Import/Export an LDIF file

Import an LDIF file

You can transfer information between different Directory Servers by using LDAP Data Interchange Format (LDIF) files. See LDAP data interchange format (LDIF) for more information. Before you begin this procedure, transfer the LDIF file to your iSeries server as a stream file.

To import an LDIF file to the Directory Server, take these steps:

1. If the directory server is started, stop it. See Start/stop the Directory Server for information about stopping the directory server.
2. In iSeries Navigator, expand Network.
3. Expand Servers.
4. Click TCP/IP.
5. Right-click IBM Directory Server and select Tools, then Import File.

   Optionally you can have the server replicate the newly imported data when it is next started by selecting Replicate imported data. This is useful when adding new entries to an existing directory tree on a master server. If you are importing data to initialize a replica (or peer) server, typically you will not want to have the data replicated, as it might already exist on the servers for which this server is a supplier.

Export an LDIF file

You can transfer information between different Directory Servers by using LDAP Data Interchange Format (LDIF) files, see LDAP data interchange format (LDIF). You can export all or part of your LDAP directory to an LDIF file.

To export an LDIF file from the directory server, take these steps:

1. In iSeries Navigator, expand Network.
2. Expand Servers.
3. Click TCP/IP.
4. Right-click IBM Directory Server and select Tools, then Export File.
   Note:
   If you do not specify a fully qualified path for the LDIF file to export data into, the file will be created in the home directory specified in your operating system user profile.
5. Specify whether to Export entire directory or Export selected subtree as well as whether to Export operational attributes. The operational attributes that are exported are creatorsName, createTimestamp, modifiersName, and modifyTimestamp.

1. When exporting data for importation into V5R3 or earlier directory servers, do not select Export operational attributes. These operational attributes cannot be imported into V5R3 or earlier directory servers.
2. You can also create a full or partial LDIF file with the ldapsearch utility, see ldapsearch. Use the -L option and redirect the output to a file.
3. Be sure to set authority to the LDIF file to prevent unauthorized access to directory data. To do this, right-click on the file in iSeries Navigator, then select Permissions.