Documente Academic
Documente Profesional
Documente Cultură
3
Installation Guide
UNIX
August 2005
Disclaimer The information contained in this publication is subject to change without notice. VERITAS Software Corporation makes no warranty of any kind with regard to this manual, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. VERITAS Software Corporation shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance, or use of this manual. VERITAS Legal Notice Copyright 2005 VERITAS Software Corporation. All rights reserved. VERITAS, the VERITAS Logo, and all other VERITAS product names and slogans are trademarks or registered trademarks of VERITAS Software Corporation. VERITAS and the VERITAS logo, Reg. U.S. Pat. & Tm. Off. Other product names and/or slogans mentioned herein may be trademarks or registered trademarks of their respective companies. VERITAS Software Corporation 350 Ellis Street Mountain View, CA 94043 USA Phone 6505278000 Fax 6505272908 www.veritas.com Third-Party Copyrights
Certain third-party software may be distributed, embedded, or bundled with this VERITAS product or recommended for use in connection with its installation and use. Such third-party software is separately licensed by its copyright holder. For complete third party licensing information for the product or products represented in this publication, see the Third-Party License Agreement appendix of the Release Notes.
ii
Installation Guide
Contents
Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Whats In This Manual? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Getting Help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Accessing the VERITAS Support Web Site . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 Subscribing to VERITAS E-mail Notification Service . . . . . . . . . . . . . . . . . . . . . . . . . . 2 Accessing VERITAS Telephone and Fax Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 Contacting VERITAS Licensing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 Typographical Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Comment on the Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Chapter 1. Overview of ICS Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 The VERITAS ICS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 The ICS Installer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 ICS Dependencies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 ICS Native Install Packages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 The ICS Installation CD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 Installing ICS on a Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 Summary of the Installation Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 Chapter 2. Gathering the Configuration Information . . . . . . . . . . . . . . . . . . . . . . . . . 11 Security Credentials . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 VxPBX Configuration Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 VxAT Configuration Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
i
VxSMF Configuration Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 VxAZ Configuration Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 Chapter 3. Installing the ICS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 Locating the installics Script . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 Installing ICS with the ICS Installer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 Installing the VxPBX . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 Installing the VxAT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 Installing the VxSMF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25 Installing the VxAZ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 Converting man Page Files on AIX . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 Chapter 4. Upgrading Existing Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33 Locating the installics Script . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33 Upgrading the VxPBX . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 Upgrading the VxAT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35 Upgrading the VxSMF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36 Upgrading the VxAZ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37 Chapter 5. Installing and Removing an ICS Language Pack . . . . . . . . . . . . . . . . . . 39 Installing an ICS Language Pack . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 Removing an ICS Language Pack . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40 Chapter 6. Uninstalling the ICS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 Uninstalling ICS Using the ICS Installer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 Preparing to Uninstall ICS Using the ICS Installer . . . . . . . . . . . . . . . . . . . . . . . . . . 41 Removing all of the ICS at Once . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42 Removing the Services Individually . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43 Removing VxAZ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43 Removing VxSMF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44 Removing VxAZ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
ii
Installation Guide
Removing VxPBX . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46 Uninstalling ICS Using the Native Package Tools . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48 Appendix A. ICS Configuration Worksheet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49 Appendix B. Using the ICS Installer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 Starting the ICS Installer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 Using the ICS Installer Menus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 Viewing the ICS Installer Installation Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55 Appendix C. ICS Native Package Structure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57 Appendix D. Starting and Stopping the ICS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61 Stopping the ICS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61 Starting the ICS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 Appendix E. ICS Cluster Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 Verifying Your VxPBX Cluster Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 Verifying Your VxSMF Cluster Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64 Appendix F. Third-Party License Agreements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
Contents
iii
iv
Installation Guide
Preface
This guide describes how to install the VERITAS Infrastructure Core Services (ICS) on UNIX platforms using the VERITAS ICS Installer. When you install a VERITAS software product, you may be instructed to install one or more VERITAS ICS first. This guide provides step-by-step instructions for installing these services using the ICS Installer.
Overview of ICS Installation on page 5 Gathering the Configuration Information on page 11 Installing the ICS on page 17 Upgrading Existing Services on page 33 Installing and Removing an ICS Language Pack on page 39 Uninstalling the ICS on page 41
Appendix A, ICS Configuration Worksheet on page 49 Appendix B, Using the ICS Installer on page 53 Appendix C, ICS Native Package Structure on page 57 Appendix D, Starting and Stopping the ICS on page 61 Appendix E, ICS Cluster Configuration on page 63 Appendix F, Third-Party License Agreements on page 67
Getting Help
VERITAS offers you a variety of support options.
Conventions
Contact the VERITAS Support staff and post questions to them Get the latest patches, upgrades, and utilities Search the knowledge base for answers to technical support questions Receive automatic notice of product updates
http://support.veritas.com
http://support.veritas.com
Conventions
The following conventions apply throughout this guide.
Installation Guide
Conventions
Typographical Conventions
Here are the typographical conventions used throughout this guide:
Conventions Convention GUI Font Description Used to depict graphical user interface (GUI) objects, such as fields, listboxes, menu commands, and so on. For example: Enter your password in the Password field. Used for placeholder text, book titles, new terms, or emphasis. Replace placeholder text with your specific text. For example: Replace filename with the name of your file. Do not use file names that contain spaces. Used to show what commands you need to type, to identify pathnames where files are located, and to distinguish system or application text that is displayed to you or that is part of a code example. Used to show that you must hold down the first key while pressing the second key. For example: Ctrl+S means hold down the Ctrl key while you press S.
Italics
Code
Key+Key
You should use the appropriate conventions for your platform. For example, when specifying a path, use backslashes on Microsoft Windows and slashes on UNIX. Significant differences between the platforms are noted in the text. Tips, notes, and cautions are used to emphasize information. The following samples describe when each is used. Tip Used for nice-to-know information, like a shortcut.
Note Used for important information that you should know, but that shouldnt cause any damage to your data or your system if you choose to ignore it. Caution Used for information that will prevent a problem. Ignore a caution at your own risk.
Preface
The title and product version of the manual you are commenting on The topic (if relevant) you are commenting on Your comment Your name
sigsecdoc@veritas.com
Please only use this address to comment on product documentation. See Getting Help on page 1 for how to contact Technical Support about our software. We appreciate your feedback.
Installation Guide
This section provides an overview of the ICS installation process on UNIX platforms. It lists the services that can be installed, their dependencies, and the order in which the ICS must be installed.
These services provide the infrastructure for VERITAS software products. A VERITAS product may require that one or more ICS be installed prior to installing the product. Please refer to your VERITAS product documentation for information on which ICS you need to install.
ICS Dependencies
The procedures in this guide show you how to use the ICS Installer to install, configure, and remove the VERITAS ICS. You can find additional information on using the ICS Installer in Appendix B, Using the ICS Installer on page 53.
ICS Dependencies
The following table shows the dependencies that exist among the ICS.
ICS Dependencies ICS VxPBX VxAT VxSMF Dependency None None VxPBX VxATa VxAZb VxAT
This means that before you install an infrastructure core service, you must first install the service or services on which it depends. For example, if you need to install the VxSMF with security enabled, you must first install the VxPBX, then install the VxAT. These dependencies are reflected in the instructions provided in this guide.
