Copying LDAP info from one server to another

Sort:
You are not authorized to post a reply.
Author
Messages
prav
New Member
Posts: 2
New Member

    Hi all,

    We are on 9.0.0.4, iSeries and use LAUA security.

    We are trying to setup a Lawson Disaster Recovery box. We have been successfull with most of it but for replicating users added to LDAP using LSA.

    SInce we use LAUA all the security info is getting replicated along with the database to the DR Server.

    When I add a user to LSA on production, I can not add it to the LSA on DR server as LDAP is not running there.

    Is there a way to export data from LDAP on production and import into LDAP on to another server. The only difference would be the Server Name?

    Any help is greatly appreciated.

    Jimmy Chiu
    Veteran Member
    Posts: 641
    Veteran Member
      Step 1: Replicate the LDAP instance from your production LDAP server to the new DR LDAP server via ADAM setup (Not sure about tivoly)

      Step 2: on your DR box, edit the install.cfg, it needs to be point to the new LDAP server:port

      hope this help.
      Ben Coonfield
      Veteran Member
      Posts: 146
      Veteran Member
        To replicate the exact TDS server, we just clone the whole server including filesystems to get the complete configuration & data which is easier if you want an exact replica. But in general, if you want to copy data betwen TDS instances there are Tivoli tools to do that. Install a second TDS instance, and preferably synchronize the cryptography keys between the two instances. If you don't do this first, you will have to reset user passwords on the target server. (TDS encrypts all the passwords, so if the new TDS isn't set up right it won't be able to use the encrypted passwords, although it will still be able to use all the other data). See Appendix E "Synchronizing two-way cryptography between server instances" in the the TDS Installation & Configuration Guide (IBM Document SC32-1673-00 for version 6.0).
        John Henley
        Senior Member
        Posts: 3348
        Senior Member
          For TDS, you can use either idsxcfg to do a complete backup/restore (requires LDAP server be stopped, if I remember correctly), or idsxcfg (or another LDAP tool) to dump/load via an .ldif file. I prefer the .ldif method because it allows for tweaking the file to change service URLs, search/replace product line naming, etc.

          To workaround the encryption issue Ben describes, you can follow that with a dump/load of password-dependent identities using ssoconfig, assuming you used the same encryption seed on both LSF9 installs.
          Thanks for using the LawsonGuru.com forums!
          John
          You are not authorized to post a reply.