Chapter 2   Installing iPlanet Meta-Directory On Solaris Systems


This chapter describes how to install Meta-Directory on a server using the Solaris operating system, version 2.6 or version 8. Please note that system patches must be installed before beginning the installation process. This chapter contains the following sections:

• Patch Installation

• The Solaris Installation Process

Patch Installation

---

If installing Meta-Directory on a server running the Solaris version 2.6 or version 8 operating systems, you must install the The Recommended Patch Clusters and The Java^TM 2 Standard Edition (J2SE^TM) 1.2.2-05a Localized JRE patch.

The Recommended Patch Cluster for either version can be downloaded from:

http://sunsolve.sun.com/pub-cgi/show.pl?target=patches/patch-access

The Java 2 Standard Edition (J2SE) 1.2.2-05a Localized JRE patch set can be downloaded from:

http://www.sun.com/software/solaris/jre/download.html

You must be a registered Sun customer to download the J2SE patches. Registration is free and can be completed at the patch download site.

Once the patch sets have been downloaded and decompressed, refer to the CLUSTER_README files for installation instructions. Reboot the system after installation is complete.

Recommended Patch Cluster Solaris version 2.6

The following is a list of the recommended patches for Solaris version 2.6:

105181-28: SunOS 5.6: Kernel update patch

105210-38: SunOS 5.6: libaio, libc & watchmalloc patch

105216-04: SunOS 5.6: /usr/sbin/rpcbind patch

105284-41: Motif 1.2.7: Runtime library patch

105338-27: CDE 1.2: dtmail patch

105356-18: SunOS 5.6: /kernel/drv/ssd and /kernel/drv/sd patch

105357-04: SunOS 5.6: /kernel/drv/ses patch

105375-26: SunOS 5.6: sf & socal driver patch

105379-06: SunOS 5.6: /kernel/misc/nfssrv patch

105395-06: SunOS 5.6: /usr/lib/sendmail patch

105401-34: SunOS 5.6: libnsl and NIS+ commands patch

105403-04: SunOS 5.6: ypbind/ypserv patch

105407-01: SunOS 5.6: /usr/bin/volrmmount patch

105464-02: OpenWindows 3.6: Multiple xterm fixes

105472-08: SunOS 5.6: /usr/lib/autofs/automountd patch

105486-04: SunOS 5.6: /kernel/fs/hsfs patch

105529-11: SunOS 5.6: /kernel/drv/tcp patch

105552-03: SunOS 5.6: /usr/sbin/rpc.nisd_resolv patch

105558-04: CDE 1.2: dtpad patch

105562-03: SunOS 5.6: chkey and keylogin patch

105566-11: CDE 1.2: calendar manager patch

105568-23: SunOS 5.6: /usr/lib/libthread.so.1 patch

105580-18: SunOS 5.6: /kernel/drv/glm patch

105591-09: SunOS 5.6: Shared library patch for C++

105615-08: SunOS 5.6: /usr/lib/nfs/mountd patch

105633-57: OpenWindows 3.6: Xsun patch

105642-08: SunOS 5.6: prtdiag patch

105665-03: SunOS 5.6: /usr/bin/login patch

105667-03: SunOS 5.6: /usr/bin/rdist patch

105669-10: CDE 1.2: libDtSvc Patch

105703-27: CDE 1.2: dtlogin patch

105720-14: SunOS 5.6: /kernel/fs/nfs patch

105722-07: SunOS 5.6: /usr/lib/fs/ufs/ufsdump and ufsrestore patch

105741-09: SunOS 5.6: /kernel/drv/ecpp patch

105755-10: SunOS 5.6: libresolv, in.named, named-xfer, nslookup, nstest patch

105780-05: SunOS 5.6: /kernel/fs/fifofs patch

105786-14: SunOS 5.6: /kernel/drv/ip driver patch

105792-06: SunOS 5.6: /usr/sbin/tar patch

105800-07: SunOS 5.6: /usr/bin/admintool, y2000 patch

105802-15: OpenWindows 3.6: ToolTalk patch

105837-03: CDE 1.2: dtappgather Patch, including SDE 1.0 installations

105847-09: SunOS 5.6: /kernel/drv/st.conf and /kernel/drv/st patch

106027-09: CDE 1.2 / SDE 1.0: dtsession patch

106040-16: SunOS 5.6: X Input & Output Method patch

106049-02: SunOS 5.6: /usr/sbin/in.telnetd patch

106112-06: CDE 1.2: dtfile patch

106123-05: SunOS 5.6: sgml patch

106125-11: SunOS 5.6: Patch for patchadd and patchrm

106193-06: SunOS 5.6: Patch for Taiwan timezone

106222-01: OpenWindows 3.6: filemgr (ff.core) fixes

106226-01: SunOS 5.6: /usr/sbin/format patch

106235-08: SunOS 5.6: lp patch

106242-02: CDE 1.2: libDtHelp.so.1 fixes

106257-05: SunOS 5.6: /usr/lib/libpam.so.1 patch

