Chapter 3   The DSAME Installation Program for Solaris


The iPlanet Directory Server Access Management Edition (DSAME) installation program is used to install or uninstall the complete product all at once, or components of the product one at a time. You can use the DSAME installation program in a number of ways depending upon your deployment needs. This chapter provides an overview of the options presented in the installation program, as well as some pointers on determining the installation tasks you'll need to perform.

Topics in this chapter include:

• Before You Begin

• Installation Program Options

• Determining Which Installation Options to Use

• Starting DSAME Services

• Logging In to DSAME

• Uninstalling DSAME

Before You Begin

---

Be sure to resolve the following before you start the installation program:

• You must have root permissions to run the installation program.

• You can only install DSAME, or any of the components, on a machine local to you. You can not install across a network on remote machines.

• Determine whether or not you will be configuring an existing Directory Server. For more information, see "If You Already Have an Existing Directory" and "Unsupported DITs".

• Determine whether or not you will be installing DSAME Services to run using iPlanet Application Server or using iPlanet Web Server. In either case, you will need the computer system name and port number for the server when you install DSAME Services.

• Determine whether or not you will be installing DSAME policy agents. For more information, see "URL Policy Agent".

• Determine whether or not you will be installing cross-domain single sign-on components. For more information, see "Cross-Domain Single Sign-On".

Installation Program Options

---

Each time you run the installation program, a number of installation options are displayed. Determine which installation option to choose by first identifying your scenario in Table 3-1, and then follow the detailed instructions that correspond to that scenario. The following is a brief summary of what happens when you choose each of the main installation options.

Option 1) DSAME Management and Policy Services

When you choose this option, if you don't already have an existing Directory Server, the following are installed for you:

• iPlanet Directory Server (optional)

• iPlanet Web Server

• DSAME Policy Service

• DSAME Management Service

When the installation program is done, the complete product is installed, and you can immediately log into DSAME. No user data will be present in the directory.

Option 2) iPlanet Directory Server 5.1

When you choose this option, only Directory Server 5.1 is installed; no DSAME services are installed. When you choose this option, you're given the opportunity to install DSAME schema. For detailed information on installing Directory Server 5.1 or upgrading to version 5.1, see the documentation that comes with iPlanet Directory Server 5.1 Installation Guide. Or you can access the documentation on the Internet at http://docs.iplanet.com/docs/manuals/directory.html

Option 3) iPlanet Directory Server Configuration for DSAME

When you choose this option, you are prompted for the host and port number of your existing Directory Server. Only the DSAME schema is installed on the server where the Directory Server is installed. The schema file 95ns-amschema.ldif file is added to your server schema directory. No new Directory Server is installed; no existing data is overwritten. Choose this option only if you plan to use DSAME with an existing Directory Server 5.1 instance that's already provisioned with user data.

Option 4) DSAME Cross-Domain Single Sign-On

The cross-domain single sign-on feature makes it possible for users to authenticate in one domain, and then to use applications in many other domains without having to re-authenticate. When you choose this option, only the Cross-Domain Single Sign-On (CDSSO) component is installed. You can install this as part of the existing DSAME, install on Web Server, or install this by installing Webserver. For more information, see "Cross-Domain Single Sign-On".

Exiting the Installation Program

After you've started the DSAME installation program, you can exit the program at any time by pressing Ctrl-C.

Determining Which Installation Options to Use

---

You will probably run the DSAME installation program multiple times in order to install Directory Servers, DSAME services and DSAME web agents in the proper number and sequence. Table 3-1 summarizes the common installation scenarios, and where to find the step-by-step instructions for each scenario.

