You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@directory.apache.org by Salvio Sergi <ss...@gmail.com> on 2008/03/12 17:04:45 UTC
Migrating from Oracle Internet Directory
Hi Guys,
is it possible to migrate from Oracle Internet Directory to Apache
Directory Server?
I would like to put minimal effort in the migration but I'm clearly open
to suggestions...
I'm thinking of making an LDIF of my oracle directory and dump it in
Apache DS.
There are a number of non standard attributes that are specific to
oracle (like orclpassword and object classes like orcluser)
Is there a schema that I can use to ease the migration?
Eventually I will be phasing out all oracle specific attributes
replacing them with more appropriate ones.
Thanks
- sal
Re: Migrating from Oracle Internet Directory
Posted by Salvio Sergi <ss...@gmail.com>.
thanks,
I've actually tried a quick and dirty migration and there are not many
attributes that need to be migrated.
I'm going to migrate the attributes specific to oracle to a more
standard schema preprocessing the ldif file with some awk kinda script.
thanks again and great work you guys are doing
- salvio
Alex Karasulu wrote:
> On Wed, Mar 12, 2008 at 6:35 PM, Emmanuel Lecharny <el...@gmail.com>
> wrote:
>
>
>> Alex Karasulu wrote:
>>
>>> Hi Salvio,
>>>
>>> On Wed, Mar 12, 2008 at 12:04 PM, Salvio Sergi <ss...@gmail.com> wrote:
>>>
>>>
>>>
>>>> Hi Guys,
>>>>
>>>> is it possible to migrate from Oracle Internet Directory to Apache
>>>> Directory Server?
>>>>
>>>>
>>>>
>>> Should be possible sure. I think OID is not as bad as going from AD to
>>> ApacheDS. Has been a while since I looked at OID though. Should be
>>>
>> pretty
>>
>>> straight forward from what I can remember. Just give it a try and move
>>> your schema over and see. LDAP is LDAP (unless you're talking AD) and
>>>
>> in
>>
>>> theory it should work.
>>>
>>>
>> Yes, this is definitively possible, but this will require some work, for
>> sure. Basically, as I said in another mail, you will have to :
>> - convert the schema from OID to ADS/OpenLDAP format
>> - export/import the data (easy: LDIF)
>> - check the syntaxCheckers and comparators used in OID, eventually write
>> the same in ADS.
>>
>>
>
> This presumes you want all Oracle specific schema elements. He just wants
> to move his application specific schema which many just be using a few
> elements. This is not at all so monumental a task. Most likely the
> matchingRules and syntaxes already exist and it's just a matter of creating
> the objectClasses and attributeTypes which can be done immediately.
>
> We have everything in place even to do this dynamically by adding these
> schema elements even without stopping the server.
>
> I have to write more user level information about the dynamic schema
> subsystem. I should have done this after writing it and we're paying for
> that since not many people know what this thing can do.
>
> Alex
>
>
Re: Migrating from Oracle Internet Directory
Posted by Emmanuel Lecharny <el...@gmail.com>.
Alex Karasulu wrote:
> On Wed, Mar 12, 2008 at 6:35 PM, Emmanuel Lecharny <el...@gmail.com>
> wrote:
>
>
>> Alex Karasulu wrote:
>>
>>> Hi Salvio,
>>>
>>> On Wed, Mar 12, 2008 at 12:04 PM, Salvio Sergi <ss...@gmail.com> wrote:
>>>
>>>
>>>
>>>> Hi Guys,
>>>>
>>>> is it possible to migrate from Oracle Internet Directory to Apache
>>>> Directory Server?
>>>>
>>>>
>>>>
>>> Should be possible sure. I think OID is not as bad as going from AD to
>>> ApacheDS. Has been a while since I looked at OID though. Should be
>>>
>> pretty
>>
>>> straight forward from what I can remember. Just give it a try and move
>>> your schema over and see. LDAP is LDAP (unless you're talking AD) and
>>>
>> in
>>
>>> theory it should work.
