Sun Java System Directory Server Enterprise Edition 6.3 Installation Guide

Software Installation

This section covers basic installation. After you install server software, see Server Instance Creation for instructions on creating server instances.

Before you proceed with the installation, check Operating System Requirements in Sun Java System Directory Server Enterprise Edition 6.3 Release Notes

This guide does not cover the installation of Directory Editor software. If you plan to install Directory Editor software, first read the Known Problems and Limitations in Directory Editor in Sun Java System Directory Server Enterprise Edition 6.3 Release Notes then read the installation instructions in the Sun Java System Directory Editor 1 2005Q1 Installation and Configuration Guide.

Directory Server Enterprise Edition is also installed in French, German, Spanish, Japanese, Korean, Simplified Chinese, and Traditional Chinese languages. Instructions to install the multilingual packages are provided in the following sections, wherever required.

Installing Directory Server Enterprise Edition Using Native Packages

To install Directory Server Enterprise Edition 6.3 using native packages, you must have 6.0, 6.1, or 6.2 installed on your computer and then upgrade to 6.3. Refer to the following procedure to install Directory Server Enterprise Edition 6.3 successfully

  1. Install Directory Server Enterprise Edition 6.0, 6.1, or 6.2. In this guide, the installation instructions for Directory Server Enterprise Edition 6.2 are shown.

    On Windows, you cannot install Directory Server Enterprise Edition 6.2 directly, so you must install version 6.0 then directly upgrade to 6.3.

  2. Upgrade all the shared components to successfully upgrade to Directory Server Enterprise Edition 6.3. For detailed information, refer to To Upgrade Shared Components Using Patches.

  3. Upgrade your Directory Server Enterprise Edition installation to 6.3 by applying the respective patches as mentioned in To Upgrade Directory Server Enterprise Edition Using Native Packages.

You can install Directory Service Control Center, Directory Server, and Directory Proxy Server on the same host but in the following procedure it is shown as if all the three components are being installed on different computers. If you install all the three components on the same computer, in the components selection screen shown in the following procedure, select all the three components to install.

ProcedureTo Install Only Directory Server From Native Packages

This procedure covers installation of Directory Server from native packages. You must be root to perform this procedure.


Note –

If you installed Directory Service Control Center, you automatically installed Directory Server from native packages. You can use the Directory Server software that is installed alongside DSCC to create your own additional Directory Server instances on the system.


Before You Begin

Obtain the Java Enterprise System update 1 distribution for this installation, as shown in the following figure:

The Java Enterprise System distribution installs natively packaged
software.

Complete the following worksheet for your installation.

Requisite Information 

Hints 

Your Answers 

Fully qualified hostname of the system where you install Directory Server 

Example: ds.example.com

 

(Optional) Cacao common agent container port number to access from Directory Service Control Center 

Default: 11162

 

File system paths where you create Directory Server instances 

Example: /local/ds/

Create instances only on local file systems, never on network–mounted file systems such as NFS. 

Each path is henceforth referred to as an instance-path.

 

LDAP port number 

Default: 389 - root installation; 1389 - non-root installation

 

LDAP/SSL port number 

Default: 636 - root installation; 1636 - non-root installation

 

Directory Manager DN 

Default: cn=Directory Manager

 

Directory Manager password 

Must be at least 8 characters long 

 

Base suffix DN 

Example: dc=example,dc=com

 

(UNIX systems) Server user (uid)

Example: noaccess

 

(UNIX systems) Server group (gid)

Example: noaccess

 

  1. Install prerequisite patches or service packs for your platform.

    See Operating System Requirements in Sun Java System Directory Server Enterprise Edition 6.3 Release Notes.

  2. Using the Java Enterprise System distribution, run the Java ES installer as root.


    root# ./installer
    
  3. Select the Directory Server component for installation.

    The Directory Server component is selected.

    If you do not want to install the multilingual packages, deselect the Install multilingual package(s) for all selected components check box.

  4. Choose to configure the software later, as you will upgrade the software to 6.3.

    Configure Later is selected.
  5. Complete installation with the Java ES installer.

ProcedureTo Install Only Directory Proxy Server From Native Packages

This procedure covers installation of Directory Proxy Server from native packages. You must be root to perform this procedure.

Before You Begin

Obtain the Java Enterprise System update 1 distribution for this installation, as shown in the following figure:

The Java Enterprise System distribution installs natively packaged
software.

Complete the following worksheet for your installation.

Requisite Information 

Hints 

Your Answers 

Fully qualified hostname of the system where you install Directory Proxy Server 

Example: dps.example.com

 

(Optional) Cacao common agent container port number to access from Directory Service Control Center 

Default: 11162

 

File system paths where you create Directory Proxy Server instances 

Example: /local/dps/

Create instances only on local file systems, never on network–mounted file systems such as NFS. 