Installation Guide
The ICS Installation CD Native Install Packages Installed by the ICS Installer Infrastructure Core Service VxSMF VxAZ Native Package Name VRTSsmf VRTSaz
Appendix C, ICS Native Package Structure on page 57, shows the structure of each of these packages.
docs/vss/*
infrastructure_core_services/pkgs/*
authentication/pkgs
authorization/pkgs
private_branch_exchange/pkgs
service_management_framework/pkgs
perl/*
Other files and directories may exist on the CD that are internal to the ICS Installer.
The ICS Installer automatically detects these cluster environments and configures the ICS for clustering for you. Appendix E, ICS Cluster Configuration on page 63, describes how you can view the ICS cluster configuration after installation.
Installation Guide
The remainder of this guide describes in detail how to perform these steps.
10
Installation Guide
The following sections describe the configuration information you will need to provide.
Security Credentials
If you want to configure the VxSMF to be secure, create a client user name and password to use with the VxSMF for accessing the Authentication Broker.
Shared Address
11
12
Installation Guide
If you intend to install the Authentication Broker only (broker mode 2), you will need the additional information shown in the following table.
Additional Information for Installing the Authentication Broker Only Information Host running the Root Broker Description/Value The host name of the machine on which the Root Broker is installed. Note On multi-NIC UNIX systems, use the host name returned by the uname -n command. The port used to communicate with the Root Broker (default is 2821). A user name that the Authentication Broker will use to contact the Root Broker. The password for the user name the Authentication Broker will use to contact the Root Broker. The domain name of the root broker. Note You can use the following command on the machine on which the Root Broker is installed to get the Root Broker domain name: /opt/VRTSat/bin/vssat listpd --pdrtype root Location of the file containing the Root Brokers hash The path on the Authentication Brokers machine to a copy of the hash file used by the Root Broker. This file can be found in the following location on the Root Brokers machine: /opt/VRTSat/bin/root_hash Note You will be instructed to copy the hash file from the Root Broker machine to the above path on the Authentication Brokers machine during installation.
Domain name
13
VxSMF Configuration Information VxSMF Configuration Information Information Security Passphrase Description/Value Security mode: enter Y if you want to enable security or N if you do not. A passphrase that will be used to protect your configuration information. The passphrase must be a minimum of six characters.
If you intend to enable security, gather the information shown in the following table.
Optional Security Information Information Broker Host Description/Value Name of the host on which the Authentication Broker is installed, which can be the current local host. The client user name that will be created for the VxSMF to use to contact the Authentication Broker. Choose a credential that has root privileges. The fully qualified domain name of the Authentication Broker when it was installed in the format broker@fullyQualifiedMachineName. Note You can use the following command on the machine on which the Authentication Broker is installed to verify the domain name of the Authentication Broker: /opt/VRTSat/bin/vssat listpd --pdrtype ab Domain type Broker port number The domain type. We recommend that you use vx. The broker port number provided when the Authentication Broker was installed. The default port number is 2821. The password you created for the Authentication Broker client user name.
User name
Domain name
Password
If the VxSMF will be installed on a VCS cluster, you will need the information shown in the following table.
Additional Information for Installation in a VCS Cluster Information RootSMF group name ICS group name Description/Value A name for the group in which the RootSMF resource will be placed
A name for the group in which the ICS resource will be placed
14
Installation Guide
VxAZ Configuration Information Additional Information for Installation in a VCS Cluster Information RootSMF resource name ICS resource name Description/Value A name for the RootSMF resource
15
16
Installation Guide
The following procedures describe how to install the ICS on a machine for the first time using the ICS Installer. Note If you already have one more ICS installed on a machine and need to install an updated version, please see Upgrading Existing Services on page 33. The procedures in this chapter assume that you are installing ICS for the first time and will not work as expected for an upgrade. When installing the ICS, be sure to respect the component dependencies listed in ICS Dependencies on page 6 by installing the components in the following order: VERITAS Private Branch Exchange (VxPBX) VERITAS Authentication Service (VxAT) (required only if you enable security) VERITAS Service Management Framework (VxSMF) VERITAS Authorization Service (VxAZ) (optional)
To locate the installics script: 1. Locate the ICS installation CD. 2. Go to the machine on which you want to install the ICS and log in as root. 3. Open an xterm window. 4. Insert the ICS installation CD into the CD-ROM drive and mount it to your file system. Note On HP-UX platforms, the ICS Installer will not run from an NFS mount. You must mount the ICS installation CD to the local file system.
17
5. In the xterm window, go to the CD-ROM directory in which the installics script is located. For example, on Solaris, if your CD-ROM drive is mounted as /cdrom: cd /cdrom/cdrom You will use the installics script to install the ICS. Note You must run the installics script from the directory in which it is located. If you run installics from another directory using the absolute or a relative path, you will get an error. You are now ready to begin using the installic script.
18
Installation Guide
To install the VxPBX: 1. Gather the configuration information for the VxPBX as described in Gathering the Configuration Information on page 13. Use the ICS Configuration Worksheet in Appendix A, ICS Configuration Worksheet on page 55, to record your configuration information. 2. Go to the directory in which the installics script is located (see Locating the installics Script on page 17). Note You must run the installics script from the directory in which it is located. If you run installics from another directory using the absolute or a relative path, you will get an error. 3. Run the installics script. 4. Select option I to install a product. 5. From the product selection menu, select option 2 to install the VxPBX. 6. When prompted for the system name, enter the name of the system or systems on which you are installing the VxPBX. Separate multiple names with a space. Note Because of a known issue with VxPBX, when installing VxPBX on a cluster, you cannot use the push-install feature of installics to perform a remote install from a single node. You must install VxPBX locally by running installics on each node in the cluster. Note If you are installing VxPBX on a cluster, do not use the virtual cluster name as a system name. Use cluster node hostnames only. Note On multi-NIC systems, use the primary hostname returned by the uname -n command. 7. The installics script will prompt you to press Return to continue after each of the next several installation steps. Press Return to continue as needed. 8. If you are installing VxPBX on a cluster, you will be asked whether you want the installer to do a cluster configuration for the Private Branch Exchange. If you receive this prompt, enter Y if you want to configure the VxPBX to work with the cluster or N if you do not.
19
Note This prompt is only displayed when the installics script detects that the node is in a cluster environment. 9. Press Return to continue as needed. 10. When the installation is complete, you will see the following message: VERITAS Private Branch Exchange n.n.n.n installation completed successfully. Press Return after this message is displayed. 11. The installics script may exit at this point, which means the installation is complete. If the installer exits, skip to step 17. Otherwise, continue to step 12. 12. When you receive the following prompt: Are you ready to configure PBX on HostName? [y, n, q] (y) enter Y to configure the VxPBX. 13. Read the information presented, and then press Return. 14. If you are asked if you want to configure VxPBX to work with the cluster, enter Y, and then answer the prompts for cluster information that follow. Note When configured for clustering, an ICS service group will be created on each node in the cluster. 15. When the VxPBX configuration has completed, you will see the following message: VERITAS Private Branch Exchange configured successfully. Press Return after this message is displayed. 16. The ICS Installer will start the VxPBX service. You will see the following message when the service is started: VERITAS Private Branch Exchange was started successfully. Press Return after this message is displayed. The ICS Installer will exit. 17. If you need to run your VxPBX in secure mode, do step a through step d following: a. Enter the following command to enable the secure mode in the VxPBX /opt/VRTSpbx/bin/pbxcfg --enable --securemode
20
Installation Guide
b. Enter the following command to add the first authorized user for your VxPBX: /opt/VRTSpbx/bin/pbxcfg --add --user AuthorizedUserName Note User root is added by default. You do not need to add the root user. c. If you need to add additional authorized users, repeat step b for each additional user. d. Enter the following commands to make these changes take effect: /opt/VRTSpbx/bin/vxpbx_exchanged stop /opt/VRTSpbx/bin/vxpbx_exchanged start
To install the VxAT: 1. Gather the configuration information for the VxAT as described in Gathering the Configuration Information on page 13. Use the ICS Configuration Worksheet in Appendix A, ICS Configuration Worksheet on page 55, to record your configuration information. 2. Go to the directory in which the installics script is located (see Locating the installics Script on page 17). Note You must run the installics script from the directory in which it is located. If you run installics from another directory using the absolute or a relative path, you will get an error. 3. Run the installics script. 4. Select option I to install a component. 5. From the product selection menu, select option 3 to install the VxAT.
