This article is to descibe the Ownership Alignment Tool (OAT). This tool will help migrate file ownership from being owned by local users and group
The Ownership Alignment Tool (OAT) provides a flexible solution for changing resource ownership to accommodate changes in users UID/GID, and changes to group membership before, during, or after migration to Active Directory. OAT is a general-purpose tool that combines an automated solution with adequate control, reporting, error recovery, the ability to stop and restart bulk updates, and rollback capability. OAT provides the necessary flexibility to updatefile/directory ownership in a production environment. In particular, the combination of OAT and Mapped User Mode supports changing ownerships in
environments with complex application and system interdependencies.
OAT features include
Break a migration down into multiple projects
Rollback and restore to a previous state
Automated matching of Unix and Windows identities
Select and manage collections of users, systems, and groups
Search and filter capabilities
OAT allows you to
1. Match existing Windows users to their Unix identity
2. Create new Windows accounts for those that do not match
3. Resolve conflicts with existing users and groups
4. Resolve any conflicts or inconsistencies
OAT is implemented as a combination of binaries and scripts and is distributed as an install package named vasutil, specific to the target Operating System.
The OAT packages are found on the VAS product ISO in the /client/
After installing the vasutil package oat is located at /opt/quest/libexec/oat directory. OAT is invoked from the Unix command line. From 4.0.2 versions and up the OAT binaries are in the main vasclnt package.
We recommend getting help from our our Consulting Services as migration work is outside the scope of One Identity Technical Support. For information on how to contact them please visit https://support.oneidentity.com/professional-services-product-select.