Forum GLPI-Project

bwoods

Member

Registered: 2013-06-10

Posts: 5

Moving GLPI to Between Active Directory Domains

We are currently at the end of a full upgrade from an old Windows 2000 domain to a new Windows 2008 R2 domain. Due to other issues, the two domains are totally separate, different DNS names, etc.

My question: is it possible to migrate out GLPI install to the new domain and maintain user associations/history? Users all have accounts on both domains with the same username.

bwoods

Member

Registered: 2013-06-10

Posts: 5

Re: Moving GLPI to Between Active Directory Domains

Sorry, additional information on the install:

GLPI 0.83.8
Ubuntu 12.04.2

samcro

Member

From: Munich, Bavaria, Germany

Registered: 2013-04-24

Posts: 216

Re: Moving GLPI to Between Active Directory Domains

did you import all users from LDAP and are they dynamic? if so and their usernames are EXACTLY the same, i think/guess you just have to export/import your SQL database and setup a new LDAP directory for your new domain...

Last edited by samcro (2013-06-20 10:07:45)

---

GLPI 0.84.7 with FusionInventory on LAMP 14.04.1 LTS
~150 clients

bwoods

Member

Registered: 2013-06-10

Posts: 5

Re: Moving GLPI to Between Active Directory Domains

Thanks for you input samcro! The user names are exactly the same, but that won't resolve the issue, as I know that GLPI stores the user DN in at least one location (glpi_users->userdn.) Are any other changes that would need to be made?

bwoods

Member

Registered: 2013-06-10

Posts: 5

Re: Moving GLPI to Between Active Directory Domains

OK, so here is what I have so far:

1) Add the new LDAP server from the GLPI UI
2) The auths_id of the user record in glpi_users needs to be changed to point to the correct LDAP record in glpi_authsldap
3) The user_dn of the user record in glpi_users needs to change to the correct user DN in the new domain

Beyond that, I don't think that anything else needs to happen...at least it isn't immediately apparent. Anyone else have any input?

bwoods

Member

Registered: 2013-06-10

Posts: 5

Re: Moving GLPI to Between Active Directory Domains

Just in case anyone comes across this in the future...the steps I detailed above seem to be working correctly. I even found that most users didn't have a user_dn field set, so they just needed to have their auths_id changed.