Sun Java System Directory Server Enterprise Edition 6.3 Migration Guide

What to Do if the 1.1 Uninstallation Fails

If the version 6.0 installation program finds remnants of the version 1.1 system, the installation will fail. Verify that all of the 1.1 components are completely removed from the system before starting the new installation.

If the uninstallation program does not uninstall all of the version 1.1 components, you must manually clean up the Identity Synchronization for Windows product registry and Solaris packages.

Detailed instructions for uninstalling Identity Synchronization for Windows version 1.1 manually are provided in the following sections:


Note –

The instructions provided in this section are for uninstalling Identity Synchronization for Windows version 1.1, and 1.1 SP1, only.

Do not use the manual uninstallation procedures provided in the following sections unless the Identity Synchronization for Windows uninstallation program fails.


Manually Uninstalling 1.1 Core and Instances from Solaris

Use the instructions provided in this section to manually uninstall Core from a Solaris machine.


Note –

In this section, Identity Synchronization for Windows locations are described in the following manner:

<serverRoot \>/ isw-<hostname \>

where <serverRoot \> represents the parent directory of the Identity Synchronization for Windows installation location.

For example, if you installed Identity Synchronization for Windows in /var/Sun/mps/isw-< example\>, the < serverRoot\> would be /var/Sun/mps.


ProcedureTo Manually Uninstall Core From a Solaris Machine:

  1. Stop all Identity Synchronization for Windows Java processes by typing /etc/init.d/isw stop into a terminal window.

    If the preceding command does not stop all of the Java processes, type the following commands.

    /usr/ucb/ps -gauxwww | grep java
    kill -s SIGTERM process IDs from preceding command
    
  2. Stop Message Queue.

    1. Type the following command to stop the Message Queue broker.

      /etc/init.d/imq stop

    2. Type the following commands to stop any remaining imq processes.

      * ps -ef | grep imqbroker
      * kill -s SIGTERM process IDs from preceding command
      
    3. Use one of the following methods to uninstall the broker packages and directories.

      • Use the Message Queue broker uninstall script to uninstall the broker. This script is located in the Identity Synchronization for Windows instance directory on the host where you installed Core.

        serverRoot/isw-hostname/imq_uninstall
      • Manually uninstall the packages and directories.

        Use the pkgrm command to remove the following packages.

        SUNWaclg
        SUNWiqum
        SUNWiqjx
        SUNWiqlen
        SUNWxsrt
        SUNWiqu
        SUNWjaf
        SUNWiqfs
        SUNWjhrt
        SUNWiqdoc
        SUNWiquc
        SUNWiqsup
        SUNWiqr
        SUNWjmail

        Use the rm -rf command to remove the following directories.

        /etc/imq
        /var/imq
        /usr/bin/imq*
  3. To remove the Identity Synchronization for Windows 1.1 Solaris packages, run pkgrm package-name for each of the packages listed in Manually Uninstalling 1.1 Core and Instances from Solaris.

    The following example shows the use of pkgrm to uninstall packages.

    pkgrm SUNWidscm SUNWidscn SUNWidscr SUNWidsct SUNWidsoc

    Package Name 

    Description 

    SUNWidscm

    Sun ONE Directory Server Identity Synchronization package for Core components and Connectors.

    SUNWidscn

    Sun ONE Directory Server Identity Synchronization package for Console help files.

    SUNWidscr

    Sun ONE Directory Server Identity Synchronization package for Core Components. 

    SUNWidsct

    Sun ONE Directory Server Identity Synchronization package for Connectors. 

    SUNWidsoc

    Sun ONE Directory Server Identity Synchronization package for Object Cache. 

    Type the following command to verify that all of the packages were removed.

    pkginfo | grep -i "Identity Synchronization"

    Note –

    Run the pkgrm package-name command again to check if there are still existing packages due to dependencies.


  4. Remove the Directory Server Plug-in.

    1. Open the Directory Server Console and select the Configuration tab.

    2. In the left pane, expand the Plugins node and select the pswsync node.

    3. In the right pane, clear the Enable plug-in check box.

    4. Click Save.

    5. From the Directory Server Console, locate and remove the following entry from the Configuration Directory:

      cn=pswsync,cn=plugins,cn=config

    6. Stop Directory Server.

    7. Remove the Plugin binary by typing the following command.

      rm -f serverRoot/lib/psw-plugin.so

    8. Restart Directory Server.

  5. Back-up (copy and rename) the current productregistry file located in /var/sadm/install/productregistry.

  6. Manually edit the productregistry file in /var/sadm/install/ to remove the following entries, if present:


    Note –
    • For best results, use an XML editor. Alternatively, you can use a standard text editor.

