Skip Navigation Links | |
Exit Print View | |
Oracle Directory Server Enterprise Edition Upgrade and Migration Guide 11 g Release 1 (11.1.1.5.0) |
Part I Patching Directory Server Enterprise Edition 7 to 11g Release 1 (11.1.1.5.0)
2. Patching Directory Server Enterprise Edition 7 to Version 11g Release 1 (11.1.1.5.0)
Part II Upgrading Directory Server Enterprise Edition 6 to 11g Release 1 (11.1.1.5.0)
3. Upgrading Directory Server Enterprise Edition 6 to Version 11g Release 1 (11.1.1.5.0)
Part III Migrating Directory Server Enterprise Edition 5.2 to Version 11g Release 1 (11.1.1.5.0)
4. Overview of the Migration Process for Directory Server
5. Automated Migration Using the dsmig Command
6. Migrating Directory Server Manually
7. Migrating a Replicated Topology
8. Architectural Changes in Directory Server Since Version 5.2
9. Migrating Directory Proxy Server
10. Migrating Identity Synchronization for Windows
Before You Migrate Identity Synchronization for Windows
Preparing for Identity Synchronization for Windows Migration
Exporting Version 1.1 Configuration
Inserting Clear-Text Passwords
Sample Export Configuration File
Checking for Undelivered Messages
Forcing Password Changes on Windows NT
Preparing to migrate from version 1.1, and 1.1 SP1, to version 6.0 SP1
Uninstalling Identity Synchronization for Windows
To Uninstall Identity Synchronization for Windows Version 1.1
Installing or Upgrading the Dependent Products
Installing Identity Synchronization for Windows 6.0 SP1
To install the Identity Synchronization for Windows 6.0 SP1 components:
What to Do if the 1.1 Uninstallation Fails
Manually Uninstalling 1.1 Core and Instances from Solaris
To Manually Uninstall Core From a Solaris Machine:
Manually Uninstalling 1.1 Core and Instances from Windows 2000
Multi-Master Replication Deployment
If the version 6.0 SP1 installation program finds remnants of the version 1.1 system, the installation will fail. Verify that all of the 1.1 components are completely removed from the system before starting the new installation.
If the uninstallation program does not uninstall all of the version 1.1 components, you must manually clean up the Identity Synchronization for Windows product registry and Solaris packages.
Detailed instructions for uninstalling Identity Synchronization for Windows version 1.1 manually are provided in the following sections:
Note - The instructions provided in this section are for uninstalling Identity Synchronization for Windows version 1.1, and 1.1 SP1, only.
Do not use the manual uninstallation procedures provided in the following sections unless the Identity Synchronization for Windows uninstallation program fails.
Use the instructions provided in this section to manually uninstall Core from a Solaris machine.
Note - In this section, Identity Synchronization for Windows locations are described in the following manner:
<serverRoot >/ isw-<hostname >
where <serverRoot > represents the parent directory of the Identity Synchronization for Windows installation location.
For example, if you installed Identity Synchronization for Windows in /var/Sun/mps/isw-< example>, the < serverRoot> would be /var/Sun/mps.
If the preceding command does not stop all of the Java processes, type the following commands.
/usr/ucb/ps -gauxwww | grep java kill -s SIGTERM process IDs from preceding command
/etc/init.d/imq stop
* ps -ef | grep imqbroker * kill -s SIGTERM process IDs from preceding command
Use the Message Queue broker uninstall script to uninstall the broker. This script is located in the Identity Synchronization for Windows instance directory on the host where you installed Core.
serverRoot/isw-hostname/imq_uninstall
Manually uninstall the packages and directories.
Use the pkgrm command to remove the following packages.
SUNWaclg SUNWiqum SUNWiqjx SUNWiqlen SUNWxsrt SUNWiqu SUNWjaf SUNWiqfs SUNWjhrt SUNWiqdoc SUNWiquc SUNWiqsup SUNWiqr SUNWjmail
Use the rm -rf command to remove the following directories.
/etc/imq /var/imq /usr/bin/imq*
The following example shows the use of pkgrm to uninstall packages.
pkgrm SUNWidscm SUNWidscn SUNWidscr SUNWidsct SUNWidsoc
|
Type the following command to verify that all of the packages were removed.
pkginfo | grep -i "Identity Synchronization"
Note - Run the pkgrm package-name command again to check if there are still existing packages due to dependencies.
cn=pswsync,cn=plugins,cn=config
rm -f serverRoot/lib/psw-plugin.so
Note -
For best results, use an XML editor. Alternatively, you can use a standard text editor.
Some of the following components may not be included in your file.
You must delete the beginning tag (<compid\>), ending tag (</compid\>), and all contents in-between both tags). Ellipses are used in the following list to represent any additional text, or tags that are included as part of these tags. See the example on Manually Uninstalling 1.1 Core and Instances from Solaris.
