Você está na página 1de 102

IBM Tivoli Software

ISMP Installation and Configuration of ITDS 6.1


July 24, 2007

By: Annemarie Fitterer and Ram Reddy

Support Technical Exchange Web site 08/28/09


http://www-
306.ibm.com/software/sysmgmt/products/support/supp_tech_exch.html
© 2006 IBM Corporation
IBM Tivoli Directory Server version 6.1

Introduction
Abstract:
This STE will cover the ISMP installation and
configuration of the IBM Tivoli Directory Server
version 6.1 release.
Objectives:
4. Understand the available support resources
5. How to install ITDS version 6.1 via ISMP
6. How to configure an ITDS version 6.1 Server
7. Awareness of the new tools available with this release
8. Basic Installation and Configuration debugging

2 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Agenda

1. Before We Begin
 Important Links
 STE Links
 Passport Advantage Packages
 ITDS version 6.1 Product Overview
2. ISMP Installation and Server Configuration
 Install ITDS v6.1 and prerequisite software
 User Creation
 Directory Server instance creation using the Instance Administration tool
 Database Creation and configuration using ldapxinst
 Set the Admin Dn and Password using ldapxinst
 Configure a suffix using the idsxcfg utility
 Load sample data using the idsxcfg utility
 Starting the ITDS server
 Web Administration Tool (new enhancements)

3 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Agenda

1. Basic Installation and Configuration Debugging


 Available Resources
 Log Files
 Failed ISMP installation
 Failures with instance creation
 Failures with database creation
 Failures with server startup
 Failures with Web Admin

2. Hints and Tips

4 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Before We Begin

Section 1
 Important Links
 STE Links
 ITDS version 6.1 Packages
 ITDS 6.1 Product Overview

5 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Important Links

 ITDS v6.1 Package information:


http://www-1.ibm.com/support/docview.wss?rs=767&uid=swg24015

 6.1 System Requirements:


http://publib.boulder.ibm.com/infocenter/tivihelp/v2r1/topic/com.ibm
 6.1 Product Documentation:
http://publib.boulder.ibm.com/infocenter/tivihelp/v2r1/index.jsp?toc
com.ibm.IBMDS.doc/toc.xml

6 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Important Links

 Google Newsgroup:
http://groups.google.com/group/ibm.software.ldap/topics?lnk=gschg
 Support Site:
http://www-306.ibm.com/software/sysmgmt/products/support/IBMDir
 Tivoli Product Lifecycle Site:
http://www-306.ibm.com/software/sysmgmt/products/support/lifecyc
 Tivoli Software Global User Group Community:
http://www.tivoli-ug.org/

7 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

STE Links

Previous STE’s
 Introduction to ITDS 6.0 Installation and Configuration:
http://www-1.ibm.com/support/docview.wss?uid=swg27009575
 Ask the Experts Session:
http://www-1.ibm.com/support/docview.wss?uid=swg27009620
 Introduction to Replication on 6.0:
http://www-1.ibm.com/support/docview.wss?rs=0&uid=swg27009688
 Introduction to SSL on ITDS 6.0:
http://www-1.ibm.com/support/docview.wss?uid=swg27009739
 ITDS version 6.1 Overview:
http://www-1.ibm.com/support/docview.wss?uid=swg27010155

8 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

STE Links

Upcoming STE’s
http://www-306.ibm.com/software/sysmgmt/products/support/supp_tech_exch.html

3. Peer Replication Configuration over SSL on ITDS 6.0


 August 8, 2007 12:00 PM CST
4. Ask the Experts
 September 20, 2007 10:00 AM CST
5. Peer Replication Migration from ITDS version 5.2 to ITDS
version 6.1
 October 30, 2007 10:00 AM CST

9 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

6.1 Passport Advantage Packages


http://www-1.ibm.com/support/docview.wss?rs=767&uid=swg24015906

There are 8
downloadable parts in
the IBM Tivoli Directory
Server 6.1 eAssembly for
AIX.
The table provides
details about each part.
Download all 4 .tar files
or all 4 .iso files.
All the parts are
contained in the following
eAssembly:
CR5JYML: IBM Tivoli
Directory Server 6.1 for
AIX (.tar and .iso files)

