Installation Instructions

Directory Server Enterprise Edition 6.3.1 is a maintenance release that delivers bug fixes mainly for Directory Service Control Center, Directory Proxy Server, and Directory Server. Only the upgrade mode is offered within 6.3.1 using Native Packages or ZIP distribution.

If you plan to install Directory Server Enterprise Edition 6.0, 6.1, 6.2, or 6.3 please refer to the Sun Java System Directory Server Enterprise Edition Installation Guide for 6.0, 6.1, 6.2, or 6.3. See Directory Server Enterprise Edition Documentation Set.

These installation instructions provide step-by-step instructions for installing Directory Service Control Center, Directory Proxy Server, Directory Server, Directory Server Resource Kit, and Identity Synchronization for Windows components of Directory Server Enterprise Edition.

The Sun Java System Directory Server Enterprise Edition 6.3.1 Security Patchzip 142807-02 must be applied on top of a Directory Server Enterprise Edition 6.3.1 ZIP installation. For directions see Installing Directory Server Enterprise Edition 6.3.1 Security Patchzip 142807-02.

This guide does not cover installation with other Java Enterprise System (Java ES) products. If you plan to install Directory Server and Directory Service Control Center software with other Java ES software, read the installation instructions for Java ES software at http://docs.sun.com/coll/1286.3. For Microsoft Windows, read the installation instructions for Java ES software at Java Enterprise System 5 for Microsoft Windows.

This section covers the following parts.

• Upgrading Directory Server Enterprise Edition to 6.3.1 Using Native Packages

• Upgrading Directory Server Enterprise Edition to 6.3.1 Using ZIP distribution

The following table identifies information for you to use to upgrade Directory Server Enterprise Edition to version 6.3.1 based on your current installation and the type of distribution you are using.

In general, it is a good practice to back up the directory databases regularly and particularly before upgrading the directory server. See the Sun Java System Directory Server Enterprise Edition 6.3 Administration Guide for information about backing up the database.

Upgrading Directory Server Enterprise Edition to 6.3.1 Using Native Packages

To Upgrade Shared Components Using Patches

Before You Begin

Before upgrading Directory Server Enterprise Edition to 6.3.1 using native packages, you must upgrade the shared components. On Solaris and Red Hat systems you must be root, on Windows systems, you must be Administrator to perform this procedure.

Using patches, you can upgrade shared components on Solaris, Linux, and Windows. On Linux, to install patches you must use installpatch. The installpatch script is delivered with the patch.

Select the platform as per your requirements and install all the patches specified for that platform. If newer patch revisions become available, use the newer ones instead of those shown in the table.

Choose the right NSS/NSPR/JSS patch for your system by getting the package version of SUNWpr and SUNtls on your system.

# pkginfo -l SUNWpr | grep VERSION
# pkginfo -l SUNWtls | grep VERSION    

Then choose the right patch series from the table below.

The following table lists the Shared Components patches for Windows platform.

Before upgrading Directory Server Enterprise Edition 6.0, 6.1, 6.2, or 6.3 to 6.3.1, you need to upgrade the shared components.

1. Shut down any processes using the shared components.

2. If applicable, shut down the shared components.

3. Obtain the latest upgrade patches as shown in the tables above.

   For more information on how to obtain the patches, see Getting the Software.

4. Apply the appropriate patches for the shared components.

   Read the README.patchID file for detailed patch installation procedures.

5. Verify that the patch upgrades were successful.

   Read the README.patchID file for verification procedure.

6. If applicable, restart the shared components.

7. To Upgrade the Common Agent Container shared component on Windows, run the following commands in the same order as listed below:

   # cacaoadm prepare-uninstall # 126183-04.exe # cacao-install-path\share\cacao_2\configure.bat # cacao-install-path\share\cacao_2\bin\cacaoadm rebuild-dependencies

8. If your installation uses Identity Synchronization for Windows and you have applied the latest NSS patch 3.12 on your system, set symbolic links to the new libraries delivered in NSS patch 3.12, as shown in the following example. The default value of the SERVER_ROOT path name is /var/mps/serverroot.

   $ cd /var/mps/serverroot/lib $ ln -s /usr/lib/mps/secv1/libnssdbm3.so libnssdbm3.so $ ln -s /usr/lib/mps/secv1/libnssutil3.so libnssutil3.so $ ln -s /usr/lib/mps/secv1/libsqlite3.so libsqlite3.so $ cd /var/mps/serverroot/lib/sparcv9 $ ln -s /usr/lib/mps/secv1/sparcv9/libnssdbm3.so libnssdbm3.so $ ln -s /usr/lib/mps/secv1/sparcv9/libnssutil3.so libnssutil3.so $ ln -s /usr/lib/mps/secv1/sparcv9/libsqlite3.so libsqlite3.so

To Upgrade Directory Server Enterprise Edition Using Native Packages

Before You Begin

Make sure all the shared components are up-to-date. For more information, see To Upgrade Shared Components Using Patches.

