Migrating or Copying Objects

Although iManager doesn't have a Copy function, you can use the Migrate from eDirectory option to copy objects from one eDirectory tree to another. The scope of the copying depends on the policies of the driver. For example, depending on policies that apply to the driver, you can copy (sync) all the attributes from one eDirectory tree to another. Such a "copy" requires that you synchronize all the attributes across the trees, put objects in the same location during a migration, and not change any data during the migration.

A time stamp is always associated with a resync operation. A resync operation looks for objects that are already associated (have already been synchronized) but have been changed since the time stamp. It also attempts to look for objects that might have been created since the time stamp. Clicking Resync might cause new users to be synchronized.

Instead of using the Resync option to copy objects, use the Migrate from eDirectory option. This option enables you to specify and synchronize a list of objects. For each object in the list, iManager writes data to the directory. DirXML notes the changes and starts the synchronization process for listed objects.

1. Make sure that Identity Manager 2 is installed on a server in the source eDirectory tree and on a server in the destination eDirectory tree.

2. Configure a DirXML Driver for eDirectory on the server in the source tree.

   In the eDirectory driver's Authentication pane, provide the name or IP address and port of the destination server. See Configuring Driver Object Properties.

   Select a migration option: Flat, Mirrored, or Department. To preserve the directory structure (including subcontainers and names) when data is migrated from the source tree to the destination tree, select Mirrored.

3. Configure a DirXML Driver for eDirectory on the server in the destination tree.

   In the Authentication pane, provide the name or IP address and port of the source server.

4. Set up SSL between the two trees.

   Using the NDS2NDS wizard, create KMO certificates in both trees. See Procedure.

   The certificates must be signed, but only one tree has to sign them.

5. In iManager, select DirXML Management, click Overview, then click the driver.

6. Select Migrate from eDirectory.

   Figure 16
   The Migrate from eDirectory option
   

   With eDirectory-to-eDirectory migrations, migrate from the source tree to the destination tree.

7. Select objects.

   For example, select a User object or a Container object. You can search for or browse to the objects. Also, you can add multiple objects.

8. Click OK twice.

   The client (for example, iManager) writes a value to each object in the list. This change event causes DirXML to push the data into your destination tree.