10 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

6.1 Passport Advantage Packages


http://www-1.ibm.com/support/docview.wss?rs=767&uid=swg24015906

11 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

ITDS Product Overview

12 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

ISMP Installation and Configuration

Section 2
 Install ITDS v6.1 and prerequisite software
 User Creation
 Directory Server instance creation using the Instance Administration tool
 Database Creation and configuration using ldapxinst
 Set the Admin Dn and Password using ldapxinst
 Configure a suffix using the idsxcfg utility
 Load sample data using the idsxcfg utility
 Starting the ITDS server
 Web Administration Tool

13 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

ISMP Installation

Before you begin any installation of ITDS you must review the
requirements for your environment. Additionally you should
review the Installation and Configuration guide.
 System Requirements:
http://publib.boulder.ibm.com/infocenter/tivihelp/v2r1/topic/com.ibm

 Disk Space Requirements:


http://publib.boulder.ibm.com/infocenter/tivihelp/v2r1/topic/com.ibm
 Installation and Configuration Guide:
http://publib.boulder.ibm.com/infocenter/tivihelp/v2r1/topic/com.ibm

14 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

ISMP Install – create directory for tar files

 Verify that your OS meets the minimum requirements


 Create or select a temporary directory with adequate
space to store the tar fles. In this STE, “/” is used.

15 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

ISMP – download and extract tar files


The tar files must be extracted in a single directory (/tdsV6.1/tds).

16 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Things to be aware of …
 on AIX®, Linux®, Solaris, and HP-UX systems soft links for TDS V6.1
libraries and commands are not set during installation in /usr/bin (or in
/usr/lib). If you want to set soft links to Tivoli Directory Server libraries and
commands, use the idslink command after completing the installation. See
the IBM Tivoli Directory Server Version 6.1 Command Reference for
information about the command.
 On AIX, be sure that you have at least 300 MB of free space in the /tmp
directory or the directory you want to use as a temporary directory. If you
use a temporary directory and you are installing any of the co-requisite
products (IBM Tivoli Directory Integrator, Embedded WebSphere Application
Server, or DB2) be sure that you have 150 MB in the /tmp directory.
 On AIX, if you install IBM Tivoli Directory Integrator, the InstallShield GUI
installation program incorrectly assumes the Deployment Engine necessary
for IBM Tivoli Directory Integrator will be installed into the /opt directory,
when it will actually be installed into the /usr directory. If /opt is in a different
partition than /usr, the space calculation might not be correct. Be sure that
the /usr directory has at least 200 MB of free space

17 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Verify Space Requirements

18 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Installation Paths in the InstallShield GUI

There are two installation paths in the InstallShield GUI: Typical and
Custom.
 Use the Typical installation path if you want to accept default settings,
install all the IBM Tivoli Directory Server components that are not
already installed, and create a default directory server instance.
 Use the Custom installation path if you want to select components for
installation and create a directory server instance using the Instance
Administration Tool. When you use this tool you can customize the
directory server instance.
 Installation path:
 On AIX, Solaris and HP-UX systems: /opt/IBM/ldap/V6.1
 On Linux systems: /opt/ibm/ldap/V6.1
 Installation path is customizable on Windows only
default installation directory: C:\Program Files\IBM\LDAP\V6.1

19 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Launch the ISMP Installer


1. Login as root
2. cd to the “tdsV6.1/tds” location created after untarring the
files
3. Launch the ISMP installer

20 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

ISMP Installation
Select the for the installation wizard and click “OK”.