    • Some of the following components may not be included in your file.

    • You must delete the beginning tag (<compid\>), ending tag (</compid\>), and all contents in-between both tags). Ellipses are used in the following list to represent any additional text, or tags that are included as part of these tags. See the example on Manually Uninstalling 1.1 Core and Instances from Solaris.


    • <compid\>Identity Synchronization for Windows . . . </compid\>

    • <compid\>Core . . . </compid\>

    • <compid\>unistaller . . . </compid\>

    • <compid\>wpsyncwatchdog . . . </compid\>

    • <compid\>setenv . . . </compid\>

    • <compid\>Create DIT . . . </compid\>

    • <compid\>Extend Schema . . . </compid\>

    • <compid\>resources . . . </compid\>

    • <compid\>CoreComponents . . . </compid\>

    • <compid\>Connector . . . </compid\>

    • <compid\>DSConnector . . . </compid\>

    • <compid\>Directory Server Plugin . . . </compid\>

    • <compid\>DSSubcomponents . . . </compid\>

    • <compid\>ObjectCache . . . </compid\>

    • <compid\>ObjectCacheDLLs . . . </compid\>

    • <compid\>SUNWidscr . . . </compid\>

    • <compid\>SUNWidscm . . . </compid\>

    • <compid\>SUNWidsct . . . </compid\>

    • <compid\>SUNWidscn . . . </compid\>

    • <compid\>SUNWidsoc . . . </compid\>

    • <compid\>ADConnector . . . </compid\>

    The following is an example <compid\> tag. Remove <compid\>, </compid\>, and all the text and tags in-between.


    <compid\>Identity Synchronization for Windows
        <compversion\>1.1
              <uniquename\>Identity Synchronization for Windows</uniquename\>
               <compinstance\>1
                        <children\>
                            <compref\>ADConnector
                                <instance\>1
                                    <version\>1.1</version\>
                                </instance\>
                            </compref\>
                            <compref\>DSSubcomponents
                            . . .
    
            </compinstance\>
        </compversion\>
    </compid\>
    
                               
  7. Remove the following Identity Synchronization for Windows directories and files.

    1. From the installation location, type the following command.

      rm -rf serverRoot/isw-hostname
      
    2. To remove the bootstrap files, type the following command.

      rm -rf /etc/init.d/isw
  8. Clean up the configuration directory as follows:

    1. Run the following ldapsearch command against the configuration directory where Identity Synchronization for Windows Core is installed to locate the Identity Synchronization for Windows Console subtree:

      ldapsearch -D "cn=directory manager" -w < password \> -b o=netscaperoot "(nsnickname=isw)" dn


      Note –

      ldapsearch is located in Directory Server’s < serverRoot\>/shared/bin/ldapsearch. For example, /var/Sun/mps/shared/bin/ldapsearch


      The resulting entry should be similar to the following. Note that the entry always ends with o=NetscapeRoot.

      "cn=Sun ONE Identity Synchronization for Windows,cn=server group, cn=myhost.mydomain.com,ou=mydomain.com,o=NetscapeRoot"

    2. Use the Directory Server Console to remove the Identity Synchronization for Windows Console subtree and all of the subtrees below it.

  9. Clean up the Identity Synchronization for Windows configuration registry as follows:

    1. Run the following ldapsearch command to locate the Identity Synchronization for Windows configuration registry in Directory Server:

      ldapsearch -D "cn=directory manager" -w < password \> -b "dc=my,dc=domain" "(&(objectclass=iplanetservice)(ou=IdentitySynchronization))" dn

      The resulting entry should be similar to the following:

      "ou=IdentitySynchronization,ou=Services,dc=my,dc=domain"

    2. Use the Directory Server Console to remove the Identity Synchronization for Windows configuration registry and all of the subtrees below it.

  10. Clean up all other Console-related files as follows:

    1. Remove all the Console jar files by typing:

      rm -rf < serverRoot \>/java/jars/isw* For example, /var/Sun/mps/java/jars/isw*

    2. Remove all the Console servlet jar files by typing:

      rm -rf <serverRoot \>/bin/isw/ For example, /var/Sun/mps/bin/isw/

Manually Uninstalling 1.1 Core and Instances from Windows 2000

Use the instructions provided in this section to manually uninstall Core from a Windows 2000 machine.


Note –

In this section, Identity Synchronization for Windows locations are described in the following manner:

serverRoot\isw-hostname\

where serverRoot represents the parent directory of the Identity Synchronization for Windows installation location.

