Appendix C Sun OTP Command-Line Installation

This appendix provides an example of Sun OTP installation procedure using the command-line installation method.

Installing Sun OTP Using Command-Line Installation

Installing Sun OTP Using Command-Line Installation

This section describes Sun OTP installation using the command-line installation method.

To Install Sun OTP Using Command-Line Installation

Note –

Instead of GUI installation, Sun OTP can be installed using the command-line scripts provided by the command-line installation method. This procedure is provided only for demonstration purposes.

Before You Begin

Refer to Appendix B, Sun OTP Hardware and Software Requirements to determine which hardware is qualified and the hardware requirements.
Review the disk drive partition requirements described in Table 2–1.
Set up a naming service such as DNS, NIS, NIS+, or /etc/hosts and all host names and IP addresses must be set up on that naming service. See System Administration Guide: Naming and Directory Services (DNS, NIS, and LDAP).
Prepare the worksheet for the installation. Refer to Stand-alone Sun OTP Host Plan Worksheet.

Install Solaris OS from the bootable OTP DVD.

Refer to Solaris 10 11/06 Installation Guide: Basic Installations or Solaris 10 11/06 Installation Guide: Solaris Flash Archives (Creation and Installation) for more information.
- On SPARC systems
  1. Insert the bootable Sun OTP DVD.
    
    Note –
    The bootable DVD for SPARC contains the hybrid flash image that can be used for deploying the sun4v and sun4u hardware architecture platforms.
  2. Start the installation from the bootable DVD by typing the following command:
    
    boot cdrom
    
    This will prompt you for an interactive Solaris installation.
  3. Respond to the system identification and configuration screens.
  4. From the Solaris Interactive Installation screen, select F4_Flash install.
  5. From the Flash Archive Retrieval Method screen, place the X symbol on Local File and press F2_Continue.
  6. From the Flash Archive Addition screen, provide the /cdrom/Solaris_10/otp_sparc.flarc path and then press F2_Continue.
    
    Continue to respond to the remaining screens until the installation starts and completes.
  7. When the system reboots, insert the installation DVD.
- On x64 systems
  
  Caution –
  Installation does not ask for the partitioning or image name. The first disk is chosen automatically and OTP default disk formatting is applied. The existing data, if any, is overwritten.
  1. Select CDROM as a boot device in BIOS.
  2. Respond to the system identification and configuration screens.
  3. When the system reboots, insert the installation DVD.

Set up the self-contained Sun OTP provisioning server on the stand-alone host.
1. Log in as root (su - root) to the stand-alone host.
2. Add the logical host name and the logical IP address to the /etc/hosts file.
3. Set up the Sun OTP provisioning server on the stand-alone host.
  
  /opt/SUNWotp/cli/setupExternalInstallServer -M mediadir -N single -R SSH -P passwordfile -L logicalhost -I logicalip
  
  mediadir is the fully qualified path name to the Open Telecommunications Platform installation source directory. The media directory is the path where the installation DVD is mounted.
  
  logicalhost and logicalip are unused logical host names and logical IP addresses.
  
  passwordfile is the absolute path of the password file. You can create this file in your home directory. The password file must contain a line with a valid password for the Sun OTP provisioning server. The password can be 8 to 12 alphanumeric characters.
  
  Note –
  Once you set up the Sun OTP provisioning server with this password, the user name to access the Sun OTP provisioning server is otpadmin and the password is the password in the password file.
  
  The password specified in this step and the password that will be specified during the Setup Configuration plan must be the same.

Prepare the Sun OTP hosts.
1. Install the remote agent on the Sun OTP host.
  
  /opt/SUNWotp/cli/setupRemoteAgent -c SSH mediadir
  
  mediadir is the fully qualified path name to the Open Telecommunications Platform installation source directory. The media directory is the path where the installation DVD is mounted.
2. Configure SSH for the remote agent.
  
  /usr/bin/passwd n1spsotp
3. Initialize the SSH keys.
  
  su - spsotp
  
  cat /var/otp/.ssh/id_rsa.pub | ssh n1spsotp@hostname "tee >> /export/home/n1spsotp/.ssh/authorized_keys2"
  
  hostname is the host name of Sun OTP host.

Install Sun OTP services.
1. Copy the input_otp.dat file to a local non-temporary directory.
  
  cp /opt/SUNWotp/cli/templates/input_otp.dat /export/
2. Edit the /export/input_otp.dat file according to your configuration.
  
  Type the values for the appropriate plan variables in the text fields. Refer to Appendix A, Sun OTP Plan Worksheet to determine the values.
3. Set up the Sun OTP configuration on the Sun OTP host.
  
  /opt/SUNWotp/cli/deploy_otp -i S -f /export/input_otp.dat -o "-P passwordfile"
  
  This command specifies the Sun OTP deployment parameters and validates these parameters provided in the input_otp.dat file.
4. Install the OS patches on the Sun OTP host.
  
  /opt/SUNWotp/cli/deploy_otp -i P -f /export/input_otp.dat
  
  When the command completes, wait for the Sun OTP host to boot into multi-user mode.
5. Install and configure the Sun OTP high availability service in the global zone on the Sun OTP host.
  
  /opt/SUNWotp/cli/deploy_otp -i a -f /export/input_otp.dat -o "-N single"
  
  When the command completes, wait for the Sun OTP host to reboot completely and then type the following command:
  
  /opt/SUNWotp/cli/deploy_otp -c a -f /export/input_otp.dat -o "-N single"
6. Install and configure the Sun OTP system management service in the global zone on the Sun OTP host.
  
  /opt/SUNWotp/cli/deploy_otp -i m -f /export/input_otp.dat
7. Install and configure the Sun OTP application provisioning service in the global zone on the Sun OTP host.
  
  /opt/SUNWotp/cli/deploy_otp -i p -f /export/input_otp.dat
8. Install and configure the Sun OTP security service in the global zone on the Sun OTP host.
  
  /opt/SUNWotp/cli/deploy_otp -i s -f /export/input_otp.dat
9. Configure and enable high availability for Sun OTP services.
  
  /opt/SUNWotp/cli/deploy_otp -c h -f /export/input_otp.dat
  
  This command creates and starts resource groups for Sun OTP system management service, Sun OTP application provisioning service, and Sun OTP security service. This command also configures and starts master-to-master replication (MMR).
  
  Note –
  Self-contained Sun OTP provisioning server uses a specific logical host name and IP address defined at the beginning of the Sun OTP installation. However, to make Sun OTP application provisioning service highly available, the logical hostname that was previously used will be released upon successful completion of the Configure and Enable HA service plan, and the Sun OTP application provisioning service will be accessible through the Management and Provisioning logical hostname and IP address.
10. Install Web SSO.
  
  /opt/SUNWotp/cli/deploy_otp -i o -f /export/input_otp.dat
  
  Note –
  Monitor the /var/OTP/SUNWotp-debug.log file to check whether the resource group otp-system-rg has been restarted. If the resource group has not been restarted, restart the resource group manually by typing the following command on any host of the cluster.
  
  /usr/cluster/bin/clrg online otp-system-rg
  
  The installation log files, input files generated for the plans, installation registry information, and the debug log files are stored in the /var/OTP directory.

Previous: Appendix B Sun OTP Hardware and Software Requirements