Configuring SDS VA Directory Server with remote DB2 database Companion Document. Document version 1.0

Transcription

1 Configuring SDS VA Directory Server with remote DB2 database Companion Document Document version 1.0

2 Document change history Changed by Doc Date Changes Version Ramamohan T. Reddy 1.0 1/17/2017 Initial version IBM Security Directory Suite Page 2

3 Contents 1. Introduction SDS Installation - Virtual Machine setup SDS Installation - Virtual Appliance setup SDS Installation - Required Fixes Remote system DB2 base level installation on AIX Remote system DB2 base level installation on Linux Remote system DB2 base level installation on Windows Remote system DB2 Fix Pack installation on AIX Remote system DB2 Fix Pack installation on AIX Remote system DB2 Fix Pack installation on Windows Apply DB2 license on AIX Apply DB2 license on Linux Apply DB2 license on Windows Download and Extract idscfgremotedb.zip file DB2 instance user creation Create instance and database using idscfgremotedb Create and configure changelog database using idscfgremotedb Remote system db2 instance and db config using custom commands Configuration on SDS VA to connect to remote database Data import / export methods IBM Security Directory Suite Page 3

4 1. Introduction This companion document provides details for the steps provided in the presentation OpenMic- ISDS801_RemoteDB2Config-presentation-17Jan2017-v1.pdf. 2. SDS Installation - Virtual Machine setup Start with Create New Virtual Machine on your VMWare ESXi Select Custom configuration Click Next button: IBM Security Directory Suite Page 4

5 Select a name and location for the virtual machine click Next : Select a Host / Cluster for the virtual machine click Next : IBM Security Directory Suite Page 5

6 Select a resource pool click Next : Select storage for virtual machine files click Next : IBM Security Directory Suite Page 6

7 Select Virtual Machine Version to be 8 and then click Next : Select Linux as Guest Operation System and Other 2.6.x Linux (64-bit) as version click Next : IBM Security Directory Suite Page 7

8 Select number of CPUs then click Next : Select Memory size click Next : IBM Security Directory Suite Page 8

9 Create 3 Network Connections (NICs) choose either E1000 or VMXNET 3 as adapter click Next : Take default or customize SCSI Controller click Next : IBM Security Directory Suite Page 9

10 Select option Create a new virtual disk and click Next : Specify Disk size, for Provisioning and Location check with your VMware admin and choose accordingly then click Next : IBM Security Directory Suite Page 10

11 Select either defaults or customize per VMware admin suggestions then click Next : IBM Security Directory Suite Page 11

12 Review Settings Select Edit the virtual machine settings before click Continue : IBM Security Directory Suite Page 12

13 For CD/DVD select Connect at power on In this case the sds801-limited-edition.iso file is already uploaded to the datastore folder and its selected Click on Finish : Select the newly created virtual machine power on the virtual machine Click on Console : IBM Security Directory Suite Page 13

14 In the console Select Language and enter yes to proceed: After successful installation the following will be displayed: IBM Security Directory Suite Page 14

15 Goto Virtual Machine Settings CD/DVD Unselect/Uncheck Connected and Connect at power on options Click Finish : Now switch back to Console and hit Enter key: IBM Security Directory Suite Page 15

16 3. SDS Installation - Virtual Appliance setup After reboot the appliance console presents unconfigured.appliance login: prompt Enter admin for both login and Password: When prompted hit Enter key: Review license terms in 2 and 3 and then enter 4 to proceed to license acceptance: Enter 1 to agree and then press Enter key: When FIPS configuration is displayed (if really required then press 1) Otherwise simply Select n and press Enter key IBM Security Directory Suite Page 16

17 For Appliance Password select 1 and press Enter key: Enter old/default password admin and then a new password two times: After successful Password change Proceed to next section: For Host Name Configuration Select 1 then press Enter key: Provide Full Host Name: IBM Security Directory Suite Page 17

18 After hostname update proceed to next section: Configure at least 1 interface for appliance (remember we have 3 NICs 2 admin and 1 application) Provide a Manual/Static IPv4 address and corresponding configuration as per your network: IBM Security Directory Suite Page 18

19 After IP address update proceed to next section: To provide DNS Server select 1 and then press Enter key: Enter DNS IP address and then press Enter key: After DNS update proceed to next section: IBM Security Directory Suite Page 19

20 Review and update Time Zone (option 3) and date (option 2) as well as time (option 1) according to your date/time/timezone after time configuration proceed to next section: Review the Summary and press 1 and then Enter: IBM Security Directory Suite Page 20

21 After successful configuration the following is displayed: Reboot the system: IBM Security Directory Suite Page 21

22 4. SDS Installation - Required Fixes Apply Fix for Expired Default Certificates by using either manual steps from this tech note or using ISS-ISDS-IF0001.fixpack file here we are going to use later method: Connect to SDS 801 Virtual Appliance via Web LMI using browser and login as admin user: In LMI Web interface click on Manage and then on Fix Packs IBM Security Directory Suite Page 22

23 Click on Green + New button In the Add fix pack dialog box, click on Browse for fix pack IBM Security Directory Suite Page 23

24 Browse and select ISS-ISDS-IF0001.fixpack file then click on Save Configuration button After successful installation: Similarly install ISS-ISDS-IF0002.fixpack file. 5. Remote system DB2 base level installation on AIX On the AIX system - extract the file DB2_Svr_ _AIX.tar.gz: ==> gunzip -c DB2_Svr_ _AIX.tar.gz tar -xf - Launch db2 installer and proceed with installation: ==>./db2_install DBI1324W Support of the db2_install command is deprecated. For more information, see the DB2 Information Center. Default directory for installation of products - /opt/ibm/db2/v10.5 *********************************************************** IBM Security Directory Suite Page 24

