kdb5 to kdb-ldap: how to migrate?

[Greg Hudson]

On Wed, 2010-01-27 at 15:30 -0500, Brian Davidson wrote:
> Is there a process to convert data from an existing kdb5 backend to  
> kdb-ldap?  If not, any suggestions on how to approach it (I can write  
> code if that's what it's going to take).

No need to write code; just "kdb5_util dump" your DB2 database and
"kdb5_util load -update" the dumpfile into a newly created LDAP
database.  You'll need to preserve and copy over the master key stash
file from your old database, since the keys you're loading will be
encrypted in the old master key.