Tivoli Distributed Monitoring for Active Directory Release Notes. Version 3.7

Transcription

1 Tivoli Distributed Monitoring for Active Directory Release Notes Version 3.7

2

3 Tivoli Distributed Monitoring for Active Directory Release Notes Version 3.7

4 Tivoli Distributed Monitoring for Active Directory Copyright Notice Copyright IBM Corporation All rights reserved. May only be used pursuant to a Tivoli Systems Software License Agreement, an IBM Software License Agreement, or Addendum for Tivoli Products to IBM Customer or License Agreement. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any computer language, in any form or by any means, electronic, mechanical, magnetic, optical, chemical, manual, or otherwise, without prior written permission of IBM Corporation. IBM Corporation grants you limited permission to make hardcopy or other reproductions of any machine-readable documentation for your own use, provided that each such reproduction shall carry the IBM Corporation copyright notice. No other rights under copyright are granted without prior written permission of IBM Corporation. The document is not intended for production and is furnished as is without warranty of any kind. All warranties on this document are hereby disclaimed, including the warranties of merchantability and fitness for a particular purpose. U.S. Government Users Restricted Rights Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corporation. Trademarks IBM, Tivoli, the Tivoli logo, and Tivoli Enterprise Console are trademarks or registered trademarks of International Business Machines Corporation or Tivoli Systems Inc. in the United States, other countries, or both. Microsoft, Windows, and Windows NT are trademarks of Microsoft Corporation in the United States, other countries, or both. Other company, product, and service names may be trademarks or service marks of others. Notices References in this publication to Tivoli Systems or IBM products, programs, or services do not imply that they will be available in all countries in which Tivoli Systems or IBM operates. Any reference to these products, programs, or services is not intended to imply that only Tivoli Systems or IBM products, programs, or services can be used. Subject to valid intellectual property or other legally protectable right of Tivoli Systems or IBM, any functionally equivalent product, program, or service can be used instead of the referenced product, program, or service. The evaluation and verification of operation in conjunction with other products, except those expressly designated by Tivoli Systems or IBM, are the responsibility of the user. Tivoli Systems or IBM may have patents or pending patent applications covering subject matter in this document. The furnishing of this document does not give you any license to these patents. You can send license inquiries, in writing, to the IBM Director of Licensing, IBM Corporation, North Castle Drive, Armonk, New York , U.S.A. ISO 9001 Certification This product was developed using an ISO 9001 certified quality system. Certification has been awarded by Bureau Veritas Quality International (BVQI) (Certification No. BVQI / A). BVQI is a world leader in quality certification and is currently recognized by more than 20 accreditation bodies.

5 Contents Release Notes... 1 Accessing Publications Online... 1 Ordering Publications... 2 Providing Feedback about Publications... 2 Contacting Customer Support... 3 Features and Benefits... 3 System Requirements... 6 Software Requirements... 6 Supported Platforms... 7 Hardware Requirements Installation Notes... 7 Installing the Product... 7 Before You Begin... 8 Installing with Tivoli Software Installation Service Installing from the Tivoli Desktop... 9 Installing from the Command Line Uninstalling the Product Accessing the Tivoli Distributed Monitoring for Active Directory Documentation on the Product CD Known Product Defects, Limitations, and Workarounds Documentation Changes Tivoli Distributed Monitoring for Active Directory Release Notes iii

6 iv Version 3.7

7 1 Release Notes 1. Release Notes This Release Notes document provides important information about Tivoli Distributed Monitoring for Active Directory, Version 3.7. These notes are the most current information for the product and take precedence over all other documentation. Please review these notes thoroughly before installing or using this product. These release notes include the following topics: Features and Benefits System Requirements Installation Notes Accessing the Tivoli Distributed Monitoring for Active Directory Documentation on the Product CD Known Product Defects, Limitations, and Workarounds Documentation Changes Accessing Publications Online You can access many Tivoli publications online at the Tivoli Customer Support Web site: Tivoli Distributed Monitoring for Active Directory Release Notes 1

8 These publications are available in PDF or HTML format, or both. Translated documents are also available for some products. To access most of the documentation, you need an ID and password. If necessary, you can obtain these from the following Web site: Ordering Publications You can order many Tivoli publications online at the following Web site: You can also order by telephone by calling one of these numbers: In the United States: In Canada: In other countries, for a list of telephone numbers, see the following Web site: Providing Feedback about Publications We are very interested in hearing about your experience with Tivoli products and documentation, and we welcome your suggestions for improvements. If you have comments or suggestions about our products and documentation, contact us in one of the following ways: Send an to pubs@tivoli.com. Complete our customer feedback survey at the following Web site: 2 Version 3.7

