User ManualTable of ContentsSun Java System Directory Server Enterprise Edition 6.0 Migration Guide1Preface15Who Should Use This Book15Before You Read This Book15How This Book Is Organized15Directory Server Enterprise Edition Documentation Set16Related Reading17Redistributable Files18Default Paths and Command Locations18Default Paths18Command Locations20Typographic Conventions21Shell Prompts in Command Examples22Symbol Conventions22Documentation, Support, and Training23Third-Party Web Site References23Searching Sun Product Documentation23Sun Welcomes Your Comments24Overview of the Migration Process for Directory Server25Before You Migrate25Prerequisites to Migrating a Single Directory Server Instance From 5.126Prerequisites to Migrating a Single Directory Server Instance From 5.226Deciding on the New Product Distribution27Outline of Migration Steps27Deciding on Automatic or Manual Migration28Automated Migration Using the dsmig Command29About the Automatic Migration Tool29Prerequisites for Running dsmig30Using dsmig to Migrate the Schema30Using dsmig to Migrate Security Data31Using dsmig to Migrate Configuration Data31Plug-in Configuration Data32Chained Suffix Configuration Data32Configuration Data For Suffixes With Multiple Backends33Replication Configuration Data33Configuration Data for o=netscapeRoot33Configuration Attributes Not Migrated by dsmig33Using dsmig to Migrate User Data35Tasks to be Performed After Automatic Migration35Migrating Directory Server Manually37Before You Start a Manual Migration37Migrating the Schema Manually38Migrating Configuration Data Manually38Migration of Specific Configuration Attributes38Global Configuration Attributes39Security Configuration Attributes40Feature Configuration Attributes40Mapping Tree Configuration Attributes40Replication Configuration Attributes41Change Log Attributes41Fractional Replication Configuration Attributes41Replica Configuration Attributes41Replication Agreement Configuration42Password Policy Configuration Attributes42SNMP Attributes44UniqueID Generator Configuration Attributes44Database Configuration Attributes44Chained Suffix Attributes45Plug-In Configuration Attributes467–Bit Check Plug-In46Class of Service Plug-In46DSML Frontend Plug-In46Pass Through Authentication Plug-In47Password Synchronization Plug-In47Referential Integrity Plug-In47Retro Change Log Plug-In47UID Uniqueness Plug-In47Migrating Security Settings Manually48Migrating User Data Manually49Migrating User Plug-Ins Manually50Tasks to be Performed After Manual Migration50Migrating a Replicated Topology51Overview of Migrating Replicated Servers51Issues Related to Migrating Replicated Servers52Issues With the New Password Policy52Migration of Replication Agreements52Migration of Referrals52Manual Reset of Replication Credentials53Problems Related to Tombstone Purging53New Replication Recommendations53Migration Scenarios54Migrating a Replicated Topology to an Identical Topology54Migrating the Consumers54Migrating the Hubs57Migrating the Masters60Migrating a Replicated Topology to a New Topology63Migrating All the Servers64Promoting the Hubs65Promoting the Consumers66Migrating Over Multiple Data Centers67Architectural Changes in Directory Server 6.069Changes in the Administration Framework69Removal of the ServerRoot Directory69Removal of the o=netscapeRoot Suffix70Changes to ACIs70Changes in the ACI Scope70Changes in Suffix-Level ACIs70Command Line Changes71Deprecated Commands73Changes to the Console74New Password Policy74Password Policy Compatibility75Changes to Plug-Ins77New Plug-Ins in Directory Server 6.077Plug-Ins Deprecated in Directory Server 6.078Changes to the Plug-In API78Changes to the Installed Product Layout78Administration Utilities Previously Under ServerRoot79Binaries Previously Under ServerRoot/bin79Libraries and Plug-Ins Previously Under ServerRoot/lib79Online Help Previously Under ServerRoot/manual79Plug-Ins Previously Under ServerRoot/plugins80Utilities Previously Under ServerRoot/shared/bin80Certificate and Key Files81Silent Installation and Uninstallation Templates82Server Instance Scripts Previously Under ServerRoot/slapd-ServerID82Server Instance Subdirectories82Migrating Directory Proxy Server83Mapping the Global Configuration83Mapping the Global Security Configuration85Managing Certificates86Access Control on the Proxy Configuration86Mapping the Connection Pool Configuration87Mapping the Groups Configuration88Mapping the Group Object88Mapping the Network Group Object89Mapping Bind Forwarding90Mapping Operation Forwarding91Mapping Subtree Hiding92Mapping Search Request Controls92Mapping Compare Request Controls93Mapping Attributes Modifying Search Requests93Mapping Attributes Restricting Search Responses94Mapping the Referral Configuration Attributes95Mapping the Server Load Configuration96Mapping the Properties Configuration97Attribute Renaming Property97Forbidden Entry Property97LDAP Server Property98Load Balancing Property99Monitoring Backend Servers100Search Size Limit Property101Log Property101Mapping the Events Configuration103Mapping the Actions Configuration104Configuring Directory Proxy Server 6.0 as a Simple Connection-Based Router104Migrating Identity Synchronization for Windows105Migration Overview106Before You Migrate Identity Synchronization for Windows106Preparing for Identity Synchronization for Windows Migration107Exporting Version 1.1 Configuration107Using the export11cnf Utility108Inserting Clear-Text Passwords108Sample Export Configuration File109Checking for Undelivered Messages114Using the checktopics Utility114To Clear Messages115Forcing Password Changes on Windows NT116Migrating Your System116Preparing for Migration117Preparing to migrate from version 1.1, and 1.1 SP1, to version 6.0118Uninstalling Identity Synchronization for Windows120To Uninstall Identity Synchronization for Windows Version 1.1120Installing or Upgrading the Dependent Products122Installing Identity Synchronization for Windows 6.0122To install the Identity Synchronization for Windows 6.0 components:122What to Do if the 1.1 Uninstallation Fails125Manually Uninstalling 1.1 Core and Instances from Solaris125To Manually Uninstall Core From a Solaris Machine:126Manually Uninstalling 1.1 Core and Instances from Windows 2000130To uninstall Core from a Windows 2000 machine:131Manually Uninstalling a 1.1 Instance from Windows NT135Other Migration Scenarios139Multi-Master Replication Deployment140Multi-Host Deployment with Windows NT141Checking the Logs144Index145Size: 1.63 MBPages: 148Language: EnglishOpen manual