21
6. When prompted for the system name, enter the name of the system or systems on which you are installing the VxAT. Separate multiple names with a space. Note On multi-NIC systems, use the hostname returned by the uname -n command. Note If you are installing VxAT on a cluster, do not use the virtual cluster name as a system name. Use cluster node hostnames only. 7. The installics script will prompt you to press Return to continue after each of the next several installation steps. Press Return to continue as needed. 8. When you are prompted to enter a passphrase, enter the passphrase you chose in step 1. Note No characters will be echoed when you type in your passphrase. Type in your passphrase, and then press Return. 9. When you are prompted to install the AT Server, enter Y if you want to install both the client and server files, or N if you only want to install the client files. 10. Press Return to continue as needed. 11. When the installation is complete, you will see the following message: VERITAS Authentication Service n.n.n.n installation completed successfully. Press Return after this message is displayed. 12. If you installed the client only (you answered N in step 9), the installic script will exit at this point, which completes the installation. For this case, do not proceed any further in this procedure. 13. If you installed the AT Server with the client (you answered Y in step 9), you will receive the following prompt: Are you ready to configure AT on HostName? [y, n, q] (y) Enter Y to configure the VxAT. 14. Read the information presented, and then press Return. 15. When you receive the following prompt:
22
Installation Guide
1) 2) 3)
Enter the mode in which you want to install VRTSat [1-3,q] enter 1 to install the Root Broker only, 2 to install the Authentication Broker only, or 3 to install both. 16. If you chose options 1 or 3 in step 15, proceed to step 17. If you chose option 2, do step a through step h following: a. Before proceeding any further with the ICS configuration, go to the machine on which the Root Broker is installed and enter the following command to create the user credential this Authentication Broker will use to contact the Root Broker: /opt/VRTSat/bin/vssat addprpl --pdrtype root --domain root@machineName.company.com --prplname userName --password userPassword b. Go back to the machine on which you are installing the VxAT, open a second xterm, and then copy the /opt/VRTSat/bin/root_hash file from the machine on which the Root Broker is installed to the /opt/VRTSat/bin directory. Close the xterm when you are done. Note If the Root Broker is installed on a Windows machine, you will find the root_hash file in folder: C:\Program Files\VERITAS\Security\Authentication\bin c. In the xterm in which you are running the installics script, proceed with the ICS configuration: when prompted for the host running the root broker, enter the host name of the machine on which the Root Broker is installed. d. When prompted for the broker port, use the default port 2821 (press Enter). e. When prompted for the Authentication Brokers identity, enter the user name you created for the Authentication Broker in step a. f. When prompted for the password, enter the password for the user you created in step a. Note No characters are echoed as you type the password. When you are finished typing, press Return.
23
g. When prompted for the domain name, enter the fully qualified domain name of the Root Broker. Note To get the domain name of the root broker, on the machine on which the Root Broker is installed, if its UNIX, enter: /opt/VRTSat/bin/vssat listpd --pdrtype root If its Windows, enter: "C:\Program Files\VERITAS\Security\Authentication\bin\vssat" listpd --pdrtype root h. When prompted for the location of the Root Brokers hash file, enter the path to the root_hash file on the Authentication Brokers machine: /opt/VRTSat/bin/root_hash 17. If you are installing VxAT on a cluster, you will be asked whether you want the installer to do a cluster configuration for the Authentication Service. If you receive this prompt, enter Y if you want to configure the VxAT to work with the cluster or N if you do not. If you enter Y, answer the cluster information prompts that follow. Note This prompt is only displayed when the installics script detects that the node is in a cluster environment. 18. When the configuration is complete, you will see the following message: VERITAS Authentication Service configured successfully. Press Return after this message is displayed. 19. The installics script will start the Authentication Service. You will see the following message when it is started: VERITAS Authentication Service was started successfully. Press Return after this message is displayed. The installics script will exit. 20. Change the default Authentication Broker administrator password as follows: Note We strongly recommend that you change the default password for security reasons.
24
Installation Guide
a. Enter the following command to get the fully qualified Authentication Broker name: /opt/VRTSat/bin/vssat listpd --pdrtype ab | grep "Domain Name" | awk '{print $3}' The Authentication Broker name will be in the form broker@machineName.company.com. b. Enter the following command to change the default password: /opt/VRTSat/bin/vssat resetpasswd --pdrtype ab --domain broker@machineName.company.com --prplname admin --newpasswd NewAdminPassword --repeatednewpasswd NewAdminPassword where broker@machineName.company.com is the fully qualified name of the Authentication Broker you obtained in step a, and NewAdminPassword is the new password. Note The new password must be at least five characters.
To set up your security trust and client credentials: Note The following steps assume that the Authentication Broker is installed on a different machine from the machine on which you are installing the VxSMF. If you installed the Authentication Broker with the ICS on this machine, use this machines name for machineName. 1. On the machine on which you are installing the VxSMF, enter the following command to set up the security trust with the Authentication Broker: /opt/VRTSat/bin/vssat setuptrust --broker machineName:2821 --securitylevel high where machineName is the name of the machine on which the Authentication Broker is installed. When asked if you want to trust the above machine, enter Y.
25
2. On the machine on which the Authentication Broker is installed, enter the following command to create the client user name that the VxSMF will use to contact the Authentication Broker: /opt/VRTSat/bin/vssat addprpl --pdrtype ab --domain broker@machineName.company.com --prplname userName --password userPassword --credexpiry 0 --prpltype service where userName and userPassword are the user credentials, and broker@machineName.company.com is the fully qualified domain name of the Authentication Broker. Note If the authentication broker is clustered, the domain suffix is the fully qualified cluster name instead of machineName.company.com. 3. On the machine on which you are installing the VxSMF, enter the following command to get the security certificate from the Authentication Broker for the client user name you created in step 2: /opt/VRTSat/bin/vssat authenticate --domain vx:broker@machineName.company.com --prplname userName --password userPassword --broker machineName:2821 where broker@machineName.company.com is the fully qualified domain name of the Authentication Broker and machineName is the name of the Authentication Broker host machine.
To install the VxSMF: 1. Gather the configuration information for the VxAT as described in Gathering the Configuration Information on page 13. Use the ICS Configuration Worksheet in Appendix A, ICS Configuration Worksheet on page 55, to record your configuration information. 2. Go to the directory in which the installics script is located (see Locating the installics Script on page 17). Note You must run the installics script from the directory in which it is located. If you run installics from another directory using the absolute or a relative path, you will get an error. 3. Run the installics script. 4. Select option I to install a service. 5. From the product selection menu, select option 4 to install the VxSMF.