<compid\>Identity Synchronization for Windows . . . </compid\>
<compid\>Core . . . </compid\>
<compid\>unistaller . . . </compid\>
<compid\>wpsyncwatchdog . . . </compid\>
<compid\>setenv . . . </compid\>
<compid\>Create DIT . . . </compid\>
<compid\>Extend Schema . . . </compid\>
<compid\>resources . . . </compid\>
<compid\>CoreComponents . . . </compid\>
<compid\>Connector . . . </compid\>
<compid\>DSConnector . . . </compid\>
<compid\>Directory Server Plugin . . . </compid\>
<compid\>DSSubcomponents . . . </compid\>
<compid\>ObjectCache . . . </compid\>
<compid\>ObjectCacheDLLs . . . </compid\>
<compid\>SUNWidscr . . . </compid\>
<compid\>SUNWidscm . . . </compid\>
<compid\>SUNWidsct . . . </compid\>
<compid\>SUNWidscn . . . </compid\>
<compid\>SUNWidsoc . . . </compid\>
<compid\>ADConnector . . . </compid\>
The following is an example <compid\> tag. Remove <compid\>, </compid\>, and all the text and tags in-between.
<compid\>Identity Synchronization for Windows <compversion\>1.1 <uniquename\>Identity Synchronization for Windows</uniquename\> <compinstance\>1 <children\> <compref\>ADConnector <instance\>1 <version\>1.1</version\> </instance\> </compref\> <compref\>DSSubcomponents . . . </compinstance\> </compversion\> </compid\>
rm -rf serverRoot/isw-hostname
rm -rf /etc/init.d/isw
ldapsearch -D "cn=directory manager" -w < password > -b o=netscaperoot "(nsnickname=isw)" dn
Note - ldapsearch is located in Directory Server’s < serverRoot>/shared/bin/ldapsearch. For example, /var/Sun/mps/shared/bin/ldapsearch
The resulting entry should be similar to the following. Note that the entry always ends with o=NetscapeRoot.
"cn=Sun ONE Identity Synchronization for Windows,cn=server group, cn=myhost.mydomain.com,ou=mydomain.com,o=NetscapeRoot"
ldapsearch -D "cn=directory manager" -w < password > -b "dc=my,dc=domain" "(&(objectclass=iplanetservice)(ou=IdentitySynchronization))" dn
The resulting entry should be similar to the following:
"ou=IdentitySynchronization,ou=Services,dc=my,dc=domain"
Use the instructions provided in this section to manually uninstall Core from a Windows 2000 machine.
Note - In this section, Identity Synchronization for Windows locations are described in the following manner:
serverRoot\isw-hostname\
where serverRoot represents the parent directory of the Identity Synchronization for Windows installation location.
For example, if you installed Identity Synchronization for Windows in C:\Program Files\Sun\mps\isw-example, the serverRoot would be C:\Program Files\Sun\mps.
net stop "Sun ONE Identity Synchronization for Windows"
Note - Although you can view Java processes (such as pswwatchdog.exe ) from the Windows Task Manager, you cannot determine which processes are specifically related to Identity Synchronization for Windows. For this reason, do not stop processes from the Windows Task Manager.
net stop "iMQ Broker"
cn=pswsync,cn=plugins,cn=config
You can stop the server using one of the following methods:
In the Services window, right-click on Sun ONE Directory Server 5.2 in the right pane and select Stop.
Open a Command Prompt window and type the following command.
net stop slapd-myhostname
< ServerRoot>\lib\psw-plugin.so
Caution - Back up your current registry file before proceeding to Manually Uninstalling 1.1 Core and Instances from Windows 2000. |
Remove the following Identity Synchronization for Windows keys from the Windows Registry:
All entries under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Identity Synchronization for Windows.
All CurrentControlSet and ControlSet (such as ControlSet001, ControlSet002, and so forth) entries under HKEY_LOCAL_MACHINE\SYSTEM\*, which includes the following entries (if they exist).
...\Control\Session Manager\Environment\< isw-installation directory\>
...\Services\Eventlog\Application\Sun ONE Identity Synchronization for Windows
...\Services\Sun ONE Identity Synchronization for Windows
...\Services\iMQBroker
Note -
For best results, use an XML editor. Alternatively, you can use a standard text editor.
Some of the following components may not be included in your file.
You must delete the beginning tag (<compid\>), ending tag (</compid\>), and all contents in-between both tags). Ellipses are used in the following list to represent any additional text and/or tags that are included as part of these tags. See the example Manually Uninstalling 1.1 Core and Instances from Windows 2000.
<compid\>Identity Synchronization for Windows . . . </compid\>
<compid\>Core . . . </compid\>
<compid\>unistaller . . . </compid\>
<compid\>wpsyncwatchdog . . . </compid\>
<compid\>setenv . . . </compid\>
<compid\>Create DIT . . . </compid\>
<compid\>Extend Schema . . . </compid\>
<compid\>resources . . . </compid\>
<compid\>CoreComponents . . . </compid\>
<compid\>Connector . . . </compid\>
<compid\>DSConnector . . . </compid\>
<compid\>Directory Server Plugin . . . </compid\>
<compid\>DSSubcomponents . . . </compid\>
<compid\>ObjectCache . . . </compid\>
<compid\>ObjectCacheDLLs . . . </compid\>
<compid\>ADConnector . . . </compid\>
The following is a <compid\> tag sample. Remove <compid\>, </compid\>, and all the text and tags in-between.
