Troubleshooting guide

2: Planning For Migration 45
RSA Authentication Manager 6.1 to 8.1 Migration Guide
Test Migration
Custom Mode allows you to perform a test migration.
A test migration does the following:
• Displays the results of a migration without actually migrating any data, or
affecting the database in any way.
• Processes the data in the dump file, but does not commit any changes to the
database.
• Generates a report that details each change that would be made during an actual
migration.
You can configure the test migration to run just as you want the real migration to run.
For example, you can configure it to process all or part of the data in the dump file, or
to continue even when data conflicts are found. Once the test migration completes,
you can read the generated migration report to learn how your data will be processed,
determine the severity of the conflicts, and plan methods for correcting the conflicts
after the migration of the data completes.
For more information on data conversion and migration reports, see Appendix A,
Migration Data Conversion
on page 95.
LDAP Job and Identity Source Synchronization
In Custom Mode you can map LDAP jobs to identity sources. Version 8.1 refers to
user and user group data in an LDAP directory in real time. In version 6.1, the
database is synchronized with the LDAP directory. The major difference is that in
version 6.1, the database contains copies of the LDAP data, while version 8.1 contains
references to the data in the LDAP directory. Only the LDAP administrator can update
LDAP users and user groups.
The Operations Console prompts you to specify how to map LDAP jobs to identity
sources as part of migrating the version 6.1 data. RSA recommends that you plan how
you will merge synchronization jobs into identity sources before you begin migration.
When mapping identity sources, the Operations Console displays only the identity
sources linked to the deployment.
If you used LDAP synchronization jobs in version 6.1, the migration process can
create an identity source for each job. However, you may be able to map multiple
synchronization jobs to a single identity source, and minimize the administrative
burden of managing identity sources and users.
In version 6.1, configuring LDAP synchronization jobs requires you to specify the
following information:
• An LDAP host
• A base DN
For each synchronization job, examine the Base DN of the job to determine if
there are any common Base DNs that you can merge into a single identity source.