For example, if you installed Identity Synchronization for Windows in C:\Program Files\Sun\mps\isw-example, the serverRoot would be C:\Program Files\Sun\mps.


ProcedureTo uninstall Core from a Windows 2000 machine:

  1. Stop all Identity Synchronization for Windows Java processes using one of the following methods:

    • Select Start -> Settings -> Control Panel -> Administrative Tools -> Services to open the Services window. In the right pane, right-click on Identity Synchronization for Windows and select Stop.

    • Open a Command Prompt window and type the following command.

      net stop "Sun ONE Identity Synchronization for Windows"
    • If the preceding methods do not work, use the following steps to stop the Java processes manually.

      1. Open the Services window, right-click on Identity Synchronization for Windows, and select Properties.

      2. From the General tab in the Properties window, select Manual from the Startup type drop-down list.


    Note –

    Although you can view Java processes (such as pswwatchdog.exe ) from the Windows Task Manager, you cannot determine which processes are specifically related to Identity Synchronization for Windows. For this reason, do not stop processes from the Windows Task Manager.


  2. For a Core uninstallation only, stop the Message Queue using one of the following methods:

    • In the Services window, right-click on iMQ Broker in the right pane and select Stop.

    • From a Command Prompt, type the following command.

      net stop "iMQ Broker"
    • If the preceding methods do not work, use the following steps to stop Message Queue manually.

      1. Open the Services window, right-click on iMQ Broker and select Properties.

      2. From the General tab in the Properties window, select Manual from the Startup type drop-down list.

      3. Open the Directory Server Console and select the Configuration tab.

      4. In the left pane, expand the Plugins node and select the pswsync node.

      5. In the right pane, uncheck the Enable plug-in check box.

      6. Click Save.

      7. From the Console, locate and remove the following entry from the Configuration Directory:

        cn=pswsync,cn=plugins,cn=config

      8. Stop Directory Server.

        You can stop the server using one of the following methods:

        • In the Services window, right-click on Sun ONE Directory Server 5.2 in the right pane and select Stop.

        • Open a Command Prompt window and type the following command.

          net stop slapd-myhostname
          
      9. Open Windows Explorer to locate and remove the Plugin binary:

        < ServerRoot\>\\lib\\psw-plugin.so

      10. Restart Directory Server.

  3. Open a Command Prompt window and type regedit to open the Registry Editor window.


    Caution – Caution –

    Back up your current registry file before proceeding to Manually Uninstalling 1.1 Core and Instances from Windows 2000.


    1. In the Registry Editor, select My Computer in the left pane.

    2. Select Registry -> Export Registry File from the menu bar.

    3. When the Export Registry File dialog box is displayed, specify a name for the file and select a location to save the backup registry.

  4. In the Registry Editor, select Edit -> Delete from the menu bar.

    Remove the following Identity Synchronization for Windows keys from the Windows Registry:

    • All entries under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Identity Synchronization for Windows.

    • All CurrentControlSet and ControlSet (such as ControlSet001, ControlSet002, and so forth) entries under HKEY_LOCAL_MACHINE\SYSTEM\*, which includes the following entries (if they exist).

      • ...\Control\Session Manager\Environment\< isw-installation directory\>

      • ...\Services\Eventlog\Application\Sun ONE Identity Synchronization for Windows

      • ...\Services\Sun ONE Identity Synchronization for Windows

      • ...\Services\iMQBroker

  5. Backup (copy and rename) the current productregistry file located in C:\\WINNT\\system32 .

  6. Edit the C:\WINNT\system32\productregistry file to remove the following tags:


    Note –
    • For best results, use an XML editor. Alternatively, you can use a standard text editor.

    • Some of the following components may not be included in your file.

    • You must delete the beginning tag (<compid\>), ending tag (</compid\>), and all contents in-between both tags). Ellipses are used in the following list to represent any additional text and/or tags that are included as part of these tags. See the example Manually Uninstalling 1.1 Core and Instances from Windows 2000.


    • <compid\>Identity Synchronization for Windows . . . </compid\>

    • <compid\>Core . . . </compid\>

    • <compid\>unistaller . . . </compid\>

    • <compid\>wpsyncwatchdog . . . </compid\>

    • <compid\>setenv . . . </compid\>

    • <compid\>Create DIT . . . </compid\>

    • <compid\>Extend Schema . . . </compid\>

    • <compid\>resources . . . </compid\>

    • <compid\>CoreComponents . . . </compid\>

    • <compid\>Connector . . . </compid\>

    • <compid\>DSConnector . . . </compid\>

    • <compid\>Directory Server Plugin . . . </compid\>

    • <compid\>DSSubcomponents . . . </compid\>

    • <compid\>ObjectCache . . . </compid\>

    • <compid\>ObjectCacheDLLs . . . </compid\>

    • <compid\>ADConnector . . . </compid\>

    The following is a <compid\> tag sample. Remove <compid\>, </compid\>, and all the text and tags in-between.