9 Contacting Customer Support If you have a problem with any Tivoli product, you can contact Tivoli Customer Support. See the Tivoli Customer Support Handbook at the following Web site: The handbook provides information about how to contact Tivoli Customer Support, depending on the severity of your problem, and the following information: Registration and eligibility Telephone numbers and addresses, depending on the country you are in What information you should gather before contacting support 1. Release Notes Features and Benefits Tivoli Distributed Monitoring for Active Directory 3.7 has the following features and benefits: Feature Integration with Tivoli Framework and Distributed Monitoring for Windows Benefit Tivoli environment and infrastructure Familiar user-interface Ability to monitor Windows 2000 domain controllers as Tivoli endpoints Ability to monitor Windows 2000 Domain Name System (DNS) and Windows 2000 Dynamic Host Configuration Protocol (DHCP) servers as Tivoli endpoints Ability to send events to the Tivoli Enterprise Console Tivoli Distributed Monitoring for Active Directory Release Notes 3

10 Feature Integration with Tivoli Framework and Distributed Monitoring for Windows Resource models tailored to Active Directory Benefit Ability to send events to the Tivoli Business System Manager console Ability to log data for analysis and display Ability to view online and historical data on the Health Console Ability to set thresholds Ability to use new resource models together with existing Distributed Monitoring for Windows resource models, such as resource models in the System category. Ability to restart Windows services through built-in actions Ability to monitor the performance, availability, and health of Active Directory key services and objects such as: Domain controllers Allocation of Flexible Single Master Operations (FSMO) roles Replication efficiency within and between multiple sites DHCP server DNS server 4 Version 3.7

11 Feature Error-handling capability Benefit Ability to display error messages on the Health Console about the following: Missing prerequisites on endpoints The status of resource models Configuration errors that can cause resource models to stop 1. Release Notes Tivoli Distributed Monitoring for Active Directory Release Notes 5

12 System Requirements The following sections list the software and hardware requirements for installing Tivoli Distributed Monitoring for Active Directory on Tivoli servers. Software Requirements Distributed Monitoring for Active Directory requires the following software: Distributed Monitoring for Windows 3.7 Distributed Monitoring for Windows patches 3.7-DMW-0001, and 3.7-DMW-0002 One of the following: v Tivoli Framework with patches TMF-0002, and TMF-0004 OR v Tivoli Framework 3.7 with patches 3.7-TMF-0006, 3.7-TMF-0012, and 3.7-TMF-0013 OR v Tivoli Framework Note: All Windows 2000 domain controllers on which resource models are running require the Windows 2000 Support Tools component to be installed. You can install this component from the Windows 2000 Server installation CD. For the prerequisites necessary to use the resource models, refer to the appropriate section in the Tivoli Distributed Monitoring for Active Directory Reference and the Tivoli Distributed Monitoring for Windows User s Guide. 6 Version 3.7

13 Supported Platforms Tivoli Distributed Monitoring for Active Directory supports Windows 2000 Server Edition and Windows 2000 Advanced Server Edition for endpoints. Both require Service Pack 1 or later, and Service Pack 2 is recommended. Hardware Requirements The following tables list the estimated disk space required for installing Tivoli Distributed Monitoring for Active Directory on Tivoli servers. The estimated disk space includes space for the binaries (bin), Lcf_bundles, and message catalogs. 1. Release Notes Binaries Lcf_bundles Message Catalogs 300 KB 500 KB 60 KB Installation Notes The minimum hardware requirements (CPU and RAM) for installing the product on Tivoli servers are the same as the minimum requirements for installing the Tivoli Framework. For information regarding the installation of the base product,tivoli Distributed Monitoring for Windows, refer to the Tivoli Distributed Monitoring for Windows User s Guide. Installing the Product Like its parent product, Distributed Monitoring for Windows, you can install Distributed Monitoring for Active Directory in the following ways: With the Tivoli Software Installation Service From the Tivoli desktop From the command line interface (CLI) Tivoli Distributed Monitoring for Active Directory Release Notes 7

14 Before You Begin Please read the following notes before you begin to install the product: Install this product only on Tivoli servers. Decide on which servers you are going to install the product. Ensure that the selected nodes meet the hardware requirements for the installation. Ensure that the selected nodes meet the software requirements for the installation. Ensure that you have administrator privileges to perform the installation. Back up your database before you begin to install the product. Installing with Tivoli Software Installation Service Tivoli Software Installation Service can install multiple Tivoli products on multiple systems in parallel. This Java-based product can install more products on more systems in much less time than the Framework s install facility. Software Installation Service performs product prerequisite checks and, if defined, user-specified prerequisite checks, ensuring as few install failures as possible. In most cases, failures occur only when machines are turned off or removed from the network. Software Installation Service also creates an installation repository into which you can import the installation image of one or more Tivoli products. You can import only those interpreter types needed in your environment, which saves disk space and import time. The installation repository is then the source of all your Tivoli installations. You can even share a single installation repository across multiple regions. Tivoli recommends that you upgrade the Tivoli Framework install facility in your current Tivoli installation by installing the Software Installation Service. If you are installing Tivoli products for the first time, install the Software Installation Service on the first managed node running an operating system that is supported by the Software 8 Version 3.7