25 Install into default directory (/opt/ibm/db2/v10.5)? [yes/no] yes Specify one of the following keywords to install DB2 products. SERVER CONSV CLIENT RTCL Enter "help" to redisplay product names. Enter "quit" to exit. *********************************************************** SERVER *********************************************************** Do you want to install the DB2 purescale Feature? [yes/no] no DB2 installation is being initialized. Total number of tasks to be performed: 47 Total estimated time for all tasks to be performed: 3533 second(s) Task #1 start Description: Checking license agreement acceptance Estimated time 1 second(s) Task #1 end Task #2 start Description: Base Client Support for installation with root privileges Estimated time 4 second(s) Task #2 end Task #3 start Description: Product Messages - English Estimated time 14 second(s) Task #3 end Task #4 start Description: Base client support Estimated time 406 second(s) Task #4 end Task #5 start Description: Java Runtime Support Estimated time 3 second(s) Task #5 end Task #6 start Description: Java Help (HTML) - English IBM Security Directory Suite Page 25

26 Estimated time 7 second(s) Task #6 end Task #7 start Description: Base server support for installation with root privileges Estimated time 7 second(s) Task #7 end Task #8 start Description: Global Secure ToolKit Estimated time 82 second(s) Task #8 end Task #9 start Description: Java support Estimated time 13 second(s) Task #9 end Task #10 start Description: SQL procedures Estimated time 3 second(s) Task #10 end Task #11 start Description: ICU Utilities Estimated time 42 second(s) Task #11 end Task #12 start Description: Java Common files Estimated time 18 second(s) Task #12 end Task #13 start Description: Base server support Estimated time 933 second(s) Task #13 end Task #14 start Description: Connect support Estimated time 3 second(s) Task #14 end Task #15 start Description: Relational wrappers common Estimated time 3 second(s) Task #15 end Task #16 start Description: DB2 data source support IBM Security Directory Suite Page 26

27 Estimated time 13 second(s) Task #16 end Task #17 start Description: Spatial Extender server support Estimated time 20 second(s) Task #17 end Task #18 start Description: IBM Software Development Kit (SDK) for Java(TM) Estimated time 286 second(s) Task #18 end Task #19 start Description: DB2 LDAP support Estimated time 4 second(s) Task #19 end Task #20 start Description: DB2 Instance Setup wizard Estimated time 20 second(s) Task #20 end Task #21 start Description: Integrated Flash Copy Support Estimated time 943 second(s) Task #21 end Task #22 start Description: Spatial Extender client Estimated time 4 second(s) Task #22 end Task #23 start Description: Communication support - TCP/IP Estimated time 3 second(s) Task #23 end Task #24 start Description: Tivoli SA MP Estimated time 300 second(s) Task #24 end Task #25 start Description: Base application development tools Estimated time 45 second(s) Task #25 end Task #26 start Description: DB2 Update Service Estimated time 4 second(s) IBM Security Directory Suite Page 27

28 Task #26 end Task #27 start Description: Parallel Extension Estimated time 3 second(s) Task #27 end Task #28 start Description: EnterpriseDB code Estimated time 4 second(s) Task #28 end Task #29 start Description: Replication tools Estimated time 62 second(s) Task #29 end Task #30 start Description: Sample database source Estimated time 4 second(s) Task #30 end Task #31 start Description: itlm Estimated time 3 second(s) Task #31 end Task #32 start Description: DB2 Text Search Estimated time 134 second(s) Task #32 end Task #33 start Description: Command Line Processor Plus Estimated time 4 second(s) Task #33 end Task #34 start Description: Informix data source support Estimated time 6 second(s) Task #34 end Task #35 start Description: Oracle data source support Estimated time 7 second(s) Task #35 end Task #36 start Description: First Steps Estimated time 3 second(s) Task #36 end IBM Security Directory Suite Page 28

29 Task #37 start Description: Product Signature for DB2 Server Edition Estimated time 7 second(s) Task #37 end Task #38 start Description: Guardium Installation Manager Client Estimated time 10 second(s) Task #38 end Task #39 start Description: Setting DB2 library path Estimated time 180 second(s) Task #39 end Task #40 start Description: Installing or updating DB2 HA scripts for IBM Tivoli System Automation for Multiplatforms (Tivoli SA MP) Estimated time 40 second(s) Task #40 end Task #41 start Description: Executing control tasks Estimated time 20 second(s) Task #41 end Task #42 start Description: Updating global registry Estimated time 20 second(s) Task #42 end Task #43 start Description: Starting DB2 Fault Monitor Estimated time 10 second(s) Task #43 end Task #44 start Description: Updating the db2ls link Estimated time 1 second(s) Task #44 end Task #45 start Description: Registering DB2 licenses Estimated time 5 second(s) Task #45 end Task #46 start Description: Setting default global profile registry variables Estimated time 1 second(s) Task #46 end IBM Security Directory Suite Page 29

30 Task #47 start Description: Initializing instance list Estimated time 5 second(s) Task #47 end Task #48 start Description: Registering DB2 Update Service Estimated time 30 second(s) Task #48 end Task #49 start Description: Updating global profile registry Estimated time 3 second(s) Task #49 end The execution completed successfully. For more information see the DB2 installation log at "/tmp/db2_install.log ". ==> /usr/local/bin/db2ls Install Path Level Fix Pack Special Install Number Install Date Installer UID /opt/ibm/db2/v Sun Jan 15 07:24: CST 0 6. Remote system DB2 base level installation on Linux On the Linux system - extract the file DB2_Svr_ _AIX.tar.gz: ==> gunzip -c DB2_Svr_ _Linux_x86-64.tar.gz tar -xf - Launch db2 installer and proceed with installation: [root@sdsrh7a server]# ls db2 db2checkcol_readme.txt db2checkcol.tar.gz db2ckupgrade db2_deinstall db2_install db2ls db2prereqcheck db2setup ibm_im installfixpack nlpack [root@sdsrh7a server]#./db2_install Requirement not matched for DB2 database "Server". Version: " ". Summary of prerequisites that are not met on the current system: DBT3514W The db2prereqcheck utility failed to find the following 32-bit library file: "/lib/libpam.so*". IBM Security Directory Suite Page 30