    <compid\>Identity Synchronization for Windows
        <compversion\>1.1
              <uniquename\>Identity Synchronization for Windows</uniquename\>
               <compinstance\>1
                        <children\>
                            <compref\>ADConnector
                                <instance\>1
                                    <version\>1.1</version\>
                                </instance\>
                            </compref\>
                            <compref\>DSSubcomponents
                            . . .
            </compinstance\>
        </compversion\>
    </compid\>
  7. Remove the Identity Synchronization for Windows installation folder located at serverRoot\isw-hostname.

    For example, C:\Program Files\Sun\mps\isw-example

  8. Clean up the configuration directory as follows:

    1. From a Command Prompt window, run the ldapsearch command against the configuration directory where Identity Synchronization for Windows Core is installed to locate the Identity Synchronization for Windows Console subtree.


      Note –

      ldapsearch is located in < serverRoot\>\\shared\\bin\\ldapsearch.

      For example, C:\\Program Files\\Sun\\mps\\shared\\bin\\ldapsearch


      ldapsearch -D "cn=directory manager" -w < password\> -b o=netscaperoot "(nsnickname=isw)" dn

      The resulting entry should be similar to the following (note that the entry will always end with o=NetscapeRoot):

      "cn=Sun ONE Identity Synchronization for Windows,cn=server group, cn=myhost.mydomain.com,ou=mydomain.com,o=NetscapeRoot"

    2. Use the Directory Server Console to remove the Identity Synchronization for Windows Console subtree that you found and all subtrees under it.

  9. Clean up the Identity Synchronization for Windows configuration directory ( also know as the configuration registry) as follows:

    1. From a Command Prompt window, run the following ldapsearch command to locate the Identity Synchronization for Windows configuration directory in Directory Server:

      ldapsearch -D "cn=directory manager" -w <password \> -b "dc=my,dc=domain" "(&(objectclass=iplanetservice)(ou=IdentitySynchronization))" dn

      The resulting entry should be similar to the following:

      "ou=IdentitySynchronization,ou=Services,dc=my,dc=domain"

    2. Use the Directory Server Console to remove the configuration directory subtree that you found, including all subtrees under it.

  10. Clean up all other Console-related files as follows:

    1. Remove all Console jar files located in < serverRoot \>\\java\\jars\\isw*For example, C:\\Program Files\\Sun\\mps\\java\\jars\\isw*

    2. Remove all Console servlet jar files located in < directory-server-install-root \>\\bin\\isw\\For example, C:\\SunOne\\Servers\\bin\\isw\\

Next Steps

Restart your machine for all changes to take effect.

ProcedureManually Uninstalling a 1.1 Instance from Windows NT

Use the instructions provided in this section to manually uninstall an instance from a Windows NT machine.


Note –

In this section, Identity Synchronization for Windows locations are described as follows:

<serverRoot\>\\isw-<hostname\>

where <serverRoot \> represents the parent directory of the Identity Synchronization for Windows installation location. For example, if you installed Identity Synchronization for Windows in C:\\Program Files\\Sun\\mps\\isw- example, the < serverRoot \> would be C:\\Program Files\\Sun\\mps.


  1. Stop all the Identity Synchronization for Windows Java processes (Core and instance installations) using one of the following methods:

    • Select Start -> Settings -> Control Panel -> Administrative Tools -> Services to open the Services window. In the right pane, right-click on Identity Synchronization for Windows and select Stop.

    • Open a Command Prompt window and type the following command:

      net stop “Sun ONE Identity Synchronization for Windows

    • If the preceding methods do not work, use the following steps to stop the Java processes manually:

      1. Open the Services window, right-click on Identity Synchronization for Windows, and select Properties.

      2. From the General tab in the Properties window, select Manual from the Startup type drop-down list.


    Note –

    Although you can view Java processes (such as pswwatchdog.exe) from the Windows Task Manager, you cannot determine which processes are specifically related to Identity Synchronization for Windows. For this reason, do not stop processes from the Windows Task Manager.


  2. Stop the Change Detector service using one of the following methods:

    • In the Services window, right-click on Sun ONE NT Change Detector Service in the right pane and select Stop.

