Red Hat NETSCAPE DIRECTORY SERVER 6.2 - GATEWAY CUSTOMIZATION Installationsanleitung Seite 1

Installation GuideNetscape Directory ServerVersion 6.2December 2003

Related Information10 Netscape Directory Server Installation Guide • December 2003

Migration Procedure100 Netscape Directory Server Installation Guide • December 2003• Migrating a Replicated 4.x Site - Approach 1• Migrating a Replica

Migration ProcedureChapter 6 Migrating and Upgrading From Previous Versions 101To migrate this topology using Approach 1, follow these steps:1. Instal

Migration Procedure102 Netscape Directory Server Installation Guide • December 20034. Migrate consumers one at a time. After each migration, recreate

Migration ProcedureChapter 6 Migrating and Upgrading From Previous Versions 103Migrating a 5.x Replicated SiteIf you are upgrading from Directory Serv

Migration Procedure104 Netscape Directory Server Installation Guide • December 20033. Migrate the first master; see section “Master Migration” on page

Migration ProcedureChapter 6 Migrating and Upgrading From Previous Versions 1052. Install Directory Server 6.x, registering against the first master’s

Upgrading From Directory Server 6.x Versions106 Netscape Directory Server Installation Guide • December 2003serverRoot/shared/config/dbswitch.conf:dir

Upgrading From Directory Server 6.x VersionsChapter 6 Migrating and Upgrading From Previous Versions 107UpgradingThe steps below show how to perform a

Upgrading From Directory Server 6.x Versions108 Netscape Directory Server Installation Guide • December 200312. When prompted to enter the server root

109Chapter 7Uninstalling Directory ServerYou may need to remove an instance of Netscape Directory Server (Directory Server) or uninstall the entire se

11Chapter 1Preparing for a Directory ServerInstallationBefore you begin installing Netscape Directory Server (Directory Server), you should have an un

Uninstalling Directory Server110 Netscape Directory Server Installation Guide • December 20033. From the Object menu, select Stop; you can also right-

Uninstalling Directory ServerChapter 7 Uninstalling Directory Server 1114. Select the default, All, to remove all components of Directory Server.Alter

Uninstalling Directory Server112 Netscape Directory Server Installation Guide • December 20033. Locate and double-click the uninstallation utility, un

Uninstalling Directory ServerChapter 7 Uninstalling Directory Server 1133. Locate and select the entry for Netscape Directory Server.The entry is of t

Uninstalling Directory Server114 Netscape Directory Server Installation Guide • December 2003

115Chapter 8TroubleshootingThis chapter describes the most common installation problems and how to solve them. It also provides some tips on checking

Running dsktune116 Netscape Directory Server Installation Guide • December 2003The following is an example of output that dsktune generates. Note that

Running dsktuneChapter 8 Troubleshooting 117ERROR : Patch 110934-10 is present, but 110934-11 (Feb/20/2003: SunOS 5.8:pkgtrans, pkgadd, pkgchk and lib

Running dsktune118 Netscape Directory Server Installation Guide • December 2003NOTICE : The NDD tcp_rexmit_interval_initial is currently set to 3000mi

Common Installation ProblemsChapter 8 Troubleshooting 119WARNING: There are only 256 file descriptors (soft limit) available, which limit the number o

Configuration Decisions12 Netscape Directory Server Installation Guide • December 2003• Netscape Administration Server—Administration Server is a comm

Common Installation Problems120 Netscape Directory Server Installation Guide • December 20035. Next to the label “Primary DNS Suffix of this computer,

Common Installation ProblemsChapter 8 Troubleshooting 121[18/Jun/2002:10:56:39] failure ( 4322): Configuration initialization failed:Error running ini

Common Installation Problems122 Netscape Directory Server Installation Guide • December 2003uninst.log, is stored in the system TEMP directory. On UNI

123Glossaryaccess control instruction See ACI.ACI Access Control Instruction. An instruction that grants or denies permissions to entries in the direc

124 Netscape Directory Server Installation Guide • December 2003attribute Holds descriptive information about an entry. Attributes have a label and a

Glossary 125browser Software, such as Netscape Navigator, used to request and view World Wide Web material stored as HTML files. The browser uses the

126 Netscape Directory Server Installation Guide • December 2003ciphertext Encrypted information that cannot be read by anyone without the proper key

Glossary 127daemon A background process on a Unix machine that is responsible for a particular system task. Daemon processes do not need human interve

128 Netscape Directory Server Installation Guide • December 2003DNS Domain Name System. The system used by machines on a network to associate standard

Glossary 129general access When granted, indicates that all authenticated users can access directory information.hostname A name for a machine in the

Configuration DecisionsChapter 1 Preparing for a Directory Server Installation 13Choosing Unique Port NumbersPort numbers can be any number from 1 to

