Chapter 8   Simple Installations With No Existing Directory Server


This chapter provides instructions for installing iPlanet Directory Server Access Management Edition (DSAME) for evaluation purposes, or for deploying a DSAME directory and services for the first time. The instructions here assume that you don't already have a Directory Server installed and deployed.

Topics in this chapter include:

• Installing DSAME Services and Directory Server

• Installing a Stand-Alone iPlanet Directory Server

---

Note	If you plan to use DSAME with an existing Directory Server that is already provisioned with users, see Chapter 9 "Using an Existing Directory Server.

---

Installing DSAME Services and Directory Server

---

Use these instructions when you want to do a quick and simple installation for the purpose of evaluating or exploring the product, and when you're not concerned with connecting to an existing Directory Server or existing user data. When you choose this option, the following components are installed:

• Directory Server 5.1

• DSAME Policy service and Management service

• A Web Server that runs the DSAME Policy and Management services

To Install DSAME Services with a New Directory Server

You must have Administrator privileges when you run the DSAME installation program. Be sure all web browsers are closed before starting the installation program.

1. If you're installing DSAME from the product CD, insert the CD into the drive of the system on which you want to install the software. If you've downloaded the product, unzip the product binaries file.

2. Run the setup.exe program. You'll find the program in the root directory of the CD-ROM. If you've downloaded the product binariers, you'll find the program in the directory where you unzipped the binary files.

   Double-click the setup.exe icon.

   Installation messages are written to log files in the following directory:

   C:\Documents and Settings\Administrator\Local Settings\Temp

3. Read the License Agreement. When prompted, Do you agree to the license terms? Click Yes (Accept License).

4. In the Installation Directory window, provide the following information:

   Install DSAME in this directory: Enter the path to the directory where DSAME Services will be installed. Plan to install the DSAME Services and Directory Server in different directories. Ideally, you would install DSAME Services and Directory Server on different computer systems.

5. In the Components to Be Installed/Uninstalled window, select only the following components:
   • iPlanet Directory Server

   • DSAME Management and Policy Services

   Deselect all other components.

Figure 8-1    Installing DSAME Services with a New Directory Server.

6. In the JDK Configuration window, provide the following information, and then click Next:

   Do you want to use your own JDK? Java support in the Web Server requires Java Development Kit (JDK) of version 1.3.1 or higher. While a default JDK is provided, you can use your own JDK with the Web Server. If you want to use your own JDK version, then select Yes and then enter the full path to the version of JDK you want to use. Otherwise, select No.

7. In the iPlanet Web Server Information window, provide the following information about the Web Server that will run DSAME services, and then click Next:

   Administrator: Enter at user name for the administrator who will access and manage the Web Server when necessary.

   Port: Enter a port number. Typically, the default is 58888.

   Password: Enter the password for the Administrator specified above. The Password must be a minimum of 8 characters in length.

   Confirm Password: To confirm the Administrator password, enter it again.

8. In The Web Server that Runs DSAME Services window, provide the following information, and then click Next:

   Host: This is the computer system where DSAME components and a dedicated web server will be installed together.

   Port: Enter a port number for the Web Server that runs the DSAME services.

   Protocol: If the Web Server will not be using the Secure Socket Layer (SSL) protocol, then select HTTP. If it will be enabled for SSL, then select HTTPS.

   Domain: Enter the domain name of the computer system where DSAME Services will be installed.

   Deployment URI: The Universal Resource Identifier (URI) prefix tells the Web Server where to look for HTML pages associated with a service and also for web application specific information like classes and jars.

   The default URI prefix is amserver. You can enter a different name.

   DSAME Console Deployment URI: This URI prefix tells the Web Server where to look for HTML pages associated with the DSAME administration console and also for other web application specific information like classes and jars. The default URI prefix is amconsole. You can enter a different name.

9. In the Directory Schema window, provide the following information, and then click Next:

   Root Suffix: This is the point in your directory where you want DSAME to start managing entries. Enter a distinguished name (DN) that contains at least one type=value pair. Examples:

   o=isp

   o=madisonparc

   dc=sun,dc=com

   If you want the default organization to be the root suffix, then enter a period (.).

   Organization Name: Enter a name for the first organization to be used or created in your DSAME Directory Information Tree (DIT). This name will be displayed in the DSAME graphical user interface. Examples: iPlanet or iplanet.com.

   Directory Component Node: This is the point in DIT where DSAME will start managing entries. Example: o=isp

10. In the iPlanet Directory Server Information window, enter the following, and then click Next.

    Host: Enter the fully qualified domain name of the computers system where Directory Server is installed.

    Port: Enter the Directory Server port number.

    Installation Directory: Enter the full path to the directory where Directory Server is installed.

    Directory Manager: Enter the DN of the user who has restricted access to Directory Server. Example: cn=Directory Manager

    Password: Enter the password for Directory Manager. The password must be a minimum of eight characters in length.