Each path is henceforth referred to as an instance-path.

 

LDAP port number 

Default: 389 - root installation; 1389 - non-root installation

 

LDAP/SSL port number 

Default: 636 - root installation; 1636 - root installation

 

Directory Proxy Manager DN 

Default: cn=Proxy Manager

 

Directory Proxy Manager password 

Must be at least 8 characters long 

 

(UNIX platforms) Server user (uid)

Example: noaccess

 

(UNIX platforms) Server group (gid)

Example: noaccess

 

(Optional) Connection information for each server to access through the proxy 

Example: ds1.example.com:1389, ds2.example.com:1636

 

  1. Install prerequisite patches or service packs for your platform.

    See Operating System Requirements in Sun Java System Directory Server Enterprise Edition 6.3 Release Notes.

  2. Using the Java Enterprise System distribution, run the Java ES installer as root.


    root# ./installer
    
  3. Select the Directory Proxy Server component for installation.

    The Directory Proxy Server component is selected.

    If you do not want to install the multilingual packages, deselect the Install multilingual package(s) for all selected components check box.

  4. Choose to configure the software later, as you will upgrade the software to 6.3.

    Configure Later is selected.
  5. Complete installation with the Java ES installer.

ProcedureTo Install Directory Service Control Center From Native Packages

This procedure covers installation of Directory Service Control Center, also known as DSCC, and remote administration command-line tools.

You must be root to perform this procedure.

You can also install Directory Service Control Center with the Zip distribution by deploying the WAR file provided with the software packages. For more information, see Installing Directory Service Control Center From Zip Distribution.

When you install DSCC, you automatically install Directory Server from native packages. DSCC uses its own local instance of Directory Server to store information about your directory service configuration. The instance is referred to as the DSCC Registry.

You can use the Directory Server software that is installed alongside DSCC to create your own additional Directory Server instances on the system.

Before You Begin

Obtain the Java Enterprise System update 1 distribution for this installation, as shown in the following figure:

The Java Enterprise System distribution installs natively packaged
software.

Complete the following worksheet for your installation.

Requisite Information 

Hints 

Your Answers 

Hostname of the system where you install DSCC 

  

 

root password for the system

  

 

Java Web Console URL 

Default: https://hostname:6789

 

Directory Service Manager password 

  

 

  1. Install prerequisite patches or service packs for your platform.

    See Operating System Requirements in Sun Java System Directory Server Enterprise Edition 6.3 Release Notes.

  2. With the Java Enterprise System distribution, run the Java ES installer as root.


    # ./installer
    
  3. Select the Directory Service Control Center component for installation.

    The Directory Service Control Center component is selected.

    If you do not want to install the multilingual packages, deselect the Install multilingual package(s) for all selected components check box.

  4. Choose to configure the software later, as you will upgrade the software to 6.3.

    Configure Later is selected.
  5. Complete installation with the Java ES installer.

    The native packages are installed on the system.

  6. See Getting Started With Directory Service Control Center.

ProcedureTo Upgrade Shared Components Using Patches

Before You Begin

Before upgrading Directory Server Enterprise Edition to 6.3 using native packages, you must upgrade the shared components. You must be root to perform this procedure.

Using patches, you can upgrade shared components on Solaris, Linux, and Windows. On Linux, to install patches you must use installpatch, when available.

Select the platform as per your requirements and install all the patches specified for that platform. If newer patch revisions become available, use the newer ones instead of those shown in the table.

Description 

Solaris 10 SPARC and Solaris 9 SPARC 

Solaris 10 x86, AMD x64 and Solaris 9 x86 

Linux 

International Components for Unicode (ICU) 

119810-04 (Solaris 10)

114677-14 (Solaris 9)

119811-04 (Solaris 10)

114678-14 (Solaris 9)

126368-03

Sun Java Web Console (SJWC) 

125952-05 (Solaris 10)

125950-05 (Solaris 9)

125953-05 (Solaris 10)

125951-05 (Solaris 9)

125954-05

Network Security Services/Netscape Portable Runtime/Java Security Services (NSS/NSPR/JSS) 

Refer to the table below for complete patch information. 

Refer to the table below for complete patch information. 

121656-14

Java Dynamic ManagementTM Kit Runtime

119044-03

119044-03

119046-03

Common Agent Container Runtime 

123893-04

123896-04

123899-03

Sun Java Monitoring Framework (MFWK) 

125444-11

125446-11 (Solaris 10 64–bit and Solaris 10 32–bit)

125445-11 (Solaris 10 32–bit and Solaris 9 32-bit)

125447-11

Choose the right NSS/NSPR/JSS patch for your system by getting the package version of SUNWpr and SUNtls on your system.


