Exporting Weblogic Embedded LDAP Server

The embedded LDAP server is the default security provider database for the WebLogic Authentication, Authorization, Credential Mapping and Role Mapping providers.


It contains user, group, group membership, security role, security policy, and credential map information.


Oftentimes, users need to migrate a whole WLS domain to another machine or to make a mirror copy of the domain in another environment, or to just make a backup copy of your Security Realm.


For this purpose there is the pack and unpack domain or the Domain Template Builder, but they don't migrate the Embedded LDAP data.


If you have created users, groups, roles, etc in your embedded LDAP, you'd have to recreate them manually, after the domain is brought up the the new machine.


Fortunately, WLS comes with a tool to export the whole content of your WLS security Ream, read after the jump on how to migrate the whole content of the WLS security ream.



Migrating the contents of your Security Realm is simple, you only need access to the Admin Console.


1 - Go to "Security Realms", "myrealm".


2 - Select "Migration" and "Export" tab

3 - Enter a folder where it should generate the exported files and click "Save".


4 - 5 Files should be created in the designated folder:


DefaultAuthenticator.dat, DefaultCredentialMapper.dat, exportIndex.dat, XACMLAuthorizer.dat and XACMLRoleMapper.dat.


5 - To import them to the target domain, just to the same as before, but this time choose the "Import" tab.


6 - Enter the folder where you have the files stored and click "Save".


There you go, all your users, groups, roles, security policies, etc are now available in the new domain!