How to Complete the Sun Cluster HA for Sun ONE Directory Server Configuration

The fault monitor determines whether the Sun Cluster HA for Sun ONE Directory Server instance is secure or non-secure. The monitor probes secure and non-secure directory servers differently. If you have created a password file, the instance is determined to be secure. If you have not created a password file, the instance is determined to be non-secure. The password file is named keypass and is in a different format than iPlanet's password file. The keypass file contains only the password for which a secure instance of directory server prompts when started manually. This password file is located in the same directory as the start-slapd program that is used to start this instance of the directory server.

If Sun ONE Directory Server is in secure mode, then the path name must also contain a file named keypass, which contains the secure key password that is needed to start this instance. If a keypass file exists, then Sun Cluster HA for Sun ONE Directory Server assumes that the keypass instance is secure.

Perform the following steps to complete your configuration.

1. Become superuser on a cluster member.

2. Register the resource type for the data service.

   # scrgadm -a -t SUNW.nsldap

   -a

   Adds the data service resource type.

   -t SUNW.nsldap

   Specifies the predefined resource type name.

3. Add the Sun ONE Directory Server application resource to the failover resource group that you created for your network resources.

   The resource group that contains the application resources is the same resource group that you created for your network resources in How to Configure and Activate Network Resources.

   # scrgadm -a -j resource -g resource-group \ -t SUNW.nsldap [-y Network_resources_used=network-resource, …] \ -y Port_list=port-number/protocol -x Confdir_list=pathname

   -j resource

   Specifies the Sun ONE Directory Server application resource name.

   -y Network_resources_used=network-resource

   Specifies a comma-separated list of network resources (logical hostnames or shared addresses) in resource-group, which the Sun ONE Directory Server application resource must use.

   -t SUNW.nsldap

   Specifies the type of resource to add.

   -y Port_list=port-number/protocol

   Specifies a port number and the protocol to be used, for example, 389/tcp. The Port_list property must have one or two entries.

   -x Confdir_list=pathname

   Specifies a path for your Sun ONE Directory Server configuration directory. The Confdir_list extension property is required. The Confdir_list property must have exactly one entry.

4. Enable the resource and its monitor.

   # scswitch -e -j resource

   -e

   Enables the resource and its monitor.

   -g resource

   Specifies the name of the application resource that is being enabled.

Example–Registering and Configuring Sun Cluster HA for Sun ONE Directory Server

This example shows how to register Sun Cluster HA for Sun ONE Directory Server.

Cluster Information
Node names: phys-schost-1, phys-schost-2
Logical hostname: schost-1
Resource group: resource-group-1 (for all resources)
Resources: schost-1 (logical hostname),
	nsldap-1 (Sun ONE Directory Server application resource) 
 
(Create a failover resource group.)
# scrgadm -a -g resource-group-1 -h phys-schost-1,phys-schost-2
 
(Add a logical hostname resource to the resource group.)
# scrgadm -a -L -g resource-group-1 -l schost-1
 
(Bring the resource group online.)
# scswitch -Z -g resource-group-1
 
(Install and configure Sun ONE Directory Server.)

(To install and configure the iPlanet Directory Server, run the 
“setup” program from the node that is currently hosting the logical
hostname.”
 
(Stop the Sun ONE Directory Server server.)
 
(Register the SUNW.nsldap resource type.)
# scrgadm -a -t SUNW.nsldap
 
(Create an Sun ONE Directory Server resource and add it to the 
resource group.)
# scrgadm -a -j nsldap-1 -g resource-group-1 \
-t SUNW.nsldap -y Network_resources_used=schost-1 \
-y Port_list=389/tcp \
-x Confdir_list=/global/nsldap/slapd-schost-1
 
(Enable the application resources.)
# scswitch -e -j nsldap-1