2 Installing Session Monitor

Session Monitor Installation Options

You can install Session Monitor using either the ISO installer or the Red Hat Package Manager (RPM):

• ISO Installer

  The ISO installer installs the Oracle Linux operating system and the Session Monitor applications and components. For installation instructions, see "Installing Session Monitor Using the ISO Installer".

• RPM

  The RPM installer does not install Linux. The RPM requires an installation of Oracle Linux on the computer that will host your Session Monitor applications. For installation instructions, see "Installing Session Monitor Using the RPM".

Installing Session Monitor Using the ISO Installer

The ISO installer installs Oracle Linux operating system and Session Monitor applications and components.

Installing Session Monitor using the ISO installer requires a server with no operating system. The Session Monitor installer erases any existing files on the primary and secondary disk on which Session Monitor is installed. Back up any important files on the disk before proceeding with the installation. For more information on preparing the Session Monitor ISO installation media, see "Preparing Session Monitor Installation Media".

This section describes installing Session Monitor installation using the ISO installer.

To install Session Monitor with the ISO installer:

1. Download the Session Monitor ISO installer by doing the following:

   1. Download the software pack for your operating system from the Oracle software delivery web site.

   2. Download the Session Monitor ISO image and follow the instructions in "Preparing Session Monitor Installation Media" in a local computer.

2. Insert the DVD or attach the USB flash drive and restart the server that will host Session Monitor.

   Ensure that the server boots from the installation media. This is usually done using a one-time boot option.

   The Session Monitor installer Boot Menu screen appears.

3. Start the installation process by pressing Enter.

   The installer verifies whether the hardware passes the minimum system requirements for Session Monitor.

4. The OCSM Installer - Network Configuration screen appears containing a list of supported network interfaces together with their hardware addresses (MAC).

   If the minimum system requirements are not met, the installation stops and a dialogue box providing the reason for failure appears. For example, see the following message:

   Problems were found:

   • * Found only 1 CPU threads instead of at least 8.

   • * Found only 1.95 GB system memory instead of at least 7 GB.

   • Abort the installation.

     See "Session Monitor System Requirements" or contact your Oracle Customer Support for more information on the minimum system requirements.

5. From the Network device list, select the network interface you require for accessing the Session Monitor web interface and click OK.

6. From the Network type list, select the following setting that is appropriate for your network and :

   • To automatically configure the network port IP address with the dynamic host configuration protocol (DHCP), select dhcp.

   • To manually configure the network port IP address, select static.

7. Click OK.

   When prompted, enter the IP address, netmask, and default gateway values of your network.

   The OCSM Installer - Disk Configuration screen appears.

8. From the Primary disk list, select the primary disk or disk array on which to install Session Monitor and click OK.

   The OCSM Installer - Software Installation screen appears.

9. (Optional) The Session Monitor operating system and database are installed on the primary disk of the server that hosts the mediation engine. If your server has more than one disk, you will receive a prompt to choose to either keep all your data on one disk or store your data on a secondary disk. To store your data on a secondary disk, click Yes.

   Note:

   The default size for the primary disk is between 70 GB and 2 TB. If you require a larger disk array for data storage, configure it as a secondary disk.

10. In the Enter a password for the root user field, enter the root user password and click OK.

11. In the Confirm the root user password field, re-enter the root user password and click OK.

    The installer prepares the disks, sets up the system, and updates the firmware required for the hardware components.

    Important:

    Do not power off the system during this process, as this may leave components in an unusable state.

    The OCSM Installer - Finished screen appears.

    The installer prompts you to remove the Session Monitor flash drive installation media.

12. Press Enter and remove the installation media.

13. Verify that the installation is successful by restarting the system from the primary hard disk that you chose in step 8.

    • If the installation is successful, a console appears, displaying the Session Monitor secure URL.

    • If unsuccessful, check the /var/log/ocsm/pld-installer.log file.

See "Session Monitor Post-Installation Tasks" for the post-installation configuration steps.

Installing Session Monitor Using the RPM

You can choose to install Session Monitor using the RPM if you would like to set up the machine with the Oracle Linux operating system or if the machine on which you will install Session Monitor is already running Oracle Linux.

This section describes installing the Session Monitor using RPM.

