So I had time to do the LDAP schema check which has not turned out promisingly as all of the univention-ldap schemas are missing on the new/backup machine
Unfortunately the WinMerge printout is capped in width, so I copied the missing lines below:
UCS-Diff_LDAP.pdf (293.5 KB)
include /etc/ldap/schema/core.schema
include /etc/ldap/schema/cosine.schema
include /etc/ldap/schema/nis.schema
include /etc/ldap/schema/inetorgperson.schema
include /etc/ldap/schema/ppolicy.schema
include /usr/share/univention-ldap/schema/samba.schema
include /usr/share/univention-ldap/schema/mail.schema
include /usr/share/univention-ldap/schema/user.schema
include /usr/share/univention-ldap/schema/directory.schema
include /usr/share/univention-ldap/schema/policy.schema
include /usr/share/univention-ldap/schema/dnszone.schema
include /usr/share/univention-ldap/schema/univention.schema
include /usr/share/univention-ldap/schema/lock.schema
include /usr/share/univention-ldap/schema/custom-attribute.schema
include /usr/share/univention-ldap/schema/krb5-kdc.schema
include /usr/share/univention-ldap/schema/dhcp.schema
include /usr/share/univention-ldap/schema/portal.schema
include /usr/share/univention-ldap/schema/univention-dhcp.schema
include /usr/share/univention-ldap/schema/univention-default.schema
include /usr/share/univention-ldap/schema/license.schema
include /usr/share/univention-ldap/schema/share.schema
include /usr/share/univention-ldap/schema/printer.schema
include /usr/share/univention-ldap/schema/automount.schema
include /usr/share/univention-ldap/schema/network.schema
include /usr/share/univention-ldap/schema/solaris.schema
include /usr/share/univention-ldap/schema/courier.schema
include /usr/share/univention-ldap/schema/univention-scalix.schema
include /usr/share/univention-ldap/schema/univention-syntax.schema
include /usr/share/univention-ldap/schema/admin-settings.schema
include /usr/share/univention-ldap/schema/template.schema
include /usr/share/univention-ldap/schema/univention-ldap-acl.schema
include /usr/share/univention-ldap/schema/nagios.schema
include /usr/share/univention-ldap/schema/univention-directory.schema
include /usr/share/univention-ldap/schema/univention-objecttype.schema
include /usr/share/univention-ldap/schema/msgpo.schema
include /usr/share/univention-ldap/schema/univention-object-metadata.schema
include /usr/share/univention-ldap/schema/univention-ldap-extension.schema
include /usr/share/univention-ldap/schema/udm-extension.schema
include /usr/share/univention-ldap/schema/univention-data.schema
include /usr/share/univention-ldap/schema/blocklist.schema
SAML schema
include /usr/share/univention-saml/schema/univention-saml.schema
include /var/lib/univention-ldap/local-schema/jitsimeet.schema
include /var/lib/univention-ldap/local-schema/kopano4ucs.schema
include /var/lib/univention-ldap/local-schema/msgpipsec.schema
include /var/lib/univention-ldap/local-schema/msgpsi.schema
include /var/lib/univention-ldap/local-schema/msgpwl.schema
include /var/lib/univention-ldap/local-schema/msprintconnectionpolicy.schema
include /var/lib/univention-ldap/local-schema/mswmi.schema
include /var/lib/univention-ldap/local-schema/networkaccess.schema
include /var/lib/univention-ldap/local-schema/nextcloud.schema
include /var/lib/univention-ldap/local-schema/openid-connect-provider.schema
include /var/lib/univention-ldap/local-schema/self-service-passwordreset.schema
include /var/lib/univention-ldap/local-schema/univention-app.schema
include /var/lib/univention-ldap/local-schema/univention-monitoring.schema
include /var/lib/univention-ldap/local-schema/univention-portal.schema
include /var/lib/univention-ldap/local-schema/univention-virtual-machine-manager.schema
How can I backup/restore this?
I’ve found a guide here:
but that seems to include some major changes to the system.
All users and computers are present on the backup system, so in essence it would suffice for me to import my encrypted Nextcloud data (as there are some non domain users and their data) and promote the new system to master (since Kopano was dropped, I use the system only as AD domain controller).
Thanks for your support.