26
Installation Guide
6. When prompted for the system name, enter the name of the system or systems on which you are installing the VxSMF. Separate multiple names with a space. Note On multi-NIC systems, use the hostname returned by the uname -n command. Note If you are installing VxSMF on a cluster, do not use the virtual cluster name as a system name. Use cluster node hostnames only. 7. The installics script will prompt you to press Return to continue after each of the next several installation steps. Press Return to continue as needed. 8. When you are prompted to enter a passphrase, enter the passphrase you chose in step 1. Note No characters will be echoed when you type in your passphrase. Type in your passphrase, and then press Return. 9. Press Return to continue as needed. 10. When the installation is complete, you will see the following message: VERITAS Service Management Framework n.n.n.n installation completed successfully. Press Return after this message is displayed. 11. When you receive the following prompt: Are you ready to configure SMF on HostName? [y, n, q] (y) Enter Y to begin configuring the VxSMF. 12. Read the information presented, and then press Return. 13. When prompted to enable security, enter Y if you want to enable security or N if you do not. 14. If you did not enabled security in the VxSMF (you entered N in step 13), skip to step 15. Otherwise, do step a through step f following.
27
a. When prompted for the broker host, enter the name of the machine on which the Authentication Broker is installed. b. When prompted for user name, enter the Authentication Broker client user name you created for the VxSMF in step 2 of To set up your security trust and client credentials: on page 25. c. When prompted for domain name, enter the fully qualified domain name of the Authentication Broker, such as broker@machineName.company.com. Note You can use the vssat command on the machine on which the Authentication Broker is installed to get the Authentication Broker domain name. If its a UNIX machine, enter: /opt/VRTSat/bin/vssat listpd --pdrtype ab If its a Windows machine, enter: "C:\Program Files\VERITAS\Security\Authentication\bin\vssat" listpd --pdrtype ab d. When prompted for domain type, enter vx. e. When prompted for the broker port, leave the default port of 2821 (press Return). f. When prompted for the password, enter the password for the user you specified in step b. Note No characters are echoed as you type in the password. When you have finished typing the password, press Return. 15. If you are installing VxSMF on a cluster, you will be asked whether you want the installer to do a cluster configuration for the Service Management Framework. If you receive this prompt, enter Y if you want to configure the VxSMF to work with the cluster or N if you do not. If you enter Y, answer the cluster information prompts that follow. Note This prompt is only displayed when the installics script detects that the node is in a cluster environment. 16. When the configuration is complete, you will see the following message: VERITAS Service Management Framework configured successfully. Press Return after this message is displayed.
28 Installation Guide
17. The installics script will start the VxSMF service. Note The ICS Installer may indicate that the Service Management Framework failed to start. This is an inaccurate message and can be ignored. Press Return. The installics script will exit. 18. Enter the following command: /opt/VRTSsmf/bin/vxsmfd start
To install the VxAZ: 1. Gather the configuration information for the VxAZ as described in Gathering the Configuration Information on page 13. Use the ICS Configuration Worksheet in Appendix A, ICS Configuration Worksheet on page 55, to record your configuration information. 2. Go to the directory in which the installics script is located (see Locating the installics Script on page 17). Note You must run the installics script from the directory in which it is located. If you run installics from another directory using the absolute or a relative path, you will get an error. 3. Run the installics script. 4. Select option I to install a service. 5. From the product selection menu, select option 5 to install the VxAZ 6. When prompted for the system name, enter the name of the system or systems on which you are installing the VxAZ. Separate multiple names with a space.
29
Note On multi-NIC systems, use the hostname returned by the uname -n command. Note If you are installing VxAZ on a cluster, do not use the virtual cluster name as a system name. Use cluster node hostnames only. 7. The installics script will prompt you to press Return to continue after each of the next several installation steps. Press Return to continue as needed. 8. When prompted to install the Authorization Service, enter Y to install both the client and server files, or N to install only the client files. Note On Solaris, a client-only installation is not available for the VxAZ. Both client and server files are installed regardless of how you respond to this prompt. 9. Press Return to continue as needed. 10. When the installation completes, you will see the following message: VERITAS Authorization Service n.n.n.n installation completed successfully. Press Return after this message is displayed. 11. The installics script may exit at this point, which means the installation is complete. If the installics script exits, do not proceed any further in this procedure. Otherwise, continue to step 12. 12. If you installed the Authorization Server with the client or if you are installing the VxAZ client only on Solaris, when you receive the following prompt: Are you ready to configure AZ on HostName? [y, n, q] (y) Enter Y to configure the VxAZ. 13. Read the information presented, and then press Return. 14. If you are installing VxAZ on a cluster, you will be asked whether you want the installer to do a cluster configuration for the Authorization Service. If you receive this prompt, enter Y if you want to configure the VxAZ to work with the cluster or N if you do not. If you enter Y, answer the cluster information prompts that follow. Note This prompt is only displayed when the installics script detects that the node is in a cluster environment.
30
Installation Guide
15. When the configuration is complete, you will see the following message: VERITAS Authorization Service configured successfully. Press Return after this message is displayed. 16. The installics script will start the Authorization Service. You will see the following message when it is started: VERITAS Authorization Service was started successfully. Press Return after this message is displayed. The installics script will exit.
VxPBX:
VxSMF:
To convert the man pages to the cat format, use the following command: catman -M /usr/share/man 1 Note This command may take several minutes to run.
31
This command will convert the nroff man pages in the /usr/share/man/man1 directory to the cat format and place them in the /usr/share/man/cat1 directory. After you have converted the files, use the man command to verify that you can view the man pages properly. Refer to the catman man page for more information on using the catman command.
32
Installation Guide
If you have an existing VERITAS Private Branch Exchange (VxPBX), VERITAS Authentication Service (VxAT), or VERITAS Authorization Service (VxAZ) installation, you can use the ICS Installer to upgrade these services. However, you cannot upgrade a VERITAS Service Management Framework (VxSMF) installation at this time. For this service, you must remove the old version, then install the new version. The following procedures describe how to upgrade your existing ICS. Caution If you are upgrading all of your installed ICS, you must install the new components individually as instructed in this chapter. Do not install all of the new ICS at once using Install option 1 of installics. Note The procedures in this section reflect the typical behavior of the ICS Installer. In some situations, the behavior may be slightly different from what is shown.
To locate the installics script: 1. Locate the ICS installation CD. 2. Go to the machine on which you want to upgrade the ICS and log in as root. 3. Open an xterm window. 4. Insert the ICS installation CD into the CD-ROM drive and mount it to your file system. Note On HP-UX platforms, the ICS Installer will not run from an NSF mount. You must mount the ICS installation CD to the local file system. 5. In the xterm window, go to the CD-ROM directory in which the installics script is located. For example, on Solaris, if your CD-ROM drive is mounted as /cdrom:
33
cd /cdrom/cdrom You will use this script to upgrade your ICS. Note You must run the installics script from the directory in which it is located. If you run installics from another directory using the absolute or a relative path, it will fail. You are now ready to begin upgrading your ICS.