>>>
>>>
>> Yes, this is definitively possible, but this will require some work, for
>> sure. Basically, as I said in another mail, you will have to :
>> - convert the schema from OID to ADS/OpenLDAP format
>> - export/import the data (easy: LDIF)
>> - check the syntaxCheckers and comparators used in OID, eventually write
>> the same in ADS.
>>
>>
>
> This presumes you want all Oracle specific schema elements. He just wants
> to move his application specific schema which many just be using a few
> elements. This is not at all so monumental a task. Most likely the
> matchingRules and syntaxes already exist and it's just a matter of creating
> the objectClasses and attributeTypes which can be done immediately.
>
True. I just tried to envision the worst possible case ;)
> We have everything in place even to do this dynamically by adding these
> schema elements even without stopping the server.
>
> I have to write more user level information about the dynamic schema
> subsystem. I should have done this after writing it and we're paying for
> that since not many people know what this thing can do.
>
btw, another GSoC potential project : Automated Migration Tools !
--
--
cordialement, regards,
Emmanuel Lécharny
www.iktek.com
directory.apache.org
Re: Migrating from Oracle Internet Directory
Posted by Alex Karasulu <ak...@apache.org>.
On Wed, Mar 12, 2008 at 6:35 PM, Emmanuel Lecharny <el...@gmail.com>
wrote:
> Alex Karasulu wrote:
> > Hi Salvio,
> >
> > On Wed, Mar 12, 2008 at 12:04 PM, Salvio Sergi <ss...@gmail.com> wrote:
> >
> >
> >> Hi Guys,
> >>
> >> is it possible to migrate from Oracle Internet Directory to Apache
> >> Directory Server?
> >>
> >>
> >
> > Should be possible sure. I think OID is not as bad as going from AD to
> > ApacheDS. Has been a while since I looked at OID though. Should be
> pretty
> > straight forward from what I can remember. Just give it a try and move
> > your schema over and see. LDAP is LDAP (unless you're talking AD) and
> in
> > theory it should work.
> >
> Yes, this is definitively possible, but this will require some work, for
> sure. Basically, as I said in another mail, you will have to :
> - convert the schema from OID to ADS/OpenLDAP format
> - export/import the data (easy: LDIF)
> - check the syntaxCheckers and comparators used in OID, eventually write
> the same in ADS.
>
This presumes you want all Oracle specific schema elements. He just wants
to move his application specific schema which many just be using a few
elements. This is not at all so monumental a task. Most likely the
matchingRules and syntaxes already exist and it's just a matter of creating
the objectClasses and attributeTypes which can be done immediately.
We have everything in place even to do this dynamically by adding these
schema elements even without stopping the server.
I have to write more user level information about the dynamic schema
subsystem. I should have done this after writing it and we're paying for
that since not many people know what this thing can do.
Alex
Re: Migrating from Oracle Internet Directory
Posted by Emmanuel Lecharny <el...@gmail.com>.
Alex Karasulu wrote:
> Hi Salvio,
>
> On Wed, Mar 12, 2008 at 12:04 PM, Salvio Sergi <ss...@gmail.com> wrote:
>
>
>> Hi Guys,
>>
>> is it possible to migrate from Oracle Internet Directory to Apache
>> Directory Server?
>>
>>
>
> Should be possible sure. I think OID is not as bad as going from AD to
> ApacheDS. Has been a while since I looked at OID though. Should be pretty
> straight forward from what I can remember. Just give it a try and move
> your schema over and see. LDAP is LDAP (unless you're talking AD) and in
> theory it should work.
>
Yes, this is definitively possible, but this will require some work, for
sure. Basically, as I said in another mail, you will have to :
- convert the schema from OID to ADS/OpenLDAP format
- export/import the data (easy: LDIF)
- check the syntaxCheckers and comparators used in OID, eventually write
the same in ADS.
>
>
>> I would like to put minimal effort in the migration but I'm clearly open
>> to suggestions...
>>
>>
>
> Well treat it like any other LDAP server migration. Just create the schema
> on ApacheDS, then export and import the entries as LDIFs. Come talk to us
> if you have problems.