# pkginfo -l SUNWpr | grep VERSION 
# pkginfo -l SUNWtls | grep VERSION    

Then choose the right patch series from the table below.

Solaris 

Package Version 

Network Security Services/Netscape Portable Runtime/Java Security Services (NSS/NSPR/JSS) patch 

Solaris 9 SPARC 

SUNWpr: VERSION=4.1.2,REV=2002.09.03.00.17

SUNWtls: VERSION=3.3.2,REV=2002.09.18.12.49

119211–14

Solaris 9 x86 

SUNWpr: VERSION=4.1.3,REV=2003.01.09.13.59

SUNWtls: VERSION=3.3.3,REV=2003.01.09.17.07

119212–14

Solaris 10 SPARC 

SUNWpr: VERSION=4.5.1,REV=2004.11.05.02.30

SUNWtls: VERSION=3.9.5,REV=2005.01.14.17.27

119213–14

Solaris 10 x86 

SUNWpr: VERSION=4.5.1,REV=2004.11.05.03.44

SUNWtls: VERSION=3.9.5,REV=2005.01.14.19.03

119214–14

Solaris 9 SPARC and Solaris 10 SPARC 

SUNWpr: VERSION=4.6.4,REV=2006.11.16.20.40

SUNWtls: VERSION=3.11.4,REV=2006.11.16.20.40

125358-03

Solaris 9 x86 and Solaris 10 x86 

SUNWpr: VERSION=4.6.4,REV=2006.11.16.21.41

SUNWtls: VERSION=3.11.4,REV=2006.11.16.21.41

125359-03

On Windows, before you upgrade Common Agent Container Runtime shared component, you must run the following command:


cacaoadm.exe prepare-uninstall

Description 

Windows 

Windows Installer Patch 

126910-02

Sun Java Web Console (SJWC) 

125955-05

Network Security Services/Netscape Portable Runtime/Java Security Services (NSS/NSPR/JSS) 

125923-03

Common Agent Container Runtime 

126183-04

Sun Java Monitoring Framework (MFWK) 

125449-09

Before upgrading Directory Server Enterprise Edition 6.2 to 6.3, you need to upgrade only the Common Agent Container shared component.

  1. Shut down any processes using the shared components.

  2. If applicable, shut down the shared components.

  3. Obtain the latest upgrade patches as shown in the table above.

    For more information on how to obtain the patches, see Getting the Software in Sun Java System Directory Server Enterprise Edition 6.3 Release Notes.

  4. Apply the appropriate patches for the shared components.

    Read the README.patchID file for detailed patch installation procedures.

  5. Verify that the patch upgrades were successful.

    Read the README.patchID file for verification procedure.

  6. If applicable, restart the shared components.

ProcedureTo Upgrade Directory Server Enterprise Edition Using Native Packages

Before You Begin

Make sure all the shared components are up-to-date. For more information, see To Upgrade Shared Components Using Patches.

If you already have Directory Server Enterprise Edition 6.0, 6.1, or 6.2 installed, upgrade to version 6.3 using the following procedure.

You must be root to perform these steps.

All the Directory Server instances, Directory Proxy Server instances, and configuration information remain unaffected after you complete the Directory Server Enterprise Edition upgrade.

The following table displays the patch numbers that are required to upgrade Directory Server Enterprise Edition on different platforms. If newer patch revisions become available, use the newer ones instead of those shown in the table.

Description 

Directory Server Enterprise Edition core 

Directory Server Enterprise Edition localization 

Patch ID: Solaris SPARC 

125276-07

125937-06

Patch ID: Solaris 9 x86 

125277-07

125938-06

Patch ID: Solaris 10 x86 or AMD x64 

125278-07

125938-06

Patch ID: Linux 

125309-07

125939-06

Patch ID: Windows 

The Directory Server Enterprise Edition 6.1 patch was not delivered for Windows so this patch is not applicable to upgrade 6.1 installation. 

125311-07

125311-07


Note –

To make the localized Directory Server Enterprise Edition work successfully, install the localized patches before installing the core patches.

Each localization patch contains all the supported languages for the selected platform.


  1. Stop the DSCC registry.

    • On Solaris


      # dsadm stop /var/opt/SUNWdsee/dscc6/dcc/ads
    • On Linux


      # dsadm stop /var/opt/sun/dscc6/dcc/ads
    • On Windows


      dsadm.exe stop C:\Program Files\Sun\JavaES5\DSEE\var\dscc6\dcc\ads
  2. Stop any running instances of Directory Server and Directory Proxy Server.

