Naming and Directory Services (DNS, NIS, and LDAP)

7. Create merged versions of the tables.Use the file merge procedure of your choice to produce the merged tables. If noother tools are available, you can use diff(1) to collect differences between the/before and /after files, and merge manually with a text editor.The following example assumes that the merged results are available in /after.8. Load the merged data into NIS+. The following example uses the group table.# nisaddent -m -f /after/group group9. Remove LDAP entries that should not exist after the merge.A. If there are LDAP entries that do not exist in the (now merged) NIS+ data, andthat should not exist in LDAP after the upload, you must remove those LDAPentries.Your LDAP server might provide a convenient method for removing multipleentries, such as a way to delete all entries in a container. If this is not the case, youcan use ldapsearch(1) to generate a list of entries for each container. Forexample, to generate a list of all entries in the ou=Rpc container, useldapsearch(1) as follows.# ldapsearch -h server-address -D bind-DN -w password \-b ou=Rpc,search-base ’objectClass=*’ dn | \grep -i ou=Rpc | grep -v -i \^ou=Rpc > \/tmp/delete-dnSee “Performance and Indexing” on page 272 for an explanation of themeta-arguments (server-address, bind-DN, for example).B. You can now edit the result file (/tmp/delete-dn) to specify only those entriesthat should be removed. Alternatively, in order to remove all entries in thecontainer, use the file as is, and rely on the NIS+ upload to restore the LDAP data.Either way, you should backup the LDAP data before performing the ldapdeleteoperation below.C. Use ldapdelete to remove LDAP entries, redirecting stdout (which usuallyis one blank line for each entry removed) to /dev/null.# ldapdelete -h server-address -D bind-DN -w password \/tmp/delete-dn /dev/nullD. Repeat the above procedure for each container that has at least one entry whichmust be removed.10. Upload the merged NIS+ data to LDAP.a. Stop the NIS+ service.# svcadm disable network/rpc/nisplus:defaultb. Perform the upload.# /usr/sbin/rpc.nisd -D -m tmpmap \-x nisplusLDAPinitialUpdateAction=to_ldap \-x nisplusLDAPinitialUpdateOnly=yesChapter 16 • Transitioning From NIS+ to LDAP 267