>
Correct approach :)
Thanks !
--
--
cordialement, regards,
Emmanuel Lécharny
www.iktek.com
directory.apache.org
Re: Migrating from Oracle Internet Directory
Posted by Alex Karasulu <ak...@apache.org>.
Hi Salvio,
On Wed, Mar 12, 2008 at 12:04 PM, Salvio Sergi <ss...@gmail.com> wrote:
> Hi Guys,
>
> is it possible to migrate from Oracle Internet Directory to Apache
> Directory Server?
>
Should be possible sure. I think OID is not as bad as going from AD to
ApacheDS. Has been a while since I looked at OID though. Should be pretty
straight forward from what I can remember. Just give it a try and move
your schema over and see. LDAP is LDAP (unless you're talking AD) and in
theory it should work.
>
> I would like to put minimal effort in the migration but I'm clearly open
> to suggestions...
>
Well treat it like any other LDAP server migration. Just create the schema
on ApacheDS, then export and import the entries as LDIFs. Come talk to us
if you have problems.
>
> I'm thinking of making an LDIF of my oracle directory and dump it in
> Apache DS.
> There are a number of non standard attributes that are specific to
> oracle (like orclpassword and object classes like orcluser)
> Is there a schema that I can use to ease the migration?
>
Nothing exists out of the box for these but I'm sure you can add these
attributes type descriptions easily. Just figure out what the syntax and
matching rules are on OID and add them to ApacheDS. You should be good to
go. Check the Oracle DS schemaSubentry for the schema information.
>
>
> Eventually I will be phasing out all oracle specific attributes
> replacing them with more appropriate ones.
>
That's what I seriously recommend. Then you have portability across
standards compliant LDAP servers. ApacheDS is certified for LDAPv3:
http://directory.apache.org/community%26resources/open-group-certification.html
So it's guaranteed to interoperate with other standards compliant servers.
HTH,
Alex
Re: Migrating from Oracle Internet Directory
Posted by Alex Karasulu <ak...@apache.org>.
On Wed, Mar 12, 2008 at 12:10 PM, Frans Thamura <fr...@meruvian.org> wrote:
> hi all
>
> i am also seeking a migrator tools to migrate like Active directory or
> lotus
> notes ldap or kind of LDAP to ApacheDS
>
I had a friend who migrated off of lotus notes LDAP server pretty easily.
AD can be tough but it's been done probably more frequently then other LDAP
servers.
Again this is just about going through the schema elements you use and
making sure that those elements are also present within ApacheDS, if not
adding equivalents.
If you and Salvio have these other DS specific schemas we can include them
in the standard distribution so you don't have to add them with a stock
ApacheDS installation but just flip a switch at runtime to use them.
Also if this happens I think it paves the road for us to devise easy to use
migration tools for ApacheDS and OpenLDAP using Apache Directory Studio.
The more people use ApacheDS and OpenLDAP the better world it will become
:).
HTH,
Alex
Re: Migrating from Oracle Internet Directory
Posted by Emmanuel Lecharny <el...@gmail.com>.
Frans Thamura wrote:
> hi all
>
Hi Frans,
> i am also seeking a migrator tools to migrate like Active directory or lotus
> notes ldap or kind of LDAP to ApacheDS
>
We don't have such tool yet, but this sure can be a killer tool to have !
Basically, there are some constraints we have to deal with :
- Schema must be converted first
- data must be exported from the original server and imported into ADS
- specific syntax checkers and comparator must be implemented
This is not easy... (1) and (2) are the easiest part, with (2) being
totally trivial. (3) is a little bit more tricky.
But, yeah, this is something which is possible to do, it just need some
fork force to write those tools :)
Hope you are not totally discouraged ...
--
--
cordialement, regards,
Emmanuel Lécharny
www.iktek.com
directory.apache.org
Re: Migrating from Oracle Internet Directory
Posted by Frans Thamura <fr...@meruvian.org>.
hi all
i am also seeking a migrator tools to migrate like Active directory or lotus
notes ldap or kind of LDAP to ApacheDS
any idea?
F