15 Installation Service. After you have installed it, you can use the Software Installation Service product to install other Tivoli products. For details of the platforms on which the Software Installation Service can run, and for instructions on installing this product and using it to install other products, refer to the Tivoli Software Installation Service User s Guide and the Tivoli Software Installation Service Release Notes. 1. Release Notes Installing from the Tivoli Desktop To install the product from the Tivoli desktop, perform the following steps: 1. Insert the product CD into the CD-ROM drive. 2. Start the Tivoli desktop. 3. From the Desktop menu select Install > Install Product. The Install Product dialog opens. 4. If Distributed Monitoring for Active Directory 3.7 is displayed in the Select Product to Install scrolling list, go to step 8. OR If Distributed Monitoring for Active Directory 3.7 is not displayed in the Select Product to Install scrolling list, continue with step Click Select Media. The File Browser dialog opens. 6. Type or select the location of the Tivoli CD in the Path Name field by completing one of the following tasks: Type the complete path to the /cdrom directory in the CD in the Path Name field. (Use forward slashes to specify the path.) Browse the file system by completing the following steps: a. In the Hosts scrolling list, select the host (or drive) on which the CD is mounted. Choosing a host updates the Directories scrolling list to show the directories (under root) of the host you selected. Tivoli Distributed Monitoring for Active Directory Release Notes 9

16 b. In the Directories scrolling list, double-click the directory that contains the install media. Choosing a directory updates the Files list. 7. Click Set Media & Close. The Install Product dialog reopens. The Select Product to Install scrolling list shows the products that are available for installation. 8. Select the following product from the Select Product to Install scrolling list: Distributed Monitoring for Active Directory Ensure that the appropriate host is displayed in the Clients to Install On scrolling list. If it is not displayed, select the server on which you want to install the selected product from the Available Clients scrolling list, and use the left arrow to move the selected server to the Clients to Install On scrolling list. 10. Click Install to begin installing the product. The Product Install dialog opens. It provides a list of the operations to be performed and warns of any problems you might want to correct before installing. 11. Review the status information and click Continue Install. The Product Install dialog informs you when installation is complete. 12. Click Close. Installing from the Command Line Use the winstall command to install Distributed Monitoring for Active Directory from the command line. To install Distributed Monitoring for Active Directory on a server from a CD, enter the following command: winstall c path/cdrom -i index_file server where: path Specifies the complete path to the /cdrom directory in the CD. (Use forward slashes to specify the path.) 10 Version 3.7

17 index_file Specifies the product index file from which Distributed Monitoring for Active Directory is installed. This must be: TMNT_AD.IND server Distributed Monitoring for Active Directory will be installed on the server you specify. 1. Release Notes For more information about the winstall command, refer to the Tivoli Management Framework Reference Manual. Uninstalling the Product The Tivoli Management Framework provides the wuninst command to remove Tivoli applications from a specified node or from the entire region. You can use the wuninst command with the Distributed Monitoring for Active Directory product tag to remove the product from your servers. To uninstall Distributed Monitoring for Active Directory, enter the following command: wuninst tagname destination_target -rmfiles where: tagname Is the registered product tag for Distributed Monitoring for Active Directory that is provided by Tivoli: TMNT_AD destination_target Is the server from which you want to remove the product. For more information about command line syntax and usage of the wuninst command, refer to the following: Tivoli Management Framework Reference Manual Tivoli Management Framework Release Notes Server, Gateway, and Endpoint. Tivoli Distributed Monitoring for Active Directory Release Notes 11

18 Accessing the Tivoli Distributed Monitoring for Active Directory Documentation on the Product CD The Tivoli Distributed Monitoring for Active Directory Reference is stored in the following path on the product CD: Publication Tivoli Distributed Monitoring for Active Directory Reference Path Books/DMFAD37REF.pdf Known Product Defects, Limitations, and Workarounds This section describes known defects in this release of Tivoli Distributed Monitoring for Active Directory. Where applicable and known, suggested workarounds are identified. Note that this may not be a complete list of defects. 1. Tivoli Distributed Monitoring for Active Directory events have the source value always set to TMNT. Hence, you can create the related Tivoli Enterprise Console event source for Tivoli Distributed Monitoring for Active Directory events, by using the wcrtsrc command. 2. The Tivoli Enterprise Console rule dmfad.rls is provided for correlating indications that are issued because the same problem has been detected and sent by multiple hosts. The repeat_count TEC key records incorrect values for the number of instances. (CMVC 16274). For more information about this rule, see Documentation Changes on page For the Active Directory integrated DNS resource model there is an additional prerequisite. For details, see Documentation Changes on page 13 (CMVC 16284). 12 Version 3.7

