How to export VMDir information from vCenter Server using the JXplorer utility.

Products

• VMware vCenter Server

Issue/Introduction

This article explains how to use JXplorer, the ldifde command on Windows or the ldapsearch command in VCSA to export the vmdir information from vCenter Server as an LDIF file.

 

Environment

VMware vCenter Server 8.0.x
VMware vCenter Server 7.0.x
VMware vCenter Server 6.7.x
VMware vCenter Server 6.5.x
VMware vCenter Server 6.0.x
VMware vCenter Server 5.5.x

Resolution

To export the information contained in VMDir in LDIF format, you can use one of the following methods:

• Collect the dump file using jxplorer

• Use the ldifde command

• Use the ldapsearch command

 

Notes:

• If the vSphere domain was changed from the default vsphere.local, ensure to change the values for dc.

• For vSphere 5.5, use port 11711 instead of port 389.
   

Collect the dump file using jxplorer

1. Install JXplorer using JXplorer download page.
   
   Disclaimer: VMware is not responsible for the reliability of any data, opinions, advice, or statements made on third-party websites. Inclusion of such links does not imply that VMware endorses, recommends, or accepts any responsibility for the content of such sites.

2. Open the JXplorer utility.

3. Click on File > Connect and enter the following information:

Host: FQDN_of_SSO_Server
Protocol: LDAP v3
Base DN: dc=vsphere,dc=local
Security Level: User + Password
Security User DN: cn=administrator,cn=users,dc=vsphere,dc=local
Security Password: administrator password for the identity or SSO server

 

Note: The example above assumes that your SSO domain is called vsphere.local. If you are using a different domain name for the SSO domain, please ensure to alter the Base DN and the Security User DN accordingly.
 

5. Select LDIF > Export Full Tree.

6. Click OK and save as PSC_FQDN.ldif. (using the actual FQDN of the PSC as file name)
    

Note: Java is required for JXplorer to function properly.
 

Windows installed Single Sign-On or Platform Service Controller using ldifde

Note: The ldifde command is only available on Windows if the server has the AD DS or Active Directory Lightweight Directory Services (AD LDS) server role installed.

1. Open a command prompt on the vCenter Server host machine.

2. Run this command to export the vmdir as an ldif dump file (instead of PSC_FQDN please use the actual FQDN of your platform service controller or vCenter Server):
   
   # ldifde -f c:\PSC_FQDN.ldif -s PSC_FQDN -t 389 -a "cn=Administrator,cn=Users,dc=vsphere,dc=local" *

 

vCenter Server Appliance or Platform Service Controller using ldapsearch

1. Log in to vCenter Server Appliance using SSH and root credentials.

2. Run this command to enable the Bash shell:
   
   # shell.set --enabled true
    

3. Type shell and press Enter.

4. Run this command to export the vmdir as an ldif dump file named after the FQDN of the PSC and the current date. Enter the password for the SSo administrator account when prompted:
   
   # /opt/likewise/bin/ldapsearch -b "dc=vsphere,dc=local" -s sub -D "cn=Administrator,cn=Users,dc=vsphere,dc=local" -W > $(hostname)_"`date +"%d-%m-%Y"`".ldif

Additional Information