Novell eDirectory 8.8 Troubleshooting Guide - NetIQ

10.3 Migrating from OpenLDAP to Novell
eDirectory
• Section 10.3.1, “Prerequisites,” on page 64
• Section 10.3.2, “Migrating the OpenLDAP Schema to eDirectory,” on page 64
• Section 10.3.3, “Migrating the Open LDAP Data to Novell eDirectory,” on page 65
• Section 10.3.4, “Making PAM Work with Novell eDirectory After Migration,” on page 65
novdocx (en) 22 June 2009
10.3.1 Prerequisites
The data that is migrated from an OpenLDAP server can have MD5 passwords, which may cause
the applications to break if the appropriate NMAS methods are not installed. The NMAS method,
SimplePassword, needs to be installed for the Novell eDirectory using the command as below:
nmasinst -addmethod admin_context treename configfile -h Hostname:port-w
password
Example: nmasinst -addmethod admin.novell eDir-Tree /Linux/eDirectory/nmas/NmasMethods/
Novell/SimplePassword/config.txt -h eDir_srv:524 -w secret
10.3.2 Migrating the OpenLDAP Schema to eDirectory
To migrate the OpenLDAP schema to eDirectory, complete the following steps:
• “Step 1: Perform the Schema Cache Update Operation” on page 64
• “Step 2: Rectify the Error LDIF File to Eliminate the Errors” on page 64
Step 1: Perform the Schema Cache Update Operation
You can write the errors encountered while comparing the schema to an error file using the
following command:
ice -e error_file -C -a -S ldap -s OpenLDAP_server -p Open_LDAP_port - D ldap
-s eDirectory_server -p eDirectory_port -d eDirectory_full_admin_context -w
eDirectory_password
For example:
ice -e err.ldf -C -a -SLDAP -s open_srv1 -p open_port1 -DLDAP -s edir_srv2 -p
edir_port2 -d cn=admin,o=novell -w secret
Any errors encountered while comparing the schema is written to the error file (err.ldf in the
example).
Step 2: Rectify the Error LDIF File to Eliminate the Errors
Open LDAP defines some schema definitions publicly, which include attributes like objectClasses,
attributeTypes, ldapSyntaxes, and subschemSubentry. These definitions exist internally and are very
important to the schema, and therefore, they cannot be modified. Operations that try to modify these
definitions results in the following error:
LDAP error : 53 (DSA is unwilling to perform)
64 Novell eDirectory 8.8 Troubleshooting Guide