Sun Microsystems 8190994 manual Using dsmig to Migrate Security Data

Using dsmig to Migrate Configuration Data

When you run this command, any custom schema defined in the 99user.ldif file are copied to the new instance. If the new instance is already in production, and you have already modified the 99user.ldif file of the new instance,dsmig performs a best effort merge of the two files. Custom schema defined in any other files are also copied to the new instance.

During schema migration, all fractional replication information is moved from the schema files. Fractional replication must be redefined in the new instance.

For more information, see dsmig(1M).

Using dsmig to Migrate Security Data

To migrate the security settings automatically, run the following command:

$dsmig migrate-securityold-instance-path new-instance-path

During the migration of security settings, dsmig performs the following tasks:

■Backs up the certificate and database files in the new instance.

■Copies the certificate database and key database files from the old instance to the new instance.

■Copies the password file from the old instance to the new instance.

■Copies the certificate mapping file from the old instance to the new instance.

■If the old instance uses an external security token, copies the security module database and the external token library to the new instance.

For more information, see dsmig(1M).

Using dsmig to Migrate Configuration Data

Directory Server 5.2 configuration is specified in the file

serverRoot/slapd-instance-path/config/dse.ldif. Directory Server 6.0 configuration is specified in the fileinstance-path/config/dse.ldif.

To migrate the configuration automatically, run the following command:

$dsmig migrate-configold-instance-path new-instance-path

In this step, dsmig reads each LDIF entry in the configuration file (dse.ldif) of the 5.2 instance. If these entries exist in the corresponding Directory Server 6.0 configuration file, their values are updated. If the entries do not exist, they are created.

Migration of the configuration is done over LDAP. By default, dsmig binds to the new instance securely, issuing a StartTLS request.

Chapter 2 • Automated Migration Using the dsmig Command 31

Sun Confidential: Registered