    Confirm Password: To confirm the Directory Manager password, enter it again.

11. In the Administration Server that Manages Directory Server window, provide the following information, and then click Next:

    Administrator: Enter the user name of the administrator who will have access to the Administration Server that manages iPlanet Directory Server.

    Port: Enter a port number for the Administration Server that manages Directory Server. By default, this port is set at 58900.

    Password: Enter the password for the user amAdmin. the password must be a minimum of 8 characters in length.

    Confirm Password: To confirm the amAdmin password, enter it again.

12. In the DSAME Super Administrator Information window, provide the following information, and then click Next:

    User name: The user name for the Super administrator is amAdmin. This name cannot be reconfigured.

    Password: Enter the password for the user amAdmin. the password must be a minimum of 8 characters in length.

    Confirm Password: To confirm the amAdmin password, enter it again.

13. In the Currently Selected Settings window, review the configuration information that you've entered. If you need to make changes, click Back. Otherwise, click Next to proceed.

14. In the Ready to Install window, review the installation information. If you need to make changes, click Back. Otherwise, click Install Now to begin the installation.

15. In the Installation Summary window, click Details for a detailed summary of the configuration information that was processed during Installation. Then click Exit to end the program.

Installing a Stand-Alone iPlanet Directory Server

---

You can use the DSAME product CD to install iPlanet Directory Server as a stand-alone product that does not contain DSAME schema. This is useful when you need to modify the DIT or configuration before adding DSAME schema. For example, you might want to install a stand-alone Directory Server when you are upgrading an existing Directory Server to version 5.1, or when you are setting up directory replication.

If you plan to use directory replication, you'll need to install stand-alone versions of Directory Server 5.1 on more than one computer system. If you want to set up replication before you install DSAME schema, you can use the Directory Server setup program that comes on the DSAME product CD.

To Install a Stand-Alone iPlanet Directory Server

1. Run the setup.exe program. You'll find the program in the root directory of the CD-ROM. If you've downloaded the product binariers, you'll find the program in the directory where you unzipped the binary files.

   Double-click the setup.exe icon.

   Installation messages are written to log files in the following directory:

   C:\Documents and Settings\Administrator\Local Settings\Temp

2. Read the License Agreement. When prompted, Do you agree to the license terms? Click Yes (Accept License).

3. In the Installation Directory, provide the following information:

   Install DSAME in this directory: Enter the full path to the directory where you want to install DSAME components. Plan to install the DSAME Services and Directory Server in different directories. Ideally, you would install DSAME Services and Directory Server on different computer systems.

4. In the Components to Be Installed/Uninstalled window, select only iPlanet Directory Server. De-select all other components.

5. In the Directory Schema window, provide the following information, and then click Next:

   Root Suffix: This is the point in your directory where you want DSAME to start managing entries. Enter a distinguished name that includes at least one equals sign. Examples:

   o=isp

   o=madisonparc

   dc=sun,dc=com

   If you want the default organization to be the root suffix, then enter a period (.).

   Install DSAME Schema: If you want to install DSAME schema along with the Directory Server, then click the checkbox until a checkmark is displayed.

6. In the iPlanet Directory Server Information window, provide the following information, and then click Next:

   Host: Enter the fully qualified domain name for the computer system where Directory Server will be installed.

   Port: Enter a port number. Directory Server typically uses port 389.

   Installation Directory: Enter the full path to the directory where Directory Server will be installed.

   Directory Manager: Enter the distinguished name (DN) of the user who has unrestricted access to Directory Server. Example: cn=Directory Manager

   Password: Enter a password for the Directory Server administrator.The password must be at least eight characters in length.

   Confirm Password: Enter the password again to confirm it.

7. In The Administration Server that Manages Directory Server window, provide the following information, and then click Next:

   Administrator: This administrator user ID is used only when the Directory Server is down and you are unable to log in as the configuration directory administrator (typically, cn=Directory Manager). The existence of this user ID means that you can access Administration Server and perform disaster recovery activities such as starting Directory Server, reading log files, and so forth.

   Normally, Administration Server user and password should be identical to the configuration directory administrator ID and password.

   Port: Enter a port number. The Administration Server that manages Directory Server typically uses port 58900.

   Password: Enter a password for the Directory Server administrator. The password must be minimum eight characters in length.

   Confirm Password: To confirm the Administrator password, enter it again.

8. In the Currently Selected Settings window, review the configuration information that you've entered. If you need to make changes, click Back. Otherwise, click Next to proceed.

9. In the Ready to Install window, review the installation information. If you need to make changes, click Back. Otherwise, click Install Now to begin the installation.

10. In the Installation Summary window, click Details for a detailed summary of the configuration information that was processed during Installation. Then click Exit to end the program.