31 DBT3514W The db2prereqcheck utility failed to find the following 32-bit library file: "libstdc++.so.6". DBI1324W Support of the db2_install command is deprecated. For more information, see the DB2 Information Center. Default directory for installation of products - /opt/ibm/db2/v10.5 *********************************************************** Install into default directory (/opt/ibm/db2/v10.5)? [yes/no] yes Specify one of the following keywords to install DB2 products. SERVER CONSV EXP CLIENT RTCL Enter "help" to redisplay product names. Enter "quit" to exit. *********************************************************** SERVER *********************************************************** Do you want to install the DB2 purescale Feature? [yes/no] no Requirement not matched for DB2 database "Server". Version: " ". Summary of prerequisites that are not met on the current system: DBT3514W The db2prereqcheck utility failed to find the following 32-bit library file: "/lib/libpam.so*". DBT3514W The db2prereqcheck utility failed to find the following 32-bit library file: "libstdc++.so.6". DB2 installation is being initialized. Total number of tasks to be performed: 48 Total estimated time for all tasks to be performed: 1873 second(s) IBM Security Directory Suite Page 31

32 Task #1 start Description: Checking license agreement acceptance Estimated time 1 second(s) Task #1 end Task #2 start Description: Base Client Support for installation with root privileges Estimated time 3 second(s) Task #2 end Task #3 start Description: Product Messages - English Estimated time 14 second(s) Task #3 end Task #4 start Description: Base client support Estimated time 294 second(s) Task #4 end Task #5 start Description: Java Runtime Support Estimated time 155 second(s) Task #5 end Task #6 start Description: Java Help (HTML) - English Estimated time 7 second(s) Task #6 end Task #7 start Description: Base server support for installation with root privileges Estimated time 7 second(s) Task #7 end Task #8 start Description: Global Secure ToolKit Estimated time 59 second(s) Task #8 end Task #9 start Description: Java support Estimated time 13 second(s) Task #9 end Task #10 start Description: SQL procedures Estimated time 3 second(s) Task #10 end IBM Security Directory Suite Page 32

33 Task #11 start Description: ICU Utilities Estimated time 35 second(s) Task #11 end Task #12 start Description: Java Common files Estimated time 18 second(s) Task #12 end Task #13 start Description: Base server support Estimated time 468 second(s) Task #13 end Task #14 start Description: Control Center Help (HTML) - English Estimated time 13 second(s) Task #14 end Task #15 start Description: Connect support Estimated time 3 second(s) Task #15 end Task #16 start Description: Relational wrappers common Estimated time 3 second(s) Task #16 end Task #17 start Description: DB2 data source support Estimated time 6 second(s) Task #17 end Task #18 start Description: Spatial Extender server support Estimated time 19 second(s) Task #18 end Task #19 start Description: IBM Software Development Kit (SDK) for Java(TM) Estimated time 48 second(s) Task #19 end Task #20 start Description: DB2 LDAP support Estimated time 4 second(s) Task #20 end IBM Security Directory Suite Page 33

34 Task #21 start Description: DB2 Instance Setup wizard Estimated time 20 second(s) Task #21 end Task #22 start Description: Integrated Flash Copy Support Estimated time 3 second(s) Task #22 end Task #23 start Description: Spatial Extender client Estimated time 3 second(s) Task #23 end Task #24 start Description: Communication support - TCP/IP Estimated time 3 second(s) Task #24 end Task #25 start Description: Tivoli SA MP Estimated time 300 second(s) Task #25 end Task #26 start Description: Base application development tools Estimated time 35 second(s) Task #26 end Task #27 start Description: DB2 Update Service Estimated time 4 second(s) Task #27 end Task #28 start Description: Parallel Extension Estimated time 3 second(s) Task #28 end Task #29 start Description: EnterpriseDB code Estimated time 4 second(s) Task #29 end Task #30 start Description: Replication tools Estimated time 53 second(s) Task #30 end Task #31 start IBM Security Directory Suite Page 34

35 Description: Sample database source Estimated time 4 second(s) Task #31 end Task #32 start Description: itlm Estimated time 3 second(s) Task #32 end Task #33 start Description: DB2 Text Search Estimated time 119 second(s) Task #33 end Task #34 start Description: Command Line Processor Plus Estimated time 4 second(s) Task #34 end Task #35 start Description: Informix data source support Estimated time 4 second(s) Task #35 end Task #36 start Description: Oracle data source support Estimated time 4 second(s) Task #36 end Task #37 start Description: First Steps Estimated time 3 second(s) Task #37 end Task #38 start Description: Product Signature for DB2 Server Edition Estimated time 6 second(s) Task #38 end Task #39 start Description: Guardium Installation Manager Client Estimated time 20 second(s) Task #39 end Task #40 start Description: Setting DB2 library path Estimated time 180 second(s) Task #40 end Task #41 start IBM Security Directory Suite Page 35

36 Description: Installing or updating DB2 HA scripts for IBM Tivoli System Automation for Multiplatforms (Tivoli SA MP) Estimated time 40 second(s) Task #41 end Task #42 start Description: Executing control tasks Estimated time 20 second(s) Task #42 end Task #43 start Description: Updating global registry Estimated time 20 second(s) Task #43 end Task #44 start Description: Starting DB2 Fault Monitor Estimated time 10 second(s) Task #44 end Task #45 start Description: Updating the db2ls link Estimated time 1 second(s) Task #45 end Task #46 start Description: Registering DB2 licenses Estimated time 5 second(s) Task #46 end Task #47 start Description: Setting default global profile registry variables Estimated time 1 second(s) Task #47 end Task #48 start Description: Initializing instance list Estimated time 5 second(s) Task #48 end Task #49 start Description: Registering DB2 Update Service Estimated time 30 second(s) Task #49 end Task #50 start Description: Updating global profile registry Estimated time 3 second(s) Task #50 end The execution completed successfully. IBM Security Directory Suite Page 36

37 For more information see the DB2 installation log at "/tmp/db2_install.log.2483". server]# /usr/local/bin/db2ls Install Path Level Fix Pack Special Install Number Install Date Installer UID /opt/ibm/db2/v Tue Jan 3 19:20: EST 0 7. Remote system DB2 base level installation on Windows Disable UAC on Windows using this Microsoft document From Computer Management -> Select Users -> Click on More Actions -> New User... IBM Security Directory Suite Page 37

38 In New User Dialog box Create db2inst1 user and set its password. Also Unselect User must change password at next logon On Newly created User db2inst1 right click and select properties IBM Security Directory Suite Page 38

39 In db2inst1 Properties dialog goto Member Of tab: IBM Security Directory Suite Page 39

40 Click on Add In the Enter the object names to select enter Administrators and click on Check Names button: IBM Security Directory Suite Page 40

