Installing Cisco Insight v2

Transcription

1 CHAPTER 2 Revised: December 22, 2010, This chapter contains the following sections: Downloading the Installation Package, page 2-2, page 2-2 Configuring the Application, page 2-8 Checking the Installation, page 2-9 Un-installing Cisco Insight v2, page 2-10 Set Up and Installation for HA Scenario, page 2-14 Enabling HTTPS, page 2-14 The Cisco Insight software is distributed as an archive file available at Packages are provided to the users per platform that contains: Cisco Insight v2 software WEB server (Apache Tomcat) MySQL v5.1 Database. 2-1

2 Downloading the Installation Package Chapter 2 Downloading the Installation Package This section describes how to download and extract the image of Cisco Insight v2. Step 3 To download the latest software package, see Copy the file on the file system of the destination server. Connect as root on the server and extract the downloaded.zip file with the following command: Shell> unzip ciscoinsight-v200-b14-solaris9-sparc-64.zip Packages for Red Hat Enterprise Linux 5: ciscoinsight-v200-b14-installer-linux5-32.zip ciscoinsight-v200-b14-installer-linux5-64.zip Packages for Solaris 9: ciscoinsight-v200-b14-installer-solaris9-sparc-32.zip ciscoinsight-v200-b14-installer-solaris9-sparc-64.zip ciscoinsight-v200-b14-installer-solaris9-intel-32.zip Packages for Solaris 10: ciscoinsight-v200-b14-installer-solaris10-sparc-32.zip ciscoinsight-v200-b14-installer-solaris10-sparc-64.zip ciscoinsight-v200-b14-installer-solaris10-intel-32.zip ciscoinsight-v200-b14-installer-solaris10-intel-64.zip During the installation process, the script checks if all the required software components are available and compliant with the installation of Cisco Insight v2. Depending on the availability of an existing MySQL v5.1 Server's installation, the script can handle the any of the following scenarios: Full Installation: The server is compliant with the HW and SW requirements, but it is missing all Cisco Insight software components: the MySQL database server, the Apache-Tomcat web server, and the Java Runtime Environment. Integration with an existing MySQL v5.1 Server: A MySQL 5.1 database has been previously installed and is being populated by one or more Cisco SCMS Collection Managers that receive RDRs from SCE devices. The Apache Tomcat web server and the Java Runtime Environment must not be present on the host: the script will install the appropriate packages. In the first scenario a full installation will be performed. The script will install all required packages and start all application's processes. If the script detects an existing installation of MySQL v5.1 Server, the second scenario is automatically chosen. The process will ask to install Apache Tomcat and then will populate the existing database schema with Cisco Insight's additional tables. Eventually, it will install the Java Runtime Environment and the Insight web application. 2-2

3 Chapter 2 Full Installation In this scenario, a full installation will be performed. The script will install all required components and start all application's processes. The script checks the server requirements and installs Apache-Tomcat web server, MySQL Database server, the JRE and the Cisco Insight v2 software. Locate and run the Installer package. cd <directory where installer was extracted>./install.sh Similar to the following will appear on your screen: Shell> cd /root/installer Shell>./install.sh Start... The script will ask you to install JRE6 only if it does not find JRE6 installed on the machine. A question similar to the following will appear on your screen: Do you want to install JRE6? [Y/N] (default Y): The users may face any of the below mentioned scenarios: Scenarios If user presses enter If user press N. Resolution Installer script will install the JRE6. If it is not able to install JRE6 then it will exit the installation procedure. Installer needs JRE6 to install the application and would quit the installation procedure giving a message. Step 3 The script asks you to install MySQL database server. A question similar to the following will appear on your screen: Do you want to install MySQL server? [Y/N] (default Y): The users may face any of the below mentioned scenarios: Scenarios Resolution The system does not have MySQL 5.1. Press Enter to confirm installation and continue with Step 4. The system already has the MySQL 5.1. Follow instructions mentioned in Integration with an existing MySQL v5.1 Server For any issues in connecting to MySQL server, see section Troubleshooting "MySQL start-up/connectivity problem" in the chapter on troubleshooting. 2-3

4 Chapter 2 Step 4 The script asks you to enter the mysql data directory for MySQL server. A question similar to the following will appear on your screen: Enter MySQL data directory applicable for your installation (example /opt/mysql-data): The users may face any of the below mentioned scenarios: Scenarios User enter /opt/mysql-data and presses enter User doesn't give any value and presses enter Resolution The script will install mysql and will use the given input as data directory The script will keep asking same question and would not proceed with the installation until valid input is entered. Step 5 The script asks you to create a new user for installation. A question similar to the following will appear on your screen: Do you want to create a new system user for installation? [Y/N] (default Y): The users may face any of the below mentioned scenarios: Scenarios You want to create a new user. Resolution Press Enter. Type the new user and press Enter Don't want to create a new user The script will create 'insight' as your default username. If the user already exists the script will keep asking the same question and won't proceed with the installation until valid input in entered. 2-4