    • Open a Command Prompt window and type the following command:

      net stop “Sun ONE NT Change Detector Service”

    • If the preceding methods do not work, use the following steps to stop the Change Detector Service manually:

      1. Open the Services window, right-click on Change Detector Service and select Properties.

      2. From the General tab in the Properties window, select Manual from the Startup type drop-down list.

      3. Restart your Windows NT computer.

  3. You must remove Identity Synchronization for Windows registry keys. Open a Command Prompt window and type regedt32 to open the Registry Editor window.


    Caution – Caution –

    Do not use regedit because the program does not allow you to edit multi-value strings.

    Backup your current Windows registry file before proceeding to Manually Uninstalling a 1.1 Instance from Windows NT.


    1. In the Registry Editor, select the top node (My Computer) in the left pane.

    2. Select Registry -> Export Registry File from the menu bar.

    3. When the Export Registry File dialog box is displayed, specify a name for the file and select a location to save the backup registry.

  4. In the Registry Editor, select Edit -> Delete from the menu bar.

    Remove the following Identity Synchronization for Windows keys from the Registry:

    • All entries under HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Identity Synchronization for Windows

    • All CurrentControlSet and ControlSet (such as ControlSet001, ControlSet002) entries under HKEY_LOCAL_MACHINE\\SYSTEM\\*.

      These entries include the following:

      • ...\\Control\\Session Manager\\Environment\\ <isw-installation directory\>

      • ...\\Services\\Eventlog\\Application\\Sun ONE Identity Synchronization for Windows

      • ...\\Services\\Sun ONE Identity Synchronization for Windows

      • ...\\Services\\iMQBroker

    • The HKEY_LOCAL_MACHINE\\SOFTWARE\\Sun Microsystems\\PSW

  5. Use regedt32 (do not use regedit) to modify (do not delete) the following registry key:

    1. Select the registry key entry in the left pane:

      HKEY_LOCAL_MACHINE\\SYSTEM\\\\CurrentControlSet\\\\CONTROL\\\\LSA

      The registry value type must be REG_MULTI_SZ.

    2. In the right pane, right-click on the Notification Packages value and select Modify.

    3. Change the PASSFLT value to FPNWCLNT.

  6. Backup (copy and rename) the current productregistry file located in C:\\WINNT\\system32 .

  7. Edit the C:\\WINNT\\system32 productregistry file to remove the following tags:


    Note –
    • For best results, use an XML editor. Alternatively, you can use a standard text editor.

    • Some of these components might not be included in your file.

    • You must delete the beginning tag (<compid\>), ending tag (<\\compid\>), and all contents in-between both tags). Ellipses are used in the following list to represent any additional text and/or tags that are included as part of these tags. See the example on Manually Uninstalling 1.1 Core and Instances from Windows 2000.


    • <compid\>Identity Synchronization for Windows . . . </compid\>

    • <compid\>Core . . . </compid\>

    • <compid\>uninstaller . . . </compid\>

    • <compid\>wpsyncwatchdog . . . </compid\>

    • <compid\>setenv . . . </compid\>

    • <compid\>Create DIT . . . </compid\>

    • <compid\>Extend Schema . . . </compid\>

    • <compid\>resources . . . </compid\>

    • <compid\>CoreComponents . . . </compid\>

    • <compid\>Connector . . . </compid\>

    • <compid\>DSConnector . . . </compid\>

    • <compid\>Directory Server Plugin . . . </compid\>

    • <compid\>DSSubcomponents . . . </compid\>

    • <compid\>ObjectCache . . . </compid\>

    • <compid\>ObjectCacheDLLs . . . </compid\>

    • <compid\>ADConnector . . . </compid\>

    The following is a example <compid\> tag. Remove <compid\>, </compid\>, and all the text and tags in-between.


    <compid\>Identity Synchronization for Windows
        <compversion\>1.1
           <uniquename\>Identity Synchronization for Windows</uniquename\>
               <compinstance\>1
                        <children\>
                            <compref\>ADConnector
                                <instance\>1
                                    <version\>1.1</version\>
                                </instance\>
                            </compref\>
                            <compref\>DSSubcomponents
                            . . .
    
            </compinstance\>
        </compversion\>
    </compid\>
  8. Remove the Identity Synchronization for Windows installation folder located at < serverRoot \>\\isw-< hostname \>.

    For example, C:\\Program Files\\Sun\\mps\\isw-example


    Note –

    You must edit the Windows registry as described in Manually Uninstalling a 1.1 Instance from Windows NT before proceeding to Manually Uninstalling a 1.1 Instance from Windows NT.


  9. Remove the Password Filter DLL.

    Locate the passflt.dll file in the C:\\winnt\\system32 folder, and rename the file to passflt.dll.old.

  10. Restart your machine for all changes to take effect.