21 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

ISMP Install - Welcome Panel

22 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

ISMP Install – License Agreement

23 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

ISMP Install – Installation Type

24 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

ISMP Install – Selection Confirmation

25 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

ISMP Install – DB2

26 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

ISMP Install – ITDS 6.1 extracting images

27 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

ISMP Install – ITDS v 6.1 install

28 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

ISMP Install – Embedded WAS

29 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

ISMP Install – Deployment of Web Admin tool

30 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

ISMP Install - TDI

31 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

ISMP Install - TDI

32 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

ISMP Install - TDI

33 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

ISMP Install - TDI

34 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

ISMP Install – Default Instance Creation

35 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

ISMP Install - Complete

36 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

idslink – Create links to Client / Server Commands

37 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

idsxinst – instance administration tool

38 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Default Instance

39 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

New ITDS Instance Creation

Since the “dbsysadm” group was already created for us as part of the
default instance creation we do not need to create a new db2
administrative group.
We can proceed to the user creation option from the idsxinst utility.

40 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Creating a new 6.1 Instance using idsxinst

41 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

idsxinst - Create a New ITDS Instance

42 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

idsxinst
New capability to
create the OS user
for you.
 If you already
have an existing
user, you may
select it from the
drop down list.
 Or you can have
the idsxinst utility
create the user for
you.

43 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

idsxinst - User Creation

1. Enter the User


Name
2. Password
3. Home directory
4. Primary Group
**Note: The “ldapdb2” user
does not exist on the
system.

44 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

idsxinst – Instance Creation

To make
cryptographic
synchronization
easier you can
now specify the
encryption seed
and salt value as
part of the
instance creation.

45 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

idsxinst – Specify the DB2 Instance Name

46 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

idsxinst – TCP / IP Port Settings

47 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

idsxinst – TCP / IP Port Settings

48 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

idsxinst - Optional Steps

49 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

idsxinst – Setting the Admin Dn and Password

50 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

idsxinst – Database Configuration

51 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

idsxinst – Database Configuration

52 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

idsxinst – Confirmation

53 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Instance Creation and Configuration - Success!

54 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

idsxinst - finished

55 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

idsilist command

The idsilist
command will
display the
instance
information from
command line.

56 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

idsxcfg

To launch the
idsxcfg utility,
from command
line issue
# idsxcfg –I
<instance name>
The instance
name specified
will be displayed
on the Overview
panel

57 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

idsxcfg – Add a suffix


On the “Manage
Suffixes” panel:
2. Enter the suffix
in the “Suffix
DN field”
3. Click “Add”
4. Click “OK” to
confirm

58 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

idsxcfg – load sample data

59 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

idsxcfg – load sample data

60 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

idsxcfg – load sample data


50 entries out of 50 attempted – Success!

61 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Starting the Server


We have many options for starting the server
2. ibmslapd, idsslapd
3. ibmdirctl
4. The Web Administration tool
For this example we will use the command line option.

62 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Starting the Server – minimum enforced ulimits

==> ibmslapd -I ldapdb2 -n


GLPSRV041I Server starting.
GLPCTL113I Largest core file size creation limit for the process (in bytes):
'-1'(Soft limit) and '-1'(Hard limit).
GLPCTL119I Maximum Data Segment(Kbytes) soft ulimit for the process is -1
and the prescribed minimum is 262144.
GLPCTL119I Maximum File Size(512 bytes block) soft ulimit for the process is
-1 and the prescribed minimum is 2097151.
GLPCTL122I Maximum Open Files soft ulimit for the process is 2000 and the
prescribed minimum is 500.
GLPCTL119I Maximum Physical Memory(Kbytes) soft ulimit for the process is
-1 and the prescribed minimum is 262144.
GLPCTL121I Maximum Stack Size(Kbytes) soft ulimit for the process was
16383 and it is modified to the prescribed minimum 65536.
GLPCTL119I Maximum Virtual Memory(Kbytes) soft ulimit for the process is -1
and the prescribed minimum is 1048576.

63 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Starting the Server – Success!



GLPCOM021I The preoperation plugin is successfully loaded from libpta.a.
GLPCOM024I The extended Operation plugin is successfully loaded from libloga.a.
GLPCOM024I The extended Operation plugin is successfully loaded from libidsfget.a.
GLPSRV180I Pass-through authentication is disabled.
GLPCOM003I Non-SSL port initialized to 1389.

