Prepare for Migration

Once you have determined what you want to migrate, review the following paragraphs. Some files need to be copied and/or edited before migrating. You may also need to modify passwords after migrating.

User Accounts

Before migrating user accounts, copy the /etc/passwd file to the /tmp/mg/passwd file. Users defined in this file will be entered as Advanced Server/9000 users in the Advanced Server/9000 security database. Edit the file to contain only users you want as users in the Advanced Server/9000 security database. Advanced Server/9000 will only accept HP-UX users with uids greater than 100. The migration process will not impact an user's HP-UX account.

Encrypted passwords cannot be migrated. When the user accounts are migrated, the password is set to the user name. The account is set to inactive by default. It is recommended you use the default, then require users to change passwords before activating the accounts.

If you are maintaining full names in /etc/passwd and want to migrate these names to Advanced Server/9000, make sure all users have valid full names. To insert the user full name into the Advanced Server/9000 user accounts, you must include the full name for each user in the beginning of the comment field in /tmp/mg/passwd. The comment field will be read up to the first comma when extracting the full name. For example:

johns:passwd:202:99:John Smith, Bld 43,X2222:/home/johns:bin/sh

When you run the migration tool, you are asked whether or not user full names have been included in the /tmp/mg/passwd file.

After migration: Require that users change their passwords (which have been defaulted to user name) before making the accounts active.

Group Accounts

LAN Manager 1.x provides user-level security using the /etc/logingroup feature of HP-UX which allows a user to be a member of multiple groups, and allows access to files and directories that belong to different groups.

If you are not using the /etc/logingroup feature, you do not need to migrate group accounts.

To migrate group accounts copy the /etc/logingroup file to the /tmp/mg/logingroup file. HPUX groups defined in /tmp/mg/logingroup will be entered as Advanced Server/9000 groups. Delete any unwanted user and group names from /tmp/mg/logingroup.

With Advanced Server/9000, user and group names must be unique. If you want to migrate groups, make group and user names unique by editing the group names in the /tmp/mg/logingroup file.

Automatically Shared Directories

In LAN Manager 1.4, home directories are shared automatically as a result of having an HP-UX account. Advanced Server/9000 does not have an autoshare feature. To allow users to access their HP-UX files in their home directories through Advanced Server/9000, the migration tool provides two options:

Option one provides transparent autoshare migration for end users by creating one share for each home directory.
Option two creates one share named uxusers (which is mapped to the HP-UX directory /home) that is used for all users. Only home directories under HP-UX directory /home are migrated.
After migration, end users can access their home directories one level below the share. For example:
net use h: /home h: cd bob
NOTE: For large numbers of users (more than 50) it is strongly recommended you use option two, for ease of maintenance and better performance.

Passwords on shares are not migrated because share-level security is not supported under Advanced Server/9000.

For each home directory, the Advanced Server/9000 user and group that correspond to the HP-UX owner and group name of the home directory is given full control access permissions.

When migrating automatically shared directories and home directories, the migration tool menu.sh queries you before adding a group ACL to the top directory of a share.

HP-UX 10.0x Migrating Home Directories

If you upgraded LAN Manager 1.x from 9.x to 10.x, home directories for users may exist both in /users (HP-UX 9.x location) and in /home (HP-UX 10.x location). When you migrate to Advanced Server/9000, the migration tool for automatically shared directories, option 2, migrates home directories in /home to one share named uxusers. If you also want to migrate home directories in /users to /uxusers or to another share for example, /lmusers, you can copy the script, edit the copy, and run the modified script to migrate these home directories:

Log into your system as root and change directories:
cd /opt/asu/lanman/migrate/lmx
Make a copy of autoshrs2.awk, for example, named: autoshrsu.awk.
Use an editor to open autoshrsu.awk.
Search for the entry:
homeroot="/home"
Change the entry to:
homeroot="/users"
Do a global search for the item uxusers and change it to something else, for example, lmusers
Save the autoshrsu.awk file.
After completing the LAN Manager 1.x to Advanced Server/9000 migration (see the section, Running the Migration Tool), run your modified autoshrsu.awk script.

When migrating automatically shared directories and home directories, the migration tool menu.sh queries you before adding a group ACL to the top directory of a share.

Manually Shared Directories

Shared resources are saved in a profile on LAN Manager 1.x. To migrate this feature, make sure the LAN Manager 1.x profile file exists on the system you are migrating.

/etc/opt/lmx/profiles/setup.pro

The migration tool uses this profile information to update the Advanced Server/9000 configuration database. The migration tool prompts you for the file name in case you have saved your profile in a name other than the default.

Passwords on shares are not migrated. Share-level security is not supported in Advanced Server/9000.

For each share directory, the Advanced Server/9000 user and group that correspond to the HP-UX owner and group name of the share directory is given full control access permissions.

Since the -case parameter is not available with net share in Advanced Server/9000, HP-UX files and directories that have names in uppercase cannot be accessed by PC clients through shares in Advanced Server/9000. Users can use symbolic links to reference uppercase filenames or convert them into lowercase before they set up shares. Advanced Server/9000 provides an unsupported utility:

/opt/asu/lanman/bin/cdrutil

which can be used to automatically create symbolic links for files on CD-ROM.

The default HP-UX owner/group names used by a share-level LAN Manager/X server for manual share files are different from those used by AS/U. For AS/U to properly access these files, the HP-UX owner/group names of these files must be changed to the AS/U defaults. The migration tool generates two shell scripts to assist in changing the HP-UX owner/groups when share-level manual shares are migrated:

/tmp/mg/do_change_owner_group /tmp/mg/undo_change_owner_group

After the migration tool completes, review and edit the do_change_owner_group shell script as needed. Run the do_change_owner_group script to execute the changes. An undo_change_owner_group script is provided to back out the owner/group changes if needed.

LAN Manager/X and LAN Manager 2.2 servers do not recognize trust relationships. See "Servers Running Other Network Systems" in chapter 2 of the Concepts and Planning Guide for more information.

AS/U uses group memberships to give capabilities to users, which differs from LAN Manager which used permissions to give capabilities to users. See the Advanced Server/9000 Concepts and Planning Guide and Advanced Server/9000 Administrator's Guide for more information.

Shared Printer Queues

To migrate shared printer queues, the LAN Manager 1.x /etc/opt/lmx/profiles/setup.pro file must be on the system you are migrating.

Passwords associated with the share for a shared printer queue are not migrated -- share-level security is not supported in Advanced Server/9000.

After migrating: If you use scripts to print to LAN Manager 1.x printer queues, use the net share command to review parameter changes for Advanced Server/9000.

lanman.ini Parameters

Some parameters in the lanman.ini configuration file have changed from LAN Manager 1.x to Advanced Server/9000:

Pathname: The pathname of the configuration file is:

/etc/opt/lmx/lanmanx.ini for LAN Manager 1.x /etc/opt/asu/lanman/lanman.ini for Advanced Server/9000

Parameters that are modified include: autodisconnect, erroralert, interlocking. logonalert, maxauditlog, maxerrorlog, maxopens, and srvannounce.
Parameters that are migrated without change: accessalert, computername, maxjobs, maxprinters, maxqueues, maxruns, maxsessions, runpath, and srvhidden.
Parameters that are not supported in Advanced Server/9000: auditing, security, resauditiing

For more information on configuration parameters, see Appendix B, Server Configuration in the Advanced Server/9000 Administrator's Guide.

Before migration, the tool saves a back up of the file lanman.ini in:

/etc/opt/lmu/lanman/lanman.datetime