  3. Upgrade the shared components. See To Upgrade Shared Components Using Patches.

  4. Download the Directory Server Enterprise Edition 6.3 patch.

    See Getting the Software in Sun Java System Directory Server Enterprise Edition 6.3 Release Notes for more details.

  5. Change to the directory where you have saved the patch.

  6. Run the following command to install the patch.

    • Solaris OS

      Before upgrading Directory Server Enterprise Edition, you must install 119254-38 on Solaris 10 SPARC and 119255-38 on Solaris 10 x86. See Getting the Software in Sun Java System Directory Server Enterprise Edition 6.3 Release Notes for information on downloading patches.

      Alternatively, use -G with the patchadd command on Solaris 10 SPARC and Solaris 10 x86 while applying the Directory Server Enterprise Edition upgrade patch.

      For example, # patchadd -G patch-id

      For rest of the Solaris OS, use the following command:

      # patchadd patch-id

    • Linux

      1. Open the directory where the installpatch file is located.

      2. Run installpatch.


        # ./installpatch

      During installation, if installpatch reports an error, you must resolve the error and install the patch again.

    • Windows

      1. Open the folder where the patch-id.exe executable file is located.

      2. Double click patch-id.exe.

      The localized patches are delivered within the base patch.

    After the successful installation of the patch, run the following commands:


    # dsccsetup console-unreg
    # dsccsetup console-reg
  7. Start the Directory Server instances and Directory Proxy Server instances, if any.

  8. Restart the DSCC registry.

    • On Solaris


      # dsadm start /var/opt/SUNWdsee/dscc6/dcc/ads
    • On Linux


      # dsadm start /var/opt/sun/dscc6/dcc/ads
    • On Windows


      dsadm.exe start C:\Program Files\Sun\JavaES5\DSEE\var\dscc6\dcc\ads
Next Steps

After installing the software, see Environment Variables.

Installing Directory Server Enterprise Edition Using Zip Distribution

During the installation process, if dsee_deploy finds that Directory Server Enterprise Edition is already installed on your computer, it upgrades the previous installation automatically. Backup the Directory Server Enterprise Edition installation directory, if any, before upgrading to Directory Server Enterprise Edition 6.3, as later you will not be able to restore any previous Directory Server Enterprise Edition installation.

The zip version of Directory Server Enterprise Edition 6.3 removes any previous partial installation of Directory Server Enterprise Edition.

You can install the zip distribution as non-root user.

ProcedureTo Install Directory Server Enterprise Edition 6.3 From Zip Distribution

Before You Begin

On SuSE Linux:

On HP-UX:

Patch Table for Zip Distribution

Refer to the following table for information about the appropriate zip patch for your system. If newer patch revisions become available, use the newer ones instead of those shown in the table.

Operating System 

Patch number 

Solaris SPARC 

126748-04

Solaris 9 x86 

126749-04

Solaris 10 x86 and AMD x64 

126750-04

Red Hat Linux 

126751-04

SuSE Linux 

126751-04

HP-UX 

126752-04

Windows 

126753-04

All the multilingual files are included in the above mentioned patches.

Complete the worksheet given below before you start your installation.

Requisite Information 

Hints 

Your Answers 

Fully qualified hostname of the system where you install  

Example:  

 
  • Directory Server

  • Directory Proxy Server

  • ds.example.com

  • dps.example.com

 

(Optional) Common agent container port number to access from Directory Service Control Center 

Default: 11162

 

File system paths where you create instances for: 

Example:  

 
  • Directory Server

  • Directory Proxy Server

  • /local/ds/

  • /local/dps/

Create instances only on local file systems, never on network–mounted file systems such as NFS. 

Each path is henceforth referred to as an instance-path.

 

LDAP port number 

Default: 389 when installing as root; 1389 for non-root

 

LDAP or SSL port number 

Default: 636 when installing as root; 1636 for non-root

 

Directory Manager DN 

Default: cn=Directory Manager

 

Directory Proxy Manager DN 

Default: cn=Proxy Manager

 

Directory Manager password 

Must be at least eight characters long 

 

Directory Proxy Manager password 

Must be at least eight characters long 

 

Base suffix DN 

Example: dc=example,dc=com

 

(UNIX systems) Server user (uid)

Example: noaccess

 

(UNIX systems) Server group (gid)

Example: noaccess

 

(Optional) Connection information for each server to access through the proxy 

Example: ds1.example.com:1389, ds2.example.com:1636

 

By default, the user and group IDs for zip installations are those of the user performing the installation.

