Chapter 7   The DSAME Installation Program for Windows 2000


The iPlanet Directory Server Access Management Edition (DSAME) installation program is used to install or uninstall the complete product all at once, or components of the product one at a time. You can use the DSAME installation program in a number of ways depending upon your deployment needs. This chapter provides an overview of the options presented in the Windows version of the installation program, as well as some pointers on determining the installation tasks you'll need to perform. Topics include:

• Before You Begin

• Installation Program Options

• Silent Installation

• Determining Which Installation Options to Use

• Starting DSAME Services

• Logging In to DSAME

• Uninstalling DSAME

Before You Begin

---

Be sure to resolve the following before you start the installation program:

• You must have Administrator privileges to run the installation program.

• You can only install DSAME, or any of the components, on a machine local to you. You can not install across a network on remote machines.

• Determine whether or not you will be configuring an existing Directory Server. For more information, see "If You Already Have an Existing Directory" and "Unsupported DITs".

• Determine whether or not you will be installing DSAME policy agents. For more information, see "URL Policy Agent".

• Determine whether or not you will be installing cross-domain single sign-on components. For more information, see "Cross-Domain Single Sign-On".

Installation Program Options

---

Each time you run the installation program, a number of installation options are displayed. Determine which installation option to choose by first identifying your scenario in Table 7-1, and then following the detailed the instructions that correspond to that scenario. The following is a brief summary of what happens when you choose each of the main installation options.

Option 1) iPlanet Directory Server

When you choose this option, iPlanet Directory Server 5.1 is installed on the local computer system. This option, when selected by itself, is useful if you want to install a stand-alone Directory Server. For example, you can choose this option if you're setting up Directory Server replication. If you want to install DSAME for evaluation purposes, choose this option in addition to Option 2) DSAME Management and Policy Services.

When you select this option in addition to the DSAME Management and Policy Services option, DSAME schema is automatically installed. When you select this option by itself, you can specify whether or not you want to install DSAME schema.

Option 2) DSAME Management and Policy Services

When you choose this option, DSAME Management and Policy Services are installed on the local computer system. Select this option by itself when you want to install DSAME components to work with an existing Directory Server. When you want to install DSAME for evaluation purposes, select this option in addition to Option 1) iPlanet Directory Server.

Option 3) Configure an Existing Directory Server

When you choose this option, only the DSAME schema is installed. No new Directory Server is installed; no existing data is overwritten. Choose this option only if you plan to use DSAME with an existing Directory Server 5.1 that's already provisioned with user data. For more information, see "Using an Existing Directory Server".

Option 4) DSAME Cross-Domain Single Sign-On

The cross-domain single sign-on feature makes it possible for users to authenticate in one domain, and then to use applications in many other domains without having to re-authenticate. When you choose this option, only the Cross-Domain Single Sign-On (CDSSO) component is installed. You can install this as part of the existing DSAME, install on Web Server, or install this by installing Web Server. For more information, see "Cross-Domain Single Sign-On".

Exiting the Installation Program

After you've started the DSAME installation program, you can exit the program at any time by clicking Exit.

Silent Installation

---

Silent installation provides a means for scripting the installation of DSAME services, Directory Server, DSAME schema, or the Cross-Domain Single Sign-On component. When you perform a silent installation, you use a text file, or StateFile, to predefine all the answers that you would normally supply to the setup program interactively. This saves time and is useful when you want to install multiple instances of DSAME or its components using the same parameters in each instance.

Silent installation is a two-step process. First you generate a StateFile that contains all the parameter information the installation program needs. Then you run the silent installation program that automatically reads in the parameters you've defined in the StateFile.

To Generate a StateFile

1. Copy the setup program and installer files from the CD to your local directory.

2. Run the installation program using the graphical user interface (GUI). In the directory where the setup.exe file is located, open a DOS command prompt window and enter the following command:

   setup.exe

3. Proceed through the Welcome and License screens as prompted. When you get to the Select Components to Install window, click Exit. The am.class file is created in the same directory as the setup.exe.

4. In the same directory, enter the following command:

   java am -saveState DSAME51_StateFile

   where DSAME51 is your name for the StateFile.

5. The installation program GUI displays. Proceed through the installation program GUI, keeping in mind that your answers to the prompts are being recorded in the StateFile.