130 Netscape Directory Server Installation Guide • December 2003ISO International Standards Organizationknowledge reference Pointers to directory info

Glossary 131management information base See MIB.mapping tree A data structure that associates the names of suffixes (subtrees) with databases.master a

132 Netscape Directory Server Installation Guide • December 2003name collisions Multiple entries with the same distinguished name.nested role Allow yo

Glossary 133password file A file on Unix machines that stores Unix user login names, passwords, and user ID numbers. It is also known as /etc/passwd,

134 Netscape Directory Server Installation Guide • December 2003RAM Random access memory. The physical semiconductor-based memory in a computer. Infor

Glossary 135role An entry grouping mechanism. Each role has members, which are the entries that possess the role.role-based attributes Attributes that

136 Netscape Directory Server Installation Guide • December 2003service A background process on a Windows NT machine that is responsible for a particu

Glossary 137suffix The name of the entry at the top of the directory tree, below which data is stored. Multiple suffixes are possible within the same

138 Netscape Directory Server Installation Guide • December 2003uid A unique number associated with each user on a Unix system.URL Uniform Resource Lo

139IndexAadministration domain, defined 18administration port number 28administration server 12administration server user 15authentication entities 15

Configuration Decisions14 Netscape Directory Server Installation Guide • December 2003By default, the server root directory is one of the following:•/

140 Netscape Directory Server Installation Guide • December 2003Iinstall.inf 68installationcomponents 11configuration decisions 12preparing for 11proc

Index 141perldap 79slapd 75silent install directivesgeneral 74silent install files 68silent install, defined 19silent install, examples 69typical inst

142 Netscape Directory Server Installation Guide • December 2003

Configuration DecisionsChapter 1 Preparing for a Directory Server Installation 15Defining Authentication EntitiesAs you install Directory Server and A

Configuration Decisions16 Netscape Directory Server Installation Guide • December 2003Normally, Administration Server user and password should be iden

Configuration DecisionsChapter 1 Preparing for a Directory Server Installation 17Because the configuration directory normally experiences very little

Configuration Decisions18 Netscape Directory Server Installation Guide • December 2003Between your user directory and your configuration directory, it

Installation Process OverviewChapter 1 Preparing for a Directory Server Installation 19For many installations, you can have just one administration do

Netscape Communications Corporation ("Netscape") and its licensors retain all ownership rights to the software programs offered by Netscape

Installation Process Overview20 Netscape Directory Server Installation Guide • December 2003Beyond determining which type of installation process you

Installation PrivilegesChapter 1 Preparing for a Directory Server Installation 21On Windows, unzip the product binaries.Installation PrivilegesOn UNIX

Installation Privileges22 Netscape Directory Server Installation Guide • December 2003

23Chapter 2Using Express and TypicalInstallationThis chapter describes how to perform basic installation activities. This chapter contains the followi

Using Express Installation24 Netscape Directory Server Installation Guide • December 2003where filename corresponds to the product binaries you want t

Using Typical InstallationChapter 2 Using Express and Typical Installation 25❍ o=NetscapeRootDo not modify the contents of the directory under the o=N

Using Typical Installation26 Netscape Directory Server Installation Guide • December 20037. Next, the setup program asks you if you agree to the licen

Using Typical InstallationChapter 2 Using Express and Typical Installation 2718. The setup program then asks you for the System User and the System Gr

Using Typical Installation28 Netscape Directory Server Installation Guide • December 200323. For Configuration Directory Administrator ID and password

Using Typical InstallationChapter 2 Using Express and Typical Installation 2929. For the user you want to run Administration Server as, enter root. Th

3ContentsAbout This Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Using Typical Installation30 Netscape Directory Server Installation Guide • December 20037. For configuration directory, select the default if this di

Using Typical InstallationChapter 2 Using Express and Typical Installation 31In former releases of Directory Server, the Directory Manager was known a

Using Typical Installation32 Netscape Directory Server Installation Guide • December 2003

33Chapter 3Computer System RequirementsBefore you can install Netscape Directory Server (Directory Server), you must make sure that the systems on whi

Summary of Supported Platforms34 Netscape Directory Server Installation Guide • December 2003Memory/RAM 256 MB. However, you should plan from 512 MB t

Summary of Supported PlatformsChapter 3 Computer System Requirements 35Storage Space/Hard Disk Approximately 300 MB of disk space for a minimal instal

Hardware Requirements36 Netscape Directory Server Installation Guide • December 2003Hardware RequirementsOn all platforms, you will need:• Roughly 200

Operating System RequirementsChapter 3 Computer System Requirements 37dsktune UtilityFor UNIX platforms, Directory Server provides a utility named dsk

Operating System Requirements38 Netscape Directory Server Installation Guide • December 2003Verifying Required System ModulesDirectory Server is not s

Operating System RequirementsChapter 3 Computer System Requirements 39• Install the patches listed below; Netscape Console uses the Abstract Window To

4 Netscape Directory Server Installation Guide • December 2003Chapter 3 Computer System Requirements . . . . . . . . . . . . . . . . . . . . . . . .

