Migrate from CROWD to openLDAP

Christopher Anderlik

Hello.

I am trying to migrate all my internal stored Directories/Groups/Users from Crowd to openLDAP.

1) I already found this ticket (migrate from one directory to another) which is not solved yet:

https://jira.atlassian.com/browse/JRA-27868

So my question: Is there already any possibility which I did not find yet??

2) If there is no built solution yet the idea is to export a ldap-dif from Crowd-database and import it in openLDAP.

Maybe with a statement like this:

select 'dn: cn=' || user_name || ',ou=users,dc=ebcont,dc=com' || chr(13) ||
       'objectClass: person' || chr(13) ||
       'objectClass: top' || chr(13) ||
       'email: ' || email_address || chr(13) ||
       'uid: ' || user_name || chr(13) ||
       'cn: ' || user_name || chr(13) ||
       'structuralObjectClass: person' || chr(13) ||
       'givenName: ' || display_name  || chr(13) || 
       'userPassword:: '|| credential || chr(13) || chr(13)
from cwd_user ub;

But the in crowd saved passwords are saved with password-encryption "ATLASSIAN-SECURITY" -> so I cannot use theses hashes in openLDAP.

Is there a way to change the password-encryption?? So that I can import md5 hashes in openLDAP??

Thank you very much!

Ashma Shrestha_n7cwm3

Hi Christopher,

1. I haven't paid much attention to the ticket you have mentioned but it would be good to verify if they will be supporting internal directory to external directory migration
2. When I did a migration from Confluence to LDAP, I used the Crowd CSV import tool. NOTE that "ATLASSIAN-SECURITY" password-encryption is not supported by openLDAP and cannot be changed to anyother hash (We did a good amount of research on this and there is no easy way to carry over the Password therefore we decided to reset the password for all the users during migration).Steps that I followed were
   1. Configure your LDAP to Crowd
   2. Created two CSV exports form the Crowd (or Confluence Directories) for user and another for group membership
   3. Store the two CSV's in the Crowd server and follow the CSV import instructions.

Hope this helps

-Ashma