8.3. Migrating 6.0, 6.1, 6.2, 7.0, and 7.1 Password Cache Data

8.3. Migrating 6.0, 6.1, 6.2, 7.0, and 7.1 Password Cache Data

  1. Log into the old server as the Certificate System user for that machine, and open the config/ directory.

    cd old_server_root/cert-old_instance/config/
    
    old_server_root/bin/cert/tools/PasswordCache old_passwordcache_password -d old_server_root/alias
    -P cert-old_instance-old_hostname-
    list
    
    cert/key prefix = cert-old_instance-old_hostname-
    path = old_server_root/alias
    about to read password cache
    
    ----- Password Cache Content -----
    internal : redhat
    Internal LDAP Database : passwordldap
    

    This lists the information stored in the password cache. Write down both the tags and the passwords, such as the following:

    internal=redhat
    

    The listed tags and passwords are used to create the password.conf file.

  2. If the old server instance used the password.conf file to start the server instance automatically, then this file must also be migrated to the new server instance.

    cp old_server_root/cert-old_instance/config/password.conf 
    /var/lib/instance_ID/conf/password.conf
    

  3. Log into the new server as the Certificate System user, and open the Certificate System config/ directory.

    cd /var/lib/instance_ID/conf/
    

  4. Log in as root, and set the file user and group to the Certificate System user and group.

    su
    chown user:group password.conf
    
  5. Log out as root. As the Certificate System user, change the permissions on the password file.

    chmod 00600 password.conf
    

  6. Copy the tags and passwords that were listed from the old pwdcache.db into the password.conf file.