64 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Starting the Application Server for TDS V6.1 WebAdmin

• ITDS V6.1 installs two profiles into eWAS 6.1.0.7


• TDSWebAdminProfile
• TDSTDIAMCProfile

• Issue the following command to start the IDSWebApp


application in the eWAS 6.1.0.7.
• “/opt/IBM/ldap/V6.1/appsrv/profiles/TDSWebAdminProfile/bin/startServer.sh server1”

65 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Web Administration Tool – Login Prompt

To launch the Web Administration Tool, type the following


url in your Web browser:
http://<hostname>:12100/IDSWebApp/IDSjsp/Login.jsp

66 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Web Administration Tool – Log in as Consol Admin


The default Administrative Console User ID and
password are “superadmin” and “secret”.

67 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Web Administration Tool – Console Administration

68 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Web Administration Tool – Manage Console Properties

69 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Web Administration Tool – Managed Console Servers

To add the Instances to the list of managed console servers:


• Select “Manage Console servers” from the navigation panel

• Click “Add…”

70 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Web Administration Tool – Add Managed Console Server

71 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Web Administration Tool – Add ldapdb2 instance

Click “OK” and return to the manage console servers panel. Notice the
“idsinst” is now listed. Click the “Add…” button and add the second
instance (ldapdb2) to the list using the same steps.

72 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Web Administration Tool – Log out of the Management


Cosole

73 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Web Administration Tool – Log into the ITDS V6.1 Server

74 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Web Administration Tool

75 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Web Administration Tool – Improved DIT navigation

76 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Web Administration Tool – Add Entry Panel

77 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Web Administration Tool – New View Root DSE Panel

78 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Web Administration Tool – New Server Trace Panel

79 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Web Administration Tool – View Trace and Logs Panel

80 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Basic Installation and Configuration Debugging

Section 3
Problem Determination Approach
Available Resources
Log Files
Failed ISMP installation
Failures with instance creation
Failures with database creation
Failures with server startup
Failures with Web Admin

81 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Basic Installation and Configuration Debugging


Problem Determination Approach

1. Review the log files


2. Check the available resources for known issues.
 Problem Determination Guide
 Technotes
3. Enable tracing or additional debugging options.
4. Review the additional debug messages and consult the
Messages Guide.

82 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Built-in troubleshooting features


IBM Tivoli Directory Server contains several tools in addition to the operating system
tools to help you determine the source of problems you encounter:
 Core file generation
– Core files, generated by the operating system, collect the contents of a program's memory
space at the time the program ended. A core file helps IBM Software Support diagnose the
problem. You must have core file generation enabled in order for core file information to be
generated. See Generating core files for more information about core files and for
instructions for enabling core file generation.

 Support Tool (idssupport)


– The Support Tool collects relevant data about the directory server and the system (such as
logs, directory listing, schema files, and core files) and packages this information in a
compressed file archive that you can send to IBM Software Support for help in diagnosing
your problem. See IBM Tivoli Directory Server Support Tool for more information. To use
the Support Tool, you must have the proxy server and IBM Tivoli Directory Integrator 6.1.1
installed. The IBM Tivoli Directory Server Version 6.1 Installation and Configuration Guide
contains instructions for installing the proxy server.

83 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Built-in troubleshooting features

IBM Tivoli Directory Server contains several tools in addition to the operating
system tools to help you determine the source of problems you encounter
(continued):

 Error logs
– Error logs record error messages that occur during directory server
processing. IBM Tivoli Directory Server detects and saves these errors in a
text file. See Logging utilities for more information.
 Audit logs
– Audit logs record suspicious patterns of activity in order to detect security
violations. If security is violated, the audit log can be used to determine how
and when the problem occurred. IBM Tivoli Directory Server detects and saves
these errors in a text file. See Logging utilities for more information.