To install Session Monitor using an RPM:

1. Change the edition of MySQL by doing the following:

   1. Go to the Oracle Software Delivery web site:

      https://edelivery.oracle.com/

   2. Read and accept the license agreement and export restrictions and click Continue.

   3. Download the latest Enterprise edition of MySQL in version 5.5 series.

   4. Uninstall the Community edition of MySQL by running the following command:

      yum remove -y mysql-community-common
         
      

   5. Install the Enterprise edition of MySQL by running the following command:

      yum install -y mysql-commercial*.rpm
      

   6. Install the yum utils by running the following command:

      yum -y install  yum-utils
      

   7. Enable the latest Oracle Linux 7 add-on's by running the following command:

      yum-config-manager --enable ol7_latest ol7_UEKR4 ol7_optional_latest ol7_addons
      

   8. Install the latest epel by running the following command:

      rpm -Uvh http://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
      

2. If you have a running Oracle Linux 7 (DPDK) probe with an Oracle Communications Session Monitor version prior to 3.4.0, uninstall Session Monitor by running the following command:

   yum remove ocsm
   

3. Verify that the system hosting the mediation engine is connected to the Internet.

4. Log on to the Mediation Engine server as the root user.

5. Verify that Oracle Linux 7 is installed by running the following command:

   cat /etc/oracle-release
      
   

6. Download the Session Monitor software by doing the following:

   1. Create a temporary directory (temp_dir) on the system that hosts the mediation engine.

   2. Download the software pack for your operating system from the Oracle software delivery web site.

   3. Download the Session Monitor installation software RPM ZIP file to temp_dir.

   4. Unzip the Session Monitor installation software RPM ZIP file.

7. Install the Session Monitor RPM file by running the following command:

   yum install ocsm-rnx86_64.rpm
     
   

   where:

   • rn is the current Session Monitor release number.

   For example, ocsm-3.4.0.0.0.x86_64.rpm.

   The following partitioning options are available:

   • Single partition (default option)

   • Secondary partition for data storage

8. Perform the following steps to create separate partition for data (block) storage:

   1. Create the partition for data storage

   2. Run the following command to create a directory to mount the partition:

      mkdir -pv /opt/oracle/ocsm/var/vsi
      

   3. Adjust /etc/fstab to mount the data storage partition. For example:

      LABEL=PLD_DATA /opt/oracle/ocsm/var/vsi ext4 defaults,nosuid,nodev,nofail 0 2

      Result: During installation partition will be detected by product setup application and the system uses the separate partition.

9. Verify the installation by doing the following:

   1. Navigate to /var/log/ocsm file.

   2. Verify whether the following log file exists:

      ocsm_installed_*.log

10. Adjust the firewalld to access the Session Monitor applications by doing the following:

    1. Allow firewalld to access the HTTPS service (port 443) by running the following command:

       firewall-cmd --permanent --zone=public --add-service=https
         
       

    2. (Optional) If you are planning to configure the system as a mediation engine, allow the firewalld to access the probe connection by doing the following:

       • For SBC (embedded) probes:

         firewall-cmd --permanent --zone=public --add-port=4740/tcp
         firewall-cmd --permanent --zone=public --add-port=4740/tcp
         

       • For standalone probes:

         firewall-cmd --permanent --zone=public --add-port=4741/tcp
         firewall-cmd --permanent --zone=public --add-port=4742/tcp
         

    3. Reload the configuration by running the following command:

       firewall-cmd --reload
       

    Note:

    If you are planning to enable additional services, see the discussion about network security in Oracle Communications Session Monitor Security Guide for a complete list of services and their respective ports.

11. Disable SELinux by running the following command:

    setenforce 0
    sed -i -e "s/^SELINUX=.*/SELINUX=disabled/" /etc/selinux/config
      
    

See "Session Monitor Post-Installation Tasks" for the post-installation configuration steps.

Configuring Reverse Proxy Server

The Session Monitor services are available to you through a reverse proxy web server. By default, the Session Monitor comes with a bundled copy of NGINX, the configuration files located at /opt/oracle/ocsm/etc/nginx file. However, you may choose to use another web server, such as Apache. A sample configuration file for Apache 2.4 is located at /opt/oracle/ocsm/etc/httpd/conf.d/pld.conf file.

After installing Apache, run the following commands to enable Apache as a front-end web server instead of NGINX:

systemctl stop pld-nginx.service
systemctl disable pld-nginx.service
ln -sf /usr/lib/systemd/system/{httpd,pld-webserver}.service
cp /opt/oracle/ocsm/etc/httpd/conf.d/pld.conf /etc/httpd/conf.d/
mv /etc/httpd/conf.d/ssl.conf{,.orig}
systemctl daemon-reload
systemctl start httpd.service
systemctl enable httpd.service

If you choose to authenticate users at the level of the reverse proxy, you must uncomment the sections in the sample Apache configuration file which configures LDAP authentication for the /me/ and /mec/ routes, and modify them as appropriate for your authentication provider. Additionally, you must enable external authentication in the Mediation Engine and the Mediation Engine Controller. See the discussion on external authentication in the Operations Monitor User's Guide.