To upgrade the VxPBX: 1. Go to the directory in which the installics script is located (see Locating the installics Script on page 33). Note You must run the installics script from the directory in which it is located. If you run installics from another directory using the absolute or a relative path, you will get an error. 2. Run the installics script. 3. Select option I to install a component. 4. From the product selection menu, select option 2 to install the VxPBX. 5. When prompted for the system name, enter the name of the system or systems on which you are upgrading the VxPBX. Separate multiple names with a space. Note Because of a known issue with VxPBX, when installing VxPBX on a cluster, you cannot use the push-install feature of installics to perform a remote install from a single node. You must install VxPBX locally by running installics on each node in the cluster. Note If you are upgrading VxPBX on a cluster, do not use the virtual cluster name as a system name. Use cluster node hostnames only.
34
Installation Guide
Note On multi-NIC systems, use the primary hostname returned by the uname -n command. 6. The installics script will prompt you to press Return to continue after each of the next several installation steps. Press Return to continue as needed. 7. If you are upgrading VxPBX on a cluster, you will be asked whether you want the installer to do a cluster configuration for the Private Branch Exchange. If you receive this prompt, enter Y if you want to configure the VxPBX to work with the cluster or N if you do not. Note This prompt is only displayed when the installics script detects that the node is in a cluster environment. 8. Press Return to continue as needed. 9. When the new version is installed, you will see the following message: VERITAS Private Branch Exchange n.n.n.n installation completed successfully. Press Return after this message is displayed.The ICS Installer will restore the previous configuration, and then exit. 10. If you are upgrading VxPBX on a cluster, access your cluster administration console and online the VxPBX resource if its not already online.
To upgrade the VxAT: 1. Go to the directory in which the installics script is located (see Locating the installics Script on page 33). Note You must run the installics script from the directory in which it is located. If you run installics from another directory using the absolute or a relative path, you will get an error.
35
2. Run the installics script. 3. Select option I to install a component. 4. From the product selection menu, select option 3 to install the VxAT. 5. When prompted for the system name, enter the name of the system or systems on which you are upgrading the VxAT. Separate multiple names with a space. Note On multi-NIC systems, use the hostname returned by the uname -n command. Note If you are installing VxAT on a cluster, do not use the virtual cluster name as a system name. Use cluster node hostnames only. 6. The installics script will prompt you to press Return to continue after each of the next several installation steps. Press Return to continue as needed. 7. When prompted to install the AT Server, enter Y if you want to install the AT client and server files, or N if you just want to install the client files. 8. Press Return to continue as needed. 9. When the new version is installed, you will see the following message: VERITAS Authentication Service n.n.n.n installation completed successfully. Press Return. The ICS Installer will restore the previous configuration, and then exit.
To upgrade the VxSMF: 1. Remove the existing version of the VxSMF as described in Removing the Services Individually on page 43. 2. Install the new version of the VxSMF as described in Installing the VxSMF on page 25.
36
Installation Guide
To upgrade the VxAZ: 1. Go to the directory in which the installics script is located (see Locating the installics Script on page 33). Note You must run the installics script from the directory in which it is located. If you run installics from another directory using the absolute or a relative path, you will get an error. 2. Run the installics script. 3. Select option I to install a service. 4. From the product selection menu, select option 5 to install the VxAZ. 5. When prompted for the system name, enter the name of the system or systems on which you are installing the VxAZ. Separate multiple names with a space. Note On multi-NIC systems, use the hostname returned by the uname -n command. Note If you are installing VxAZ on a cluster, do not use the virtual cluster name as a system name. Use cluster node hostnames only. 6. The installics script will prompt you to press Return to continue after each of the next several installation steps. Press Return to continue as needed. 7. When prompted to install the Authorization Service, enter Y to install both the client and server files or N to install only the client files. Note On Solaris, a client-only installation is not available for the VxAZ. Both client and server files are installed regardless of how you respond to this prompt. 8. Press Return to continue as needed. 9. When the new version is installed, you will see the following message:
37
VERITAS Authorization Service n.n.n.n installation completed successfully. Press Return after this message is displayed. 10. The ICS Installer will restore the previous VxAZ configuration. Press Return. The ICS Installer will exit.
38
Installation Guide
To install an ICS language pack: 1. Insert the ICS Language Pack CD for the language you need to install into the CD-ROM drive and mount it to your file system. Note On HP-UX platforms, the ICS Installer will not run from an NFS mount. You must mount the ICS Language Pack CD to the local file system. 2. Open an xterm window and go to the CD-ROM directory in which the install_lp script is located. For example, on Solaris, if your CD-ROM drive is mounted as /cdrom: cd /cdrom/cdrom0/SunOS 3. Run the install_lp script: ./install_lp Note You must run the install_lp script from the directory in which it is located. If you run install_lp from another directory using the absolute or a relative path, it will fail. 4. When prompted for the system name, enter the name of the system or systems on which you are installing the ICS language pack. Separate each name with a space. 5. When the initial system check completes, press Return. 6. When the packages to be installed are displayed, press Return.
39
Note This will install some or all of the following packages: VRTSxxico, VRTSxxpbx, VRTSatxx, VRTSxxsmf, and VRTSazxx, where xx is the language code (ja or zh). The actual packages installed depends on which of the ICS you have installed. 7. When the installation requirements check completes, press Return. 8. When the package check completes, press Return, then allow the installation to complete. 9. When the installation completes, press Return. The install_lp script will exit.
To remove an ICS language pack: 1. Insert the ICS Language Pack CD for the language you need to remove into the CD-ROM drive and mount it to your file system. Note On HP-UX platforms, the ICS Installer will not run from an NFS mount. You must mount the ICS Language Pack CD to the local file system. 2. Open an xterm window and go to the CD-ROM directory in which the uninstall_lp script is located. For example, on Solaris, if your CD-ROM drive is mounted as /cdrom: cd /cdrom/cdrom/SunOS 3. Run the uninstall_lp script: ./uninstall_lp 4. When prompted for the system name, enter the name of the system or systems on which you are uninstalling the ICS language pack. Separate each name with a space. 5. When the initial system check completes, press Return. 6. When the uninstall requirements check completes, press Return. 7. When prompted to confirm the uninstallation, enter Y, and allow the uninstall to complete. 8. When the uninstall completes, press Return. The uninstall_lp script will exit.
40
Installation Guide
To prepare to remove the ICS with the ICS Installer: 1. Insert the ICS installation CD into your CD-ROM drive. 2. Mount the CD-ROM drive to your file system. Note On HP-UX platforms, the ICS Installer will not run from an NFS mount. You must mount the ICS installation CD to the local file system. 3. Open an xterm and go to the top-level directory of the ICS installation CD. For example, if your CD-ROM drive is mounted as cdrom:
41
cd /cdrom/cdrom
Note Due to a limitation of the ICS Installer, on Tru64, do not use Option 1 of the Uninstall menu to remove the ICS. Remove the components individually using options 2 through 5. instead
To remove all of the ICS at once: 1. If not already done, go to the directory in which the installics script is located (see Preparing to Uninstall ICS Using the ICS Installer on page 41). Note You must run the installics script from the directory in which it is located. If you run installics from another directory using the absolute or a relative path, you will get an error. 2. Run the installics script. 3. Select option U to uninstall a product. 4. Select option 1 to uninstall the VERITAS Infrastructure Core Services. 5. When prompted for the system name, enter the name of the system or systems from which the ICS will be uninstalled. Separate multiple names with a space. Note If you are uninstalling the ICS from a cluster, do not use the virtual cluster name as a system name. Use cluster node hostnames only. Note On multi-NIC systems, use the primary hostname returned by the uname -n command.