84 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Basic Installation and Configuration Debugging

The most useful resources in debugging an issue with Installation and


configuration are as follows:
2. The “Problem Determination Guide”:

http://publib.boulder.ibm.com/infocenter/tivihelp/v2r1/topic/com.ib
4. The “Search Support” feature of the ITDS Support site:

http://www-306.ibm.com/software/sysmgmt/products/support/IBMDirectoryServer.h
6. The “Messages Guide”:

http://publib.boulder.ibm.com/infocenter/tivihelp/v2r1/topic/com.ibm.IBMDS.doc/m

85 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Basic Debugging – Helpful ISMP Installation Log Files


Log Location
ITDS ISMP Install Logs /var/idsldap/V6.1/ldapinst.log
Client Install Logs /var/idsldap/V6.1/clientBase.log
/var/idsldap/V6.1/clientBaseErr.log
/var/idsldap/V6.1/client64Bit.log
/var/idsldap/V6.1/client64BitErr.log
/var/idsldap/V6.1/client64MaxCrypto.log
/var/idsldap/V6.1/client64MaxCryptoErr.log
/var/idsldap/V6.1/javaClient.log
DB2 Install Logs /var/idsldap/V6.1/db2inst.log
ISMP /var/idsldap/V6.1/db2insterr.log
/var/idsldap/V6.1/DB2setup.log

GSKIT Install Logs /var/idsldap/V6.1/gsKit.log


/var/idsldap/V6.1/gsKitErr.log

86 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Basic Debugging – Helpful ISMP Installation Log Files


Log Location
Server Install Logs /var/idsldap/V6.1/SrvBaseMaxCrypto.log
/var/idsldap/V6.1/SrvBaseMaxCryptoErr.log
/var/idsldap/V6.1/baseServer.log
/var/idsldap/V6.1/baseServerErr.log
/var/idsldap/V6.1/server.log
/var/idsldap/V6.1/serverErr.log

TDI Install Logs /var/idsldap/V6.1/TdiDEInst.log


/var/idsldap/V6.1/TdiDEInstErr.log
/var/idsldap/V6.1/TdiAmcIUErr.log
/var/idsldap/V6.1/TdiAmcIU.log
/var/idsldap/V6.1/TdiServerIU.log
/var/idsldap/V6.1/TdiServerIUErr.log
/var/idsldap/V6.1/AMCProfileCreate.log
/var/idsldap/V6.1/AMCProfileCreateErr.log

87 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Basic Debugging – Helpful ISMP Installation Log Files

Log Location
Proxy Install Logs /var/idsldap/V6.1/proxy.log
/var/idsldap/V6.1/proxyErr.log

WAS Install Logs /var/idsldap/V6.1/installApp.log


ISMP /var/idsldap/V6.1/installAppErr.log
/var/idsldap/V6.1/configApp.log
/var/idsldap/V6.1/configAppErr.log
/var/idsldap/V6.1/migrateApp.log
/var/idsldap/V6.1/migrateAppErr.log

88 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Basic Debugging – Helpful Server Log Files

Log Location
ITDS Critical Server /<ITDS instance home>/idsslapd-<instance
Logs name>/logs
Most Important Files:
audit.log
db2cli.log
ibmslapd.log
DB2 Critical Logs /<DB2 Instance home>/sqllib/db2dump
Most Important Files:
db2diag.log
instname.nfy

89 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Basic Debugging – Helpful Web Admin Log Files

Log Location
ITDS WebAdmin Logs: /opt/IBM/ldap/V6.1/appsrv/profiles/TDSWebAdminProfile/IDSLogs

ITDS WebAdmin Logs: /opt/IBM/ldap/V6.1/appsrv/logs/profiles/TDSWebAdminProfile/server1

90 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Basic Debugging – Failed ISMP install

If installation does not complete, the first place you can look
for information is the ldapinst.log file. If the installation
destination directory (install_directory) was created, this log
is in the following location:
On AIXsystems, the ldapinst.log file is in /var/idsldap/V6.1.
If install_directory was not created before the installation
failed, the log might be in a temporary directory. To find it,
search for "ldapinst.log". Review this log for any messages
about why the installation failed.

