Contents

List of Examples

List of Figures

List of Tables

Title and Copyright Information

Preface

• Who Should Use This Book
• How This Book Is Organized
• Examples Used in This Guide
• Oracle Directory Server Enterprise Edition Documentation Set
• Related Reading
• Redistributable Files
• Default Paths and Command Locations
• Typographic Conventions
• Shell Prompts in Command Examples
• Symbol Conventions
• Documentation, Support, and Training
• Oracle Software Resources
• Documentation Accessibility

1 Determing Whether to Upgrade or Migrate an Existing Installation

• 1.1 Understanding What Happens During Upgrade and During Migration
• 1.2 Using an Upgrade or Migration Path
• 1.3 Completing Pre-Upgrade and Pre-Migration Tasks
• 1.4 Taking the Next Steps

Part I Upgrading from ODSEE 11g Release 1, 7.x, or 6.x

2 Upgrading an Existing 11g Release 1 or 7.x Zip Distribution Installation

• 2.1 Before You Begin Upgrading
• 2.2 Upgrading the Administration (DSCC) Host
  • 2.2.1 Prepare to Redeploy the DSCC WAR File
  • 2.2.2 Redeploy the DSCC WAR File
• 2.3 Upgrading the Directory Server and Directory Proxy Server Hosts

3 Upgrading an Existing 11g Release 1 or 7.x Native Package Installation

• 3.1 Before You Begin Upgrading
• 3.2 Upgrading the Administration (DSCC) Host
• 3.3 Upgrading the Directory Server and Directory Proxy Server Hosts

4 Upgrading an Existing 6.x Zip or Native Package Installation

• 4.1 Before You Begin Upgrading
• 4.2 Upgrading the Administration (DSCC) Host
• 4.3 Upgrading Directory Server and Directory Proxy Server Hosts
• 4.4 Upgrading Directory Server Enterprise Edition 6 on Unsupported Platforms
  • 4.4.1 To Upgrade Directory Server Enterprise Edition From Legacy Operating System
  • 4.4.2 To Upgrade 32-bit Server Instances

Part II Migrating from ODSEE 5.2 to ODSEE 11g Release 1 (11.1.1.7.0)

5 Overview of the Migration Process for Directory Server

• 5.1 Before You Migrate
  • 5.1.1 Prerequisites to Migrate a Single Directory Server Instance
• 5.2 The New Product Distribution
• 5.3 Outline of Migration Steps
• 5.4 Deciding on Automatic or Manual Migration

6 Automated Migration Using the dsmig Command

• 6.1 About the Automatic Migration Tool
• 6.2 Prerequisites for Running dsmig
• 6.3 Using dsmig to Migrate the Schema
• 6.4 Using dsmig to Migrate Security Data
• 6.5 Using dsmig to Migrate Configuration Data
  • 6.5.1 Plug-in Configuration Data
  • 6.5.2 Configuration Data For Suffixes With Multiple Back Ends
  • 6.5.3 Replication Configuration Data
  • 6.5.4 Configuration Data for o=netscapeRoot
  • 6.5.5 Configuration Attributes Not Migrated by dsmig
• 6.6 Using dsmig to Migrate User Data
  • 6.6.1 Troubleshooting New Instances After Migration
• 6.7 Tasks to be Performed After Automatic Migration

7 Migrating Directory Server Manually

• 7.1 Before You Start a Manual Migration
• 7.2 Migrating the Schema Manually
• 7.3 Migrating Configuration Data Manually
  • 7.3.1 Migration of Specific Configuration Attributes
    • 7.3.1.1 Global Configuration Attributes
    • 7.3.1.2 Security Configuration Attributes
    • 7.3.1.3 Feature Configuration Attributes
    • 7.3.1.4 Mapping Tree Configuration Attributes
    • 7.3.1.5 Replication Configuration Attributes
    • 7.3.1.6 Password Policy Configuration Attributes
    • 7.3.1.7 SNMP Attributes
    • 7.3.1.8 UniqueID Generator Configuration Attributes
    • 7.3.1.9 Database Configuration Attributes
    • 7.3.1.10 Plug-In Configuration Attributes
• 7.4 Migrating Security Settings Manually
• 7.5 Migrating User Data Manually
• 7.6 Migrating User Plug-Ins Manually
• 7.7 Tasks to be Performed After Manual Migration

8 Migrating a Replicated Topology

• 8.1 Overview of Migrating Replicated Servers
• 8.2 Issues Related to Migrating Replicated Servers
  • 8.2.1 Issues With the Password Policy
  • 8.2.2 Migration of Replication Agreements
  • 8.2.3 Migration of Referrals
  • 8.2.4 Manual Reset of Replication Credentials
  • 8.2.5 Problems Related to Tombstone Purging
• 8.3 Replication Recommendations
• 8.4 Migration Scenarios
  • 8.4.1 Migrating a Replicated Topology to an Identical Topology
    • 8.4.1.1 Migrating the Consumers
    • 8.4.1.2 Migrating the Hubs
    • 8.4.1.3 Migrating the Masters
  • 8.4.2 Migrating a Replicated Topology to a New Topology
    • 8.4.2.1 Migrating All the Servers
    • 8.4.2.2 Promoting the Hubs
    • 8.4.2.3 Promoting the Consumers
  • 8.4.3 Migrating Over Multiple Data Centers