Configuring Apache for Authenticating with LDAP Service

The following procedure explains configuring external authentication using Apache Web Server as it is widely used.

To configure Apache in Session Monitor for authenticating with LDAP service:

1. Login to Session Monitor.

2. Click Admin and select Settings.

3. Enable the setting, External authentication enabled and set it to True.

4. Logout from Session Monitor.

5. (Optional) If the current web service is NGINX, change to HTTPD by performing following steps:

   1. Run the following commands to install the Apache Web Server and mod_ssl packages:

      Note:

      If you have proxy server, to complete download, edit the proxy settings for the external downloads to be successful.

      Important:

      Install Apache Web Server and mod_ssl packages together as the httpd package executes a post-install script which uses mod_ssl for generating a localhost certificate. The certificate is required for the default httpd service configuration.

      If the certificate is not generated, enter the following lines in the /etc/httpd/conf.d/ssl.conf file to start httpd server:

      SSLCertificateFile /etc/pki/tls/certs/localhost.crt
      SSLCertificateKeyFile /etc/pki/tls/private/localhost.key
      

      Note:

      If you have installed Session Monitor using the ISO, then httpd and mod_ssl are pre-installed.

   If the localhost certificates are not generated, perform the following workaround to start the Apache server:

   • Remove the ssl.conf file from the etc/httpd/conf.d file.

   • Add the line ”Listen 443” at the beginning of the file, /opt/oracle/ocsm/etc/httpd/conf.d/pld.conf which has a symbolic soft link in the same folder.

6. Run the following commands to install all additional packages:

   $ yum groupinstall ”Development Tools” -y
   

7. Run the following commands to install the required httpd modules and to enable external authentication in Apache:

   $ yum –enablerepo=ol7_optional_latest install mod_ldap
   

8. Run the following command to configure httpd to perform external authentication:

   $ vi /etc/httpd/conf.d/pld.conf
   

9. Add following location section in &rsquor;< VirtualHost_default_:443 >', after RequestHeader unset X-Forwarded-User:

   < Location >                        
   RewriteEngine On
   RewriteCond %{LA-U:REMOTE_USER} (.+)
   RewriteRule .* - [E=RU:%1,L]
   AuthType basic
   AuthName <”LDAP authentication”>
   AuthBasicProvider ldap
   AuthLDAPURL <”ldap:///dc=LDAP_Server,dc=com?uid?one”>
   AuthLDAPBindDN ”cn=ldapadm,dc=LDAP_Server,dc=com”
   AuthLDAPBindPassword
   Require valid-user
   RequestHeader unset X-Forwarded-User
   RequestHeader set X-Forwarded-User %{RU}e
   </  Location >
   

   Where:

   • LDAP_Server is your LDAP server name

   • <”LDAP authentication”> is the AuthName for Session Monitor LDAP authentication.

   • <”ldap:///dc=LDAP_Server,dc=com?uid?one”> is your LDAP server IP address to which, the authentication request is sent by Session Monitor. As DC and CN are LDAP specific, check the DC and CN values with your Local LDAP configuration.

   • < password > is the password for LDAP server to which authentication to the specific user is to be processed. It should be a Hashed Password.

10. Uncomment following parameters:

    RewriteEngine On
    RewriteCond %{SERVER_PORT} 443
    RewriteCond %{LA-U:REMOTE_USER} (.+)
    RewriteRule .* - [E=RU:%1,L]
    RequestHeader set X-Forwarded-User %{RU}e
    

11. Change the AuthName directive in the Location /me/logout.html to AuthName ”LDAP authentication” or the 'AuthName' in the 'Location' tag, if in case of any change in it.

12. Run the following commands to stop and disable the nginx server:

    $ systemctl stop pld-nginx.service
    $ systemctl disable pld-nginx.service
    

13. Run the following command to switch the pld-webserver link to httpd:

    $ ln -sf /usr/lib/systemd/system/{httpd,pld-webserver}.service
    

14. Run the following command to reload systemd for viewing the changes:

    $ systemctl daemon-reload
    

15. Run the following command to start and enable the httpd:

    $ systemctl start httpd.service
    $ systemctl enable httpd.service
    

16. Run the following command to start/re-start httpd server to enable external authentication:

    $ service httpd start
    $ service httpd restart
    

Result: The httpd server of Session Monitor has been configured for external authentication.

When you open the Session Monitor in web browser, the external authentication pop-up appears. On providing the correct LDAP user credentials, the user will be logged in successfully.

Session Monitor Post-Installation Tasks

This section provides instructions for the post-installation tasks for Session Monitor.

Before starting the post-installation tasks, verify that Session Monitor installation tasks are completed and all components are installed. See "Installing Session Monitor Using the ISO Installer" or "Installing Session Monitor Using the RPM".