41 After displaying the fully qualified group name click on OK Button. Now the Administrators group is seen in Member of section, Click on OK button: IBM Security Directory Suite Page 41

42 Open a command window running as db2inst1 user for all further actions: In this case we have all the installables in c:\temp folder: After extracting the zip files: Launch the SDS GA level provided DB installer: IBM Security Directory Suite Page 42

43 WinZip Self-Extractor shows up with Unzip to folder containing %TEMP% path. Click on Unzip button: After Unzip completion back in the command window cd into SERVER\image folder: IBM Security Directory Suite Page 43

44 Launch the setup.exe In DB2 Setup Launchpad click on Install a Product : IBM Security Directory Suite Page 44

45 From DB2 Version 10.5 Fix Pack 3 Workgroup, Enterprise and Advanced Editions section Click on Install Now button: In DB2 Setup DB2 Server Edition DB2COPY1 Click Next buttion: Accept the License terms and click on Next button: IBM Security Directory Suite Page 45

46 Select Typical Installation type and click Next. IBM Security Directory Suite Page 46

47 Select Install DB2 Server Edition on this computer and click Next : Choose either default path for installation or customize (if required) and click Next IBM Security Directory Suite Page 47

48 Take defaults on this panel and click Next : Use Local user account and enter db2inst1 as User name and its password then click Next : IBM Security Directory Suite Page 48

49 With defaults click Next : Unselect notifications check box and click Next : IBM Security Directory Suite Page 49

50 With defaults proceed to Next : Review Current settings and click Install button: IBM Security Directory Suite Page 50

51 Note the Install log folder and file name review the same and then click Next : Click Finish button to complete Installation. IBM Security Directory Suite Page 51

52 Close DB2 First Steps dialog box: Remove the extracted installer folder SERVER from %TEMP% folder: 8. Remote system DB2 Fix Pack installation on AIX On the AIX system - extract the file v10.5fp8_aix64_server_t.tar.gz: ==> gunzip -c v10.5fp8_aix64_server_t.tar.gz tar -xf - From server_t folder - launch db2 installer (installfixpack) and proceed with installation: ==>./installfixpack -b /opt/ibm/db2/v10.5 Do you want to choose a different installation directory for the fix pack? [yes/no] no DBI1017I installfixpack is updating the DB2 product(s) installed in location /opt/ibm/db2/v10.5. DB2 installation is being initialized. Total number of tasks to be performed: 42 Total estimated time for all tasks to be performed: 3604 second(s) Task #1 start Description: Stopping DB2 Fault Monitor IBM Security Directory Suite Page 52

53 Estimated time 10 second(s) Task #1 end Task #2 start Description: Preparing the system Estimated time 120 second(s) Task #2 end Task #3 start Description: Base Client Support for installation with root privileges Estimated time 3 second(s) Task #3 end Task #4 start Description: Product Messages - English Estimated time 14 second(s) Task #4 end Task #5 start Description: Base client support Estimated time 469 second(s) Task #5 end Task #6 start Description: Java Runtime Support Estimated time 3 second(s) Task #6 end Task #7 start Description: Java Help (HTML) - English Estimated time 7 second(s) Task #7 end Task #8 start Description: Base server support for installation with root privileges Estimated time 8 second(s) Task #8 end Task #9 start Description: Global Secure ToolKit Estimated time 101 second(s) Task #9 end Task #10 start Description: Java support Estimated time 13 second(s) Task #10 end Task #11 start IBM Security Directory Suite Page 53

54 Description: SQL procedures Estimated time 3 second(s) Task #11 end Task #12 start Description: ICU Utilities Estimated time 42 second(s) Task #12 end Task #13 start Description: Java Common files Estimated time 18 second(s) Task #13 end Task #14 start Description: Base server support Estimated time 1036 second(s) Task #14 end Task #15 start Description: Connect support Estimated time 3 second(s) Task #15 end Task #16 start Description: Relational wrappers common Estimated time 3 second(s) Task #16 end Task #17 start Description: DB2 data source support Estimated time 13 second(s) Task #17 end Task #18 start Description: Spatial Extender server support Estimated time 20 second(s) Task #18 end Task #19 start Description: IBM Software Development Kit (SDK) for Java(TM) Estimated time 292 second(s) Task #19 end Task #20 start Description: DB2 LDAP support Estimated time 5 second(s) Task #20 end Task #21 start Description: DB2 Instance Setup wizard IBM Security Directory Suite Page 54

55 Estimated time 20 second(s) Task #21 end Task #22 start Description: Integrated Flash Copy Support Estimated time 1019 second(s) Task #22 end Task #23 start Description: Spatial Extender client Estimated time 4 second(s) Task #23 end Task #24 start Description: Communication support - TCP/IP Estimated time 3 second(s) Task #24 end Task #25 start Description: Base application development tools Estimated time 46 second(s) Task #25 end Task #26 start Description: DB2 Update Service Estimated time 4 second(s) Task #26 end Task #27 start Description: Parallel Extension Estimated time 3 second(s) Task #27 end Task #28 start Description: EnterpriseDB code Estimated time 3 second(s) Task #28 end Task #29 start Description: Replication tools Estimated time 85 second(s) Task #29 end Task #30 start Description: Sample database source Estimated time 4 second(s) Task #30 end Task #31 start Description: itlm Estimated time 3 second(s) IBM Security Directory Suite Page 55

56 Task #31 end Task #32 start Description: DB2 Text Search Estimated time 137 second(s) Task #32 end Task #33 start Description: Command Line Processor Plus Estimated time 6 second(s) Task #33 end Task #34 start Description: Informix data source support Estimated time 6 second(s) Task #34 end Task #35 start Description: Oracle data source support Estimated time 7 second(s) Task #35 end Task #36 start Description: First Steps Estimated time 3 second(s) Task #36 end Task #37 start Description: Product Signature for DB2 Server Edition Estimated time 7 second(s) Task #37 end Task #38 start Description: Guardium Installation Manager Client Estimated time 10 second(s) Task #38 end Task #39 start Description: Setting DB2 library path Estimated time 180 second(s) Task #39 end Task #40 start Description: Executing control tasks Estimated time 20 second(s) Task #40 end Task #41 start Description: Updating global registry Estimated time 20 second(s) Task #41 end IBM Security Directory Suite Page 56

