Jazz Register Log in
Jazz Forum Welcome to the Jazz Community Forum

Welcome to the Jazz Community Forum

Connect and collaborate with IBM Engineering experts and users

Planning to Migrate RTC User Registry (Apache LDAP to AD)

Hi,

We Have RTC 3.0.1.1 using Apache LDAP User Registry

RTC History and objects are mapped with User ID's (Alpha Numeric Standards)

we are planning to migrate from Apache LDAP to AD

but the AD will not accept the RTC User ID's which are (Alpha Numeric) due to compliance issue we need to use User ID's (Numeric)..

I have 700 RTC Users with different format in Apache LDAP and if I migrate to AD..

Whats Impact on RTC Object History and Please let me know the Impact on the Data..

Let me know if you have details How we gone achieve the above activities.

Regards,
Sri

0 votes



9 answers

Permanent link
Hi Sri,

I have not tried it myself and would advise to test it on a test server first.....

If you have to create 700 new users there will be no relationship between the old IDs and the new ones. I believe all user links would be broken.

It is possible to change the user ID's with a trick.
Search jazz
https://jazz.net/search_results.jsp?q=#page=0&type=&q=LDAP%20unsupported

You basically set "Non-LDAP user registry" = UNSUPPORTED. Then you can change the user ID's. I assume the internal identifier will keep the new ID's and the rest of the data consistent. Other posts I have seen around this indicate this, but I haven't tried myself. I am not sure if this can be run during operation or not and if other users can still log in.. I would consider a test run. If it works you should be able to reactivate the other LDAP and have the new ID's working.

0 votes


Permanent link
Hi,

Thanks for the information.

Please let me know where to change the option below, I tried finding in Advanced Properties.

The Registry type to "Non-LDAP user registry" = UNSUPPORTED ( can you please let me know what impact will happen when we change)


If we change the Option "Non-LDAP user registry" = UNSUPPORTED.
does it retain the old user id references on the Object ownership and does it allows the new user id for modifying the Objects in RTC.

Regards,
sri

Hi Sri,

I have not tried it myself and would advise to test it on a test server first.....

If you have to create 700 new users there will be no relationship between the old IDs and the new ones. I believe all user links would be broken.

It is possible to change the user ID's with a trick.
Search jazz
https://jazz.net/search_results.jsp?q=#page=0&type=&q=LDAP%20unsupported

You basically set "Non-LDAP user registry" = UNSUPPORTED. Then you can change the user ID's. I assume the internal identifier will keep the new ID's and the rest of the data consistent. Other posts I have seen around this indicate this, but I haven't tried myself. I am not sure if this can be run during operation or not and if other users can still log in.. I would consider a test run. If it works you should be able to reactivate the other LDAP and have the new ID's working.

0 votes


Permanent link
Hi,

please have a look in the Advanced Properties in the "manage application" admin section for the Jazz Team Server and the applications (CCM/QM). Search the page for LDAP. It is in the section where you have the LDAP settings.

As far as I know the UNSUPPORTED registry type makes the ID's writable, so you can change the user ID's. That data is stored internally and the ID is passed to LDAP.

Please note that after changing the ID's, you can't log in, unless you do the same change in your current LDAP.

I would also be careful with synching in data from AD unless you have verified all changed user ID's.

0 votes


Permanent link
Hello,

we had the same problem with MSADS in migrating an existing UID batch of users. The UID was not compliant to the SamAccountID of MSADS. So we utilized a non used LDAP attribute for the exusting uid and mapped the Jazz uid and WAS uid LDAP settings to that attribute.
So a user has 2 now uids
SAMAccountID = new uid for corporate standards
notUsedField = old uid from older LDAP directory mapped to uid in JTS/WAS LDAP settings

Best Regards,
Ren

0 votes


Permanent link
Hi All,
We have a similar requirement now. Could you please post the detailed steps to be followed? My understanding is that we change type to unsupported, change the id's and then point LDAP to AD?

Thanks,
Valli.

Hello,

we had the same problem with MSADS in migrating an existing UID batch of users. The UID was not compliant to the SamAccountID of MSADS. So we utilized a non used LDAP attribute for the exusting uid and mapped the Jazz uid and WAS uid LDAP settings to that attribute.
So a user has 2 now uids
SAMAccountID = new uid for corporate standards
notUsedField = old uid from older LDAP directory mapped to uid in JTS/WAS LDAP settings

Best Regards,
Ren

0 votes


Permanent link
Hi All,
We have a similar requirement now. Could you please post the detailed steps to be followed? My understanding is that we change type to unsupported, change the id's and then point LDAP to AD?

Thanks,
Valli.



That is my understanding of one option. I would recommend to try that with a test server before doing it in production.

0 votes


Permanent link
Hi All,
We have a similar requirement now. Could you please post the detailed steps to be followed? My understanding is that we change type to unsupported, change the id's and then point LDAP to AD?

Thanks,
Valli.



Rene's proposal is another valid approach I guess.

0 votes


Permanent link
Hi,
I didnt quite understand Rene's approach. And i understand that in both these cases, the object ownership info, history etc gets modified with the new id's? - this is the main concern.

Could you pls throw more light on Rene's approach and which one is comparatively easier?

Thanks.

Hi All,
We have a similar requirement now. Could you please post the detailed steps to be followed? My understanding is that we change type to unsupported, change the id's and then point LDAP to AD?

Thanks,
Valli.



Rene's proposal is another valid approach I guess.

0 votes


Permanent link
They introduced a new attribute in their MSADM user entry. This attribute got set to the user ID used in Jazz. LDAP setup has to change to use the new attribute.

You could have an "official" user ID (sAMAccountID) like 1245639856 but in Jazz you would have user ID valli. You would have the same password. We have seen this in the past also, when the official user ID's are not the desired Jazz user id's.

0 votes

Your answer

Register or log in to post your answer.

Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.

Search context
Follow this question

By Email: 

Once you sign in you will be able to subscribe for any updates here.

By RSS:

Answers
Answers and Comments
Question details

Question asked: Mar 28 '12, 11:26 a.m.

Question was seen: 6,404 times

Last updated: Mar 28 '12, 11:26 a.m.

Confirmation Cancel Confirm