beautypg.com

Using dsmig to migrate security data, Using dsmig to migrate configuration data – Sun Microsystems 8190994 User Manual

Page 31

background image

When you run this command, any custom schema defined in the 99user.ldif file are copied to
the new instance. If the new instance is already in production, and you have already modified
the 99user.ldif file of the new instance, dsmig performs a best effort merge of the two files.
Custom schema defined in any other files are also copied to the new instance.

During schema migration, all fractional replication information is moved from the schema files.
Fractional replication must be redefined in the new instance.

For more information, see dsmig(1M).

Using dsmig to Migrate Security Data

To migrate the security settings automatically, run the following command:

$ dsmig migrate-security

old-instance-path new-instance-path

During the migration of security settings, dsmig performs the following tasks:

Backs up the certificate and database files in the new instance.

Copies the certificate database and key database files from the old instance to the new
instance.

Copies the password file from the old instance to the new instance.

Copies the certificate mapping file from the old instance to the new instance.

If the old instance uses an external security token, copies the security module database and
the external token library to the new instance.

For more information, see dsmig(1M).

Using dsmig to Migrate Configuration Data

Directory Server 5.2 configuration is specified in the file
serverRoot/slapd-instance-path/config/dse.ldif. Directory Server 6.0 configuration is
specified in the file instance-path/config/dse.ldif.

To migrate the configuration automatically, run the following command:

$ dsmig migrate-config

old-instance-path new-instance-path

In this step, dsmig reads each LDIF entry in the configuration file (dse.ldif) of the 5.2 instance.
If these entries exist in the corresponding Directory Server 6.0 configuration file, their values are
updated. If the entries do not exist, they are created.

Migration of the configuration is done over LDAP. By default, dsmig binds to the new instance
securely, issuing a StartTLS request.

Using dsmig to Migrate Configuration Data

Chapter 2 • Automated Migration Using the dsmig Command

31

Sun Confidential: Registered