57 Task #42 start Description: Starting DB2 Fault Monitor Estimated time 10 second(s) Task #42 end Task #43 start Description: Updating the db2ls and db2greg link Estimated time 1 second(s) Task #43 end The execution completed successfully. For more information see the DB2 installation log at "/tmp/installfixpack.log ". ==> /usr/local/bin/db2ls Install Path Level Fix Pack Special Install Number Install Date Installer UID /opt/ibm/db2/v Sun Jan 15 07:29: CST 0 9. Remote system DB2 Fix Pack installation on AIX On the AIX system - extract the file v10.5fp8_linuxx64_server_t.tar.gz: ==> gunzip -c v10.5fp8_linuxx64_server_t.tar.gz tar -xf - From server_t folder - launch db2 installer (installfixpack) and proceed with installation: ==[root@sdsrh7a server_t]#./installfixpack -b /opt/ibm/db2/v10.5 Requirement not matched for DB2 database "Server". Version: " ". Summary of prerequisites that are not met on the current system: DBT3514W The db2prereqcheck utility failed to find the following 32-bit library file: "/lib/libpam.so*". DBT3514W The db2prereqcheck utility failed to find the following 32-bit library file: "libstdc++.so.6". Do you want to choose a different installation directory for the fix pack? [yes/no] no IBM Security Directory Suite Page 57

58 DBI1017I installfixpack is updating the DB2 product(s) installed in location /opt/ibm/db2/v10.5. DB2 installation is being initialized. Total number of tasks to be performed: 44 Total estimated time for all tasks to be performed: 1729 second(s) Task #1 start Description: Stopping DB2 Fault Monitor Estimated time 10 second(s) Task #1 end Task #2 start Description: Preparing the system Estimated time 120 second(s) Task #2 end Task #3 start Description: Base Client Support for installation with root privileges Estimated time 3 second(s) Task #3 end Task #4 start Description: Product Messages - English Estimated time 14 second(s) Task #4 end Task #5 start Description: Base client support Estimated time 323 second(s) Task #5 end Task #6 start Description: Java Runtime Support Estimated time 158 second(s) Task #6 end Task #7 start Description: Java Help (HTML) - English Estimated time 7 second(s) Task #7 end Task #8 start Description: Base server support for installation with root privileges IBM Security Directory Suite Page 58

59 Estimated time 7 second(s) Task #8 end Task #9 start Description: Global Secure ToolKit Estimated time 64 second(s) Task #9 end Task #10 start Description: Java support Estimated time 12 second(s) Task #10 end Task #11 start Description: SQL procedures Estimated time 3 second(s) Task #11 end Task #12 start Description: ICU Utilities Estimated time 35 second(s) Task #12 end Task #13 start Description: Java Common files Estimated time 18 second(s) Task #13 end Task #14 start Description: Base server support Estimated time 495 second(s) Task #14 end Task #15 start Description: Control Center Help (HTML) - English Estimated time 13 second(s) Task #15 end Task #16 start Description: Connect support Estimated time 3 second(s) Task #16 end Task #17 start Description: Relational wrappers common Estimated time 3 second(s) Task #17 end Task #18 start Description: DB2 data source support Estimated time 6 second(s) IBM Security Directory Suite Page 59

60 Task #18 end Task #19 start Description: Spatial Extender server support Estimated time 18 second(s) Task #19 end Task #20 start Description: IBM Software Development Kit (SDK) for Java(TM) Estimated time 50 second(s) Task #20 end Task #21 start Description: DB2 LDAP support Estimated time 4 second(s) Task #21 end Task #22 start Description: DB2 Instance Setup wizard Estimated time 20 second(s) Task #22 end Task #23 start Description: Integrated Flash Copy Support Estimated time 3 second(s) Task #23 end Task #24 start Description: Spatial Extender client Estimated time 3 second(s) Task #24 end Task #25 start Description: Communication support - TCP/IP Estimated time 3 second(s) Task #25 end Task #26 start Description: Base application development tools Estimated time 35 second(s) Task #26 end Task #27 start Description: DB2 Update Service Estimated time 4 second(s) Task #27 end Task #28 start Description: Parallel Extension Estimated time 3 second(s) Task #28 end IBM Security Directory Suite Page 60

61 Task #29 start Description: EnterpriseDB code Estimated time 4 second(s) Task #29 end Task #30 start Description: Replication tools Estimated time 61 second(s) Task #30 end Task #31 start Description: Sample database source Estimated time 4 second(s) Task #31 end Task #32 start Description: itlm Estimated time 3 second(s) Task #32 end Task #33 start Description: DB2 Text Search Estimated time 123 second(s) Task #33 end Task #34 start Description: Command Line Processor Plus Estimated time 6 second(s) Task #34 end Task #35 start Description: Informix data source support Estimated time 4 second(s) Task #35 end Task #36 start Description: Oracle data source support Estimated time 4 second(s) Task #36 end Task #37 start Description: First Steps Estimated time 3 second(s) Task #37 end Task #38 start Description: Product Signature for DB2 Server Edition Estimated time 6 second(s) Task #38 end IBM Security Directory Suite Page 61

62 Task #39 start Description: Guardium Installation Manager Client Estimated time 20 second(s) Task #39 end Task #40 start Description: Setting DB2 library path Estimated time 180 second(s) Task #40 end Task #41 start Description: Executing control tasks Estimated time 20 second(s) Task #41 end Task #42 start Description: Updating global registry Estimated time 20 second(s) Task #42 end Task #43 start Description: Starting DB2 Fault Monitor Estimated time 10 second(s) Task #43 end Task #44 start Description: Updating the db2ls and db2greg link Estimated time 1 second(s) Task #44 end The execution completed successfully. For more information see the DB2 installation log at "/tmp/installfixpack.log.7050". [root@sdsrh7a server_t]# /usr/local/bin/db2ls Install Path Level Fix Pack Special Install Number Install Date Installer UID /opt/ibm/db2/v Sun Jan 15 16:37: EST 0 > IBM Security Directory Suite Page 62