42
Installation Guide
6. The installics script will prompt you to press Return to continue after each of the next few steps. Press Return to continue as needed. 7. When prompted to confirm uninstallation of the ICS, enter Y. 8. When prompted to continue with the uninstallation, enter Y. 9. If prompted to confirm the removal of all files associated with the product, enter Y. 10. When the ICS have been uninstalled, you will receive the following message: VERITAS Infrastructure Core Services n.n.n.n uninstall completed successfully. Press Return after you receive this message. The installics script will exit.
Removing VxAZ
Use the following procedure to remove the VxAZ. This will remove the VRTSaz package from your system.
43
To remove the VxAZ 1. If not already done, go to the directory in which the installics script is located (see Preparing to Uninstall ICS Using the ICS Installer on page 41). Note You must run the installics script from the directory in which it is located. If you try to run installics from another directory using the absolute or a relative path, it will fail. 2. Run the installics script. 3. Select option U to uninstall a product. 4. Select option 5 to uninstall the VxAZ. 5. When prompted for the system name, enter the name of the system or systems from which the VxAZ will be uninstalled. Separate multiple names with a space. Note If you are uninstalling VxAZ from a cluster, do not use the virtual cluster name as a system name. Use cluster node hostnames only. Note On multi-NIC systems, use the primary hostname returned by the uname -n command. 6. The installics script will prompt you to press Return to continue after each of the next few steps. Press Return to continue as needed. 7. When prompted to confirm uninstallation of the VxAZ, enter Y. 8. When prompted to continue with uninstallation, enter Y, and then allow the uninstall to complete. 9. You will receive the following message when the VxAZ is uninstalled: VERITAS Authorization Service n.n.n.n uninstall completed successfully. Press Return after you receive this message. The installics script will exit.
Removing VxSMF
Use the following procedure to remove the VxSMF. This will remove the VRTSsmf package from your system.
44
Installation Guide
To remove the VxSMF 1. If not already done, go to the directory in which the installics script is located (see Preparing to Uninstall ICS Using the ICS Installer on page 41). Note You must run the installics script from the directory in which it is located. If you try to run installics from another directory using the absolute or a relative path, it will fail. 2. Run the installics script. 3. Select option U to uninstall a product. 4. Select option 4 to uninstall the VxSMF. 5. When prompted for the system name, enter the name of the system or systems from which the VxSMF will be uninstalled. Separate multiple names with a space. Note If you are uninstalling VxSMF from a cluster, do not use the virtual cluster name as a system name. Use cluster node hostnames only. Note On multi-NIC systems, use the primary hostname returned by the uname -n command. 6. The installics script will prompt you to press Return to continue after each of the next few steps. Press Return to continue as needed. 7. When prompted to confirm uninstallation of the VxSMF, enter Y, then allow the uninstall to complete. 8. You will receive the following message when the VxSMF is uninstalled: VERITAS Service Management Framework n.n.n.n uninstall completed successfully. Press Return after you receive this message. The installics script will exit.
Removing VxAZ
Use the following procedure to remove the VxAZ. This will remove the VRTSaz package from your system.
45
To remove the VxAT 1. If not already done, go to the directory in which the installics script is located (see Preparing to Uninstall ICS Using the ICS Installer on page 41). Note You must run the installics script from the directory in which it is located. If you try to run installics from another directory using the absolute or a relative path, it will fail. 2. Run the installics script. 3. Select option U to uninstall a product. 4. Select option 3 to uninstall the VxAT. 5. When prompted for the system name, enter the name of the system or systems from which the VxAT will be uninstalled. Separate multiple names with a space. Note If you are uninstalling VxAT from a cluster, do not use the virtual cluster name as a system name. Use cluster node hostnames only. Note On multi-NIC systems, use the primary hostname returned by the uname -n command. 6. The installics script will prompt you to press Return to continue after each of the next few steps. Press Return to continue as needed. 7. When prompted to confirm uninstallation of the VxAT, enter Y, then allow the uninstall to complete. 8. You will receive the following message when VxAT is uninstalled: VERITAS Authentication Service n.n.n.n uninstall completed successfully. Press Return after you receive this message. The installics script will exit.
Removing VxPBX
Use the following procedure to remove the VxPBX. This will remove the VRTSicsco and VRTSpbx packages from your system.
46
Installation Guide
To remove the VxPBX 1. If not already done, go to the directory in which the installics script is located (see Preparing to Uninstall ICS Using the ICS Installer on page 41). Note You must run the installics script from the directory in which it is located. If you try to run installics from another directory using the absolute or a relative path, it will fail. 2. Run the installics script. 3. Select option U to uninstall a product. 4. Select option 2 to uninstall the VxPBX. 5. When prompted for the system name, enter the name of the system or systems from which the VxPBX will be uninstalled. Separate multiple names with a space. Note If you are uninstalling VxPBX from a cluster, do not use the virtual cluster name as a system name. Use cluster node hostnames only. Note On multi-NIC systems, use the primary hostname returned by the uname -n command. 6. The installics script will prompt you to press Return to continue after each of the next few steps. Press Return to continue as needed. 7. When prompted to confirm uninstallation of the VxPBX, enter Y, and then allow the uninstall to complete. 8. You will receive the following message when the VxPBX is uninstalled: VERITAS Private Branch Exchange n.n.n.n uninstall completed successfully. Press Return after you receive this message. The installics script will exit.
47
When you remove the ICS packages, be sure to remove any dependent packages first. The dependencies dictate that the ICS packages be removed in the following order (assuming all of the ICS are installed): 1. VRTSaz 2. VRTSsmf 3. VRTSat 4. VRTSpbx 5. VRTSicsco For example, to remove VRTSat, you must first remove VRTSaz, then VRTSsmf. Note If you remove package VRTSicsco using the native package tools, you must also remove package VRTSpbx using the native package tools. If you attempt to remove the VxPBX (VRTSpbx) with the ICS Installer after removing VRTSicsco with the native package tools, the ICS Installer will fail. Refer to your UNIX documentation for information on how to use your native installer to remove a package.
48
Installation Guide
If installing on a Sun cluster: Shared Address VERITAS Authentication Service System name or namesb.
Broker mode (1, 2, or 3) Install Authentication Broker Server? Passphrasea. If installing the Authentication Broker only (mode 2): Host running the Root Broker Broker port
49
Fill in the values that apply to your installation Service VERITAS Authentication Service (cont.) Information Authentication Brokers identity Passworda. Root Brokers domain name Root Brokers hash file location Broker Administrator Password VERITAS Service Management Framework System name or namesb. Value
Enable security? Passphrasea. If security will be enabled: Authentication Broker host User name Authentication Broker domain name Domain type Broker port number Passworda. If installing on a VCS cluster: RootSMF group name ICS group name RootSMF resource name ICS resource name
a. We recommend that you record a reminder in this field or leave it blank. If you record the actual password or passphrase, keep this form a a secure location at all times.
50
Installation Guide
b. Use the name returned by uname -n command. If on a cluster, do not include the virtual cluster name.
51
52
Installation Guide
The ICS Installer is a menu-driven utility that provides a common command-line interface for installing the VERITAS ICS on UNIX platforms. This appendix provides an overview of how to use the ICS Installer utility.
