15.2.5. Step 5: Migrating Password Cache Data

15.2.5. Step 5: Migrating Password Cache Data

To migrate the data from the 6.1 pwdcache.db and password.conf files to the 7.3 password.conf, do the following:

NOTE

For more information on migrating the password cache from 6.1 to 7.3, see Section 8.3, “Migrating 6.0, 6.1, 6.2, 7.0, and 7.1 Password Cache Data”.

  1. Log into the the old server on alpha.example.com as the Certificate System user, and run PasswordCache to extract the contents from the password cache. 

    cd /usr/netscape/servers/cert-drm/config

/usr/netscape/servers/bin/cert/tools/PasswordCache /usr/netscape/servers 
-d /usr/netscape/servers/alias -P cert-drm-alpha- 

list
cert/key prefix = cert-drm-alpha-
path = /usr/netscape/servers/alias
about to read password cache

----- Password Cache Content -----
internal : emerald
Internal LDAP Database : emerald

  2. Write down this information.

  3. Since the 6.1 Certificate System uses password.conf start the DRM instance automatically on alpha.example.com, copy the password.conf file to server.example.com, overwriting any existing password.conf file: 

    cp /usr/netscape/servers/cert-drm/config/password.conf 
/var/lib/rhpki-kra/conf/password.conf

  4. Log into the new server hosting server.example.com as the Certificate System user, and open the Certificate System conf/ directory. 

    cd /var/lib/rhpki-kra/conf/

  5. Log in as root, and set the file user and group to the new server Certificate System user and group. 

    su

chown pkiuser:pkiuser password.conf

  6. Log out as root. As the Certificate System user, change the permissions on the file. 

    chmod 00600 password.conf

  7. Copy the extracted passwords from the 6.1 pwdcache.db database into the 7.3 password.conf file.