5 Chapter 2 Step 6 The script starts the installation of JRE6 and MySQL database server on your system. Similar to the following will appear on your screen: Sun Microsystems, Inc. Binary Code License Agreement for the JAVA SE RUNTIME ENVIRONMENT (JRE) VERSION 6 and JAVAFX RUNTIME VERSION 1 Do you agree to the above license terms? [yes or no] Unpacking... Checksumming... Extracting... UnZipSFX 5.50 of 17 February 2002, by Info-ZIP (Zip-Bugs@lists.wku.edu). inflating: jre-6u13-linux-i586.rpm Preparing... ################################################## jre ################################################## Unpacking JAR files... rt.jar... jsse.jar... charsets.jar... localedata.jar... plugin.jar... javaws.jar... deploy.jar... Done. Preparing... MySQL-client-advanced ################################################## Preparing... ################################################## MySQL-server-advanced ################################################## PLEASE REMEMBER TO SET A PASSWORD FOR THE MySQL root USER! To do so, start the server, then issue the following commands: /usr/bin/mysqladmin -u root password 'new-password' /usr/bin/mysqladmin -u root -h cisco password 'new-password' Alternatively you can run: /usr/bin/mysql_secure_installation which will also give you the option of removing the test databases and anonymous user created by default. This is strongly recommended for production servers. See the manual for more instructions. Starting MySQL.[ OK ] Giving mysqld 2 seconds to start Starting MySQL^[[60G[^[[0;32m OK ^[[0;39m] echo "In order to remove completely MySQL server, you need to execute the uninstall.sh script located under user home directory."creating user [test] Default password is same as the username Please change the password for user test by giving below command passwd test Proceeding to configuration Enter the Insight local database host name (default is localhost): Enter the Insight local database port (default is 3306): Enter the report template directory (default is /home/[user home directory]/insightv2/apache-tomcat /webapps/insight/web-inf/classes/conf/template/): Enter the resource bundle directory (default is /home/[user home directory]/insightv2/apache-tomcat /webapps/insight/web-inf/classes/conf/messagebund le/): 2-5

6 Chapter 2 The properties file with these configurations is created at: /home/[user home directory]/insightv2/apache-tomcat /webapps/insight/web-inf/classes/conf/insight.pro perties CONGRATS!! Installation finished To re-configure the application please execute config.sh in the [user home directory]/insightv2/bin To uninstall the application please execute uninstall.sh in the [user home directory]/insightv2/bin To bundle the logs please execute backup.sh in the [user home directory]/insightv2/bin To bundle the logs please execute backup.sh in the [user home directory]/insightv2/bin The default password of MySQL root user is set to password by Insight v2 installation process. Ignore the password changing instructions printed out by the MySQL RPM installation. To change the default password of MySQL root user follow next step. Step 7 Change the password for MySQL root user. /usr/bin/mysqladmin -u root -ppassword password 'new-password' /usr/bin/mysqladmin -u root -h cisco -ppassword password 'new-password' Integration with an existing MySQL v5.1 Server If the script detects an existing installation of MySQL v5.1 Server, the second scenario is automatically chosen. The process will ask to install Apache Tomcat and then will populate the existing database schema with Cisco Insight's additional tables. Eventually, it will install the Java Runtime Environment and the Cisco Insight v2 application. As the MySQL database is already installed, the script needs to know the password of MySQL's root account. Make sure the existing mysql configuration supports following parameters lower_case_table_names=1 character-set-server=utf8 2-6

7 Chapter 2 To install the Cisco Insight v2 software, follow the procedure mentioned below: Locate and run the Installer package. cd <directory where installer was extracted>./install.sh Similar to the following will appear on your screen: Shell> cd /root/installer Shell>./install.sh Start... The script will ask you to install JRE6 only if it does not find JRE6 installed on the machine. A question similar to the following will appear on your screen: Do you want to install JRE6? [Y/N] (default Y): The users may face any of the below mentioned scenarios: Scenarios If user presses enter If user presses N. Resolution Installer script will install the JRE6. If it is not able to install JRE6 then it will exit the installation procedure. Installer needs JRE6 to install the application and would quit the installation procedure giving a message. Step 3 The script asks you to create a new path for MySQL server. A question similar to the following will appear on your screen: An existing v5.1 MySQL installation was found on your system. Do you want to use it to install Cisco Insight? [Y/N] (default Y): The users may face any of the below mentioned scenarios: Scenarios If user presses enter If user enters N Resolution It will proceed with the installation as given below The script would stop the installation procedure giving out a proper message. If user presses enter to user existing mysql to install Cisco application: Enter the root password for MySQL: If user doesn't give any value and presses enter the script would stop the installation procedure giving out proper message. Enter schema name for insight local database: If user enters a database which already exists then script would stop the installation procedure giving out proper message. 2-7

