On Wed, 2016-03-30 at 15:54 +0000, xinhuan zheng wrote: > I have an old directory server running Sun One Java System Directory Service. > Yesterday I created top dcobject - dc=christianbook,dc=com, however, I don't > know what the best way is to import data from my old Sun Directory Server to > 389 Directory Server. It appears the object structure is different. Below is an > example of my old dcobject: > > dn: dc=christianbook,dc=com > aci: (target ="ldap:///dc=christianbook,dc=com";)(targetattr > !="userPassword")(version 3.0;acl "Anonymous read-search access";allow (read, > search, compare)(userdn = "ldap:///anyone";);) > aci: (target="ldap:///dc=christianbook,dc=com";) (targetattr = "*")(version 3.0; > acl "allow all Admin group"; allow(all) groupdn = "ldap:///cn=Directory > Administrators,ou=Groups,dc=christianbook,dc=com";) > aci: (targetattr = > "cn||uid||uidNumber||gidNumber||homeDirectory||shadowLastChange||shadowMin||sha > dowMax||shadowWarning||shadowInactive||shadowExpire||shadowFlag||memberUid")(ve > rsion 3.0; acl LDAP_Naming_Services_deny_write_access; deny (write) userdn = > "ldap:///self";;) > aci: > (target="ldap:///dc=christianbook,dc=com";)(targetattr="userPassword")(version > 3.0; acl LDAP_Naming_Services_proxy_password_read; allow (compare,search) > userdn = "ldap:///cn=proxyagent,ou=profile,dc=christianbook,dc=com";;) > dc: christianbook > nisdomain: christianbook.com > objectclass: top > objectclass: nisDomainObject > objectclass: domain > > This is another object in my old Sun Directory Server: > > dn: ou=people,dc=christianbook,dc=com > objectclass: top > objectclass: organizationalUnit > ou: people > > What is the best way to convert or import from my old Sun Directory Server to > new one? db2ldif on the sun ds, and ldif2db on the rhds Alternately, I believe you can do replication between them. The hardest part will be checking the schema between the two, and potentially needing to alter or correct data. -- Sincerely, William Brown Software Engineer Red Hat, Brisbane
Attachment:
signature.asc
Description: This is a digitally signed message part
-- 389 users mailing list 389-users@%(host_name)s http://lists.fedoraproject.org/admin/lists/389-users@xxxxxxxxxxxxxxxxxxxxxxx