106271-06: SunOS 5.6: /usr/lib/security/pam_unix.so.1 patch

106285-03: SunOS 5.6: /kernel/sys/msgsys patch

106292-11: SunOS 5.6: pkgadd/pkginstall & related utilities

106301-03: SunOS 5.6: /usr/sbin/in.ftpd patch

106361-11: SunOS 5.6: csh/jsh/ksh/rksh/rsh/sh patch

106409-01: SunOS 5.6: Fixes the Traditional Chinese TrueType fonts

106415-04: OpenWindows 3.6: xdm patch

106429-02: SunOS 5.6: /kernel/drv/mm patch

106437-03: CDE 1.2: Print Manager Patch

106439-07: SunOS 5.6: /usr/sbin/syslogd patch

106448-01: SunOS 5.6: /usr/sbin/ping patch

106468-04: SunOS 5.6: /usr/bin/cu and usr/bin/uustat patch

106495-01: SunOS 5.6: truss & truss support library patch

106522-04: SunOS 5.6: /usr/bin/ftp patch

106569-01: SunOS 5.6: libauth.a & libauth.so.1 patch

106592-03: SunOS 5.6: /usr/lib/nfs/statd patch

106625-11: SunOS 5.6: libsec.a, libsec.so.1 and /kernel/fs/ufs patch

106639-05: SunOS 5.6: /kernel/strmod/rpcmod patch

106648-01: OpenWindows 3.6: libce suid/sgid security fix

106649-01: OpenWindows 3.6: libdeskset patch

106650-04: OpenWindows 3.6: mailtool attachment security patch

106828-01: SunOS 5.6: /usr/bin/date patch

106834-02: SunOS 5.6: cp/ln/mv patch

106882-02: SunOS 5.6: /usr/lib/nfs/nfsd patch

107336-01: OpenWindows 3.6: KCMS configure tool has a security vulnerability

107434-01: CDE 1.2: Spell checking occasionally kills mail

107490-01: SunOS 5.6: savecore doesn't work if swap slice is over 2G

107565-02: SunOS 5.6: /usr/sbin/in.tftpd patch

107618-02: SunOS 5.6: patch /usr/sbin/vold

107733-09: SunOS 5.6: Linker patch

107758-01: SunOS 5.6: Pax incorrectly change mode of symlink target file

107766-01: SunOS 5.6: ASET cklist reports unchanged 6month older files as new

107774-01: SunOS 5.6: inetd denial-of-service attack

107991-02: SunOS 5.6: /usr/sbin/static/rcp patch

108091-03: SunOS 5.6: ssJDK1.2.1_03 fails with fatal error in ISO8859-01 Locales

108199-01: CDE 1.2: dtspcd Patch

108201-01: CDE 1.2: dtaction Patch

108307-02: SunOS 5.6: keyserv fixes

108333-02: SunOS 5.6: jserver buffer overflow

108346-03: SunOS 5.6: patch usr/sbin/rpc.nispasswdd

108468-02: SunOS 5.6: ldterm streams module fixes

108492-01: SunOS 5.6: Snoop may be exploited to gain root access

108499-01: SunOS 5.6: ASET sets the gid on /tmp, /var/tmp when setting med high

108660-01: SunOS 5.6: Patch for sadmind

108804-02: SunOS 5.6: /usr/bin/tip patch

108890-01: SunOS 5.6: patch /usr/lib/netsvc/yp/ypxfrd

108893-01: SunOS 5.6: patch /usr/lib/netsvc/yp/rpc.ypupdated

108895-01: SunOS 5.6: patch /usr/sbin/rpc.bootparamd

109266-01: SunOS 5.6: security: /bin/mail has buffer overflow

109339-02: SunOS 5.6: nscd's size grows -0TTL values not implemented

109388-01: SunOS 5.6: patch /usr/vmsys/bin/chkperm

109719-01: SunOS 5.6: arp should lose set-gid bid

110990-01: SunOS 5.6: Patch for ttymon

111029-01: SunOS 5.6: /kernel/sys/semsys patch

111109-01: SunOS 5.6: Patch to /usr/bin/nawk

111240-01: SunOS 5.6: Patch to /usr/bin/finger

111560-01: SunOS 5.6: dmesg security problem

111664-01: SunOS 5.6: bzip patch

---

Note	Patches 106409-01 and 108091-03, recommended for Solaris version 2.6, are not included in the Recommended Patch Cluster but can be obtained from the J2SE 1.2.2 Localized JRE patch set.

---

Recommended Patch Cluster Solaris version 8

The following are the recommended patches for Solaris version 8:

108528-09: SunOS 5.8: kernel update patch

108652-35: X11 6.4.1 Xsun patch

108725-05: SunOS 5.8: st driver patch

108827-10: SunOS 5.8: libthread patch

108869-06: SunOS 5.8: snmpdx/mibiisa/libssasnmp/snmplib patch

108875-09: SunOS 5.8: c2audit patch

108968-05: SunOS 5.8: vol/vold/rmmount patch

108974-11: SunOS 5.8: dada, uata, dad, sd and scsi drivers patch

108975-04: SunOS 5.8: /usr/bin/rmformat and /usr/sbin/format patch

108977-01: SunOS 5.8: libsmedia patch

108985-03: SunOS 5.8: /usr/sbin/in.rshd patch

108987-04: SunOS 5.8: Patch for patchadd and patchrm

108989-02: SunOS 5.8: /usr/kernel/sys/acctctl and /usr/kernel/sys/exacctsys patch

