Enterprise Administration Guide › Using UNAB › How You Control Host Access and Configure UNAB › How to Migrate Users and Groups to Active Directory

How to Migrate Users and Groups to Active Directory

Migrating users from a UNIX host to Active Directory simplifies user and group management on UNIX hosts, by consolidating management tasks into a single management application.

To migrate users and groups to Active Directory, do the following:

1. Run the migration process in emulation mode.

   In emulation mode, UNAB does not migrate users or groups to Active Directory. If found, UNAB logs the conflicts in a log file that reports on possible conflicts in users and groups attributes. By default, the UNAB conflicts file, migrate.conflicts, is located in the following directory:

   /opt/CA/uxauth/log
   

2. Download the conflicts file.

   You download the conflicts file from the host in a CVS format from CA ControlMinder Enterprise Management.

   Note: You must wait for the next scheduled report snapshot to complete before you can download the CSV.

3. Create Active Directory accounts for each local account that you want to migrate to Active Directory.

   UNAB migrates only those users that have an existing Active Directory user account.

   Note: Do not need to specify the UNIX attributes when you create the user accounts. You do not need to create the groups in Active Directory, the migration tool creates the groups during the migration process.

4. Upload a CSV file that resolves the conflicts to the host.

   UNAB restarts the migration process, attempting to migrate the resolved accounts and groups.

5. Review the conflicts file again after the migration ends to verify that the user accounts and groups that were previously reported in the file were successfully migrated.

More information:

Users and Groups Migration

uxconsole -migrate—Migrate UNIX Users and Groups to Active Directory

The UNAB Conflicts File