{"id":2298,"date":"2011-01-11T03:31:16","date_gmt":"2011-01-11T07:31:16","guid":{"rendered":"http:\/\/onlineappsdba.com\/index.php\/2011\/01\/11\/exporting-and-importing-groups-to-oid\/"},"modified":"2011-01-11T03:33:27","modified_gmt":"2011-01-11T07:33:27","slug":"exporting-and-importing-groups-to-oid","status":"publish","type":"post","link":"https:\/\/onlineappsdba.com\/index.php\/2011\/01\/11\/exporting-and-importing-groups-to-oid\/","title":{"rendered":"Exporting and importing groups to OID"},"content":{"rendered":"

I got an opportunity to work on exporting and importing groups from\/to OID excluding the members of the groups today. In our case, the development environment had groups with users as members of it already and need to move those users to production environment. We need to provision the roles\/groups to users into OID using Oracle Identity Manager and thus we had to exclude the members of the groups.<\/p>\n

First, we need to export the groups from OID as shown below:<\/p>\n

.\/ldapsearch -p 389 -h\u00a0 ldap_hostname -D “cn=orcladmin” -w welcome1 -L -s one -b “cn=Groups,dc=oracle,dc=com” “(objectclass=*)” “*” > oid_groups.ldif<\/font><\/p>\n

Now, we need to edit this oid_groups.ldif file to remove the lines involving uniquemember pertaining to groups as shown below:<\/p>\n

uniquemember: cn=testuser,cn=users,dc=oracle,dc=com<\/p>\n

If you are using TextPad to edit this file, there is a handsome option Macro to do it in a second.<\/p>\n

Once the ldif is ready to imported, we need to run ldap command as shown below in production environment to import all the groups.<\/p>\n

.\/ldapadd -h ldap_hostname -p 389 -D “cn=orcladmin” -w admin123 -c -v -f oid_groups.ldif<\/font><\/p>\n

That’s it. Your production environment is ready with all groups and OIM can readily provision roles to it.<\/p>\n

Now, let us understand in detail about the ldap command options we used for exporting and importing.<\/p>\n

Exporting: <\/strong><\/p>\n

.\/ldapsearch -p 389 -h\u00a0 ldap_hostname -D “cn=orcladmin” -w welcome1 -L -s one -b “cn=Groups,dc=oracle,dc=com” “(objectclass=*)” “*” > oid_groups.ldif<\/p>\n

-h : ldap hostname (in our case, this is development environment)<\/p>\n

-p : ldap port<\/p>\n

-D : OID administrator<\/p>\n

-w : OID admin password<\/p>\n

-L : Print entries in LDIF format<\/p>\n

-s : This defines scope of search.<\/p>\n