   Follow the instructions for "Simple Installations With No Existing Directory Server" or for "Using an Existing Directory Server".

When installation is complete, the file DSAME51_StateFile is created in the same directory as setup.exe.

To Run the Silent Installation Program

1. Open a DOS command prompt window. In the directory where the files am.class and DSAME51_StateFile are located, enter the following command:

   java am -nodisplay -noconsole -state DSAME51_StateFile

2. When installation is complete, reboot the computer system.

Determining Which Installation Options to Use

---

You will probably run the DSAME installation program multiple times in order to install Directory Servers, DSAME services and Single Sign-On components in the proper number and sequence. Table 7-1 summarizes the common installation scenarios, and where to find the step-by-step instructions for each scenario.

Table 7-1    Where To Find DSAME Installation Instructions for Specific Scenarios. 

Common Installation Scenarios	Where to Find Detailed Installation Instructions
Install DSAME and for evaluation purposes. OR Install and deploy Directory Server and DSAME for the first time for production purposes; you have no existing user data to work with.	"Simple Installations With No Existing Directory Server".
Install DSAME to work with single directory that is already provisioned with user data.	"Using an Existing Directory Server".
Install multiple instances of DSAME against a single Directory Server for agent failover. DSAME and the master Directory Server are already installed; the directory may or may not be already provisioned with users.	"Support for Directory Replication and High Availability".
Install a stand-alone version of Directory Server with DSAME schema; useful in setting up multi-master replication.	"Installing a Stand-Alone iPlanet Directory Server".
Upgrade an existing directory by installing a stand-alone version of Directory Server 5.1, without the DSAME schema.	"Installing a Stand-Alone iPlanet Directory Server".
Configure an existing Directory Server 5.1 to be used with DSAME; the existing directory is already provisioned with user data.	"Step 2: Install DSAME Services".
Install and configure the cross-domain single sign-on (CDSSO) component.	"Installing the Cross-Domain Single Sign-On Component".
Uninstall or re-install DSAME.	"Uninstalling DSAME".

Starting DSAME Services

---

You must start DSAME Services manually before you can login. You can start DSAME by using one of the following methods:

• Open a DOS prompt window and enter the following commands:

  cd DSAME_root\bin

  amserver start

• From the Start menu, select Programs > Administrative Tools > Services. In the Services window, right-click the icon for DSAME-hostname. From the menu, choose Start.

Logging In to DSAME

---

You can log in to DSAME through your browser.

1. Go to the appropriate login URL:
   • If DSAME services are running on iPlanet Web Server, go to the login URL using the form:

     http://host.domain:port/amconsole

     where host is the host name of the system, domain is the domain name of the server that runs DSAME services, and port is the DSAME services port number.

     For example: http://tintin.india.sun.com:58080/amconsole

2. In the Login page, enter the Top-Level Administrator user id and password you specified at installation.

Uninstalling DSAME

---

The installation program in DSAME is also used to uninstall the DSAME application. You can the remove the entire product, or you can remove the following individual components of the product:

• DSAME Management and Policy Services

• iPlanet Directory Server 5.1

• iPlanet Directory Server Configuration for DSAME

• DSAME Cross Domain Single Sign-On

To Uninstall DSAME Components

You must have Administrator privileges to run the DSAME Installation/Uninstallation program. Be sure all web browsers are closed before starting the program.

1. From the Start Menu, choose Settings > Control Panel.
   

   ---

   Note	As an alternative, you can start the Uninstallation program from DOS command prompt window. In the DSAME_root directory, enter the following command: java uninstall_DSAME

   ---

   
   

2. In the Control Panel, double-click Add/Remove Programs.

3. In the Add/Remove Programs window, select iPlanet Directory Services Access Management Edition, and then click Change/Remove.
   
   

4. In the Select Type of Uninstall window, select one of the following options, and then click Next:

   Full. Select this option if you want to remove DSAME services and Directory Server installed on the local computer system.

   Partial. Select this option if you want to remove only either the DSAME Service or Directory Server installed on the local computer system.

5. In the Ready to Uninstall window, click Uninstall Now.

6. In the Summary Window, you can click Details to see more information about the uninstallation results. Click Exit to exit the program.