On Wed, 25 Jul 2012 13:56:01 +0000, skonagaya wrote:

> For reasons, we've decided to convert our Dynamic Groups (some aux) to
> Static Groups. Our goal is to convert these groups and preserve eDir's
> internal ID of the object (GUID) so that all applications using the
> group will maintain association and it's group members.

That's going to be tricky to accomplish.

> 1) Create a static group, migrate members of the dynamic group query to
> the newly created static group, and finally modify the GUID value to
> that of the dynamic group

While possible, you may or may not be able to actually do this in your
environment. You'll need to test it very carefully, preferably with
objects you can afford to lose if something goes wrong.

> 2) Downgrade dynamic group by removing the dynamicGroup (or
> dynamicGroupAux) objectClass attribute. Then, migrate members of the
> dynamic group query.

This seems the safest solution. I haven't tried it, but it seems like it
should work.

> a) Is it possible to modify a GUID value of an eDir entry?

Possible, yes. Identity Manager is the only way I know of to actually do
it, though.

> b) Maybe an
> unfair question, but, are there any internal limitations of converting
> from dynamic back to static?

Unknown. I'd do it with some carefully crafted LDIF files, if I was going
to do this. Dump out the object to get all attributes of it. Then remove
the ones that are defined by the auxclass. Then remove the auxclass

David Gersic dgersic_@_niu.edu
Knowledge Partner http://forums.novell.com

Please post questions in the forums. No support provided via email.