9.2 Migrating Users into an Identity Vault

Some LDAP servers have settings that limit the number of entries that an LDAP query can return. For example, iPlanet Directory Server 5.1 has a default limit of 5000 objects.

When migrating user data from LDAP into an Identity Vault, the driver makes an LDAP query to the server and returns the objects that match the criteria (such as objectclass=User).

A limit on the number of entries that can be returned on an LDAP query can cause a migration to stop before it is complete, even though the Identity Manager driver continues to run normally.

To fix this, change the limit. For example, do the following in iPlanet:

  1. Go to the Configuration tab, then select Database settings.

  2. Raise the look-through limit on the LDBM plug-in tab from the default of 5000 to an appropriate number.

    This is the number of records the query is allowed to look at while fulfilling the query.

  3. Go to the Configuration tab, select Directory Server Settings, select the Performance tab, then raise the size limit according to the number of user accounts you need to migrate.

    This is the actual number of records that the query is allowed to return.

    After these settings have been adjusted, the migration should complete correctly.