53
The menu list contains a list of the available main menu items. Each item, except Q, accesses the submenu for the item when typed at the Enter a Selection prompt. The items are case-insensitive. The following table describes the menu items.
installics Main Menu Items Menu Item Description ? C D I Displays a brief description of the installics menu options. Configures the product after installation. Displays a brief overview of the selected product. Installs packages and patches for an initial installation or upgrade. The product is also configured during installation, but you have the option to install without configuration. Installs or updates the license key for an infrastructure core service. This option can be used to upgrade from an evaluation license or to license a newly installed product. Performs a pre-installation check to determine if systems meet all installation requirements. No products are installed. Exits installics. Removes the selected product's patches, files, and directories from the system, provided they are not used by another VERITAS product.
Q U
When you select a menu item, a submenu of ICS products is displayed. From the submenu, you select a product on which to perform the action. For example, if you type I at the prompt, the Install/Upgrade a Product submenu is displayed. You would then select a product to install. In each of the submenus, the products are displayed in a numeric list followed by the B option. By entering the number of a product from the list, the action (in this case, install) will be performed on that product. The additional option B will take you back to the main menu, and Q will exit installics. As in the main menu, the B and Q options are case insensitive.
54
Installation Guide
55
56
Installation Guide
ACE libraries TAO libraries (including pluggable protocol libraries) ICU libraries VxUL libraries.
/opt/VRTSicsco/man
The man pages for the ICS command-line utilities VxUL language pack VxPBX and VxUL configuration files: VxPBX.cfg and icsul.conf respectively File containing the VxPBX build version number Command binary files Library files VxUL log files VxPBX language pack man page for the pbxcfg command
57
ICS Native Install Package Structure on UNIX Platforms Package Directory /etc/rc[12345].d/S65vxpb x_exchangeda VRTSpbx (cont.) VRTSsmf /etc/rc[06].d/K65vxpbx_e xchangeda. /etc/vx/VxSMF/* /opt/VRTSsmf/bin/* Content Run-level startup script
/opt/VRTSsmf/lib /opt/VRTSsmf/log /opt/VRTSsmf/resources /opt/VRTSsmf/man/man1 /usr/share/man/man1 /etc/rc[12345].d/S75vxsm fda. /etc/rc[06].d/K75vxsmfda. VRTSat /etc/rc2.d/K99vxatda. /etc/rc2.d/S70vxatda. /etc/vx/vss/VRTSat.conf /etc/vx/vss/VRTSat.loc /opt/VRTS/man/man1/vssat .1m /opt/VRTSat/Copyright /opt/VRTSat/bin/*
Library files VxUL log files VxSMF language pack man pages for the vxservice, vxsmf, and vxsmfcfg commands Run-level startup script
58
Installation Guide
ICS Native Install Package Structure on UNIX Platforms Package Directory /opt/VRTSat/catalog/* VRTSat (cont.) /opt/VRTSat/lib/* Content Localization resources Library and JAR files
/var/VRTSat/* VRTSaz /opt/VRTS/man/man1/vssaz .1m /opt/VRTSaz/Copyright /opt/VRTSaz/README.txt /opt/VRTSaz/bin/* /opt/VRTSaz/catalog/* /opt/VRTSaz/lib/* /etc/rc2.d/K98vxazda. /etc/rc2.d/S71vxazda. /etc/vx/vss/VRTSaz.conf
Copyright notice VxAZ Readme file Command binaries Localization resources Library and JAR files VxAZ run-time shutdown script VxAZ run-time startup script VxAZ configuration file
/etc/vx/vss/VRTSaz.loc /var/VRTSaz/*
a. Path shown is for Solaris. For all other UNIX platforms, see Appendix D, Starting and Stopping the ICS on page 61.
59
60
Installation Guide
The VERITAS ICS can be started and stopped using the ICS startup and shutdown scripts. This appendix describes how to use these scripts to start and stop the ICS.
All
/opt/VRTSsmf/bin/vxsmfd stop
/etc/rc2.d/K99vxatd stop /etc/rc.d/rc2.d/K99vxatd stop /sbin/rc2.d/K991vxatd stop /etc/rc.d/rc2.d/K99vxatd stop /sbin/rc2.d/K99vxatd stop /opt/VRTSaz/bin/vrtsaz -stop
All
61
VERITAS Service All Management Framework VERITAS Authentication Service SunOS Linux HP-UX AIX Tru64 VERITAS Authorization Service All
/opt/VRTSsmf/bin/vxsmfd start
/etc/rc2.d/S70vxatd start /etc/rc.d/rc2.d/S70vxatd start /sbin/rc2.d/S700vxatd start /etc/rc.d/rc2.d/S70vxatd start /sbin/rc2.d/S70vxatd start /opt/VRTSaz/bin/vrtsaz
62
Installation Guide
VERITAS Cluster Server (VCS) Microsoft Cluster Server (MSCS) Sun Cluster TruCluster
When you install the ICS, the ICS Installer recognizes the cluster environment and automatically configures the ICS for clustering. This appendix describes how to verify the cluster configuration for the VERITAS Private Branch Exchange (VxPBX) and the VERITAS Service Management Framework (VxSMF). For cluster configuration information for the VERITAS Authentication Service and the VERITAS Authorization Service, refer to the Security Services 4.2 Installation Guide located in the docs/vss directory of the ICS installation CD.
To verify the cluster configuration on VCS: 1. Open the VCS Administration GUI and log into the VxPBX cluster. 2. Verify that the group ics has been created. 3. Select the ics group and verify that the PBX resource has been created. 4. Verify that the PBX resource is online.
63
To verify the cluster configuration on MSCS: 1. Open the Cluster Administration GUI. 2. Under Groups, verify that the following groups exist: PBX-ClusterGroup-NodeName1 PBX-ClusterGroup-NodeName2 3. Verify that all groups are online.
To verify the cluster configuration on Sun Cluster: 1. Open your Web browser and go to the Sun Cluster Web GUI. The address will be https://NodeName:3000. 2. Log in as root on one of the nodes on the VxPBX cluster. 3. Verify on the GUI that the vrtspbx_resource and the vrtspbx_sa resources are online.
To verify the cluster configuration on TruCluster: 1. Log in as root on one of the nodes on the VxPBX cluster. 2. Run the caa_stat command. 3. In the output of the caa_stat command, verify that the VRTSpbx_HostName applications (one for each node in the cluster) are online.
To verify the cluster configuration on VCS: 1. Open the VCS Administration GUI and log into the VxSMF cluster. 2. Verify that the group you specified during installation for the RootSMF and ICS resources was created. 3. Select the group and verify that the resources you specified during installation for the RootSMF and ICS resources were created.
64
Installation Guide
To verify the cluster configuration on MSCS: 1. Open the Cluster Administration GUI. 2. Under Groups, verify that the following groups exist: RootSMF-ClusterGroup-NodeName ICS-ClusterGroup-NodeName where NodeName is the name of the nodes in the cluster. 3. Under each of the RootSMF groups in step 2, verify that the RootSMF-NodeName resource was created and is online. 4. Under each of the ICS groups in step 2, verify that the ICS-NodeName resource was created and is online.
To verify the cluster configuration on Sun Cluster: 1. Open your Web browser and go to the Sun Cluster Web GUI. The address will be https://NodeName:3000. 2. Log in as root on one of the nodes on the VxSMF cluster. 3. Verify that the vrtsRootSMF_resource and vrtsICS_resource groups were created. 4. Under the vrtsRootSMF_resource group, verify that the VxRootSMF resource was created and is online. 5. Under the vrtsICS_resource group, verify that the VxICS resource was created and is online.
