I’m basically looking for links to more information on how to use LDIF to migrate users AWAY from a Domino Directory, but my specific need is this:
We have a number of servers with a number of Domino directories organized with Directory Assistance. These we would like to move to a central LDAP directory, for easier maintenance. I think I’d like to use LDIF to do this, but I’m not quite certain how, or whether it is a fairly straight-forward process, or even possible. What puzzles me is this sentence from the R6 Admin Help:
"LDIF is a data format standard for conveying information from a directory that complies with the Lightweight Directory Access Protocol (LDAP). You can use LDIF files to import users from any LDAP directory to Notes. "
If it is a data format standard to use between LDAP-compliant directories, how come this says I can only use it to import users to Notes, and doesn’t mention exporting users away from Notes? Isn’t Domino Directory LDAP-compliant afterall?
I want to move users from the dominoperson objectclass into inetorgperson, and I’m happy to do so since I won’t need the information I’ll lose by doing so. All the users are only logged in through Web browsers, and we haven’t used any other dominoperson objectclass-specific fields for anything important. Surely it must be possible to migrate the information, including user name and passwords in hashed format to another LDAP Directory, more specifically the one running on IBM’s DB2 one? But how?
I’ve tried
ldapsearch -L -h myserver “cn=myname” > outfile
and the result is slightly puzzling. givenname, cn and other field values in the output comes out as something that looks rather MD5’d, although I’m sure there’s something else in use:
cn:: QmrDuHJuIEthdXBhbmc=
When I try to import the file through the import function in the IBM directory, it seems to be able to make sense of these fields, but it will not import the directory entries, without explaining in any further detail exactly why. An explanation on how to do this, or pointers to somewhere I can read more about it, would be very welcome!
Thanks,
Bjørn