8 Configuring the Application Chapter 2 Step 4 The script asks you to create a new user for installation. A question similar to the following will appear on your screen: Do you want to create a new system user for installation? [Y/N] (default Y): The users may face any of the below mentioned scenarios: Scenarios You want to create a new user. Resolution Press Enter. Type the new user and press Enter Don't want to create a new user The script will create 'insight' as your default username. Step 5 If the user already exists the script will keep asking the same question and won't proceed with the installation until valid input is entered. The script starts the installation process on your system. After successful completion of installation, ensure to configure the application as per your environment before using it. Configuring the Application To configure the Cisco Insight v2 software, follow the procedure mentioned below: Locate and run the Installer package. cd <user home-dir>/insightv2/bin./config.sh Similar to the following will appear on your screen: Shell> cd <user home-dir>/insightv2/bin Shell>./config.sh Start... The script asks user to enter different application configuration parameter related to local DB. Following parameters need to be configured: Enter the Insight local database host name (default is localhost): Enter the Insight local database port (default is 3306): Enter the report template directory (default is /home/test/insightv2/apache-tomcat /webapps/insight/web-inf/classes/conf/template/): Enter the resource bundle directory (default is /home/test/insightv2/apache-tomcat /webapps/insight/web-inf/classes/conf/messagebund le/): 2-8

9 Chapter 2 Checking the Installation The properties file with these configurations is created at: /home/test/insightv2/apache-tomcat /webapps/insight/web-inf/classes/conf/insight.pro perties Starting and Stopping the Application The following procedure should be followed to start & stop the application: User root should run /etc/init.d/tomcat-[user] or service tomcat-[user] To start the application invoke following shell script: /etc/init.d/tomcat-insight start or service tomcat-insight start To stop the application invoke following shell script: /etc/init.d/tomcat-insight stop or service tomcat-insight stop The same script (/etc/init.d/tomcat-test) is used to start tomcat automatically in case machine on which tomcat is running is rebooted. For any issues in starting the application, see the Troubleshooting chapter. Checking the Installation Once the application has been installed on server, the administrator should verify connectivity to the application. The following procedure should be followed to check if the application is working fine: Start the application by following steps given in Starting and Stopping the Application section. Run the Cisco Insight v2 application by entering the server IP on the browser. 2-9

10 Un-installing Cisco Insight v2 Chapter 2 On running the application, similar to the following displays on your screen: Figure 2-1 Login Page Step 3 The account created after the initial set-up has the Super Admin privileges. The administrator can login the application by entering the username and password as cisco / cisco. Un-installing Cisco Insight v2 The Cisco Insight v2 users can un-install the application. The following Packages get Un- Installed: Cisco Insight v2 software Apache-Tomcat web server (if it is installed during installation) MySQL Server (if it is installed during installation) JRE6 (if it is installed during installation) The following procedure should be followed to uninstall the application: Login with the root Run the uninstall script from the home directory of the user created during the installation. Assuming at the time of installation new user created was test. cd /home/test/insightv2/bin./uninstall.sh Similar to the following will appear on your screen: Shell> cd /home/test/insightv2/bin Shell>./uninstall.sh This would remove the Insight v2 Application and the corresponding database. If you wish to take a backup of the database schema, quit the un-installation and do so now. 2-10

