Re: migrating from NIS to LDAP

[Xiaopong Tran <xtran@chuckwalla.com>]

Thanks.

I digged into their web site and documents, and it looks like that their
migration tools generated database that is somewhat different
from what I see in other directory.

For example, for user entry, from all the publicly accessible ldap
server, they start the DN with "uid=jblow,ou=users,dc=....".
But the migration tools generate something like
"cn=jblow,ou=users,dc=....". 

That pretty much means there's no single way to create
user entries.

Either way is fine for me, if we have to deal with our internal
directory only. But we are building apps that have to work
with NIS, LDAP,  NT domain, and deal with the concepts
of users and groups. So I'm concerned if every company
can create directory in different ways, it would be hard to know
how to deal with that. We need to know a list of all users
(from a specific branch of the ldap tree), the list of all groups,
and which groups a user belongs to, etc.

So, I'm just wondering, what is the "standard" way for
creating this directory thing?

Thanks

Xiaopong


On 31 Jan 2001 19:28:11 -0700, Alan Sparks wrote:
> If you're looking at using LDAP as an NIS replacement, I
> suggest you browse www.padl.com.  Dive into the software
> repository there and look at the migration tools page.
> There is also an LDAP examples page that shows a suggested
> layour of NIS-like maps.  The name service switch software
> available there (works at least with Linux and Solaris) can
> use this to pretty much replace NIS.
> -Alan
> 
> On 31 Jan 2001 17:19:31 -0800
>  Xiaopong Tran <xtran@chuckwalla.com> wrote:
> > This is  a newbie question.
> > 
> > How do you normally configured the directory to something
> > equivalent
> > to a NIS database, when you migrate from NIS to LDAP?
> > 
> > For example, I have a list of users, and a list of
> > groups. Some users
> > can be members of more than one group.
> > 
> > How do I define groups? using "groupOfNames", and so the
> > "member"
> > attribute list all the members there? And about the
> > users, do you
> > ususally define them as inetOrgPerson?
> > 
> > Thanks
> > 
> > Xiaopong
> > 
> > 
> > 
> >