Operating System Requirements40 Netscape Directory Server Installation Guide • December 2003•Set max_thread_proc to 512 (the old value was 64).•Set ma

Operating System RequirementsChapter 3 Computer System Requirements 41Microsoft Windows 2000 Advanced ServerIf you plan to install Directory Server on

Operating System Requirements42 Netscape Directory Server Installation Guide • December 2003Installing Windows 2000 ServerDuring the installation of W

Operating System RequirementsChapter 3 Computer System Requirements 43Before downloading the font, read the READMEfirst.txt and ReadMe.htm files.Ensur

Operating System Requirements44 Netscape Directory Server Installation Guide • December 2003• Change the upper range of ephemeral from the default val

Operating System RequirementsChapter 3 Computer System Requirements 45Default glibc - glibc-2.2.5-34glibc used for certification - glibc-2.2.5-43❍ Req

Operating System Requirements46 Netscape Directory Server Installation Guide • December 2003file-3.39-8.7x.i386.rpm losetup-2.11n-12.7.3.i386.rpmfileu

Operating System RequirementsChapter 3 Computer System Requirements 47kdeartwork-screensavers-3.0.3-0.7.1.i386.rpm openldap-devel-2.0.27-2.7.3.i386.rp

Operating System Requirements48 Netscape Directory Server Installation Guide • December 2003kernel-smp-2.4.18-27.7.x.i686.rpm sendmail-cf-8.11.6-25.73

Operating System RequirementsChapter 3 Computer System Requirements 49Tuning the SystemThis section contains some basic system tuning information. Kee

5Setting File Descriptors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64

Operating System Requirements50 Netscape Directory Server Installation Guide • December 2003Red Hat Linux Advanced Server 2.1 Operating SystemIf you p

Operating System RequirementsChapter 3 Computer System Requirements 51❍ Required Filesytem:ext3 (LARGEFILES support enabled) filesystem has been used

Operating System Requirements52 Netscape Directory Server Installation Guide • December 2003iputils-20001110-6.AS21.2.i386.rpm sendmail-8.11.6-26.72.i

Operating System RequirementsChapter 3 Computer System Requirements 53Tuning the SystemThis section contains some basic system tuning information. Kee

Operating System Requirements54 Netscape Directory Server Installation Guide • December 2003Sun Solaris 8 Operating SystemIf you plan to install Direc

Operating System RequirementsChapter 3 Computer System Requirements 55Installing PatchesYou must use Solaris 8 with the Sun recommended patches. The S

Operating System Requirements56 Netscape Directory Server Installation Guide • December 2003108949-07: CDE 1.4: libDtHelp/libDtSvc patch108968-08: Sun

Operating System RequirementsChapter 3 Computer System Requirements 57109805-15: SunOS 5.8: /usr/lib/security/pam_krb5.so.1 patch109862-03: X11 6.4.1

Operating System Requirements58 Netscape Directory Server Installation Guide • December 2003110916-03: SunOS 5.8: sort patch110934-11: SunOS 5.8: pkgt

Operating System RequirementsChapter 3 Computer System Requirements 59Tuning the SystemBasic Solaris tuning guidelines are available from several book

6 Netscape Directory Server Installation Guide • December 2003After You Upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Operating System Requirements60 Netscape Directory Server Installation Guide • December 2003Setting File DescriptorsThe system-wide maximum file descr

Operating System RequirementsChapter 3 Computer System Requirements 61ndd -set /dev/tcp tcp_conn_req_max_q0 1024ndd -set /dev/tcp tcp_conn_req_max_q 1

Operating System Requirements62 Netscape Directory Server Installation Guide • December 2003http://sunsolve.sun.comVerifying Disk Space RequirementsEn

Operating System RequirementsChapter 3 Computer System Requirements 63Table 3-5 Solaris 9 Patch List 112233-04: SunOS 5.9: Kernel Patch112601-04: SunO

Operating System Requirements64 Netscape Directory Server Installation Guide • December 2003Tuning the SystemBasic Solaris tuning guidelines are avail

Operating System RequirementsChapter 3 Computer System Requirements 65Tuning TCP ParametersBy default, the TCP/IP implementation in a Solaris kernel i

Operating System Requirements66 Netscape Directory Server Installation Guide • December 2003The DNS resolver is typically set by the file /etc/resolv.