91 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Basic Debugging – Failed Instance Creation


In order to get more debugging information, it is best to use the
command line utilities to debug errors. The idsicrt utility provides us
with the functionality to trace a failed instance creation and
configuration attempt.
idsicrt [-I instancename [-e encryptseed] [-p port] [-s secureport] [-a admport]
[-c admsecureport] [-t dbinstance] [-C] [-i ipaddress] [-l instlocation] [-r
description] [-d debuglevel] [-b outputfile] [-q] [-n]] | -v | -?

To Trace a failed Instance Creation issue the following:


# ldtrc info
**Note: the above command checks to see if tracing is already enabled.
# ldtrc on
# idsicrt -I ldapdb2 -e passwd4eseed -t ldapdb2 -l /home/ldapdb2 -d 65535
-b /tmp/idsicrt.out

92 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Basic Debugging – Failed Database Creation


In order to get more debugging information, it is best to use the command line
utilities to debug errors. The idscfgdb utility provides us with the
functionality to trace a failed database creation and configuration attempt.
Usage: idscfgdb [-I instance_name
[-w db_admin_pw] [-a db_admin_id -t db_name -l db_location [-x]]
[-f config_file] [-d debug_level] [-b output_file] [-q]
[-n]] | -v | -?

To Trace a failed Database Creation issue the following:


# ldtrc info
**Note: the above command checks to see if tracing is already enabled.
# ldtrc on
# idscfgdb -I ldapdb2 –w db2ldap –a ldapdb2 -t ldapdb2 -l /home/ldapdb2 -d 65535
-b /tmp/idscfgdb.out

93 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Basic Debugging – Configuration Only Mode


If ibmslapd runs into any errors during startup it may run in a mode
known as “Configuration Only Mode”. When in this mode we can
only access configuration options, only the the “cn=configuration”
suffix is active. We cannot access any of the data stored in the
backend. To find out what exactly is failing we will typically enable
a trace of the server start up.
To enable tracing, issue the following commands:
# ldtrc info
**Note: the above command checks to see if tracing is already enabled.
# ldtrc on
# idsslapd –I ldapdb2 -n –h 65535 2>&1 |tee /tmp/srvtrc.out
The output generated should help to debug what is failing.
Command to determine if you are in config only mode:
# idsldapsearch –p <port> -b "" -s base objectclass=* | grep -i config
This search should return:
ibm-slapdisconfigurationmode=FALSE

94 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Error when starting the embedded version of WebSphere


Application Server - Express on AIX
Starting the embedded version of IBM WebSphere Application Server - Express on AIX
(startServer.sh server1), might not work because port 9090 is already being used by
the wsmserver. See the WAS_install_path/logs/server1 directory for the actual log files.
Usually the SystemErr.log and SystemOut.log files are most helpful, although the other
logs might have some useful information.
To resolve the port conflict, with the wsmserver change the default port for the embedded
version of IBM WebSphere Application Server - Express from 9090 to 9091
Edit the following two files and change 9090 to 9091. Do the same thing in the

 <WAS_profile_path>/config/cells/DefaultNode/virtualhosts.xml
 <WAS_profile_path>/config/cells/DefaultNode/nodes/DefaultNode/ser
vers/server1/server.xml
<WAS_profile_path> is the path where the ITDS WebAdmin application profile is
configured in eWAS.
e.g.: /opt/IBM/ldap/V6.1/appsrv/profiles/TDSWebAdminProfile

Note:
This path does have two subdirectories named DefaultNode.
Make one change in each file for a total of two updates.

95 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Hints and Tips

Section 4
 Installing using operating system utilities
 System access for installation, instance creation and configuration
 DB2 hints
 Instance creation and configuration command line utilities

96 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Installing using operating system utilities