9 Architectural Changes in Directory Server Since Version 5.2

• 9.1 Changes in the Administration Framework
  • 9.1.1 Removal of the ServerRoot Directory
  • 9.1.2 Removal of the o=netscapeRoot Suffix
• 9.2 Changes to ACIs
  • 9.2.1 Changes in the ACI Scope
  • 9.2.2 Changes in Suffix-Level ACIs
• 9.3 Command Line Changes
• 9.4 Changes to the Console
• 9.5 Password Policy
• 9.6 Changes to Plug-Ins
  • 9.6.1 New Plug-Ins
  • 9.6.2 Changes to the Plug-In API
• 9.7 Changes to the Installed Product Layout
  • 9.7.1 Administration Utilities Previously Under ServerRoot
  • 9.7.2 Binaries Previously Under ServerRoot/bin
  • 9.7.3 Libraries and Plug-Ins Previously Under ServerRoot/lib
  • 9.7.4 Online Help Files No Longer Exist
  • 9.7.5 Plug-Ins Previously Under ServerRoot/plugins
  • 9.7.6 Utilities Previously Under ServerRoot/shared/bin
  • 9.7.7 Certificate and Key Files
  • 9.7.8 Silent Installation and Uninstallation Templates
  • 9.7.9 Server Instance Scripts Previously Under ServerRoot/slapd-ServerID
  • 9.7.10 Server Instance Subdirectories

10 Migrating Directory Proxy Server

• 10.1 Mapping the Global Configuration
  • 10.1.1 Mapping the Global Security Configuration
    • 10.1.1.1 Managing Certificates
    • 10.1.1.2 Access Control on the Proxy Configuration
• 10.2 Mapping the Connection Pool Configuration
• 10.3 Mapping the Groups Configuration
  • 10.3.1 Mapping the Group Object
  • 10.3.2 Mapping the Network Group Object
  • 10.3.3 Mapping Bind Forwarding
  • 10.3.4 Mapping Operation Forwarding
  • 10.3.5 Mapping Subtree Hiding
  • 10.3.6 Mapping Search Request Controls
  • 10.3.7 Mapping Compare Request Controls
  • 10.3.8 Mapping Attributes Modifying Search Requests
  • 10.3.9 Mapping Attributes Restricting Search Responses
  • 10.3.10 Mapping the Referral Configuration Attributes
  • 10.3.11 Mapping the Server Load Configuration
• 10.4 Mapping the Properties Configuration
  • 10.4.1 Attribute Renaming Property
  • 10.4.2 Forbidden Entry Property
  • 10.4.3 LDAP Server Property
  • 10.4.4 Load Balancing Property
    • 10.4.4.1 Monitoring Backend Servers
  • 10.4.5 Search Size Limit Property
  • 10.4.6 Log Property
• 10.5 Mapping the Events Configuration
• 10.6 Mapping the Actions Configuration
• 10.7 Configuring Directory Proxy Server 11g Release 1 (11.1.1.7.0) as a Simple Connection-Based Router

11 Migrating Identity Synchronization for Windows

• 11.1 Migration Overview
• 11.2 Before You Migrate Identity Synchronization for Windows
• 11.3 Preparing for Identity Synchronization for Windows Migration
  • 11.3.1 Exporting Version 1.1 Configuration
    • 11.3.1.1 Using the export11cnf Utility
    • 11.3.1.2 Inserting Clear-Text Passwords
    • 11.3.1.3 Sample Export Configuration File
  • 11.3.2 Checking for Undelivered Messages
    • 11.3.2.1 Using the checktopics Utility
    • 11.3.2.2 To Clear Messages
  • 11.3.3 Forcing Password Changes on Windows NT
• 11.4 Migrating Your System
  • 11.4.1 Preparing for Migration
    • 11.4.1.1 Preparing to migrate from version 1.1, and 1.1 SP1, to version 6.0 SP1
  • 11.4.2 Uninstalling Identity Synchronization for Windows
    • 11.4.2.1 To Uninstall Identity Synchronization for Windows Version 1.1
  • 11.4.3 Installing or Upgrading the Dependent Products
  • 11.4.4 Installing Identity Synchronization for Windows 6.0 SP1
    • 11.4.4.1 To install the Identity Synchronization for Windows 6.0 SP1 components:
• 11.5 What to Do if the 1.1 Uninstallation Fails
  • 11.5.1 Manually Uninstalling 1.1 Core and Instances from Solaris
    • 11.5.1.1 To Manually Uninstall Core From a Solaris Machine:
  • 11.5.2 Manually Uninstalling 1.1 Core and Instances from Windows 2000
    • 11.5.2.1 To uninstall Core from a Windows 2000 machine:
  • 11.5.3 Manually Uninstalling a 1.1 Instance from Windows NT
• 11.6 Other Migration Scenarios
  • 11.6.1 Multi-Master Replication Deployment
  • 11.6.2 Multi-Host Deployment with Windows NT
• 11.7 Checking the Logs

Index