LDAP-UX Client Services B.04.15 with Microsoft Windows Active Directory Server Administrator's Guide (edition 8)

Importing Name Service Data into Your Directory
The next step is to import your user, group, and other services data into your Active Directory.
When planning to import your data, consider the following:
• If you have already imported data into your Active directory with the SFU 2.0 Server for
NIS migration tool, LDAP-UX Client Services can use that data and you can skip to
“Configuring LDAP-UX Client Services” (page 36).
• If you are using NIS, the LDAP-UX migration scripts take your NIS maps and generate LDIF
files. These scripts can then import the LDIF files into your directory, creating new entries
in the directory.
If you are not using NIS, the LDAP-UX migration scripts can take your user, group, and
other data from files, generate LDIF, and import the LDIF into your directory to work with
SFU version 2.0.
• If you integrate the name service data into your directory, the migration scripts may be
helpful depending on where you put the data in your directory. You could use them just to
generate LDIF, edit the LDIF, then import the LDIF into your directory. For example, you
could manually add the msSFUAccount attributes to your existing entries under CN=Users
and add their HP-UX information there.
CAUTION: LDAP-UX Client Services provides default attribute and search descriptor
settings to work with Microsoft Windows Services for UNIX 3.0/3.5 (SFU 3.0/3.5) when
working with the Windows 2000, 2003 or 2003 R2 Acitve Directory Server.
If you use SFU 2.0 with Windows 2000 or 2003 ADS, you can manually re-link the attribute
configuration file to SFU 2.0 before running migration. Use this command to switch to SFU
2.0:
ln -fs /etc/opt/ldapux/defualt_profile_attr_ads_sfu2.ldif \
/etc/opt/ldapux/default_profile_attr_ads.ldif
If you use the R2's RFC2307 schema with Windows 2003 R2 ADS, you can manually re-link
the attribute configuration file to R2's RFC2307 before running migration. Use this command
to switch to R2's RFC2307:
ln -fs /etc/opt/ldapux/defualt_profile_attr_ads_winr2.ldif \
/etc/opt/ldapux/default_profile_attr_ads.ldif
LDAP_UX Client Services will use SFU 3.0/3.5 in the absence of the softlink
/etc/opt/ldapux/default_profile_attr_ads.ldif.
You can also run the setup program to select and set the attribute map to be used with your
directory server.
To import your user, group, and other services data into your LDAP directory, complete the
following steps, modifying them as necessary.
1. Decide which migration method and scripts you will use.
Migration scripts are provided to ease the task of importing your existing name service data
into your Active directory. Refer to “Command, Tool, Schema Extension Utility, and
Migration Script Reference” (page 163) for a complete description of the scripts, what they
do, and how to use them. Modify the migration scripts, if needed.
2. Back up your directory.
3. Run the migration scripts.
4. If the method you used above did not already import your data, use ldapmodify to import
the LDIF file into your directory.
Importing Name Service Data into Your Directory 35