Table 3-1    Where To Find DSAME Installation Instructions For Specific Solaris Scenarios 

Common Installation Scenarios on Solaris	Where to Find Detailed Installation Instructions
Install DSAME and for evaluation purposes. OR Install and deploy Directory Server and DSAME for the first time for production purposes; you have no existing user data to work with.	Chapter 4 "Simple Installations With No Existing Directory Server.
Install DSAME to work with a single directory that is already provisioned with user data.	Chapter 5 "Using an Existing Directory Server".
Install multiple instances of DSAME against a single Directory Server for agent failover. DSAME and the master Directory Server are already installed; the directory may or may not be already provisioned with users.	"Installing Multiple DSAME Instances Against the Same Directory Server".
Install a stand-alone version of Directory Server; useful in setting up multi-master replication.	"To Install iPlanet Directory Server With Package Format".
Upgrade an existing directory by installing a stand-alone version of Directory Server 5.1, without DSAME schema.	"To Install Directory Server Without DSAME Package Format".
Configure an existing Directory Server 5.1 to be used with DSAME; the existing directory is already provisioned with user data.	Chapter 5 "Using an Existing Directory Server" .
Install and configure the cross-domain single sign-on (CDSSO) component.	"Installing the Cross-Domain Single Sign-On Component".
Uninstall or re-install DSAME.	"Uninstalling DSAME".

Starting DSAME Services

---

If you choose not to start DSAME automatically, you must start it manually before you can login. At the command line enter the following command:

/DSAME_root/SUNWam/bin/amserver start

Logging In to DSAME

---

If, at the end of installation, you chose to start DSAME automatically, you can log in to DSAME through your browser.

1. Go to the appropriate URL:
   • If DSAME services are running on iPlanet Web Server, go to the login URL using the form:

     http://host.domain:port/amconsole

     where host is the host name of the system, domian is the domain name of the server that runs DSAME services, and port is the DSAME services port number.

     For example: http://tintin.india.sun.com:58080/amconsole

   • If DSAME services are running on iPlanet Application Server, go to the login URL using the form:

     http://host.domain:port/NASApp/amconsole

     where host is the host name of the system, domain is the domain name of the server that runs DSAME services, port is the DSAME services port number, and NASApp is the Universal Resource Identifier (URI) prefix automatically assigned to Application Server.

2. In the Login page, enter the Top-Level Administrator user id and password you specified at installation.

Uninstalling DSAME

---

The installation program in DSAME is also used to uninstall the DSAME application. You can remove the entire product, or you can remove the following individual components of the product:

• DSAME Management and Policy Services

• iPlanet Directory Server 5.1

• iPlanet Directory Server Configuration for DSAME

• DSAME Cross Domain Single Sign-On

To Uninstall DSAME Components

You must have root permissions to run the DSAME installation program. Be sure all web browsers are closed before starting the installation program.

1. Insert the DSAME product CD into the drive of the system on which DSAME components are installed.

2. In the DSAME directory, at the command line, enter aminstall.

   The aminstall command accepts the -v [verbose] option. The verbose option gives brief progress messages as the actions of the install program take place.

3. Read the License Agreement. At the prompt, Do you agree to the license terms? enter y for Yes.

4. When the following message displays, enter 1.

   Checking for DSAME 5.1 components ...done. The following DSAME Components are installed: DSAME Management and Policy Services iPlanet Directory Server 5.1 iPlanet Directory Server Configuration for DSAME One or more components that are part of DSAME 5.1 have been detected on this system. If you are going to install components which already exist, you must uninstall them first. Otherwise, choose option 2 to continue the installation. What would you like to do? 1) Remove existing components, then continue installation 2) Continue installation without removing existing components 3) Exit

5. The following message displays.

   Please select one of the bundles to remove from ... 1) DSAME Management and Policy Services 2) iPlanet Directory Server 5.1 3) iPlanet Directory Server Configuration for DSAME 4) DSAME Cross Domain Single Sign-On 5) All 6) Continue with installation 7) Quit

   • If you want to remove nothing but the Policy and Management Services, then enter 1.

   • If you want to remove nothing but the Directory Server 5.1 application, then enter 2.

   • If you want to remove nothing but the DSAME schema, then enter 3.

   • If you want to remove only the cross-domain single sign-on controller, then enter 4.

   • If you want to remove all bundles related to DSAME, then enter 5.

   • If you have changed your mind and do not want to uninstall any packages, but you want to install other DSAME components, then enter 6.

   • If you have changed your mind and do not want to uninstall any bundles, and you do not want to install additional bundles, then enter 7 to exit the installation program.