[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Re: DSEE to OpenLDAP
Thanks to all of you for the advise.
Howard is correct, when using dsconf to export the DSEE catalog, you get
some "special" SUN-ONLY attributes, which are not supported/formatted
correctly, and therefore cant be imported using slapadd. I read somewhere
about stripping those out before performing the import, although I'm not
sure whether I would actually need the data stored in these attributes...
Using ldapadd sounds like the way to go, although I'm not sure how this
helps me "filter" the special SUN-ONLY attributes... Just ensures I don¹t
feed garbage into my new shiny openldap catalog :)
Bills idea of performing a ldapsearch from the openldap box, and somehow
feeding that to slapadd/ldapadd sounds like a good plan, but not sure
about the best way to get this done...
Will do some more reading, but if anyone has some tips, I'm all ears.
Thanks again,
On 21/03/11 8:55 PM, "Howard Chu" <hyc@symas.com> wrote:
>Bill MacAllister wrote:
>>>> I'm not sure that replication between the two is an option (although
>>>>would
>>>> love it if it was :), so I have looked into exporting the current DSEE
>>>> environment to a LDIF, and attempted to then import it into openldap
>>>> (using slapadd), but ran into a few issues...
>>>>
>>>> The issue I'm currently stuck on is getting the data in the LDIF into
>>>>a
>>>> format that can be imported using slapadd. Currently, I have issues
>>>>with
>>>> automounts, pwdReset attribs etc etc...
>>
>> Why can't you just use ldapsearch on the existing directory and use that
>> as input to slapadd?
>
>slapadd is meant for well-formed LDIF input, mainly from slapcat. DSEE is
>known to not support schema checking of any kind, therefore any LDIF you
>obtain from it will most likely be full of garbage and not well-formed.
>As
>such, you should only use ldapadd to import it, so you get full error
>checking
>on the import.
>
>> Of course, that only gets you the data. I would bet that the real issue
>> will be getting the access controls correct.
>
>--
> -- Howard Chu
> CTO, Symas Corp. http://www.symas.com
> Director, Highland Sun http://highlandsun.com/hyc/
> Chief Architect, OpenLDAP http://www.openldap.org/project/