11 Chapter 2 Un-installing Cisco Insight v2 Do you want to continue with un-installation? [Y/N] (default Y): If user enters N the wizard won't un-install the application and would quit the un-installation procedure If user enters Y then wizard would stop the tomcat, delete the user home directory and the database schema Stopping Tomcat Using CATALINA_BASE: /home/test/insightv2/apache-tomcat Using CATALINA_HOME: /home/test/insightv2/apache-tomcat Using CATALINA_TMPDIR: /home/test/insightv2/apache-tomcat /temp Using JRE_HOME: /usr Killing: 3107 deleting user test Running the uninstall.sh without any parameters will only uninstall the Insight v2 application and will not remove the MySQL and Java Runtime Environment. To un-install Insight v2 application, MySQL and JRE installed during the installation procedure, run the "uninstall.sh" with the parameters as:./uninstall.sh java mysql This will remove java and mysql from the machine if it was the same user who installed the mysql and java at the time of installation of Cisco Insight application In case MySQL (as in case of Solaris install) or JRE are not installed by the Insight v2 installer, they will not be removed even using the parameters. For Solaris, please run uninstall.sh from outside the user home directory Example:- /opt/test/insightv2/bin/uninstall.sh In case tomcat was already stopped (either manually or tomcat process was killed) then the result of uninstall.sh script would be as following. Stopping Tomcat Using CATALINA_BASE: /home/test/insightv2/apache-tomcat Using CATALINA_HOME: /home/test/insightv2/apache-tomcat Using CATALINA_TMPDIR: /home/test/insightv2/apache-tomcat /temp Using JRE_HOME: /usr Nov 22, :11:43 PM org.apache.catalina.startup.catalina stopserver SEVERE: Catalina.stop: java.net.connectexception: Connection refused at java.net.plainsocketimpl.socketconnect(native Method) at java.net.plainsocketimpl.doconnect(unknown Source) at java.net.plainsocketimpl.connecttoaddress(unknown Source) at java.net.plainsocketimpl.connect(unknown Source) at java.net.sockssocketimpl.connect(unknown Source) at java.net.socket.connect(unknown Source) at java.net.socket.connect(unknown Source) at java.net.socket.<init>(unknown Source) at java.net.socket.<init>(unknown Source) at org.apache.catalina.startup.catalina.stopserver(catalina.java:422) at sun.reflect.nativemethodaccessorimpl.invoke0(native Method) at sun.reflect.nativemethodaccessorimpl.invoke(unknown Source) at sun.reflect.delegatingmethodaccessorimpl.invoke(unknown Source) at java.lang.reflect.method.invoke(unknown Source) 2-11

12 Un-installing Cisco Insight v2 Chapter 2 at org.apache.catalina.startup.bootstrap.stopserver(bootstrap.java:337) at org.apache.catalina.startup.bootstrap.main(bootstrap.java:415) Killing: 3107 /home/test/insightv2/apache-tomcat /bin/catalina.sh: line 342: kill: (3107) - No such process deleting user test As wizard was trying to stop the tomcat which was not running, it prompted these lines. So, please ignore these lines. Re-installing Cisco Insight v2 The Cisco Insight v2 users can re-install the application. The following procedure should be followed to reinstall the application: Do the un-installation steps. For un-installation refer to section Un-installing Cisco Insight v2 section on page Do the Installation steps. For installation refer to section section on page 2-2. on Solaris Installation of Cisco Insight v2 on Solaris is similar to installation on Linux based system. Only difference is that MySQL has to be manually installed before running the installation procedure. Steps for Cisco Insight application installation on Solaris: Please make sure MySQL instance is not running and the MySQL is installed under "/opt/mysql" directory. To stop the running instance, use the following command: /etc/init.d/mysql stop Also kill any process connected on port 3306 netstat -an fgrep 3306 If there is any output of above command, then to find out the PID of the process which is connected to port 3306, use the command as: lsof -i tcp:3306 Kill the PID given by output of the above command by giving following command kill -9 [PID] Go to directory where you have extracted the installer and give following command gzip -d.pkgrpm/mysql-advanced solaris9-sparc-64bit.pkg.gz Create the system user for mysql using the following command: groupadd mysql useradd -g mysql mysql 2-12