  1. Obtain the zip distribution for this installation.

  2. Install the prerequisite patches or service packs for your platform.

    See Operating System Requirements in Sun Java System Directory Server Enterprise Edition 6.3 Release Notes.

  3. Change to the zip distribution directory that contains the dsee_deploy command.

  4. Install the software with the dsee_deploy(1M) command.


    $ ./dsee_deploy install -i install-path options
    

    On Windows, browse to the zip distribution folder that contains the dsee_deploy command and run the following command:


    dsee_deploy install -i install-path options
    

    For example, the following command installs the component in the /local directory, assuming that you have write access to the directory.


    $ ./dsee_deploy install -i /local
    

    You can also use the --no-inter option to install in non-interactive mode, accepting the license without confirmation. Non-interactive mode is particularly useful for silent installation.

    This step installs a Common Agent Container, cacao, with the local Directory Service Control Center agent as well, allowing you to use DSCC to create server instances. The previous command works properly only if you have not yet installed a Common Agent Container using the default port, 11162.

    If you installed DSCC previously on the same system, a Common Agent Container using the default port is already installed. Specify a different port using the -p option.


    $ ./dsee_deploy install -i /local -p 11169
    

    During the installation process, a WAR file is saved on your system. The WAR file contains the DSCC web application which when deployed with the application server enables you to access and manage the server instances through web console. The functionality is similar to DSCC in native packages. For more information about WAR file, see Installing Directory Service Control Center From Zip Distribution.

    During the installation process, the multilingual packages are also installed.

  5. (Optional) Load sample data in your directory.

    Examples that use command-line tools depend on sample data residing under the dc=example,dc=com suffix of your directory.

    You can set up part of the data that is required by creating a dc=example,dc=com suffix. You can then populate the suffix with entries from the ds6/ldif/Example.ldif file.

    1. Create a new Directory Server instance and start the instance.


      $ dsadm create -p port -P SSL-port instance-path
      $ dsadm start instance-path
      
    2. Read the Example.ldif file to find bind passwords needed in the examples.

    3. Create suffix and load the Example.ldif content into the directory by using the following commands:


      $ dsconf create-suffix -h localhost -p 1389 dc=example,dc=com
      $ dsconf import -h localhost -p 1389 install-path/ds6/ldif/Example.ldif \
      dc=example,dc=com

      For more information, see To Create a Directory Server Instance From the Command Line.

    4. Generate test data for examples by using the makeldif(1) command and the following template:

      define suffix=dc=example,dc=com
      define maildomain=example.com
      
      branch: ou=test,[suffix]
      subordinateTemplate: person:100
      
      template: person
      rdnAttr: uid
      objectclass: top
      objectclass: person
      objectclass: organizationalPerson
      objectclass: inetOrgPerson
      givenName: <first>
      sn: <last>
      cn: {givenName} {sn}
      initials: {givenName:1}{sn:1}
      employeeNumber: <sequential>
      uid: test{employeeNumber}
      mail: {uid}@[maildomain]
      userPassword: auth{employeeNumber}{employeeNumber}
      telephoneNumber: <random>
      description: This is the description for {cn}.
    5. Copy the template content to template.ldif and use commands such as the following to generate the data in test.ldif and to load the content into the directory.


      $ cd install-path/dsrk6/bin/example_files/
      $ ../makeldif -t test.template -o test.ldif
      Processing complete.
      101 total entries written.
      $ ../ldapmodify -a -c -D uid=hmiller,dc=example,dc=com -w - -f test.ldif
      Enter bind password:
      …

      If you read Example.ldif, you see that the password for hmiller is hillock.

Next Steps

After installing the software, see Environment Variables.

Installing Directory Service Control Center From Zip Distribution

The Directory Server Enterprise Edition zip distribution includes a WAR file (dscc.war) that contains the Directory Service Control Center (DSCC) web application. The WAR file is deployed with the application server to enable you to do the following tasks:

The WAR file supports the following application servers:

The following two procedures contain information about deploying the WAR file with Sun Java System Application Server and Tomcat respectively.

ProcedureTo Deploy the WAR File with Sun Java System Application Server

After you install Directory Server Enterprise Edition, the WAR file, dscc.war, is at the following location:


install-path/var/dscc6/
  1. Initialize the DSCC registry.


    $ install-path/dscc6/bin/dsccsetup ads-create
    Choose password for Directory Service Manager:
    Confirm password for Directory Service Manager:
    Creating DSCC registry...
    DSCC Registry has been created successfully
  2. Create an application server instance.


    $ mkdir /local/domainroot
    $ setenv AS_DOMAINS_ROOT /local/domainroot
    $ cd app-server-install-path/bin
    $ asadmin create-domain --domaindir ${AS_DOMAINS_ROOT} --adminport 3737 \
    --adminuser boss dscc
  3. Edit the server.policy file.

