OID11g DIP migrating ldap-server to a new-host

Reconfiguring AD (Domain controller)

AD – OID synchronization is setup as explained in the document  : http://docs.oracle.com/cd/E14571_01/admin.1111/e10031/odip_adm_sync.htm#OIMIG1934

For any reconfiguration relating to AD such as demoting/renaming etc, the configuration has to be updated in the following procedure :  

• Identify the “HighestCommittedUSN” of the  domain controller in use by the enabled synchronization profile. (different replicating domain controllers )

 ldapsearch –h –p 389 –D –w “ –b “” –s base “objectclass=*” highestCommittedUSN

highestCommittedUSN=3537140

•     determine the “HighestCommittedUSN” of the  domain controller to which it should be reconfigured to

ldapsearch –h –p 389 –D –w “ –b “” –s base “objectclass=*” highestCommittedUSN

 highestCommittedUSN=31243468

• Disable the current synchronization profile

•    Edit the synchronization profile to connect to the appropriate domain controller ( in this example )

•     Reset the last applied change number

- Go to the Advanced Tab

- In the section "Additional Configuration Parameters" edit 'Skip Error To Sync Next Change' and set to true

- Check "Edit and Persist" box, then Change "Last Change Number" value to a value less than highestCommittedUSN of the new DC (in this case 31243468)

Save the change

•   Enable the synchronization profile
• Monitor synchronization completes without errors