If you already have Directory Server Enterprise Edition 6.0, 6.1, 6.2, or 6.3 installed, upgrade to version 6.3.1 using the following procedure.

On Solaris and Red Hat systems, you must be root to perform these steps and Administrator on Windows systems.

All the Directory Server instances, Directory Proxy Server instances, and configuration information remain unaffected after you complete the Directory Server Enterprise Edition upgrade.

The following table displays the patch numbers that are required to upgrade Directory Server Enterprise Edition on different platforms. If newer patch revisions become available, use the newer ones instead of those shown in the table.

To make the localized Directory Server Enterprise Edition work successfully, install the localized patches before installing the core patches.

Each localization patch contains all the supported languages for the selected platform.

1. Stop the DSCC registry.

   • On Solaris

     # dsadm stop /var/opt/SUNWdsee/dscc6/dcc/ads

   • On Linux

     # dsadm stop /var/opt/sun/dscc6/dcc/ads

   • On Windows, the following dsadm command fails to stop the DSCC registry.

     dsadm.exe stop C:\Program Files\Sun\JavaES5\DSEE\var\dscc6\dcc\ads

     As a workaround, kill the bin_slapd.exe process using Task Manager, and log in as Administrator. You can now start and stop the DSCC registry successfully. The owner of the DSCC registry remains the same, that is, SYSTEM.

2. Stop any running instances of Directory Server and Directory Proxy Server.

3. Upgrade the shared components. See To Upgrade Shared Components Using Patches.

4. Download the Directory Server Enterprise Edition 6.3.1 patch.

   See Getting the Software for more details.

5. Change to the directory where you have saved the patch listed in the preceding table.

6. Run the following command to install the patch.

   • Solaris OS

     Before upgrading Directory Server Enterprise Edition, you must install 119254-38 on Solaris 10 SPARC and 119255-38 on Solaris 10 x86. See Getting the Software for information on downloading patches.

     Alternatively, use -G with the patchadd command on Solaris 10 SPARC and Solaris 10 x86 while applying the Directory Server Enterprise Edition upgrade patch. For example:

     # patchadd -G patch-id

     For other versions of Solaris, use the following command:

     # patchadd patch-id

   • Linux

     1. Open the directory where the installpatch file is located.

     2. Run installpatch.

        # ./installpatch

   • Windows

     1. Open the folder where the patch-id.exe executable file is located.

     2. Double-click patch-id.exe.

     3. After the successful installation of the patch, run the following commands:

        # dsccsetup console-unreg # dsccsetup console-reg

7. Start the Directory Server instances and Directory Proxy Server instances, if any.

8. Start Web Console and Common Agent Container.

9. Restart the DSCC registry.

   • On Solaris

     # dsadm start /var/opt/SUNWdsee/dscc6/dcc/ads

   • On Linux

     # dsadm start /var/opt/sun/dscc6/dcc/ads

   • On Windows

     dsadm.exe start C:\Program Files\Sun\JavaES5\DSEE\var\dscc6\dcc\ads

Upgrading Directory Server Enterprise Edition to 6.3.1 Using ZIP distribution

To Upgrade Directory Server Enterprise Edition to 6.3.1 Using ZIP Distribution

Before You Begin

Back up the Directory Server Enterprise Edition installation directory, if any, before upgrading to Directory Server Enterprise Edition 6.3.1, as later you will not be able to restore any previous Directory Server Enterprise Edition installation.

You can install the zip distribution as a non-root user.

The dsee_deploy command automatically updates the installation if it finds any previous installation. However, in the case of SuSE Linux 9 and HP-UX, before you upgrade the Directory Server Enterprise Edition installation, you must first upgrade the operating system to SuSE Linux 9 SP4 and HP-UX 11.23 respectively. Then use following procedure to upgrade your Directory Server Enterprise Edition installation to 6.3.1.

1. Stop CACAO and any running instances of Directory Server and Directory Proxy Server associated with the installation that you intend to patch. Also stop the application server that hosts the WAR file and the DSCC registry.

2. If the system you are upgrading is hosted on SuSE Linux 9 or HP-UX, upgrade your operating system.

   • Upgrade SuSE Linux 9 SP3 to SuSE Linux 9 SP4.

     On SuSE 64-bit, .pam-32bit-9-yyyymmddhhmm.rpm is a prerequisite for CACAO to start, and you must install it if it is not already present on your system.