 ITDS V6.1 install images – same for native / ISMP


 AIX – smit / installp, Linux – rpm, Solaris – pkg, HP-UX – depot
 ITDS V6.1 packages location: {CD1root|tdsV6.1}/tdsfiles
 ITDS V6.1 langpacks location: {CD1root|tdsV6.1}/tdsLangpack
 GSKit 7.0.3.30 pacakges location: {CD1root|tdsV6.1}/gskit
 DB2 V9 FP2 installer: {CD2root|tdsV6.1}/db2
 eWAS 6.1.0.7 installer: {CD3root|tdsV6.1}/appsrv
 ITDI 6.1.1 server runtime and AMC installer: {CD3root|tdsV6.1}/tdi
 ITDS V6.1 Directory White Pages installer:
{CD4root|tdsV6.1-WhtPgs}/whitepages
 Refer ITDS V6.1 installation and configuration guide

97 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Installing using operating system utilities – contd…


 AIX – installing using installp – in preferred order
• Install GSKit 7.0.3.30
- cd {CD1root|tdsV6.1}/gskit
- installp -acXgd . gsksa.rte
• Install db2 V9 FP2
- cd {CD2root|tdsV6.1}/db2
- ./db2_install # specify option ESE when prompted.
• Install ITDS V6.1
- cd {CD1root|tdsV6.1}/tdsfiles
- installp -acXgd . idsldap # installs all ITDS V6.1 packages
- cd {CD1root|tdsV6.1}/tdsLangpack/native
- installp -acXgd . Idsldap.msg61.<lang>
• Install eWAS 6.1.0.7
- cd {CD3root|tdsV6.1}/appsrv
- install.sh -installRoot /opt/IBM/ldap/V6.1/appsrv
• For TDI and Directory White Pages – ISMP install is necessary.

98 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

System access for installation, instance creation and configuration

 AIX, Linux, Solaris, HP-UX requires root user login


to do installation and instance creation
 Once instance is created – instance configuration
and server administration can be performed as the
instance owner
 If using the default ports(389, 636) with ibmslapd
on AIX, Linux, Solaris and HP-UX – root access is
required to start ibmslapd directly. Otherwise use
ibmdirctl or WebAdmin to start ibmslapd

99 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

DB2 hints
 DB2 V8 FP10 or higher is supported
 DB2 V9 can coexist on a system where V8 is installed
 Multiple installs of DB2 V9 is allowed on a single system in different install locations.
 When installing using TDS V6.1 ISMP – DB2 V9 gets installed into /opt/IBM/tdsdb2V9.1/
folder
 /opt/IBM/ldap/V6.1/etc/ldapdb.properties file contents is used to create and configure
db2 instance and database for given ids instance and a copy of ldapdb.properties gets
stored in <instance_home>/idsslapd-<instanceName>/etc/ folder
 DB2 instance user can be different compared to ids instance user, but for simplicity
prefer the same instance user name
 If custom database location is used make sure the db2 instance user owns the
database location folder. Database instance user’s primary group should group-own
the database location folder. If different db2 and ids instance user are used then make
sure ids instance user is member of database instance user’s primary group
 Install GSKit before installing DB2
 Refer DB2 infocenter: http://publib.boulder.ibm.com/infocenter/db2luw/v9/index.jsp

100 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Instance creation and configuration command line utilities

 Command line utils – in preferred order of execution


 idsadduser – creates OS user for instance ownership
 idsicrt – creates ids and db2 instances
 idsdnpw – configures ids admin dn and password
 idscfgdb – configures the database
 idscfgsuf – configures the suffix in configuration
 idscfgsch – adds custom schema file into configuration
 idsdb2ldif / idsbulkload – loads LDIF data
 User -? Flag with the commands above for usage
 Refer Installation and configuration guide:
http://publib.boulder.ibm.com/infocenter/tivihelp/v2r1/topic/com.ibm.IBMDS.doc/insta

101 08/28/09 © 2006 IBM Corporation


IBM Tivoli Directory Server version 6.1

Questions?
Press * 1 on your phone to ask a question
Or type your question into the chat window of the
web conferencing tool
For general questions about the STE program or to
request specific topics feel free to email:
Rick Smith at Ricks3@us.ibm.com

Please visit the STE website for information on


upcoming or past events:
http://www-306.ibm.com/software/sysmgmt/products/support/supp_tech_exch.html

102 08/28/09 © 2006 IBM Corporation

Você também pode gostar