    1. Open the server.policy file.


      $ vi ${AS_DOMAINS_ROOT}/dscc/config/server.policy
    2. Add the following statements to the end of the file:


      // Permissions for Directory Service Control Center
      grant codeBase "file:${com.sun.aas.instanceRoot}/applications/j2ee-modules/dscc/-" 
      {
      	permission java.security.AllPermission;
      };

    This configures the application server to grant all of the Java permissions to the DSCC application.

  4. Deploy the WAR file in your application server instance.


    $ asadmin start-domain --domaindir ${AS_DOMAINS_ROOT} --user username dscc 
    $ cp install-path/var/dscc6/dscc.war ${AS_DOMAINS_ROOT}/dscc/autodeploy

    For more information about creating and configuring application server instances and deploying the WAR file, refer to the Sun Java System Application Server Online Help.

  5. Open DSCC.

    Use http://hostname:8080/dscc or https://hostname:8181/dscc based on the configuration of your application server.

    The Directory Service Manager Login page displays.

    See Getting Started With Directory Service Control Center.

ProcedureTo Deploy WAR File with Tomcat

After you install Directory Server Enterprise Edition, the WAR file, dscc.war, is at install-path/var/dscc6/.

The dscc.war is installed in the same way as any other web application, except the following settings:

The following example shows how to install DSCC in Tomcat on a Solaris 10 system.

  1. Initialize the DSCC registry.


    $ install-path/dscc6/bin/dsccsetup ads-create
    Choose password for Directory Service Manager:
    Confirm password for Directory Service Manager:
    Creating DSCC registry...
    DSCC Registry has been created successfully
  2. Identify your Tomcat installation and instance.


    $ setenv CATALINA_HOME tomcat-install-path
    $ setenv CATALINA_BASE tomcat-instance-path
    $ setenv JAVA_HOME jdk-home-dir
    

    For installing Tomcat and creating instances, refer to the Tomcat documentation.

  3. Deploy the WAR file.

    Create the dscc directory as shown below:


    $ mkdir ${CATALINA_BASE}/webapps/dscc

    Copy the dscc.war file into newly created dscc folder and unzip the dscc.war file.


    $ unzip -d ${CATALINA_BASE}/webapps/dscc install-path/var/dscc6/dscc.war

    Add the emphasized text in the ${CATALINA_BASE}/conf/web.xml file as shown below:


     ...
        <servlet>
            <servlet-name>jsp</servlet-name>
            <servlet-class>org.apache.jasper.servlet.JspServlet</servlet-class>
            <init-param>
                <param-name>fork</param-name>
                <param-value>false</param-value>
            </init-param>
            <init-param>
                <param-name>xpoweredBy</param-name>
                <param-value>false</param-value>
            </init-param>
    	...
            <init-param>
                <param-name>enablePooling</param-name>
                <param-value>false</param-value>
            </init-param>
            <load-on-startup>3</load-on-startup>
        </servlet>
        ....

    Verify the permissions of startup.sh (tomcat5.exe on Windows) and run the following command:


    $ ${CATALINA_HOME}/bin/startup.sh
  4. Use http://hostname:8080/dscc to connect to DSCC.

    The Directory Service Manager Login page displays.

    See Getting Started With Directory Service Control Center.

ProcedureTo Upgrade Directory Server Enterprise Edition From Zip Distribution

Before You Begin

There is no different procedure to upgrade the Directory Server Enterprise Edition installation rather the dsee_deploy command automatically updates the installation if it finds any previous installation. But in case of SuSE Linux 9 and HP-UX, before upgrading the Directory Server Enterprise Edition installation, you must upgrade the operating system to SuSE Linux 9 SP4 and HP-UX 11.23 respectively. Refer to the following procedure to successfully upgrade your Directory Server Enterprise Edition installation to 6.3.

  1. Stop cacao, Directory Server and Directory Proxy Server running instances that are created using the installation going to be patched. Also stop application server for WAR file and the DSCC registry.

  2. In case of SuSE Linux 9 and HP-UX, upgrade your operating system.

    • Upgrade SuSE Linux 9 SP3 to SuSE Linux 9 SP4 to upgrade Directory Server Enterprise Edition 6.2 installation to 6.3.

      On SuSE 64-bit, .pam-32bit-9-yyyymmddhhmm.rpm is a prerequisite for cacao to start. You must install it if not already present on your system.

    • Upgrade HP-UX 11.11 to HP-UX 11.23 to upgrade Directory Server Enterprise Edition 6.0 or 6.1 installation to 6.3.

