Command Reference > infacmd isp Command Reference > migrateUsers
  

migrateUsers

Migrates the groups, roles, privileges, and permissions of users in the native security domain to users in one or more LDAP security domains. Before you configure a domain to use Kerberos authentication, you must migrate the users to an LDAP security domain.
For more information about the migrateUsers command, see the Informatica Security Guide.
The infacmd isp migrateUsers command uses the following syntax:
migrateUsers

<-DomainName|-dn> domain_name

<-UserName|-un> administrator_user_name

<-Password|-pd> administrator_password

[<-SecurityDomain|-sdn>|security_domain]

[<-Gateway|-hp>|gateway_host1:port gateway_host2:port...]

[<-ResilienceTimeout|-re> timeout_period_in_seconds ]

<-UserMigrationFile|-umf> user_migration_file

The following table describes infacmd isp migrateUsers options and arguments:
Option
Argument
Description
-DomainName
-dn
domain_name
Required. Name of the Informatica domain. You can set the domain name with the -dn option or the environment variable INFA_DEFAULT_DOMAIN. If you set a domain name with both methods, the -dn option takes precedence.
-UserName
-un
administrator_user_name
Required. User name to connect to the domain. You can set the user name with the -un option or the environment variable INFA_DEFAULT_DOMAIN_USER. If you set a user name with both methods, the -un option takes precedence.
-Password
-pd
administrator_password
Required. Password for the user name. The password is case sensitive. You can set a password with the -pd option or the environment variable INFA_DEFAULT_DOMAIN_PASSWORD. If you set a password with both methods, the password set with the -pd option takes precedence.
-SecurityDomain
-sdn
security_domain
Optional. Name of the security domain to which the domain user belongs. You can set a security domain with the -sdn option or the environment variable INFA_DEFAULT_SECURITY_DOMAIN. If you set a security domain name with both methods, the -sdn option takes precedence. The security domain name is case sensitive.
Note: This security domain is the security domain of the user account used to connect to the domain, not the security domain to which the users will be migrated.
-Gateway
-hp
gateway_host1:port
gateway_host2:port
...
Optional. Use if the gateway connectivity information in the domains.infa file is out of date. The host names and port numbers for the gateway nodes in the domain.
-ResilienceTimeout
-re
timeout_period_in_seconds
Optional. Amount of time in seconds that infacmd attempts to establish or re-establish a connection to the domain. You can set the resilience timeout period with the -re option or the environment variable INFA_CLIENT_RESILIENCE_TIMEOUT. If you set a the resilience timeout period with both methods, the -re option takes precedence.
-UserMigrationFile
-umf
user_migration_file
Required. Path and file name of the user migration file. The user migration file is a text file that contains the list of native users and the corresponding LDAP users. Entries must be in the following format:
Native/<SourceUserName>,LDAP/<TargetUsername>
For example, to migrate a user named User1 from the native security domain to a user named User1 in an LDAP security domain, add the following line to the user migration file:
Native/User1,LDAP/User1
The command skips entries with a duplicate source user name or target user name.