Previous Topic: Directory ServerNext Topic: Configure the CA Directory Properties File


CA Directory Pre-Installation Steps

To prepare for installation, confirm that your server environment is properly prepared. Then install the required packages.

Follow these steps:

  1. Install 64-bit Linux RHEL 6.1.
  2. Download, but do not install, a 64-bit JDK to your local system or to a file share. You can also use a JRE in place of a JDK.

    Note: The system installer can install the JDK automatically. We recommend that you download a JDK and allow the system to install it.

  3. Verify that the systems where you plan to install CA Directory and the Provisioning Server can ping each other. For a high availability installation, make sure each system can ping the three other systems. I.e., each CA Directory system can ping the other, and can ping both Provisioning Server systems, and vice versa.
  4. Be sure that this system has sufficient disk space for the number of tenants it will support.

    When you deploy a tenant, an LDIF file is uploaded through DSA Management. The upload process requires twice the amount of space.  For example, if the DSA data store is 2.5 GB, the system needs 5 GB available while the LDIF is loading.

  5. Obtain the Directory Server ISO image from the CA Support site and extract it.
  6. Copy the kit (CAM-DIR_kit-date.zip) to / (the root folder).
  7. Unzip the kit.
  8. Install the following packages:
  9. Run the following commands to set the state of the firewall/ip tables:
    chkconfig iptables off
    service iptables stop
    
  10. Run the following commands to check and set the state of SELinux:
    1. Check the status:
      sestatus
      
    2. If the response is "permissive" or "disabled", do nothing
    3. If the response is "enforcing", change the state:
      sudo vi /etc/selinux/config
      setenforce 0
      
  11. Enter the following commands:
    echo "[0001]" >> /etc/yum.conf
    echo "mediaid=`head -n 1 /media/RHEL_6.1\ x86_64\ Disc\ 1/.discinfo`"  >> /etc/yum.conf
    echo "name=respooracle" >> /etc/yum.conf
    echo "baseurl=file:///media/RHEL_6.1\ x86_64\ Disc\ 1/" >> /etc/yum.conf
    echo "enabled=1" >> /etc/yum.conf	
    echo "gpgcheck=0" >> /etc/yum.conf
     
    yum  install -y binutils-2*x86_64*
    yum  install -y glibc-2*x86_64* nss-softokn-freebl-3*x86_64*
    yum  install -y glibc-2*i686* nss-softokn-freebl-3*i686*
    yum  install -y compat-libstdc++-33*x86_64*
    yum  install -y glibc-common-2*x86_64*
    yum  install -y glibc-devel-2*x86_64*
    yum  install -y glibc-devel-2*i686*
    yum  install -y glibc-headers-2*x86_64*
    yum  install -y elfutils-libelf-0*x86_64*
    
    yum  install -y elfutils-libelf-devel-0*x86_64*
    yum  install -y gcc-4*x86_64*
    yum  install -y gcc-c++-4*x86_64*
    yum  install -y ksh-*x86_64*
    yum  install -y libaio-0*x86_64*
    yum  install -y libaio-devel-0*x86_64*
    yum  install -y libaio-0*i686*
    yum  install -y libaio-devel-0*i686*
    yum  install -y libgcc-4*x86_64*
    
    yum  install -y libgcc-4*i686*
    yum  install -y libstdc++-4*x86_64*
    yum  install -y libstdc++-4*i686*
    yum  install -y libstdc++-devel-4*x86_64*
    yum  install -y make-3.81*x86_64*
    yum  install -y numactl-devel-2*x86_64*
    yum  install -y sysstat-9*x86_64*
    yum  install -y compat-libstdc++-33*i686*
    
    yum  install -y compat-libcap*
    yum  install -y unixODBC*
    yum  install -y libstdc++*
    yum  install -y compat-libstdc++-33.i686
    yum  install -y compat-libstdc++-296.i686
    yum  install -y glibc.i686
    yum  install -y ksh.x86_64
    yum  install -y libgcc.i686
    yum  install -y libidn.i686
    
    yum  install -y libstdc++.i686
    yum  install -y libX11.x86_64
    yum  install -y libXau.x86_64
    yum  install -y libxcb.x86_64
    yum  install -y libXext.i686
    yum  install -y libXi.i686
    yum  install -y libXtst.i686
    yum  install -y ncurses-devel.i686
    yum  install -y nss-softokn-freebl.i686
    yum  install -y dos2unix
    yum  install -y telnet
    
  12. Make sure that the following soft link still exists. Reverting a virtual machine snapshot removes this link.
    mv /dev/random /dev/random.orig
    ln -s /dev/urandom /dev/random