Copy LDAP data (users, roles, rules, classes, etc) from prod to test

Sort:
You are not authorized to post a reply.
Author
Messages
Jonas
Advanced Member
Posts: 25
Advanced Member
    This is a TDS LDAP.  LSF 9.0.1 on AIX

    I found (here) how to copy users from LDAP to LDAP using an undocumented (that I could find) feature of ldifgen.  

    However, unless there is another undocumented feature ldifgen doesn't dump the rules and security classes.    

    I can create an ldif using jxplorer, of course, but if there is a Lawson tool or a preferred method, I'd rather not re-invent the wheel.

    Anyone know how to do this?  Am I barking up the wrong cat?
    Greg Moeller
    Veteran Member
    Posts: 1498
    Veteran Member
      Check out the Lawson supported secdump and secload --- you'll have to use the -addRoleMapping option dumping and loading to get the Roles to transfer across, but this will get you the security classes and rules.
      Two schools of thought. 1) dump and load at the PROFILE level. 2) dump and load at the SECCLASS level. I've had people from Lawson tell me to use both... the PROFILE level takes far less time, but the SECCLASS enables you to be more granular in what you bring across.
      Jonas
      Advanced Member
      Posts: 25
      Advanced Member
        Ok, thanks, we're gonna look into that.
        Jonas
        Advanced Member
        Posts: 25
        Advanced Member
          B uuutttt.... no. Those (the one's in gen/bin anyway) only seem to be related to LAUA security. We're needing the LSF 9 stuff.
          Jonas
          Advanced Member
          Posts: 25
          Advanced Member
            The answer is lsdump/lsload, also with the -addRoleMapping option. I haven't tried the actual operation, but this is the lsf9 way to do it.

            https://www.lawsonguru.co...c/26602/Default.aspx

            Found here.
            Jonas
            Advanced Member
            Posts: 25
            Advanced Member
              And thanks Greg. :-)
              You are not authorized to post a reply.