    Please refer to the corresponding documentation on how to upgrade the operating system, how to preserve the partition where Directory Server Enterprise Edition is installed, where to get the latest patch bundles.

  3. Upgrade Directory Server Enterprise Edition to 6.3.

    • Use the dsee_deploy command from Directory Server Enterprise Edition 6.3 zip distribution, with the same install-path, and cacao port that you had for your previous installation. The dsee_deploy command will restart cacao and DSCC registry.

      For step by step information, refer to To Install Directory Server Enterprise Edition 6.3 From Zip Distribution.

    • Deploy the latest dscc.war file in the application server using the following commands:

      For step by step information, refer to Step 4 on Sun Java System Application Server and Step 3 on Tomcat application server.

    • Restart Directory Server and Directory Proxy Server instances, and application server for WAR file.

  4. Start daemons only when both operating system is upgraded and Directory Server Enterprise Edition is installed.

See Also

For upgrading Directory Server Enterprise Edition to 6.3 on rest of the supported operating systems, the procedure is similar to the installation procedure. Refer To Install Directory Server Enterprise Edition 6.3 From Zip Distribution for step by step information.

Getting Started With Directory Service Control Center

After installing Directory Service Control Center using native packages or zip distribution, use to following procedures to get started and troubleshoot the problems if you get any while accessing Directory Service Control Center.

ProcedureTo start working with Directory Service Control Center

  1. Initialize DSCC with the dsccsetup initialize command.

    For example, on a Solaris system the following command performs initialization.


    root# /opt/SUNWdsee/dscc6/bin/dsccsetup initialize
    ***
    Registering DSCC Application in Sun Java(TM) Web Console
    This operation is going to stop Sun Java(TM) Web Console.
    Do you want to continue ? [y,n] y
    Stopping Sun Java(TM) Web Console...
    Registration is on-going. Please wait...
    DSCC is registered in Sun Java(TM) Web Console
    Restarting Sun Java(TM) Web Console
    Please wait : this may take several seconds...
    Sun Java(TM) Web Console restarted successfully
    ***
    Registering DSCC Agent in Cacao...
    Checking Cacao status...
    Starting Cacao...
    DSCC agent has been successfully registered in Cacao.
    ***
    Choose password for Directory Service Manager:
    Confirm password for Directory Service Manager:
    Creating DSCC registry...
    DSCC Registry has been created successfully
    ***

    The dsccsetup command is located in install-path/dscc6/bin/dsccsetup. See Default Paths to determine the default install-path for your system.

    On Windows, run the following command:


    install-path\dscc6\bin>dsccsetup.exe initialize
  2. Access DSCC through Java Web Console in your browser.

    To access Console in a different locale, set the preferred language for your browser. For information on setting the preferred language for your browser, see the respective browser documentation.

    1. Login to Java Web Console using your operating system login information or server's root login information.

      If you do not login to Java Web Console using server's root login information, the system might require you to have the root privileges while performing certain tasks such as starting the server instances.

      By default, the URL to access Java Web Console is https://hostname:6789

      Java Web Console login page
    2. Click the Directory Service Control Center link.

      Page showing applications to manage through Java Web
Console
    3. Login to DSCC as Directory Service Manager.

      Directory Service Manager's entry is stored in the DSCC registry. Directory Service Manager has administrator access to DSCC. Directory Service Manager also has administrator access to the server instances registered with DSCC.

      Directory Service Manager login page
    4. Begin managing your servers through Directory Service Control Center.

      Common tasks page for Directory Service Control Center
  3. After Directory Service Control Center is running, enable Java Web Console to restart when the system reboots.

    On a Solaris system, the following command enables restart upon reboot.


    root# /usr/sbin/smcwebserver enable

    On Windows, the following command enables restart upon reboot.


    C:\install-path\share\webconsole\bin>smcwebserver enable

    For the exact location of this command on your system, see Command Locations.

  4. (Optional) Enable the Common Agent Container, cacao, to restart when the operating system reboots.


    root# cacaoadm enable

    On Windows, run the following command to enable the cacao:

    Native packages installation:


    C:\install-path\share\cacao_2\bin>cacaoadm enable -i instance-path -f password.txt
    

    Zip distribution installation:


    C:\install-path\dsee6\cacao_2\bin>cacaoadm enable -i instance-path -f password.txt
    

    If you decide not to enable the common agent container, the operating system would not be able to use DSCC to communicate with the servers handled by that instance of cacao after rebooting the operating system.

ProcedureTo Troubleshoot Directory Service Control Center Access

If there is any problem accessing Directory Service Control Center, use the following procedure on the host where you installed Directory Service Control Center using native packages.