67Chapter 4Silent Installation and InstanceCreationSilent installation allows you to use a file to predefine all the answers that you would normally s

Using Silent Installation68 Netscape Directory Server Installation Guide • December 20032. Create a new directory:# mkdir ds# cd ds3.If you have not a

Using Silent InstallationChapter 4 Silent Installation and Instance Creation 69You will have to make some modifications to this file before you use it

7About This GuideWelcome to Netscape Directory Server (Directory Server). This manual provides a high-level overview of design and planning decisions

Using Silent Installation70 Netscape Directory Server Installation Guide • December 2003You can find a definition of the individual installation direc

Using Silent InstallationChapter 4 Silent Installation and Instance Creation 71Sample File for Using an Existing Configuration DirectoryThe following

Using Silent Installation72 Netscape Directory Server Installation Guide • December 2003Sample File for Installing the Standalone Netscape ConsoleThe

Using Silent InstallationChapter 4 Silent Installation and Instance Creation 73Specifying Silent Installation DirectivesThis section describes the bas

Using Silent Installation74 Netscape Directory Server Installation Guide • December 2003[General] Installation Directives[General] installation direct

Using Silent InstallationChapter 4 Silent Installation and Instance Creation 75[slapd] Installation Directives[slapd] installation directives specify

Using Silent Installation76 Netscape Directory Server Installation Guide • December 2003Table 4-2 Required and Optional [slapd] Installation Directive

Using Silent InstallationChapter 4 Silent Installation and Instance Creation 77[admin] Installation Directives[admin] installation directives specify

Using Silent Installation78 Netscape Directory Server Installation Guide • December 2003[Base] Installation DirectivesThere is only one [Base] install

Using Silent Instance CreationChapter 4 Silent Installation and Instance Creation 79[nsperl] Installation DirectivesThere is only one [nsperl] install

Conventions Used In This Guide8 Netscape Directory Server Installation Guide • December 2003• Directory Server Console—An improved management console

Using Silent Instance Creation80 Netscape Directory Server Installation Guide • December 2003Because all instances of Directory Server under a server

Using Silent Instance CreationChapter 4 Silent Installation and Instance Creation 81SlapdConfigForMC= NoUseExistingMC= YesUseExistingUG= NoSecurityOn=

Using Silent Instance Creation82 Netscape Directory Server Installation Guide • December 2003

83Chapter 5Post InstallationThis chapter describes the post-installation procedures for launching the online help and populating the directory tree.Th

Populating the Directory Tree84 Netscape Directory Server Installation Guide • December 20035. Restart Administration Server. You can now launch the o

Populating the Directory TreeChapter 5 Post Installation 85• Start your Directory Server with an empty database and import data over LDAP—This method

Populating the Directory Tree86 Netscape Directory Server Installation Guide • December 2003

87Chapter 6Migrating and Upgrading FromPrevious VersionsIf you have a previous installation of Directory Server, depending on it’s version, you can mi

Migration Prerequisites88 Netscape Directory Server Installation Guide • December 2003The migration script performs the following tasks in sequence:•

Migration PrerequisitesChapter 6 Migrating and Upgrading From Previous Versions 89• Do not install the new Directory Server on top of an existing Dire

Related InformationAbout This Guide 9All paths specified in this manual are in UNIX format. If you are using a Windows-based Directory Server, you sho

Migration Prerequisites90 Netscape Directory Server Installation Guide • December 2003• Windows only. If you are migrating a Directory Server 5.x mult

Migration ProcedureChapter 6 Migrating and Upgrading From Previous Versions 912. Move your custom schema elements to the following files:serverRoot/sl

Migration Procedure92 Netscape Directory Server Installation Guide • December 2003This section contains the following information:• Migrating a Standa

Migration ProcedureChapter 6 Migrating and Upgrading From Previous Versions 93❍ rootDN is the Directory Server 6.x user DN with root permissions, such

Migration Procedure94 Netscape Directory Server Installation Guide • December 2003oldHome:/export/home/jdoe/50-latest/slapd-bart, oldConfDir: /export/

Migration ProcedureChapter 6 Migrating and Upgrading From Previous Versions 95Param: nsslapd-timelimit values To migrate: 3600Param: nsslapd-timelimit

Migration Procedure96 Netscape Directory Server Installation Guide • December 2003Existing data will be exported under /export/home/jdoe/61-latest/sla

Migration ProcedureChapter 6 Migrating and Upgrading From Previous Versions 97*** MAPPING_TREE - cn="dc=backend1,dc=com",cn=mapping tree,cn=

Migration Procedure98 Netscape Directory Server Installation Guide • December 2003ldiffile: /export/home/jdoe/50-latest/slapd-bart/config//ldif/backen

Migration ProcedureChapter 6 Migrating and Upgrading From Previous Versions 99 [12/Jun/2002:10:33:51 -0700] - import backend3: Finished scanning file