Hello,
I want to replicate an IBM Lotus Directory version 8 to my OpenLDAP server.
Does anyone have such an experience? Anyone to give me a good advice? Thank you.
I was thinking of several questions: 1. I need IBM attributes, objectClasses etc. to use as an additional OpenLDAP schema. 1a. Is it possible to create a schema file using LDAP schema discovery? 2. Is Syncrepl of any use here? 3. As a last resort I could use ldapsearch+ldapadd as soon as I get Lotus schema.
Thanks for any help. Best regards, Ildar
Ildar Mulyukov wrote:
I want to replicate an IBM Lotus Directory version 8 to my OpenLDAP server.
You mean Domino/LDAP 8.x? Mainly it's just the LDAP interface to the Notes address book.
Does anyone have such an experience?
Partially.
I was thinking of several questions:
- I need IBM attributes, objectClasses etc. to use as an additional
OpenLDAP schema.
You can add those schema elements to your OpenLDAP installation. Not everything makes sense though. Think about your schema carefully. Make sure to clearly investigate what your LDAP clients need.
1a. Is it possible to create a schema file using LDAP schema discovery?
What do you mean with LDAP schema discovery? I'd dive into the subschema subentry of Domino/LDAP. It's accessible like that of any other LDAPv3 server.
- Is Syncrepl of any use here?
Nope, since Domino/LDAP cannot act as syncrepl provider.
- As a last resort I could use ldapsearch+ldapadd as soon as I get
Lotus schema.
Yes. Depending on the size of the database you could query the timestamp operational attributes. Cannot test myself since I don't have a Domino server running here.
Ciao, Michael.
Hello, Michael, ppl
thank you for detailed comments. On 26.03.2008 21:16:54, Michael Ströder wrote:
Ildar Mulyukov wrote:
I want to replicate an IBM Lotus Directory version 8 to my OpenLDAP
server. You mean Domino/LDAP 8.x? Mainly it's just the LDAP interface to the Notes address book.
Yes. I want to replicate the whole Domino/LDAP. It's not (yet) too big.
I was thinking of several questions:
- I need IBM attributes, objectClasses etc. to use as an additional
OpenLDAP schema.
You can add those schema elements to your OpenLDAP installation. Not everything makes sense though.
Ok, I'll look at it carefully.
Think about your schema carefully. Make sure to clearly investigate what your LDAP clients need.
What's so difficult with it? AFAIK, IBM has their own OIDs, that cannot intersect with any others.
1a. Is it possible to create a schema file using LDAP schema
discovery? What do you mean with LDAP schema discovery? I'd dive into the subschema subentry of Domino/LDAP. It's accessible like that of any other LDAPv3 server.
Yes, I mean that. I wanted to generate OpenLDAP schema automatically using these subschema subentries. Do you think it's possible? Did you see someone doing that before?
- Is Syncrepl of any use here?
Nope, since Domino/LDAP cannot act as syncrepl provider.
I thought so.
- As a last resort I could use ldapsearch+ldapadd as soon as I get
Lotus schema.
Yes. Depending on the size of the database you could query the timestamp operational attributes. Cannot test myself since I don't have a Domino server running here.
Great. But I still need to make schemas beforehand. Or I don't?
Thanks a lot. Best regards, Ildar
Ildar Mulyukov wrote:
On 26.03.2008 21:16:54, Michael Ströder wrote:
Think about your schema carefully. Make sure to clearly investigate what your LDAP clients need.
What's so difficult with it?
It's not rocket science. You just have to sit down and do some homework. This can be easy or sometimes it's a real pain.
AFAIK, IBM has their own OIDs, that cannot intersect with any others.
1. I vaguely remember conflicting attribute names used with different IBM-related OIDs. Not sure whether it was Domino/LDAP or IBM Directory Server though.
2. It's also a question of data quality. Sometimes directories contain wrong data (syntax or semantics). Since I don't know your data you have to investigate this carefully in the light of what your LDAP clients expect to be stored in various attributes.
Ciao, Michael.
openldap-technical@openldap.org
-
Ildar Mulyukov -
Michael Ströder