Forcing Password Changes onWindows NT
On Windows NT, password changes are not monitored and new password values are not
captured during the migration process. Consequently, you cannot determine new password
values after the migration process.
Instead of requiring all users to change passwords when you nish migrating to 6.0, you can use
the forcepwchg command-line utility to require a password change for all the users who
changed passwords during the migration process.
Note – The forcepwchg utility is available only in the Windows packages.
You can nd the forcepwchg utility in the Windows migration directory. Execute forcepwchg
directly from that directory. No additional installation steps are necessary.
You must run forcepwchg on the Primary Domain Controller (PDC) host where the NT
components (connector, Change Detector DLL, and Password Filter DLL) are installed. You
cannot run forcepwchg remotely.
The forcepwchg utility also prints the account names (one name per line) that it is trying to
migrate. If an error occurs during the migration process, look into the next entry to the last
printed entry.
Migrating Your System
This section provides instructions for migrating a single-host deployment to version 6.0.
In a single-host deployment, all Identity Synchronization for Windows components are
installed on a single host (Windows 2000 Server, Solaris version 8 or 9, or SPARC), as follows:
■
Directory Server (one instance)
■
Core (Message Queue, Central Logger, System Manager, and Console)
■
Active Directory Connector
■
Directory Server Connector
■
Directory Server Plugin
Note – If you are using Solaris as your installation host, then a Windows 2000 machine with
Active Directory is required for synchronization purposes only. (No components would be
installed on the Windows 2000 machine.)
The following gure illustrates the migration process and serves as a checklist to supplement
the migration instructions that follow.
MigratingYourSystem
SunJavaSystemDirectoryServerEnterpriseEdition6.0 MigrationGuide • March2007116
SunCondential:Registered