13 Chapter 2 Un-installing Cisco Insight v2 Execute following command: pkgadd -d.pkgrpm/mysql-advanced solaris9-sparc-64bit.pkg Following question is asked to install mysql on Solaris: The following packages are available: 1 mysql MySQL Advanced Server (Commercial) (sun4u) Select package(s) you wish to process (or 'all' to process all packages). (default: all) [?,??,q]: The selected base directory </opt/mysql> must exist before installation is attempted. Do you want this directory created now [y,n,?,q] This option is omitted if /opt/mysql already exists. Under some platforms, MySQL installation asks for path to base directory. Ensure to give /opt/mysql as the input to this question. This package contains scripts which will be executed with super-user permission during the process of installing this package. Do you want to continue with the installation of <mysql> [y,n,?] After MySQL installation execute following commands chown -Rh root:mysql /opt/mysql chgrp -Rh mysql /opt/mysql Go to directory where you have unzipped the Insight v2.0 installer cd /root/installer cp -f.pkgrpm/my_solaris.cnf /etc/mytemp.cnf mv -f /etc/mytemp.cnf /etc/my.cnf cp -f.pkgrpm/mysql /opt/mysql/mysql/scripts cp -f.pkgrpm/mysql /etc/init.d/mysql /opt/mysql/mysql/scripts/mysql_install_db --user=mysql --basedir=/opt/mysql/mysql --datadir=/opt/mysql/mysql/data --defaults-file=/etc/my.cnf chown -Rh root:mysql /opt/mysql chown -Rh mysql:root /opt/mysql/mysql/data cp /opt/mysql/mysql/bin/my_print_defaults /usr/bin/ chown root:root /etc/init.d/mysql chmod 775 /etc/init.d/mysql /etc/init.d/mysql start /opt/mysql/mysql/bin/mysqladmin -u root -h [HOSTNAME] password 'password' /opt/mysql/mysql/bin/mysqladmin -u root -h localhost password 'password' where HOSTNAME is the host on which mysql is running Go to directory where you have unzipped the Insight v2.0 installer and execute install.sh cd /root/installer./install.sh It will ask you following question: Do you want to install JRE6? [Y/N] (default Y): Do you want to create a new system user for installation? [Y/N] (default Y): After installation go to <user home directory>/insightv2/bin and execute config.sh to re-configure the application cd /opt/test/insightv2/bin./config.sh 2-13

14 Set Up and Installation for HA Scenario Chapter 2 To start/stop tomcat use following command /etc/init.d/tomcat-{user-created} start /etc/init.d/tomcat-{user-created} stop During un-installation, to manually uninstall the MySQL, remove mysql package and related directories using the following commands: /etc/init.d/mysql stop pkgrm mysql rm -f /etc/init.d/mysql rm -rf /opt/mysql rm -rf /var/run/mysqld/ rm -rf /var/lib/mysql/ rm -f /var/log/mysqld.log rm -f /etc/my.cnf userdel mysql groupdel mysql Set Up and Installation for HA Scenario In HA scenario redundant setup in Active Standby mode is supported. Only one server will be active at a time. Only Cold-failover is supported. The following procedure should be followed for HA setup & Installation: Setup both instances separately using steps given in section on page 2-2. Step 3 Configure an external Load Balancer (LB) to only active instance. It is recommended to use software LB like Apache HTTP Server with mod-jk connector. Sample configuration for Apache HTTP Server can be found in Appendix A. MySQL Replication needs to be setup. When Primary instance fails, LB needs to be manually pointed to secondary instances. Slave MySQL needs to be made the new Master and old Master when it is brought back up needs to be done in slave configuration. Enabling HTTPS If a Load Balancer (LB) is used in front of the apache tomcat server then that LB should support https. Procedure Go to the User's home directory. Assume user created at the time of installation was insight. cd /home/insight Go to the tomcat bin directory. cd /Insightv2/apache-tomcat /bin 2-14

15 Chapter 2 Enabling HTTPS Step 3 Create a certificate keystore by executing the following command: $JAVA_HOME/bin/keytool -genkey -alias insight -keypass insight -keystore insight.bin -storepass insight Similar to the following will appear on your screen: What is your first and last name? [Unknown]: Your Name What is the name of your organizational unit? [Unknown]: Your BU What is the name of your organization? [Unknown]: Your Organization What is the name of your City or Locality? [Unknown]: Your City What is the name of your State or Province? [Unknown]: Your State What is the two-letter country code for this unit? [Unknown]: Your Country Is CN=Your Name, OU=Your BU, O=Your Organization, L=Your City, ST=Your State, C=Your Country correct? [no]: yes This will generate a keystore file named as insight.bin in tomcat bin directory Make sure that keypass and storepass password are be same. Step 4 Step 5 Go to the conf directory inside apache tomcat directory. cd../conf Open server.xml file inside conf directory. Find the http connector & comment it out. Now find the https connector, uncomment the https connector & save the file. https connector will be similar to the following <Connector port="9444" protocol="org.apache.coyote.http11.http11nioprotocol" SSLEnabled="true" maxthreads="150" scheme="https" secure="true" clientauth="false" sslprotocol="tls" keystorefile="${user.home}/insightv2/apache-tomcat /bin/insight.bin" keystorepass="insight" /> This is an optional step only required if you wish to run Cisco Insight in a secure mode. After configuring SSL on tomcat, hit following URL on the browser IP>:9444/ This will ask you to add the exception, accept the certificate for the first time. 2-15

16 Enabling HTTPS Chapter