Prev
Next
Forums Infor / Lawson Platforms S3 Systems Administration

Migrate users to New Windows Domain

 3 Replies
 0 Subscribed to this topic
 27 Subscribed to this forum
Sort:
Author
Messages
JohnO
Basic Member
Posts: 15
Basic Member
2/10/2009 10:09 PM
    We currently are running on LSF9 with 8.1 applications and LAUA security on a Windows 2003 domain. At the moment all Lawson servers are in domain X and users are in domain X & Y. We have built a new domain and want to migrate all the users to the new domain Z while leaving the servers in the original domain X.

    How can I migrate my users to the new domain and still give them access to their jobs, job history and report files?

    It seems to me that Lawson will see this change as a new user setup and not a migration. I have searched the Lawson knowledge base but not been able to find any specific information on this kind of migration. Any suggestions would be appreciated.
    Roger French
    Veteran Member
    Posts: 549
    Veteran Member
    2/11/2009 1:59 PM
      Can you do the LDAP bind to the new domain? This would normally be for users/passwords. Your user setup, i.e. "web records" should already be migrated into the Lawson LDAP.


      Jimmy Chiu
      Veteran Member
      Posts: 641
      Veteran Member
      2/18/2009 6:12 PM
        I think you need to change 2 things in this scenario.

        1) LDAP bind needs to be redirected to the DOMAINZ domain controller for password verification
        2) all users' LSF9 services identity needs to be redirected to the new DOMAINZ\username, all the other services (SSOP and any web user records should be ok and stay the same)

        P.S. the lawson service accounts need to be migrated over to DOMAINZ too remember.
        Roger French
        Veteran Member
        Posts: 549
        Veteran Member
        2/19/2009 2:40 PM
          This may not be completely correct but here's something to consider:

          If you are moving/migrating users from Domain X/Y to Domain Z, I would think you need those *existing* user UIDs on Domain X/Y would need to be the same on Domain Z. Otherwise, your jobs probablly would not appear (look at the JOB, and QUEUEDJOB tables in GEN; the UserNames are in the format of "NTxxxxxxxxxx"). *New* users added to Domain Z, and Lawson RM would probablly be OK. The migration steps #1 and #2 which Jimmy mentions is a key part in all of this too.

          Someone pipe in if this high-level view does not seem correct.

          -R