www.novell.com

Upgrading Legacy Novell Directory Services® to Novell eDirectory™ 8.6

Upgrading Legacy Novell Directory Services® to Novell eDirectory™ 8.6

Rick KillpackWSS EngineerNovell, Inc.rkillpack@novell.com

Connie RichardsoneDirectory TestingNovell, Inc.crichardson@novell.com

Vision…one NetA world where networks of all types—corporate and public, intranets, extranets, and the Internet—work together as one Net and securely connect employees, customers, suppliers, and partners across organizational boundaries

MissionTo solve complex business and technical challenges with Net business solutions that enable people, processes, and systems to work together and our customers to profit from the opportunities of a networked world

Deployed Versions Novell eDirectory™ and Novell Directory Services® (NDS®)

Product Version Build Version

Platforms

NetWare 5.1 SP4 (NDS 7) DS.nlm v7.57 NetWare 5.1

NetWare 5.1 SP 4 (NDS 8) DS.nlm v8.79 NetWare 5.1

eDirectory 8 DS.nlm & DS.dlm v8.79

NetWare 5.0,Win NT/2K

eDirectory 8.5.x DS v85.23 NetWare 5.x,Win,Solaris

NetWare 6 (eDirectory 8.6) DS.nlm v10110.20 NetWare 6

eDirectory 8.6.1 DS v10210.43 NW 5.1,NW 6,Win,Solaris,Linux

NetWare 6 SP1 (eDirectory 8.6.2)

DS.nlm v10310.17 NetWare 6

eDirectory 8.6.2 DS v103xx.xx NW 5.1,NW 6,Win,Solaris,Linux

eDirectory 8.7 DS v10410.xx NW 5.1,NW 6,Win,Solaris,Linux,AIX

Differences between eDirectory and Novell Directory Services (NDS)

NetWare 6

NetWare

NDS eDirectory

NOS directory focused on managing NetWare® servers

A cross-platform, scalable, standards-based directory

used for managing identities that span all aspects of the network—eDirectory

is the foundation for eBusiness

NetWare 5

Platforms Supported

• NetWare 5.1

• NetWare 6

• Microsoft Windows 2000 and NT

• UNIX (Solaris/Linux)

Types of Migrations

• InPlace (all platforms)

• Migration Wizard (NetWare 6 only)

• Accelerated upgrade (NetWare 6 only)

Pre-Migration Issues

• YOUR LIFE-LINE

• Novell eDirectory 8.6 Readme Addendum

http://support.novell.com/cgi-bin/search/searchtid.cgi?/10066455.htm

Pre-Migration IssuesMigration Wizard/InPlace Upgrade

• Connection issues• Performance issues• NICI configuration• NDS database inconsistencies• NLMs not loaded (TSA, SMDR, NUWAGENT,

DSBACKER)

• TRUSTEES

Pre-Migration IssuesConnection Issues

• Same protocol connection to both servers

• Ping/IPXPing both servers before starting

• Apply latest patches

Pre-Migration Issues Performance Issues

• Use as fast of a connection as possible

• Optimize IP settings if using TCP/IP Monitor !h

• Server parameters | Communications Parameters | TCP Nagle Algorithm = off

• Server parameters | Communications Parameters | TCP Delayed Acknowledgement = off

Pre-Migration IssuesNICI Configuration

Verify NICI is initialized correctly on source before upgrading

• Unload DS.NLM and reload Look for errors

• Unload PKI.NLM and reload Look for errors

• Reinstalling NICIhttp://support.novell.com/cgi-bin/search/searchtid.cgi?/10025666.htm

Pre-Migration IssuesNDS Database Inconsistencies

General Health Check• Run Local Repair and fix errors• Run TimeSync Check• Run Report Synchronization status• Perform a schema check

Set dstrace =on Set dstrace=+schema Set dstrace=*ssa Watch for an “all processed = yes”

on the Directory Services screen

Pre-Migration IssuesNLMs Don’t Load

• TSAxxx.NLM

• SMDR

• NUWAGENT

• DSBACKER

Pre-Migration IssuesTrustees are Lost after Upgrade

• SMDR problems Configuration screen appears during upgrade When prompted answer no to disabling

everything Re-run post migration Can reconfigure with a “smdr new”

Pre-Migration Issues Trustees Are Lost (cont.)

• Prepare NSS volumes for upgrade through Deployment Manager

• Run the backlinker BEFORE MIGRATING THE NSS VOLUME or trustees will be lost

Set dstrace = on Set dstrace = +blink Set dstrace = *b

Platform-Specific IssuesWindows NT/2000

• NetWare client issues Don’t uninstall Make sure patched

• http://support.novell.com/servlet/tidfinder/2960248 Install patched client first before upgrading eDirectory

• NICI issues Must upgrade NICI to 2.0x Upgrade NICI before upgrading eDirectory

• LDAP issues Port gets reset back to 389, breaking Active Directory

Platform-Specific IssuesSolaris

• NICI issues Upgrade NICI first

Make sure npki is loaded • npki –u• Npki –l

Make sure eDirectory has opened the database• Ndsstat

– Look for errors

Migrating NDS with Migration WizardNDS 6.x or NDS 7.x to eDirectory 8.6

• DIBMIG.NLM is executed

• Goes through five phases

• Results are written to sys:\system\dsmisc.log

Phase1

• Calculation Calculates the number of entries to process

the amount of memory required

• Initialization  dstrace +init for errors

• Lock the database

Phase 2

• Schema and Entry collection and allocation Allocate memory for all of the EIDs

for Entries\Partitions and Schema

Put entries into memory

Save entries to disk (if nlm only) sys:\\_netware\\ids.fil

Phase 3

• Conversion Convert schema

• Converts attributes• Converts classes• Must have healthy schema

– Dsrepair should fix issues (default options)

Convert entries

Phase 4

• Switching trustee IDs on volume Disables log in If error on volume info for whatever reason

(not mounted, corrupted info, abort) Switch IDs from old to new

(from arrays in memory or from ids.fil)

• Phase 4.5 Clear all connections

Phase 5

• Dismount and remount volumes

Recovering from a Failed Migration

Identify if destination server has new name• If No

NDS backup is stored in SYS:\SYSTEM\NUW30\NDSBU• Directory resides on both servers• Restore Directory Services on source server

– NWCONFIG (load install on NW 4.x) | Directory Options | Restore local NDS information after hardware upgrade

» NOT “restore local SERVER information after hardware upgrade”

• If Yes Take destination server off of the wire Remove Directory Services (nwconfig –dsremove) Follow steps above to restore DS on source server