108991-13: SunOS 5.8: /usr/lib/libc.so.1 patch

108993-03: SunOS 5.8: nss and ldap patch

109091-04: SunOS 5.8: /usr/lib/fs/ufs/ufsrestore patch

109137-01: SunOS 5.8: /usr/sadm/install/bin/pkginstall patch

109181-03: SunOS 5.8: /kernel/fs/cachefs patch

109277-01: SunOS 5.8: /usr/bin/iostat patch

109279-13: SunOS 5.8: /kernel/drv/ip patch

109318-12: SunOS 5.8: suninstall patch

109320-03: SunOS 5.8: LP patch

109322-07: SunOS 5.8: libnsl patch

109324-02: SunOS 5.8: sh/jsh/rsh/pfsh patch

109326-05: SunOS 5.8: libresolv.so.2, in.named patch

109470-02: CDE 1.4: Actions Patch

109587-03: SunOS 5.8: libspmistore patch

109742-04: SunOS 5.8: /kernel/drv/icmp patch

109783-01: SunOS 5.8: /usr/lib/nfs/nfsd patch

109805-03: SunOS 5.8: pam_krb5.so.1 patch

109898-02: SunOS 5.8: /kernel/drv/arp patch

109951-01: SunOS 5.8: jserver buffer overflow

110075-01: SunOS 5.8: /kernel/drv/devinfo and /kernel/drv/sparcv9/devinfo patch

110283-03: SunOS 5.8: mkfs and newfs patch

110286-02: OpenWindows 3.6.2: Tooltalk patch

110322-01: SunOS 5.8: /usr/lib/netsvc/yp/ypbind patch

110383-01: SunOS 5.8: libnvpair patch

110387-03: SunOS 5.8: ufssnapshots support, ufsdump patch

110453-01: SunOS 5.8: admintool patch

110458-02: SunOS 5.8: libcurses patch

110662-02: SunOS 5.8: ksh patch

110700-01: SunOS 5.8: automount patch

110898-02: SunOS 5.8: csh/pfcsh patch

110901-01: SunOS 5.8: /kernel/drv/sgen and /kernel/drv/sparcv9/sgen patch

110934-01: SunOS 5.8: pkgtrans, pkgadd, pkgchk and libpkg.a patch

110939-01: SunOS 5.8: /usr/lib/acct/closewtmp patch

110943-01: SunOS 5.8: /usr/bin/tcsh patch

110945-01: SunOS 5.8: /usr/sbin/syslogd patch

110951-01: SunOS 5.8: /usr/sbin/tar and /usr/sbin/static/tar patch

111071-01: SunOS 5.8: cu patch

111111-01: SunOS 5.8: nawk line length limit corrupts patch dependency checking

111232-01: SunOS 5.8: patch in.fingerd

111234-01: SunOS 5.8: patch finger

111293-03: SunOS 5.8: /usr/lib/libdevinfo.so.1 patch

111325-01: SunOS 5.8: /usr/lib/saf/ttymon patch

111327-02: SunOS 5.8: libsocket patch

111363-01: SunOS 5.8: /usr/sbin/installf patch

111548-01: SunOS 5.8: catman, man, whatis, apropos and makewhatis patch

111570-01: SunOS 5.8: uucp patch

Verifying Patch Installation

Entering the command showrev -p after patch installation will print a complete list of installed patches to your monitor. A comparison of this list and the patch listing in this documentation can verify that the correct patches have been installed.

The Solaris Installation Process

---

This section describes the process for installing Meta-Directory on a server running the Solaris operating system.

---

Note	It is recommended that you have your Directory Server documentation on hand to help with the installation process. It can be found on the iPlanet web site at http://docs.iplanet.com/docs/manuals/.

---

1. Log in to your system as superuser (root).

2. Download the Meta-Directory for Solaris binary.

   The binary is a file compressed with gzip, a compression utility that can be downloaded at http://www.gzip.org.

3. Decompress the binary with the following command:

   # gzip -dc filename.tar.gz | tar xvf -

4. Run the setup program using the command ./setup.