19 Documentation Changes The following changes must be made to the Distributed Monitoring for Active Directory Reference: 1. On page 22, add the following new section: Tivoli Enterprise Console Rules for Aggregating Events Tivoli Distributed Monitoring for Active Directory provides an additional set of Tivoli Enterprise Console rules to enable aggregation of some indications sent by the Domain controller availability resource model. You can use them to aggregate indications at both the domain and forest levels. The rule definitions are in the dmfad.rls file in the $BINDIR/TMNT_TEC directory. The following indications can be aggregated at domain level: 1. Release Notes No PDC master role in the domain No RID master role in the domain No infrastructure master role in the domain The PDC master role in the domain cannot be reached The RID master role in the domain cannot be reached The infrastructure master role in the domain cannot be reached The following indications can be aggregated at forest level: No schema master role in the forest No domain naming master role in the forest The schema master role for the forest cannot be reached The domain naming master role for the forest cannot be reached Because this resource model should be distributed to all domain controllers in the forest, it is possible that one of the above indications is issued by the following: Tivoli Distributed Monitoring for Active Directory Release Notes 13

20 Two or more domain controllers in the same domain (indication of type 1) Two or more domain controllers in the same forest (indication of type 2) If dmfad.rls is installed and activated, the indication is displayed only once on the Tivoli console, that is the first time it occurs. If another domain controller issues the same event in the time window in which the Tivoli Enterprise Console rules trigger the indication, an event flag called repeat_count is increased by one. The value of repeat_count can be displayed from the event message on the Tivoli console. Note: The default time window is 10 minutes for all indications to be aggregated. It can be modified with the set_timer command. It should be kept below 3 or 4 times the value set for the cycle time of this resource model. 2. On page 48, after Inter-Site Replication Resource Model - Overview, add the following section: Effective Use of This Resource Model This resource model is useful for monitoring the final results of the inter-site replication process. The inter-site replication process is normally a scheduled task within an Active Directory environment. If this is the case, this resource model should be scheduled to run after the completion of the inter-site replication process so that it can collect data about the result of the process itself. To schedule the resource model, add scheduling information from the GUI profile dialog. The scheduler controls the overall period for monitoring a resource. For information about the scheduler and instructions for adding scheduling information, refer to the Tivoli Distributed Monitoring for Windows User s Guide. 14 Version 3.7

21 3. On page 54, after Inter-Site Replication Traffic Resource Model - Overview, add the following section: Effective Use of This Resource Model This resource model is useful for monitoring the performance of the inter-site replication process itself. The inter-site replication process is normally a scheduled task within an Active Directory environment. If this is the case, it is good practice to have this resource model running while the inter-site replication process is running. To schedule the resource model, add scheduling information from the GUI profile dialog. The scheduler controls the overall period for monitoring a resource. For information about the scheduler and instructions for adding scheduling information, refer to the Tivoli Distributed Monitoring for Windows User s Guide. 1. Release Notes 4. On page 76, change the information contained in Resource model distribution as follows: If you are using Active Directory-integrated DNS, distribute this resource model to one domain controller in the same domain where the DNS server is located. If there is more than one DNS server servicing your forest, distribute this resource model to one domain controller for each domain where a DNS server is located. Distribute the resource model as follows: If the domain controller to which you distributed the resource model is also a Global Catalog, all information about the other domains in the forest can be retrieved locally and there is no need to enable Tivoli to access remote resources through the wlcftap command. If the domain controller to which you distributed the resource model it is not a Global Catalog, then this domain controller will need to bind a Global Catalog to retrieve information. In this case you must run the wlcftap command on that endpoint to let Tivoli access the remote Global Catalog. For details of how to run the wlcftap command, see item 5, Prerequisites, in this list. Tivoli Distributed Monitoring for Active Directory Release Notes 15

22 5. On page 76, add the following new section: Prerequisites If the domain controller to which you distributed the resource model it is not a Global Catalog, you must run the wlcftap command on that endpoint as follows: wlcftap -r domain-name/user-name where: user-name Identifies a user that is a member of the Domain Users group and can log into the domain on this domain controller. 16 Version 3.7

23

24 GI