63 10. Remote system DB2 Fix Pack installation on Windows Cd back into the C:\temp folder and launch the DB FP8 installer: WinZip Self-Extractor shows up with Unzip to folder containing %TEMP% path. Click on Unzip button: After the completion of unzip cd into SERVER_T folder: IBM Security Directory Suite Page 63

64 Launch setup.exe : In DB2 Setup Launchpad click on Install a Product : IBM Security Directory Suite Page 64

65 Click on Work with Existing under DB2 Version 10.5 Fix Pack 8 Workgroup, Enterprise and Advanced Editions IBM Security Directory Suite Page 65

66 Select the DBCOPY1 which requires Update and click Launch DB2 Setup wizard button: When prompted click on Yes button to close any running db2 processes to progress with install: IBM Security Directory Suite Page 66

67 Click Next to proceed with install: When prompted click OK button to restart the system (after installation): IBM Security Directory Suite Page 67

68 Note the log folder and file name and review the same After that click Next : Click on Finish button to complete installation: IBM Security Directory Suite Page 68

69 Click on Yes to proceed with system restart: Close DB2 First Steps dialog box: Clean up the extracted folder SERVER_T from %TEMP% folder in command window running as db2inst1 user: IBM Security Directory Suite Page 69

70 11. Apply DB2 license on AIX On the AIX system - extract the file DB2_ESE_Restricted_QS_Act_ zip : ==> unzip DB2_ESE_Restricted_QS_Act_ zip Use db2licm tool to verify current license: ==> /opt/ibm/db2/v10.5/adm/db2licm -l Product name: "DB2 Enterprise Server Edition" License type: "License not registered" Expiry date: "License not registered" Product identifier: "db2ese" Version information: "10.5" Apply the db2 ese license: ==> /opt/ibm/db2/v10.5/adm/db2licm -a ese_o/db2/license/db2ese_o.lic Use db2licm tool to verify updated license: ==> /opt/ibm/db2/v10.5/adm/db2licm -l Product name: "DB2 Enterprise Server Edition" License type: "Restricted" Expiry date: "Permanent" Product identifier: "db2ese" Version information: "10.5" 12. Apply DB2 license on Linux On the Linux system - extract the file DB2_ESE_Restricted_QS_Act_ zip : ==> unzip DB2_ESE_Restricted_QS_Act_ zip Use db2licm tool to verify current license: ==> /opt/ibm/db2/v10.5/adm/db2licm -l Product name: "DB2 Enterprise Server Edition" License type: "License not registered" Expiry date: "License not registered" Product identifier: "db2ese" Version information: "10.5" Apply the db2 ese license: ==> /opt/ibm/db2/v10.5/adm/db2licm -a ese_o/db2/license/db2ese_o.lic Use db2licm tool to verify updated license: ==> /opt/ibm/db2/v10.5/adm/db2licm -l Product name: "DB2 Enterprise Server Edition" License type: "Restricted" Expiry date: "Permanent" Product identifier: "db2ese" Version information: "10.5" IBM Security Directory Suite Page 70

71 13. Apply DB2 license on Windows On the Windows system - extract the file DB2_ESE_Restricted_QS_Act_ zip Using a DB2 Command Window - Administrator - run db2licm tool to verify current license: C:\Program Files\IBM\SQLLIB\BIN> db2licm -l Product name: "DB2 Enterprise Server Edition" License type: "License not registered" Expiry date: "License not registered" Product identifier: "db2ese" Version information: "10.5" Apply the db2 ese license: C:\Program Files\IBM\SQLLIB\BIN> db2licm a <path>\ese_o\db2\license\db2ese_o.lic Use db2licm tool to verify updated license: C:\Program Files\IBM\SQLLIB\BIN> db2licm -l Product name: "DB2 Enterprise Server Edition" License type: "Restricted" Expiry date: "Permanent" Product identifier: "db2ese" Version information: "10.5" IBM Security Directory Suite Page 71

72 14. Download and Extract idscfgremotedb.zip file Using a browser login to VA Web LMI as admin user Navigate to Custom File Management IBM Security Directory Suite Page 72

73 Download idscfgremotedb.zip Transfer the file to Remote DB2 server system (AIX/Linux/Windows/Solaris) using scp/ftp(binary) You may also directly download the zip file to remote DB2 server system using ==> curl -u admin:password -k -O Extract the contents of the idscfgremotedb.zip file on AIX/Linux using unzip command: ==> unzip idscfgremotedb.zip Two files are extracted idscfgremotedb # for AIX/Linux/Solaris idscfgremotedb.cmd # for Windows 15. DB2 instance user creation Log on to remote DB2 server system as root user or as administrator Create a group called dbsysadm and make root as a member of the dbsysadm group ==> mkgroup "users=root" dbsysadm # AIX ==> groupadd dbsysadm # Linux ==> usermod -G root,dbsysadm root # Linux (add other grps as reqd) Create instance user - db2inst1: (on AIX / Linux) ==> useradd -d /home/db2inst1 -g dbsysadm -G dbsysadm -m -s /usr/bin/ksh db2inst1 Verify the user ==> lsuser db2inst1 # AIX db2inst1 id=1782 pgrp=dbsysadm groups=dbsysadm home=/home/db2inst1 shell=/usr/bin/ksh login=true... ==> id db2inst1 # Linux uid=1001(db2inst1) gid=1001(dbsysadm) groups=1001(dbsysadm) Set password for db2inst1 ==> passwd db2inst1 # set the password for db2inst1 ==> pwdadm -c db2inst1 # AIX ONLY On Windows system if you followed the document, db2inst1 user is already created during the installation process(refer section 7), we can use the same user for instance on Windows. o db2inst1 user must be a member of Administrators, DB2ADMNS groups IBM Security Directory Suite Page 73

