This section lists general prerequisites for the computers that you want to host your Identity Manager components. In general, you should install all of the components so you can provide full identity management in your environment. However, you do not need all of the components, such as Analyzer or iManager.
Section 6.1, “Installing Identity Manager in a Clustered Environment,” on page 53
Section 6.2, “Installing Identity Manager on an RHEL 6.x Server,” on page 53
6.1 Installing Identity Manager in a Clustered Environment
You can deploy some Identity Manager components in a clustered environment on servers running SUSE Linux Enterprise Server (SLES) 11 SP3 or later with the latest patches installed. Identity Manager is mostly a Java-based application that runs by default in the eDirectory process space.
When you run eDirectory in a clustered environment, the Identity Manager engine is also clustered.
To determine whether you can install an Identity Manager component in a clustered environment, see the system requirements for that particular component in Chapter 6, “Considerations and
Prerequisites for Installation,” on page 53. For example, the User Application can run on an
application server in a clustered environment. You can also deploy the Remote Loader in a clustered environment. You cannot install Identity Reporting on a server in a clustered environment.
To manage the availability of your network resources for your Identity Manager environment, use the SUSE Linux Enterprise High Availability Extension. High Availability ensures efficient manageability of critical network resources including data, applications, and services. It also ensures that only one node is active at any given point of time. The High Availability Extension ships with Corosync/
Pacemaker messaging and membership layer and uses Pacemaker as the Cluster Resource Manager (CRM). The Pacemaker manages the virtual IP addresses of eDirectory and assigns them dynamically to the most eligible node of a cluster. You must configure eDirectory to use these IP addresses.
To configure and enable the High Availability service, download the SUSE Linux Enterprise High Availability Extension ISO file from the NetIQ Downloads website. For more information about configuring and enabling High Availability on nodes, see SUSE Linux Enterprise High Availability Extension 11 SP2 High Availability Guide.
6.2 Installing Identity Manager on an RHEL 6.x Server
To install Identity Manager on a server running Red Hat Enterprise Linux 6.x operating system, ensure that the server meets a specific set of prerequisites.
Section 6.2.1, “Prerequisites for Installing on RHEL 6.x,” on page 54
Section 6.2.2, “Running a Prerequisite Check on RHEL 6.x,” on page 54
Section 6.2.3, “Ensuring that the RHEL 6.x Server has the Necessary Dependent Libraries,” on page 54
Section 6.2.4, “Creating a Repository for the Installation Media,” on page 55
6.2.1 Prerequisites for Installing on RHEL 6.x
NetIQ recommends that you review the following prerequisites:
The /etc/hosts file must include entries for the 127.0.0.1 loopback address and the real IP address. Then comment the loopback address in the file. Use the following format:
127.0.0.1 localhost.localdomain localhost #loopback IP_address hostname
For example:
127.0.0.1 localhost.localdomain localhost #loopback 10.10.10.10 server1
If you do not comment the entry, the configuration fails because the process creates a default IP certificate for the 127.0.0.2 loopback address.
Install the appropriate libraries on the server. For more information, see Section 6.2.3, “Ensuring that the RHEL 6.x Server has the Necessary Dependent Libraries,” on page 54.
6.2.2 Running a Prerequisite Check on RHEL 6.x
You can generate a report of the missing prerequisites for each Identity Manager component. Run the II-rhel-Prerequisite.sh script, located by default in the install\utilities directory of the installation kit.
6.2.3 Ensuring that the RHEL 6.x Server has the Necessary Dependent Libraries
On a 32-bit RHEL platform, install compat-libstdc++-33-3.2.3-69.el6.i686.rpm. On a 64-bit platform, the required libraries for RHEL vary according to your chosen method of installation. Install the dependent libraries in the listed order.
NOTE
To add a ksh file, you can enter the following command:
yum -y install ksh
Guided installation (GUI):
libXau-1.0.6-4.el6.i686.rpm
libxcb-1.8.1-1.el6.i686.rpm
libX11-1.5.0-4.el6.i686.rpm
libXext-1.3.1-2.el6.i686.rpm
libXi-1.6.1-3.el6.i686.rpm
libXtst-1.2.1-2.el6.i686.rpm
glibc-2.12-1.132.el6.i686.rpm
Considerations and Prerequisites for Installation 55
libstdc++-4.4.7-4.el6.i686.rpm
libgcc-4.4.7-4.el6.i686.rpm
compat-libstdc++-33-3.2.3-69.el6.x86_64.rpm
compat-libstdc++-33-3.2.3-69.el6.i686.rpm
libXrender-0.9.7-2.el6.i686.rpm
ksh-20120801-10.el6.x86_64.rpm
Command line installation (console or silent):
glibc-2.12-1.7.el6.i686.rpm
libstdc++-4.4.4-13.el6.i686.rpm
libgcc-4.4.4-13.el6.i686.rpm
compat-libstdc++-33-3.2.3-69.el6.x86_64.rpm
compat-libstdc++-33-3.2.3-69.el6.i686.rpm
libXrender-0.9.7-2.el6.i686.rpm
ksh-20120801-10.el6.x86_64.rpm
6.2.4 Creating a Repository for the Installation Media
If your RHEL 6.x server needs a repository for the installation media, you can manually create one.
NOTE
Your RHEL server must also have the appropriate libraries installed. For more information, see Section 6.2, “Installing Identity Manager on an RHEL 6.x Server,” on page 53.
Ensure that the unzip rpm is installed before installing Identity Manager. This applies to all Linux platforms.
To set up a repository for the installation:
1 (Conditional) If you are copying the ISO to the server, run the following command:
#mount-o loop <path to iso>/mnt/rhes65
2 (Conditional) If you are copying to a CD or a DVD, and to the server, run the following command:
#mount /dev/cdrom/mnt/rhes65
3 (Conditional) If you have mounted the ISO, create a repository file in the /etc/yum.repos.d location and perform the following configuration steps:
#vi/etc/yum.repos.d/rhes.repo [redhat-enterprise]
name=RedHat Enterprise $releasever - $basearch baseurl=file:///mnt/rhes65/
enabled=1
4 (Optional) If you are using an installation server, enter the following text the following in vi / etc/yum.repos.d/rhes.repo:
[redhat-enterprise]
name=RedHat Enterprise $releasever - $basearch baseurl=url_to_the_installation source
enabled=1
5 After setting up the repository, run the following commands:
# yum clean all
# yum repolist
# yum makecache
6 To install the 32-bit packages, change “exactarch=1” to “exactarch=0” in the /etc/yum.conf file.
7 To install the GPG key, enter one of the following commands:
# rpm --import /mnt/rhes65/RPM-GPG-KEY-redhat-release or
# rpm --import http://url/RPM-GPG-KEY-redhat-release
8 (Optional) To install the required packages for Identity Manager, execute the following script:
#!/bin/bash
PKGS="ksh gettext.i686 gettext.x86_64 libXrender.i686 libXau.i686 libxcb.i686 libX11.i686 libXext.i686 libXi.i686 libXtst.i686 glibc.i686 libstdc++.i686 libgcc.i686 compat-libstdc++-33.i686 compat-libstdc++-33.x86_64"
for PKG in $PKGS ; do
yum -y install "$PKG"
done
NOTE: The script cannot locate compat-libstdc++-33.x86_64 library in the 32-bit repository unless you have modified the 64-bit repository and installed the RPM separately.