To verify the cluster configuration on TruCluster: 1. Log in as root on one of the nodes on the VxSMF cluster. 2. Run the caa_stat command. 3. In the output of the caa_stat command, verify that the VxRootSMF_HostName and VxICS_HostName applications (one for each node in the cluster) are online.
65
66
Installation Guide
The VERITAS ICS and the ICS Installer contain the binaries for the following third-party software applications:
ACE 5.3a IBM ICU 2.4 OpenSSL 0.9.7d Perl 5.8.0 STLport 4.5 TAO 1.3A
You can find the license agreements and legal notices for these applications in the VERITAS Infrastructure Core Services Release Notes located in the docs directory of the ICS installation CD.
67
68
Installation Guide
69
A VERITAS software component that deploys the core run-time libraries on a system for other VERITAS software products. installics The command-line executable that starts the ICS Installer. This executable is located in the top-level directory of the ICS installation CD. MSCS Microsoft Cluster Server. A high-availability platform provided by Microsoft. OpenSSL A collaborative effort to develop a robust, commercial-grade, full-featured, and Open Source tool-kit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols as well as a full-strength general-purpose cryptography library. SCM The Windows Service Control Manager. Enables the management of services on a host. STLport A multi-platform ANSI C++ Standard Library implementation. It is free, open-source product, based on the SGI STL implementation. TAO The ACE ORB (TAO), pronounced dau, is a CORBA 2.5 compliant C++ object request broker. The ACE ORB is CORBA middle ware framework. VCS VERITAS Cluster Server. A high-availability platform provided by VERITAS. VERITAS Authentication Service The Infrastructure Core Service that provides authentication services for other VERITAS products. See authentication. VERITAS Authorization Service The Infrastructure Core Service that provides authorization services for other VERITAS products. See authorization.
70
Installation Guide
VERITAS Private Branch Exchange The Infrastructure Core Service that provides single-port access through a firewall. It works with CORBA and non-CORBA communication, and provides secure communication through the firewall. VERITAS Service Management Framework The Infrastructure Core Service that provides a framework for running and managing application services. VxAT See VERITAS Authentication Service. VxAZ See VERITAS Authorization Service. VxPBX See VERITAS Private Branch Exchange. VxSMF See VERITAS Service Management Framework.
71
72
Installation Guide
Index
C cluster ICS configuration in, 63 installing ICS on, 8 VERITAS Private Branch Exchange configuration, 63 VERITAS Service Management Framework configuration, 64 commands notational conventions, 2 configuration gathering information, 11 security credentials, 11 VERITAS Authentication Service, 12 VERITAS Authorization Service, 15 VERITAS Private Branch Exchange, 11 VERITAS Service Management Framework, 13 configuration information ICS, 11 configure gathering configuration information, 11 conventions, 2 credentials security, 11 setting up security credentials, 25 D dependencies ICS, 6 documentation user feedback, 4 F feedback documentation, 4 I ICS cluster configuration, 63 configuration information, 11 dependencies, 6 installation CD, 7 installer, 5 installing, 17 installing on a cluster, 8 native install packages, 6 native package structure, 57 preparing to install, 17 preparing to remove with the ICS Installer, 41 preparing to upgrade, 33 security credentials, 11 services, 5 starting, 62 stopping, 61 summary of installation steps, 8 third-party software applications, 67 uninstalling, 41 uninstalling individually, 43 uninstalling with the ICS Installer, 41 uninstalling with the native installer, 48 user support, 1 ICS installation overview, 5 ICS Installer, 5 installing ICS with, 18 installing the VERITAS Authentication Service, 21 installing the VERITAS Authorization Service, 29 installing the VERITAS Private Branch Exchange, 18 installing the VERITAS Service Management Framework, 25 removing all ICS at once, 42 removing ICS with, 41 uninstalling ICS with, 41 73
removing ICS with, 48 native packages structure, 57 O overview, ICS installation, 5 P preparing to install ICS, 17 preparing to upgrade ICS, 33 R removing ICS with the ICS Installer, 41 VERITAS Authentication Service ICS Installer
installing with ICS Installer, 18 preparing to install ICS, 17 summary of steps, 8 user support, 1 VERITAS Authentication Service, 21 VERITAS Authorization Service, 29 VERITAS Private Branch Exchange, 18 VERITAS Service Management Framework, 25 installation CD ICS, 7 installer ICS, 5 native install packages, 6 installics using, 53 installing VERITAS Authentication Service, 21 VERITAS Authorization Service, 29 VERITAS Private Branch Exchange, 18 VERITAS Service Management Framework, 25 installing ICS with the ICS Installer, 18 L license agreements third-party software, 67 M man pages converting to cat on AIX, 31 MSCS ICS configuration in, 63 installing ICS on, 8 VERITAS Private Branch Exchange configuration, 64 VERITAS Service Management Framework configuration, 65 N native install packages ICS, 6 native installer 74
uninstalling VERITAS Authentication Service with, 46 uninstalling VERITAS Authorization Service with, 44 uninstalling VERITAS Private Branch Exchange with, 47
removing ICS with native installer, 48 S security credentials, 11 setting up trust and credentials, 25 services ICS, 5 starting the ICS, 62 stopping the ICS, 61 Installation Guide
Sun Cluster ICS configuration in, 63 installing ICS on, 8 VERITAS Private Branch Exchange configuration, 64 VERITAS Service Management Framework configuration, 65 T third-party software in the ICS, 67 license agreements, 67 TruCluster ICS configuration in, 63 installing ICS on, 8 VERITAS Private Branch Exchange configuration, 64 VERITAS Service Management Framework configuration, 65 trust setting up security trust, 25 U uninstalling ICS, 41 ICS individually, 43 ICS with the native installer, 48 VERITAS Authentication Service, 46 VERITAS Authorization Service, 44 VERITAS Private Branch Exchange, 47 VERITAS Service Management Framework, 45 uninstalling ICS preparing to, 41 upgrade preparing to upgrade ICS, 33 upgrading VERITAS Authentication Service, 35 VERITAS Authorization Service, 37 VERITAS Private Branch Exchange, 34 VERITAS Service Management
Framework, 36 user support, 1 V VCS ICS configuration in, 63 VERITAS Private Branch Exchange configuration, 63 VERITAS Service Management Framework configuration, 64 VERITAS Authentication Service configuration information, 12 installing with the ICS Installer, 21 uninstalling, 46 upgrading, 35 VERITAS Authorization Service configuration information, 15 installing with the ICS Installer, 29 uninstalling, 44 upgrading, 37 VERITAS Private Branch Exchange cluster configuration, 63 configuration information, 11 installing with the ICS Installer, 18 MSCS cluster configuration, 64 Sun Cluster cluster configuration, 64 TruCluster cluster configuration, 64 uninstalling, 47 upgrading, 34 VCS cluster configuration, 63 VERITAS Service Management Framework cluster configuration, 64 configuration information, 13 installing with the ICS Installer, 25 MSCS cluster configuration, 65 Sun Cluster cluster configuration, 65 TruCluster cluster configuration, 65 uninstalling, 45 upgrading, 36 VCS cluster configuration, 64
Index
75
76
Installation Guide