test

Deployment Example 2: Federation Using SAML v2

4.2 Creating New Directory Server Instances

On each Directory Server, create a new configuration instance and a new user data instance. When you're finished, Directory Server 3SP and Directory Server 4SP will each contain three instances. For example, Directory Server 3SP will contain three instances: DirectoryServer-3SP, fm-config, and fm-users. DirectoryServer-3SP stores Directory Server administration configuration. The instance named fm-config stores Federation Manager configuration, and the instance named fm-users stores Federation Manager user data. Directory Server 4SP will contain the identical directory structure.

Use the following as your checklist for creating new Directory Server instances:

  1. Create a new Configuration Instance in Directory Server 3SP.

  2. Create a new User Data Instance in Directory Server 3SP.

  3. Create a new Configuration Instance in Directory Server 4SP.

  4. Create a new User Data Instance in Directory Server 4SP.

ProcedureTo Create a New Configuration Instance in Directory Server 3SP

Create a new data instance for storing Federation Manager configuration. This ensures that if you ever have to uninstall or restore Federation Manager configuration, the Directory Server configuration remains untouched and will not have to be restored.

  1. As a root user, log in to Directory Server 3SP.

    Set the X window display variable, and start the Directory Server 3SP console.

    # cd /var/opt/mps/serverroot/ 
# export DISPLAY=DirectoryServer-3SP.siroe.com:1 
# ./startconsole &

  2. Log in to the Directory Server 3SP console.

    Username

    cn=Directory Manager

    Password

    11111111

    Administration URL

    http://DirectoryServer-3SP.siroe.com:1391

  3. In the Directory Server console, under the Servers and Applications tab, expand the Server Administration domain list until you see the Server Group item.

  4. Right-click on Server Group, and choose “Create an instance of Sun Directory Server.”

  5. In the Create New Instance dialog box, provide the following information:

    Server identifier:

    Enter fm-config.

    Network port:

    Enter 1389.

    Base suffix:

    Enter o=siroe.com.

    Directory Manager DN:

    Enter cn=Directory Manager

    Password:

    For this example, enter 11111111.

    Confirm Password:

    Enter the same password to confirm it.

    Server Runtime (UNIX) user ID:

    Enter root.

  6. Click OK, and then close the status window.

  7. Verify that the new Directory Server instance named fm-config successfully starts up .

    1. As a root user, log in to Directory Server 3SP.

    2. Start the new data Directory Server instance.


      # cd /var/opt/mps/serverroot/slapd-fm-config 
# ./stop-slapd; ./start-slapd

    3. Use the tail command to monitor the Directory Server error log and see that the server starts up successfully.


      # tail —f logs/errors

ProcedureTo Create a New User Data Instance in Directory Server 3SP

Create a new data instance for storing both Federation Manager configuration and user data. This ensures that if you ever have to uninstall or restore Federation Manager configuration, the Directory Server configuration remains untouched and will not have to be restored.

  1. As a root user, log in to Directory Server 3SP.

    Set the X window display variable, and start the Directory Server console.

    # cd /var/opt/mps/serverroot/ 
# export DISPLAY=DirectoryServer-3SP.siroe.com:1 
# ./startconsole &

  2. Log in to the Directory Server 3SP console.

    Username

    cn=Directory Manager

    Password

    11111111

    Administration URL

    http://DirectoryServer-3SP.siroe.com:1391

  3. In the Directory Server console, under the Servers and Applications tab, expand the Server Administration domain list until you see the Server Group item.

  4. Right-click on Server Group, and choose “Create an instance of Sun Directory Server.”

  5. In the Create New Instance dialog box, provide the following information:

    Server identifier:

    Enter fm-users.

    Network port:

    Enter 1489.

    Base suffix:

    Enter o=siroeusers.com.

    Directory Manager DN:

    Enter cn=Directory Manager

    Password:

    For this example, enter 11111111.

    Confirm Password:

    Enter the same password to confirm it.

    Server Runtime (UNIX) user ID:

    Enter root.

  6. Click OK, and then close the status window.

  7. Verify that the new Directory Server instance named fm-users successfully starts up .

    1. As a root user, log in to Directory Server 3SP.

    2. Start the new data Directory Server instance.


      # cd /var/opt/mps/serverroot/slapd-fm-users 
# ./stop-slapd; ./start-slapd

    3. Use the tail command to monitor the Directory Server error log and see that the server starts up successfully.


      # tail —f logs/errors

ProcedureTo Create a New Configuration Instance in Directory Server 4SP

  1. As a root user, log in to Directory Server 4SP.

    Set the X window display variable, and start the Directory Server console.

    # cd /var/opt/mps/serverroot/ 
# export DISPLAY=DirectoryServer-4SP.siroe.com:1 
# ./startconsole &

  2. Log in to the Directory Server 4SP console.

    Username

    cn=Directory Manager

    Password

    11111111

    Administration URL

    http://DirectoryServer-4SP.siroe.com:1391

  3. In the Directory Server console, under the Servers and Applications tab, expand the Server Administration domain list until you see Server Group item.

  4. Right-click on Server Group, and choose “Create an instance of Sun Directory Server.”

  5. In the Create New Instance dialog box, provide the following information:

    Server identifier:

    Enter fm-config.

    Network port:

    Enter 1389.

    Base suffix:

    Enter o=siroe.com.

    Directory Manager DN:

    Enter cn=Directory Manager

    Password:

    For this example, enter 11111111.

    Confirm Password:

    Enter the same password to confirm it.

    Server Runtime (UNIX) user ID:

    Enter root.

  6. Click OK, and then close the status window.

  7. Verify that the new Directory Server instance named fm-config successfully starts up .

    1. As a root user, log in to Directory Server 4SP.

    2. Start the new data Directory Server instance.


      # cd /var/opt/mps/serverroot/slapd-fm-config 
# ./stop-slapd; ./start-slapd

    3. Use the tail command to monitor the Directory Server error log and see that the server starts up successfully.


      # tail —f logs/errors

ProcedureTo Create a New User Data Instance in Directory Server 4SP

  1. As a root user, log in to Directory Server 4SP.

    Set the X window display variable, and start the Directory Server console.

    # cd /var/opt/mps/serverroot/ 
# export DISPLAY=DirectoryServer-4SP.siroe.com:1 
# ./startconsole &

  2. Log in to the Directory Server 4SP console.

    Username

    cn=Directory Manager

    Password

    11111111

    Administration URL

    http://DirectoryServer-4SP.siroe.com:1391

  3. In the Directory Server console, under the Servers and Applications tab, expand the Server Administration domain list until you see Server Group item.

  4. Right-click on Server Group, and choose “Create an instance of Sun Directory Server.”

  5. In the Create New Instance dialog box, provide the following information:

    Server identifier:

    Enter fm-users.

    Network port:

    Enter 1489.

    Base suffix:

    Enter o=siroeusers.com.

    Directory Manager DN:

    Enter cn=Directory Manager

    Password:

    For this example, enter 11111111.

    Confirm Password:

    Enter the same password to confirm it.

    Server Runtime (UNIX) user ID:

    Enter root.

  6. Click OK, and then close the status window.

  7. Verify that the new Directory Server instance named fm-users successfully starts up .

    1. Log in as root to Directory Server 4SP.

    2. Start the new data Directory Server instance.


      # cd /var/opt/mps/serverroot/slapd-fm-users 
# ./stop-slapd; ./start-slapd

    3. Use the tail command to monitor the Directory Server error log and see that the server starts up successfully.


      # tail —f logs/errors