How can I copy current version of Lawson Security from one server (environment) and install it on another ? Thanks

Are you on LAUA security or LS security? ( And the lawson version you are on)

I am on LS Security (version is Release 9.0.0). I am trying to copy the current version of LS security from Production and install it on Devlopment for testing new models. The Production and Devlopment both have version 9.0.0

Use LS dump and dump all of the security classes from your source profile. Use LS load and load the security classes to a new empty profile on your destination system. If you dump/load the profile, there is a bunch of metadata pointing to your original profile which will break ESS among other things.

You will have to reassociate the classes to roles as a part of this but, there is no way around that. Also, you may need to recreate your roles on the destination server if they do not exist which would require associating your users to the roles also.

Hope this helps.

I use lsdump -f copyProd.dmp PROFILE PRD in Production, lsload PROFILE copyProd.dmp -p PRD1 in Development. But I cannot find the new profile PRD1 when I login LS Administrator in Development. Please advise. Thanks.

I would not recommend doing the Profile dump and load. Create the profile by hand in the LS tools and then dump the security classes and load them to the newly created profile. Dumping and loading profiles, in my experience, is problematic.

I have seen the LDAP corrupted in a situation that sounds similar to yours, so, I would back your LDAP up prior to making any more changes.

Is PRD1 a valid profile code? I thought it could only be 3 characters.

Good call!!

I ran the command again and use lsload PROFILE copyProd.dmp -p PR1. Still I cannot the find the new profile PR1

Are you sure the file is being transferred correctly? Are you receiving any errors?

What is your exact version of LSF? If you are on 9.0.0.7 or higher you should not have to relink any of the classes to roles.

After I reran the command I got an error "lsload is Secured"

If you are on 9.0.0.7 or higher you can add the -addRoleMapping command onto the end of the lsdump and lsload commands and it will actually assign the roles as well.

I have used it and it works very well.

See the below guide from Lawson for details.

System Utilities Reference Guide

Are you running it as the lawson user?

I ran the command in LID using my own userID, not as lawson. After I ran th lsload command, I got an error "lsload is Secured"

I would check the permissions on lsload and lsdump ($GENDIR/bin). I can only run lsload as the lawson user.

MattD (or anyone else who may have experience using this utility),

I hope you see this post and are able to comment...

When you use the -addRoleMapping switch with the lsload utility, does it overwrite all data on any userids that already exist in the target evironment? In other words, if my lsdump file only pulls two roles for a given userid, but in the target environment, that user actually has six roles (two of which match those he/she had in the environment from which the lsdump was created)...after I do the lsload, will that user still have six roles, or only the two that were included in the lsdump/lsload file?

I'd like to use this utility for some profile claenups, but am leary of what may or may not be overwritten in the target environment by doing so.

Thank you.

This will only add the additional roles it will not remove the previous roles assigned.

Core patches are patching these functions regularly so I suggest taking a backup before using these functions in production, since it may act differently on your system depending on the version. We are on 9.0.1.5.

But by definition of the lsload function you should have no problems. It does not remove it just assigns, similar to the mass assign function in the RM Admin.

If you need anymore help please let me know.

You will need to use the -addRoleMapping on both the dump and the load sides. In case you didn't realize.

Also, to run this command as a user other than Lawson, you'd need to do the following:

1) Using tokendef, ensure that lsdump/lsload are listed
2) In Lawson Security, add a class that grants these to the ENV profile
3) Add it to the SuperAdminRole

...The tools are hard-coded to work for lawson, root, QSECOFR, and any member of a Windows Admin Group