74 16. Create instance and database using idscfgremotedb Log on to remote DB2 server system as root user or as administrator Use idscfgremotedb to create instance and database - AIX: ==>./idscfgremotedb -c -u db2inst1 -w passwd -p /opt/ibm/db2/v10.5 -s t ldapdb Creating DB2 instance db2inst1. Successfully created DB2 instance 'db2inst1'. Creating service entry. Created a service entry for the service db2inst1svc at port Starting DB2 instance db2inst1. Started DB2 instance db2inst1. Creating database ldapdb. Created database ldapdb. Connecting to database ldapdb as user db2inst1. Connected to database ldapdb as user db2inst1. Creating buffer pool for db ldapdb. Created bufferpool for db ldapdb. Creating tablespace for db ldapdb. Created tablespace for db ldapdb. Updating svcename database manager parameter. Updated svcename database manager parameter. Updating APPLHEAPSZ database parameter. Updated APPLHEAPSZ database parameter. Updating DBHEAP database parameter. Updated DBHEAP database parameter. Updating logsecond database parameter. Updated logsecond database parameter. Updating logfilsiz database parameter. Updated logfilsiz database parameter. Updating appl_memory database parameter. Updated appl_memory database parameter. Updating maxfilop database parameter. Updated maxfilop database parameter. Updating locklist database parameter. Updated locklist database parameter. Updating auto_runstats database parameter. Updated auto_runstats database parameter. Setting DB2COMM registry variable to TCPIP. Set DB2COMM variable to TCPIP. Disconnecting from DB2 database. Disconnected from DB2 database. Enabling multi page file allocation for db ldapdb. Enabled multi page file allocation for db ldapdb. Stopping database manager. Stopped database manager. Starting database manager. Started database manager. The program completed successfully. IBM Security Directory Suite Page 74

75 Use idscfgremotedb to create instance and database - Linux: [root@sdsrh7a IBMinstallables]#./idscfgremotedb -c -u db2inst1 -w passwd -p /opt/ibm/db2/v10.5 -t ldapdb -s 6512 Creating DB2 instance db2inst1. Successfully created DB2 instance 'db2inst1'. Creating service entry. Created a service entry for the service db2inst1svc at port Starting DB2 instance db2inst1. Started DB2 instance db2inst1. Creating database ldapdb. Created database ldapdb. Connecting to database ldapdb as user db2inst1. Connected to database ldapdb as user db2inst1. Creating buffer pool for db ldapdb. Created bufferpool for db ldapdb. Creating tablespace for db ldapdb. Created tablespace for db ldapdb. Updating svcename database manager parameter. Updated svcename database manager parameter. Updating APPLHEAPSZ database parameter. Updated APPLHEAPSZ database parameter. Updating DBHEAP database parameter. Updated DBHEAP database parameter. Updating logsecond database parameter. Updated logsecond database parameter. Updating logfilsiz database parameter. Updated logfilsiz database parameter. Updating appl_memory database parameter. Updated appl_memory database parameter. Updating maxfilop database parameter. Updated maxfilop database parameter. Updating locklist database parameter. Updated locklist database parameter. Updating auto_runstats database parameter. Updated auto_runstats database parameter. Setting DB2COMM registry variable to TCPIP. Set DB2COMM variable to TCPIP. Disconnecting from DB2 database. Disconnected from DB2 database. Enabling multi page file allocation for db ldapdb. Enabled multi page file allocation for db ldapdb. Stopping database manager. Stopped database manager. Starting database manager. Started database manager. The program completed successfully. Use idscfgremotedb to create instance and database - Windows using Command window running as administrator: C:\temp\idscfgremotedb> idscfgremotedb.cmd -c -u db2inst1 -w passwd -l c: -p C:\PROGRA~1\IBM\SQLLIB -s t sdsdb Creating DB2 instance db2inst1. IBM Security Directory Suite Page 75

76 Successfully created DB2 instance 'db2inst1'. Creating service entry. Created a service entry for the service db2inst1svc at port Starting DB2 instance db2inst1. Started DB2 instance db2inst1. Creating database sdsdb. Created database sdsdb. Connecting to database sdsdb as user db2inst1. Connected to database sdsdb as user db2inst1. Creating buffer pool for db sdsdb. Created buffer pool for db sdsdb. Creating tablespace for db sdsdb. A subdirectory or file c:\db2inst1\ldap_remote32kcont_sdsdb already exists. Created tablespace for db sdsdb. Updating svcename database manager parameter. Updated svcename database manager parameter. Updating APPLHEAPSZ database parameter. Updated APPLHEAPSZ database parameter. Updating DBHEAP database parameter. Updated DBHEAP database parameter. Updating logsecond database parameter. Updated logsecond database parameter. Updating logfilsiz database parameter. Updated logfilsiz database parameter. Updating appl_memory database parameter. Updated appl_memory database parameter. Updating maxfilop database parameter. Updated maxfilop database parameter. Updating locklist database parameter. Updated locklist database parameter. Updating auto_runstats database parameter. Updated auto_runstats database parameter. Setting DB2COMM registry variable to TCPIP. Set DB2COMM variable to TCPIP. Disconnecting from DB2 database. Disconnected from DB2 database. Enabling multi page file allocation for db sdsdb. Enabled multi page file allocation for db sdsdb. Stopping database manager. SQL1064N DB2STOP processing was successful. Stopped database manager. Starting database manager. Started database manager. The program completed successfully. IBM Security Directory Suite Page 76

77 17. Create and configure changelog database using idscfgremotedb Log on to remote DB2 server system as root user or as administrator Use idscfgremotedb to create and configure changelog database - AIX: ==>./idscfgremotedb -c -u db2inst1 -w passwd -p /opt/ibm/db2/v10.5 -s t ldapclog DB2 instance 'db2inst1' already exists. Starting DB2 instance db2inst1. Started DB2 instance db2inst1. Creating database ldapclog. Created database ldapclog. Connecting to database ldapclog as user db2inst1. Connected to database ldapclog as user db2inst1. Creating buffer pool for db ldapclog. Created bufferpool for db ldapclog. Creating tablespace for db ldapclog. Created tablespace for db ldapclog. Updating svcename database manager parameter. Updated svcename database manager parameter. Updating APPLHEAPSZ database parameter. Updated APPLHEAPSZ database parameter. Updating DBHEAP database parameter. Updated DBHEAP database parameter. Updating logsecond database parameter. Updated logsecond database parameter. Updating logfilsiz database parameter. Updated logfilsiz database parameter. Updating appl_memory database parameter. Updated appl_memory database parameter. Updating maxfilop database parameter. Updated maxfilop database parameter. Updating locklist database parameter. Updated locklist database parameter. Updating auto_runstats database parameter. Updated auto_runstats database parameter. Setting DB2COMM registry variable to TCPIP. Set DB2COMM variable to TCPIP. Disconnecting from DB2 database. Disconnected from DB2 database. Enabling multi page file allocation for db ldapclog. Enabled multi page file allocation for db ldapclog. Stopping database manager. Stopped database manager. Starting database manager. Started database manager. The program completed successfully. IBM Security Directory Suite Page 77

