By: Akhina S Kumar user 24 May 2022 at 11:11 a.m. CDT

4 Responses
Akhina S Kumar gravatar
I would like to upgrade my gluu servers from 2.4 to 4.3. The concern which I have is to migrate all the users from my lower version to higher without changing the password. Can you suggest any way to make it work.

By Aliaksandr Samuseu staff 24 May 2022 at 12:44 p.m. CDT

Aliaksandr Samuseu gravatar
Hi, Akhina. There are mainly two types of passwords in Gluu Server: the ones that are encoded by its own code (like OIDC clients' secrets, or credentials to connect to LDAP servers in different configuration pieces), and the ones that are generated by LDAP server itself (local user passwords). Normally, both of the password types are salted, each with its own salt. Importing salt used by Gluu Server's component is more or less straightforward process, but for OpenDJ it may not be such - especially with such version gap as in your case. Where do your user come from? If you create them manually, there should be too much of them, and may be it would be possible to just re-set all passwords manually? Or prepare a person auth script that would ask them to set a new password at first login.

By Akhina S Kumar user 25 May 2022 at 2:31 a.m. CDT

Akhina S Kumar gravatar
Hi Aliaksandr, We we have around 100K user manually generated Using SCIM API. Majority of these users are customers and we are not supposed to ask them for password reset. Is there any possible way to make this migration happen by preserving the user password? Our goal is to Upgrade the existing 2.4 Gluu environment to 4.3 version.

By Mobarak Hosen Shakil staff 25 May 2022 at 10:07 p.m. CDT

Mobarak Hosen Shakil gravatar
Hi Akhina, I think it's possible as 2.4 also uses `OpenDJ`. But there is no such script to upgrade directly from 2.4 to 4.3. You have to do it manually. Please, contact one of our partners, It would be better for you. Thanks Regards ~ Shakil

By Akhina S Kumar user 26 May 2022 at 12:20 p.m. CDT

Akhina S Kumar gravatar
Hi Shakil, Thank you for the suggestion. Will check on this. Thanks, Akhina