Exporting LDIF data with Configuration Tool

Edit online

Use Configuration Tool to export directory data from an instance to an LDIF file.

Before you begin

To export data from an instance to an LDIF file, the instance must meet the following requirements:

Procedure

  1. Start Configuration Tool for an instance.
    See Starting Configuration Tool.
  2. From the task list in the left navigational pane, click LDIF tasks > Export LDIF data.
  3. In the Export LDIF data page, complete the following steps:
    1. In the Path and LDIF file name field, enter the path and file name of the LDIF file to which you want to export data. You can also click Browse and specify the LDIF file name with path.
    2. If the file exists and you want to overwrite the file with data, select Overwrite if file exists.
    3. If you want to export the operation attributes, such as creatorsName, createTimestamp, modifiersName, and modifyTimestamp, select Export operational attributes.
      The operational attributes are created and modified by the server when a directory entry is created or modified. The attributes contain information about the user who created or modified the entry and the time the entry was created or modified. These entries are stored as a base-64-encoded control in the LDIF file.
    4. To import data to an Advanced Encryption Standard (AES)-enabled destination server and if the server is not cryptographically synchronized with the source server, select Export data for AES-enabled destination server.
    5. To export entries that are deleted but are still stored in the tombstone subtree, select Export deleted entries.
      For more information about the tombstone subtree, see the Administering section of IBM Security Verify Directory documentation.
    6. If you selected Export data for AES-enabled destination server, specify the following values:
      • In the Encryption seed field, enter the encryption seed of the destination server.
      • In the Encryption seed filed, enter the encryption salt of the destination server. For more information about how to retrieve the encryption salt, see LDIF data management.
    7. To specify a filter for entries that are exported to the LDIF file, enter the DN of a valid replication filter in the Filter entry DN field.
      The filter exports specific database entries that meet the criteria to the LDIF file. For more information about the replication filters, see the Administering section of IBM Security Verify Directory documentation.
    8. If you want to add comments to the LDIF file, enter comments in the Comments field.
    9. If you want to export entries under a specific subtree, enter the DN of the subtree in the Subtree DN field.
      The subtree DN identifies the top entry of the subtree to write to the LDIF file. The subtree and all entries under it in the directory hierarchy, are written to the file. If you do not specify a subtree DN, all directory entries that are stored in the database are written to the output file. The entries are identified based on the suffixes that are specified in the configuration file of the directory server instance.
    10. To start the export operation, click Export.
    11. To confirm the task completion, click OK.
    12. Verify the logs that are generated for the export LDIF data operation.
    13. To clear the logs, click Clear results.
    14. To close the Export LDIF data page, click Close.
  4. To close the Configuration Tool window, click File > Exit.
  5. To confirm your action, click Yes.