5. Press Return when asked if you'd like to continue with the installation.

6. Read the Software License Agreement, type y for Yes and press Return if you accept this agreement and agree to be bound by its terms.

7. Select the default iPlanet Servers installation and click Next to continue.

   The iPlanet Console option can be used to re-install iPlanet Console.

8. Enter a full path to the location (server root) where you want Meta-Directory to be installed.

   The directory location that you enter must be different from the one in which you are running the setup program; it cannot be installed into the same directory into which it is extracted. If the installation directory does not currently exist, the setup program will create it although you may have to verify write access after installation.

9. Press Enter to enable the installation of all iPlanet Server Product components.

   For a list and description of the components, see Chapter 1 "Preparing For Installation.

10. Press Enter to install all server core components, core Java classes and Java runtime environment.

11. Press Enter to install iPlanet Administration Server and Administration Server Console.

12. Press Enter to install nsPerl 5.004_04.

13. Press Enter to install Meta-Directory join engine.

14. Press Enter to install Meta-Directory Universal connector.

15. Press Enter to install Meta-Directory console.

16. Press Enter to install Meta-Directory Database connector.

17. Enter the fully-qualified domain name of the computer on which you are installing Meta-Directory and press Enter.

18. Enter the user and group you want to represent the iPlanet server in the user directory.

    Ideally this user should not have privileges in the computer network system. The Administration Server will give this group the permissions to perform server-specific operations.

19. Enter the URL of the Directory Server that will contain the Configuration Directory and the non-secure port address. (The default port address is 389.) Click Next to continue.

    This function requires the use of iPlanet Directory Server. Ensure that the Directory Server is currently running so that the setup program can verify the information entered.

20. Enter the domain name (for example, iPlanet.com) to specify the administration domain in the Configuration Directory. Click Next to continue.

21. Enter the user ID or distinguished name (DN) and password of the configuration administrator authorized to access the Configuration Directory. The domain name specified above and the configuration administrator specified here will be verified when you click Next to continue.

    The configuration administrator creates and manages information stored in the Configuration Directory. The user must exist on the server before entering it on this screen.

22. Choose an administration port number and click Next to continue.

    By default, the setup application chooses an administration port number. If you decide to use the default, make sure that this is a port number that is not already in use. Be sure to record the port number you have chosen.

23. The Meta-Directory files and components are installed to your system.