bkeadle Absent Member.
Absent Member.
2758 views

eDirectory to AD conversion

We've had our ZCM configured to an eDirectory source. We're now moving to Active Directory [ 😞 ], and I've successfully configured the new user sources and Administrators for the accounts pointing to AD. Fortunately, I thought to check our ZENworks User Groups and I see those various members are associated to the eDirectory tree. I need to replace the members to be their AD equivalents. So I need to remove:
[INDENT]BKeadle /Users/VOP_TREE/CC[/INDENT]
with:
[INDENT]BKeadle /Users/village.palatine.il.us/Users[/INDENT]

Is there some way to do this en masse? This could be a pretty significant undertaking to have to find all VOP_TREE references to their village equivalents. Where else do I need to make these changes? User-associated bundles, policies, etc? It feels like I need to be able to do some kind of global search/replace for users in VOP_TREE with village.palatine.il.us.
Labels (2)
0 Likes
18 Replies
bkeadle Absent Member.
Absent Member.

Re: eDirectory to AD conversion

I suppose in ZCM parlance, how do I migrate all user associations from one realm to another realm?
0 Likes
Knowledge Partner
Knowledge Partner

Re: eDirectory to AD conversion

bkeadle;2306288 wrote:
I suppose in ZCM parlance, how do I migrate all user associations from one realm to another realm?


As far as I know, you will have to manually add the bundle relationships for groups/users from the new user source. There is no way to script a relationship/association that I know of.
It is somewhat of a clicking task, but quite doable (I've needed to do this before for +300 bundles).

One thing you will probably need to rethink/redesign anyway, depending on how you've set that up, are the DLU and GPO policies (as AD has better integrated management options for these, especially GPO's).

Cheers,
Willem
0 Likes
shaunpond Absent Member.
Absent Member.

Re: eDirectory to AD conversion

Magic31,

> There is no way to script a
> relationship/association that I know of.


http://www.novell.com/documentation/zenworks11/zen11_utils/data/b74pt40.html#b8ankzk ?

--

Shaun Pond


0 Likes
Knowledge Partner
Knowledge Partner

Re: eDirectory to AD conversion

spond;2306326 wrote:
Magic31,

> There is no way to script a
> relationship/association that I know of.


http://www.novell.com/documentation/zenworks11/zen11_utils/data/b74pt40.html#b8ankzk ?

--

Shaun Pond


I happily stand corrected... or better yet am now better informed 🙂

Thanks! And when did that one sneak in?


Cheers,
Willem
0 Likes
shaunpond Absent Member.
Absent Member.

Re: eDirectory to AD conversion

Magic31,

been there a long time AFAIK

--

Shaun Pond


0 Likes
Knowledge Partner
Knowledge Partner

Re: eDirectory to AD conversion

spond;2306359 wrote:
Magic31,

been there a long time AFAIK


Hmmm..... The upside for me is that I've kept my joints in motion. 😛

Cheers,
Willem
0 Likes
shaunpond Absent Member.
Absent Member.

Re: eDirectory to AD conversion

Magic31,

careful of RSI...

--

Shaun Pond


0 Likes
Knowledge Partner
Knowledge Partner

Re: eDirectory to AD conversion

Magic31,
> kept my joints in motion.


But you never inhaled? 🙂

--
Anders Gustafsson (NKP)
The Aaland Islands (N60 E20)

Have an idea for a product enhancement? Please visit:
http://www.novell.com/rms

0 Likes
bkeadle Absent Member.
Absent Member.

Re: eDirectory to AD conversion

Back on topic. 🙂

Yes, there's a scripted way to configure bundles and such, but is there a way to "intelligently" convert referenced users in one realm to another. Might there be a database "hack" that I could replace references to a user in one realm to their same username in another realm?
0 Likes
Micro Focus Expert
Micro Focus Expert

Re: eDirectory to AD conversion

It would be difficult.

On 2/14/2014 12:46 PM, bkeadle wrote:
>
> Back on topic. 🙂
>
> Yes, there's a scripted way to configure bundles and such, but is there
> a way to "intelligently" convert referenced users in one realm to
> another. Might there be a database "hack" that I could replace
> references to a user in one realm to their same username in another
> realm?
>
>



--
Craig Wilson - MCNE, MCSE, CCNA
Novell Technical Support Engineer

Novell does not officially monitor these forums.

Suggestions/Opinions/Statements made by me are solely my own.
These thoughts may not be shared by either Novell or any rational human.
0 Likes
bkeadle Absent Member.
Absent Member.

Re: eDirectory to AD conversion

OK, I got everything ready for a switch over to the new realm. However, I'm nervous about deleting the original user source. I wish there was a way to *DISABLE* the eDirectory user source so that it's non-destructive.

I'd like to just force people to auto-login to the new realm. Is there a way to do this? All my machines have the Novell client. I understand that the ZCM Agent will use the tree name from the Novell client. Is there a way to disable this and force the new realm to be auto-logged into upon login?

When I do delete the eDirectory source, and still have the Novell client, will it auto-login to the new realm that does not have the eDirectory tree reference?
0 Likes
Micro Focus Expert
Micro Focus Expert

Re: eDirectory to AD conversion

As a Test, After Hours, Just change the Port to an Invalid port, then
test some devices to make sure everything logs into the AD Realm OK.
If not, Fix the Port Number and figure out what went amiss.

If all looks good, just remove the old realm in a few days.

Make sure to assign some bundles to AD Users to make sure they are
getting those bundles and not just a "Cached Logon".



On 2/20/2014 6:26 PM, bkeadle wrote:
>
> OK, I got everything ready for a switch over to the new realm. However,
> I'm nervous about deleting the original user source. I wish there was a
> way to *DISABLE* the eDirectory user source so that it's
> non-destructive.
>
> I'd like to just force people to auto-login to the new realm. Is there
> a way to do this? All my machines have the Novell client. I understand
> that the ZCM Agent will use the tree name from the Novell client. Is
> there a way to disable this and force the new realm to be auto-logged
> into upon login?
>
> When I do delete the eDirectory source, and still have the Novell
> client, will it auto-login to the new realm that does not have the
> eDirectory tree reference?
>
>



--
Craig Wilson - MCNE, MCSE, CCNA
Novell Technical Support Engineer

Novell does not officially monitor these forums.

Suggestions/Opinions/Statements made by me are solely my own.
These thoughts may not be shared by either Novell or any rational human.
0 Likes
bkeadle Absent Member.
Absent Member.

Re: eDirectory to AD conversion

Right...of course. That's a great idea. Thank you!
0 Likes
bkeadle Absent Member.
Absent Member.

Re: eDirectory to AD conversion

I can't change the port to something invalid...the dialog won't save with an invalid port. I suppose I could just delete the Connections, and easily add them back? This at least preserves the User Source though it's not actually configured with any connections?
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.