Red Hat CERTIFICATE SYSTEM 7.2 - MIGRATION GUIDE Manual page 226

1. Log into the new DRM instance server hosting server.example.com as the Certificate System user, and export
the new internal database content to LDIF.
cd /opt/redhat-ds/slapd-DS-instance/db
db2ldif -n server.example.com-rhpki-kra
The LDIF file location is given when the export from the database is complete.
ldif file:
/opt/redhat-ds/slapd-DS-instance/ldif/2005_06_07_720658.ldif
2. Open the given LDIF location, and rename the LDIF file new.ldif.
cd /opt/redhat-ds/slapd-DS-instance/ldif
mv 2005_06_07_720658.ldif new.ldif
NOTE
For this example, since the new Certificate System migration utility was copied during the CA migration de-
scribed previously, there is no need to obtain it again for the DRM migration.
3. Run the db2ldif command to export the database contents to LDIF.
cd /usr/netscape/servers/slapd-drm-db
db2ldif -n userRoot
The location of the LDIF file is shown when the export from the database is complete.
ldif file:
/usr/netscape/servers/slapd-drm-db/ldif/2005_06_07_390512.ldif
4. Open the given LDIF location, and rename the LDIF file old.ldif.
cd /usr/netscape/servers/slapd-drm-db/ldif
mv 2005_06_07_390512.ldif old.ldif
5. Adjust the LDIF content of old.ldif.
NOTE
For this example, the amount of data is relatively small, so any text editor work. For large files, use an appropriate
program.
a. Open the 6.1 DRM database ldif/ directory.
cd /usr/netscape/servers/slapd-drm-db/ldif/
b. Replace the following entry with the one in new.ldif:
cn=aclResources,o=CertificateServer
2.6. Step 6: Migrating Internal
Databases
220 Chapter 15. Detailed Example of a