical Master a Hub a Consumer a Master B Hub B Consumer B 3Migrating the version 5 Consumer Next step involves migrating the version 5 consumer 4Placing the 6.0 Consumer Into the Topology Migrating the Hubs 6Isolating the Hub From the Topology 7Migrating the version 5 Hub Next step involves migrating the version 5 hub 8Placing the 6.0 Hub Into the Topology Migrating the Masters Master a Master B Hub a 10Isolating the Master From the Topology Next step involves migrating the version 5 master Migrating a Replicated Topology to a New Topology 13Existing version 5 Topology Migrating All the Servers 14Existing Topology With Migrated Servers Promoting the Hubs 15Migrated Topology With Promoted Hub Replicas Promoting the Consumers 16New Fully-Meshed All-Master Topology Migrating Over Multiple Data Centers Sun Confidential Registered Removal of the ServerRoot Directory Changes in the Administration Framework Changes in Suffix-Level ACIs Changes to ACIsRemoval of the o=netscapeRoot Suffix Changes in the ACI Scope 1Directory Server 5 and 6 commands Command Line Changes Directory Server 5 and 6 commands 3Version 5 Commands That Have Been Deprecated Deprecated Commands Changes to the Console New Password Policy Password Policy Compatibility New-modeaction takes one of the following values Generates the new equivalent password policy attributesUsing fractional replication Password policy attributes in the database Following plug-ins have been added in Directory Server Changes to Plug-InsNew Plug-Ins in Directory Server Following plug-ins have been deprecated in Directory Server Changes to the Installed Product LayoutPlug-Ins Deprecated in Directory Server Changes to the Plug-In API Online Help Previously Under ServerRoot/manual Binaries Previously Under ServerRoot/bin 5Tools Previously Under ServerRoot/shared/bin Plug-Ins Previously Under ServerRoot/pluginsUtilities Previously Under ServerRoot/shared/bin 4Support for Plug-Ins 6Location of Certificate and Key Files Certificate and Key Files 7Instance-Specific Subdirectories Silent Installation and Uninstallation TemplatesServer Instance Scripts Previously Under Server Instance Subdirectories Migrating Directory Proxy Server Mapping the Global Configuration Mapping the Global Configuration Administration Guide Mapping the Global Security Configuration Managing Certificates Access Control on the Proxy Configuration2Mapping of Security Configuration 3Mapping of Connection Pool Attributes Mapping the Connection Pool Configuration $ dpconf help-properties grep connection-handler Mapping the Groups ConfigurationMapping the Group Object Mapping the Network Group Object Mapping Bind Forwarding $ dpconf help-properties grep request-filtering-policy Mapping Operation Forwarding $ dpconf help-properties grep resource-limits-policy Mapping Subtree HidingMapping Search Request Controls Mapping Attributes Modifying Search Requests Mapping Compare Request Controls $ dpconf help-properties grep search-data-hiding-rule Mapping Attributes Restricting Search Responses Attributesattribute-name Mapping the Referral Configuration Attributes Mapping the Server Load Configuration Forbidden Entry Property Mapping the Properties ConfigurationAttribute Renaming Property $ dpconf help-properties grep ldap-data-source Ldap Server Property Load Balancing Property $ dpconf help-properties grep ldap-data-source-pool Monitoring Backend Servers Log Property Search Size Limit Property 17Version 5 and Version 6 Log Functionality Mapping the Events Configuration Mapping the Actions Configuration Migrating Identity Synchronization for Windows Before You Migrate Identity Synchronization for Windows Migration Overview Preparing for Identity Synchronization for Windows Migration Exporting Version 1.1 Configuration Inserting Clear-Text Passwords Using the export11cnf Utility Following sample exported configuration file Sample Export Configuration File Insert Password Between the Double Quotes in the Above Field TopologyHost PortSSLOption=true SecurePort=3269 112 Field Checking for Undelivered Messages Using the checktopics Utility Rerun checktopics To Clear Messages Migrating Your System Forcing Password Changes on Windows NT 1Migrating a Single-Host Deployment Preparing for Migration JAVAHOME%\\bin\\jar -xf filename Uncompress -c filename tar xf Tar cf /var/tmp/connector-state.tar persist etc On Solaris, type the following commandOn Windows, type the following command To Uninstall Identity Synchronization for Windows Version Uninstalling Identity Synchronization for Windows Net stop Sun ONE Identity Synchronization for Windows On Windows type the following commands Installing or Upgrading the Dependent ProductsInstalling Identity Synchronization for Windows On Solaris type the following commands Idsync prepds arguments\ On Windows NT only, complete the following steps 124 Manually Uninstalling 1.1 Core and Instances from Solaris What to Do if the 1.1 Uninstallation Fails Usr/ucb/ps -gauxwww grep java To Manually Uninstall Core From a Solaris MachineUse the rm -rf command to remove the following directories ServerRoot/isw-hostname/imquninstall Pkginfo grep -i Identity Synchronization Etc/imq Var/imq Usr/bin/imq Var/sadm/install/productregistry Cn=pswsync,cn=plugins,cn=config Clean up the configuration directory as follows Manually Uninstalling 1.1 Core and Instances from Windows To uninstall Core from a Windows 2000 machine Net stop slapd-myhostname ServerRoot\\\lib\\psw-plugin.so Migrating Identity Synchronization for Windows 133 For example, C\Program Files\Sun\mps\isw-example \\Program Files\\Sun\\mps\\java\\jars\\isw Manually Uninstalling a 1.1 Instance from Windows NT ServerRoot\\\isw-hostname\ Migrating Identity Synchronization for Windows 137 138 For example, C\\Program Files\\Sun\\mps\\isw-example Other Migration Scenarios Sample deployment scenarios include Multi-Master Replication Deployment 2Migrating a Multi-Master Replication Deployment Multi-Host Deployment with Windows NT 2Multi-Host Deployment 3Migrating a Multi-Host Deployment with Windows NT Checking the Logs Change Detector subcomponents Index Instance-path,19 147 Synchronizing, changes with Directory Server XML configuration documents