Troubleshooting guide

46 2: Planning For Migration
RSA Authentication Manager 6.1 to 8.1 Migration Guide
• A scope
The scope of the job specifies the number of levels below the base DN that the job
extends. If the scope of a job is just the base DN or one level below the base DN,
you may have other jobs at lower levels of the directory tree that you can combine
into one identity source.
• An optional query filter
The query filter allows you to select users that meet certain criteria. If you have
filtered users in Authentication Manager to overcome any restrictions in the
number of records that your directory can update at the same time, you can
overcome this restriction by merging the jobs. For example, you may have
multiple jobs that filter on the last name of users. One job filters users whose last
name begins with letters from A to G, another job filters from H to S, and another
filters from T to Z. If these jobs have the same base DN, combine them into one
identity source.
Data Conflicts During Migration
A Custom Mode migration allows you to configure the installation to handle data
conflicts in the dump file in these ways:
• The installation can detect a data conflict, log it, and continue migrating the
remaining data.
• The installation can detect a data conflict, and stop the migration.
Changes made before a conflict is detected are maintained in the database.
A test migration can alleviate any concerns you may have about data conflicts, and
allows you to see the migration results before making any changes to the database.
Migration of a Subset of Data
In Custom Mode, you can select the specific data that you want to dump. Version 8.1
allows you to filter the data in the dump file, and migrate the specific data you want
and ignore the rest. You can filter the dump file based on the following types of data:
• System settings
For example, administrator authentication methods allowed, Windows password
integration status, required PIN lengths, and password expiration limits.
• Administrative roles
• Cross-realm relationships
• RSA RADIUS profile names and assignments
• Active LDAP synchronization jobs