   • Because Directory Server Enterprise Edition 6.0 and 6.1 support only HP-UX 11.11, you must upgrade your operating system to HP-UX 11.23 before upgrading Directory Server Enterprise Edition to 6.3.1.

   Refer to the operating system documentation for information about how to upgrade the operating system, how to preserve the partition where Directory Server Enterprise Edition is installed, and where to get the latest patch bundles.

3. Upgrade Directory Server Enterprise Edition to 6.3.1

   1. Use the dsee_deploy command from Directory Server Enterprise Edition 6.3.1 zip distribution, with the same installation path, and CACAO port used your previous installation of Directory Server Enterprise Edition 6.0, 6.1, 6.2, or 6.3. The dsee_deploy command will restart CACAO and DSCC registry.

      1. Obtain the zip distribution for this installation.

         Refer to the following table for information about the appropriate zip patch for your system. If newer patch revisions become available, use the newer ones instead of those shown in the table.

         All the multilingual files are included in the above mentioned patches.

         Operating System	Patch number
         Solaris SPARC	126748-05
         Solaris 9 x86	126749-05
         Solaris 10 x86 and AMD x64	126750-05
         Red Hat Linux	126751-05
         SuSE Linux	126751-05
         HP-UX	126752-05
         Windows	126753-05

      2. Install the prerequisite patches or service packs for your platform, as described in Operating System Requirements.

      3. Change to the zip distribution directory that contains the dsee_deploy command.

      4. Upgrade your Directory Server Enterprise Edition installation currently installed at install_path with the dsee_deploy(1M) command.

         $ ./dsee_deploy install -i install-path options

         On Windows installations, browse to the zip distribution folder that contains the dsee_deploy command and run the following command:

         dsee_deploy install -i install-path options

         For example, the following command upgrades your existing Directory Server Enterprise Edition previously installed at /local directory, assuming that you have write access to the directory.

         $ ./dsee_deploy install -i /local

         You can also use the --no-inter option to install in non-interactive mode, accepting the license without confirmation. Non-interactive mode is particularly useful for silent installation.

         During the installation process, a WAR file is saved on your system. The WAR file contains the DSCC web application which when deployed with the application server enables you to access and manage the server instances through web console. The functionality is similar to DSCC in native packages. For more information about the WAR file, see Installing Directory Service Control Center From Zip Distribution in Sun Java System Directory Server Enterprise Edition 6.3 Installation Guide.

         During the installation process, the multilingual packages are also installed.

      5. Deploy the latest dscc.war file in the application server

         For step-by- step information, refer to Installing Directory Service Control Center From Zip Distribution in Sun Java System Directory Server Enterprise Edition 6.3 Installation Guide.

      6. Restart Directory Server and Directory Proxy Server instances and the application server for WAR file.

4. Start daemons only when both operating system and Directory Server Enterprise Edition are upgraded.

Installing Directory Server Enterprise Edition 6.3.1 Security Patchzip 142807-02

The Sun Java System Directory Server Enterprise Edition 6.3.1 Security Patchzip 142807-02 must be applied on top of a Directory Server Enterprise Edition 6.3.1 ZIP installation. This patch delivers NSS 3.12.5 as well as SASL 2.19.20090601.

This patch cannot be applied to versions of Directory Server Enterprise Edition earlier than 6.3.1. For directions to upgrade to version 6.3.1, see Table 2–1.

To install Directory Server Enterprise Edition 6.3.1 Security Patchzip 142807-02, download it from http://sunsolve.sun.com and follow the installation instructions provided in the README file.

Installing Directory Server Enterprise Edition 6.3.1 Security Patch 143463-01

The Sun Java System Directory Server 6.3.1 Security Patch 143463-01 must be applied on top of a Directory Server Enterprise Edition 6.3.1 installation.

This patch cannot be applied to versions of Directory Server Enterprise Edition earlier than 6.3.1. For directions to upgrade to version 6.3.1, see Table 2–1.

To install Directory Server Enterprise Edition 6.3.1 Security Patch 143463-01, download it from http://sunsolve.sun.com and follow the installation instructions provided in the README file.

Confirm that the installation of patch 143463-01 is successful by running this command and verifying that the response is the same as shown here:

./dsadm -V
[dsadm]
dsadm               : 6.3.1                B2008.1121.0156 ZIP

[slapd 64-bit]
Sun Microsystems, Inc.
Sun-Java(tm)-System-Directory/6.3.1_sec B2010.0201.1612 64-bit
ns-slapd            : 6.3.1                B2008.1121.0156 ZIP
Slapd Library       : 6.3.1_sec            B2010.0201.1612
Front-End Library   : 6.3.1                B2008.1121.0156