You must be root to perform this procedure.

  1. Verify that Directory Service Control Center has been initialized properly.

    Native Packages:


    root# /opt/SUNWdsee/dscc6/bin/dsccsetup status
    ***
    DSCC Application is registered in Sun Java (TM) Web Console
    ***
    DSCC Agent is registered in Cacao
    ***
    DSCC Registry has been created
    Path of DSCC registry is /var/opt/SUNWdsee/dscc6/dcc/ads
    Port of DSCC registry is 3998
    ***

    Zip Distribution:


    $ install-path/dscc6/bin/dsccsetup status
    ***
    Sun Java (TM) Web Console is not installed
    ***
    DSCC Agent is registered in Cacao
    Cacao uses a custom port number (11168)
    ***
    DSCC Registry has been created
    Path of DSCC registry is /var/opt/SUNWdsee/dscc6/dcc/ads
    Port of DSCC registry is 3998
    ***

    On Windows, run the following command to check the status of DSCC:


    C:\install-path\dscc6\bin>dsccsetup.exe status

    The default installation path for native packages on Solaris operating systems is /opt/SUNWdsee. For the default installation path on your operating system, see Default Paths.

    If you find any initialization problems with DSCC, fix them using the dsccsetup(1M) command.

  2. Native packages installation. Check the status of Java Web Console and start using the smcwebserver command if not already running.


    root# /usr/sbin/smcwebserver status
    Sun Java(TM) Web Console is stopped
    root# /usr/sbin/smcwebserver start
    Starting Sun Java(TM) Web Console Version 3.0.2 ...
    The console is running.

    On Windows, run the following command to check the status of Java Web Console and start, if required.


    C:\install-path\share\webconsole\bin>smcwebserver status
    C:\install-path\share\webconsole\bin>smcwebserver start
  3. If you see errors that pertain to the DSCC agent, check the Common Agent Container.

    The cacaoadm(1M) man page describes the error codes that the command returns. For the exact location of this command on your system, see Command Locations.

    You must run the cacaoadm command as root for native packages installation and as the user who performed the installation for zip installation.


    root# /usr/sbin/cacaoadm status
    default instance is DISABLED at system startup.
    Smf monitoring process:
    26129
    Uptime: 0 day(s), 3:16

    After installing Directory Server, the Common Agent Container starts automatically. However, when you reboot, you might have to start the Common Agent Container manually as follows.


    # cacaoadm start

    On Windows, check the status of Common Agent Container using the following command:

    • Native packages


      C:\install-path\share\cacao_2\bin>cacaoadm status
    • Zip distribution


      C:\install-path\dsee6\cacao_2\bin>cacaoadm status

    For more information about the Common Agent Container, see Sun Java Enterprise System 5 Monitoring Guide.

Environment Variables

This section lists environment variables that you can set to facilitate creating server instances and using Directory Server Resource Kit and software development kits.

Environment Variable 

Set to include… 

Applies to… 

DIR_PROXY_HOST

Hostname of Directory Proxy Server for administration tools 

dpconf(1M) command

DIR_PROXY_PORT

Port number of Directory Proxy Server for administration tools 

dpconf(1M) command

DIRSERV_HOST

Hostname of Directory Server for administration tools 

dsconf(1M) command

DIRSERV_PORT

Port number of Directory Server or for administration tools 

dsconf(1M) command

LDAP_ADMIN_PWF

Path to the file that contains the directory administrator password 

To administer all servers registered with Directory Service Control Center, set this environment variable to a file containing Directory Service Manager password. 

dpconf(1M), dsconf(1M) commands

LDAP_ADMIN_USER

Directory administrator DN 

To administer all servers registered with Directory Service Control Center, set this environment variable to cn=admin,cn=Administrators,cn=dscc.

If you have not installed DSCC, use cn=admin,cn=Administrators,cn=config for Directory Server, cn=Proxy Manager for Directory Proxy Server.

dpconf(1M), dsconf(1M) commands

MANPATH

/opt/SUNWdsee/dsee6/man (Solaris SPARC)

Online manual pages to browse with the man command

MANSECT

Add any of the following sections not in your MANSECT environment variable.

1:1m:4:5dsconf:5dpconf:5dssd:5dsat:5dsoc

Alternatively, specify the sections to search explicitly when using the man command.

The man command can use the MANSECT environment variable to identify the sections to search by default.

PATH (Solaris SPARC)

install-path/dps6/bin

Directory Proxy Server commands 

install-path/ds6/bin

Directory Server commands 

install-path/dscc6/bin

Directory Service Control Center commands 

install-path/dsrk6/bin

Directory Server Resource Kit and LDAP client commands