Zimbra to Zimbra migration

[wfweaver]

We need to migrate mailboxes from one zimbra install to a remote one. I can't do a backup/restore or rsync method as the remote has it's own LDAP and settings it must maintain and I can't overwrite that. I've read all the migration stuff I could find. Looked into zmztozmig, REST, zmmailbox options. So I think I have a plan for the actual data move. However all of these require the accounts/domains to be pre-created on the target server. Ok, no problem there either - can bulk provision those. HOWEVER, what I can't find is how to capture the password on the source in order to set it up on the target. Will that get set when the tgz is loaded by zmztozmig or REST or zmmailbox? If not, how do I get it from the source to target account? In other words how do I pull it out of the existing Zimbra install in order to set it up on the target?

We need to make this a seamless migration for the users. It will involve changing DNS and such in order to point them to the new remote servers. We don't want them to have to change anything - just log into the new servers without knowing and finding their mailboxes.

Please advise.

[raj]

you need to extrat all the "userPassword" fields for each user in zimbra..
once you have the list you can create it on target server using
* zimbra passwords are in hash..you dont need to know what they are..you can just MOVE the HASH to target. i.e.:

zmprov ca user@domain displayName MyName userPassword '{crypt}kiV2nC14UfcK6'

i think zimbra takes all the stuff openLDAP can take for example..
userPassword: {SHA}OAPD3WRiNcowtGILlMmgqW7EbQ8=
userPassword: {MD5}f0llSo0iGQ1hq3E1L5RP1Q==
userPassword: {crypt}kiV2nC14UfcK6

once all the users are created you can imapsync the mails..there are ways on fourm to migrate email without knowing the password using admin passwords.

Raj

[wfweaver]

Excellent, that did the trick! One last question on this, if I create the accounts via the new bulk provision tool, can I set the password directly there via this method or do I have to go back and zmprov ma to do that?

[raj]

u should use the scripting using ZMPROV for maximum control and that way you use only one thing to create stuff.
bulk provisioning will not give you lot of control

* can you document here in few lines how you extracted the hash for users in existing zimbra.

Raj

[wfweaver]

I tried several different attempts at zmprov ga to get the password including -z to no avail - always said "VALUE BLOCKED". However, when I physically went on the LDAP server and tried it, I was able to pull it out directly with zmprov ga.

Is that what you were looking for?

[raj]

yes i dont see a documented process to extarct user pass hash using commandline for migrations..
can you please do that..i can create wiki from it once i have all info

Raj

[danielfarrelly]

Originally Posted by raj

yes i dont see a documented process to extarct user pass hash using commandline for migrations..

Raj

Would be great if you guys could figure that out.