<compid\>Identity Synchronization for Windows <compversion\>1.1 <uniquename\>Identity Synchronization for Windows</uniquename\> <compinstance\>1 <children\> <compref\>ADConnector <instance\>1 <version\>1.1</version\> </instance\> </compref\> <compref\>DSSubcomponents . . . </compinstance\> </compversion\> </compid\>
For example, C:\Program Files\Sun\mps\isw-example
Note - ldapsearch is located in < serverRoot>\shared\bin\ldapsearch.
For example, C:\Program Files\Sun\mps\shared\bin\ldapsearch
ldapsearch -D "cn=directory manager" -w < password\> -b o=netscaperoot "(nsnickname=isw)" dn
The resulting entry should be similar to the following (note that the entry will always end with o=NetscapeRoot):
"cn=Sun ONE Identity Synchronization for Windows,cn=server group, cn=myhost.mydomain.com,ou=mydomain.com,o=NetscapeRoot"
ldapsearch -D "cn=directory manager" -w <password \> -b "dc=my,dc=domain" "(&(objectclass=iplanetservice)(ou=IdentitySynchronization))" dn
The resulting entry should be similar to the following:
"ou=IdentitySynchronization,ou=Services,dc=my,dc=domain"
Next Steps
Restart your machine for all changes to take effect.
Use the instructions provided in this section to manually uninstall an instance from a Windows NT machine.
Note - In this section, Identity Synchronization for Windows locations are described as follows:
<serverRoot>\isw-<hostname>
where <serverRoot > represents the parent directory of the Identity Synchronization for Windows installation location. For example, if you installed Identity Synchronization for Windows in C:\Program Files\Sun\mps\isw- example, the < serverRoot > would be C:\Program Files\Sun\mps.
net stop “Sun ONE Identity Synchronization for Windows”
Note - Although you can view Java processes (such as pswwatchdog.exe) from the Windows Task Manager, you cannot determine which processes are specifically related to Identity Synchronization for Windows. For this reason, do not stop processes from the Windows Task Manager.
net stop “Sun ONE NT Change Detector Service”
Caution - Do not use regedit because the program does not allow you to edit multi-value strings. Backup your current Windows registry file before proceeding to Manually Uninstalling a 1.1 Instance from Windows NT. |
Remove the following Identity Synchronization for Windows keys from the Registry:
All entries under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Identity Synchronization for Windows
All CurrentControlSet and ControlSet (such as ControlSet001, ControlSet002) entries under HKEY_LOCAL_MACHINE\SYSTEM\*.
These entries include the following:
...\Control\Session Manager\Environment\ <isw-installation directory>
...\Services\Eventlog\Application\Sun ONE Identity Synchronization for Windows
...\Services\Sun ONE Identity Synchronization for Windows
...\Services\iMQBroker
The HKEY_LOCAL_MACHINE\SOFTWARE\Sun Microsystems\PSW
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\CONTROL\LSA
The registry value type must be REG_MULTI_SZ.
Note -
For best results, use an XML editor. Alternatively, you can use a standard text editor.
Some of these components might not be included in your file.
You must delete the beginning tag (<compid\>), ending tag (<\compid\>), and all contents in-between both tags). Ellipses are used in the following list to represent any additional text and/or tags that are included as part of these tags. See the example on Manually Uninstalling 1.1 Core and Instances from Windows 2000.
<compid\>Identity Synchronization for Windows . . . </compid\>
<compid\>Core . . . </compid\>
<compid\>uninstaller . . . </compid\>
<compid\>wpsyncwatchdog . . . </compid\>
<compid\>setenv . . . </compid\>
<compid\>Create DIT . . . </compid\>
<compid\>Extend Schema . . . </compid\>
<compid\>resources . . . </compid\>
<compid\>CoreComponents . . . </compid\>
<compid\>Connector . . . </compid\>
<compid\>DSConnector . . . </compid\>
<compid\>Directory Server Plugin . . . </compid\>
<compid\>DSSubcomponents . . . </compid\>
<compid\>ObjectCache . . . </compid\>
<compid\>ObjectCacheDLLs . . . </compid\>
<compid\>ADConnector . . . </compid\>
The following is a example <compid\> tag. Remove <compid\>, </compid\>, and all the text and tags in-between.
<compid\>Identity Synchronization for Windows <compversion\>1.1 <uniquename\>Identity Synchronization for Windows</uniquename\> <compinstance\>1 <children\> <compref\>ADConnector <instance\>1 <version\>1.1</version\> </instance\> </compref\> <compref\>DSSubcomponents . . . </compinstance\> </compversion\> </compid\>
For example, C:\Program Files\Sun\mps\isw-example
Note - You must edit the Windows registry as described in Manually Uninstalling a 1.1 Instance from Windows NT before proceeding to Manually Uninstalling a 1.1 Instance from Windows NT.
Locate the passflt.dll file in the C:\winnt\system32 folder, and rename the file to passflt.dll.old.