78 Use idscfgremotedb to create and configure changelog database - Linux: [root@sdsrh7a IBMinstallables]#./idscfgremotedb -c -u db2inst1 -w passwd -p /opt/ibm/db2/v10.5 -s t ldapclog DB2 instance 'db2inst1' already exists. Starting DB2 instance db2inst1. Started DB2 instance db2inst1. Creating database ldapclog. Created database ldapclog. Connecting to database ldapclog as user db2inst1. Connected to database ldapclog as user db2inst1. Creating buffer pool for db ldapclog. Created bufferpool for db ldapclog. Creating tablespace for db ldapclog. Created tablespace for db ldapclog. Updating svcename database manager parameter. Updated svcename database manager parameter. Updating APPLHEAPSZ database parameter. Updated APPLHEAPSZ database parameter. Updating DBHEAP database parameter. Updated DBHEAP database parameter. Updating logsecond database parameter. Updated logsecond database parameter. Updating logfilsiz database parameter. Updated logfilsiz database parameter. Updating appl_memory database parameter. Updated appl_memory database parameter. Updating maxfilop database parameter. Updated maxfilop database parameter. Updating locklist database parameter. Updated locklist database parameter. Updating auto_runstats database parameter. Updated auto_runstats database parameter. Setting DB2COMM registry variable to TCPIP. Set DB2COMM variable to TCPIP. Disconnecting from DB2 database. Disconnected from DB2 database. Enabling multi page file allocation for db ldapclog. Enabled multi page file allocation for db ldapclog. Stopping database manager. Stopped database manager. Starting database manager. Started database manager. The program completed successfully. Use idscfgremotedb to create and configure changelog database - Windows using Command window running as administrator: C:\temp\idscfgremotedb> idscfgremotedb.cmd -c -u db2inst1 -w passwd -l c: -p C:\PROGRA~1\IBM\SQLLIB -s t ldapclog DB2 instance 'db2inst1' already exists. Starting DB2 instance db2inst1. Started DB2 instance db2inst1. Creating database ldapclog. IBM Security Directory Suite Page 78

79 Created database ldapclog. Connecting to database ldapclog as user db2inst1. Connected to database ldapclog as user db2inst1. Creating buffer pool for db ldapclog. Created buffer pool for db ldapclog. Creating tablespace for db ldapclog. A subdirectory or file c:\db2inst1\ldap_remote32kcont_ldapclog already exists. Created tablespace for db ldapclog. Updating svcename database manager parameter. Updated svcename database manager parameter. Updating APPLHEAPSZ database parameter. Updated APPLHEAPSZ database parameter. Updating DBHEAP database parameter. Updated DBHEAP database parameter. Updating logsecond database parameter. Updated logsecond database parameter. Updating logfilsiz database parameter. Updated logfilsiz database parameter. Updating appl_memory database parameter. Updated appl_memory database parameter. Updating maxfilop database parameter. Updated maxfilop database parameter. Updating locklist database parameter. Updated locklist database parameter. Updating auto_runstats database parameter. Updated auto_runstats database parameter. Setting DB2COMM registry variable to TCPIP. Set DB2COMM variable to TCPIP. Disconnecting from DB2 database. Disconnected from DB2 database. Enabling multi page file allocation for db ldapclog. Enabled multi page file allocation for db ldapclog. Stopping database manager. SQL1064N DB2STOP processing was successful. Stopped database manager. Starting database manager. Started database manager. The program completed successfully. 18. Remote system db2 instance and db config using custom commands Log on to remote DB2 server system as root user or as administrator Create db2 instance on AIX ==> /opt/ibm/db2/v10.5/instance/db2icrt -u db2inst1 db2inst1 DBI1446I The db2icrt command is running. DB2 installation is being initialized. Total number of tasks to be performed: 4 IBM Security Directory Suite Page 79

80 Total estimated time for all tasks to be performed: 309 second(s) Task #1 start Description: Setting default global profile registry variables Estimated time 1 second(s) Task #1 end Task #2 start Description: Initializing instance list Estimated time 5 second(s) Task #2 end Task #3 start Description: Configuring DB2 instances Estimated time 300 second(s) Task #3 end Task #4 start Description: Updating global profile registry Estimated time 3 second(s) Task #4 end The execution completed successfully. For more information see the DB2 installation log at "/tmp/db2icrt.log ". DBI1070I Program db2icrt completed successfully. Create db2 instance on Linux ==> /opt/ibm/db2/v10.5/instance/db2icrt -u db2inst1 db2inst1 DBI1446I The db2icrt command is running. DB2 installation is being initialized. Total number of tasks to be performed: 4 Total estimated time for all tasks to be performed: 309 second(s) Task #1 start Description: Setting default global profile registry variables Estimated time 1 second(s) Task #1 end Task #2 start Description: Initializing instance list Estimated time 5 second(s) Task #2 end Task #3 start Description: Configuring DB2 instances Estimated time 300 second(s) Task #3 end IBM Security Directory Suite Page 80

81 Task #4 start Description: Updating global profile registry Estimated time 3 second(s) Task #4 end The execution completed successfully. For more information see the DB2 installation log at "/tmp/db2icrt.log.22166". DBI1070I Program db2icrt completed successfully. Update /etc/services file with the db2 service port (in our case we are using port 6512) ==> echo 'db2inst1svc 6512/tcp' >> /etc/services Prepare/Verify the database location folders o These paths could be either local file systems or paths leading to dedicated SAN drive(s). o These folder must be owned by the db2instance (db2inst1 user) and its primary group (dbsysadm) o In this case we will use the DBPATH to be /home/db2inst1/dbpath o USERSPACE1 tablespace will be on storage paths /home/db2isnt1/dbstor1 and o /home/db2inst1/dbstor2 LDAPSPACE tablespace will be on storage paths /home/db2inst1/dbstor3 and /home/db2inst1/dbstor4 ==> su - db2inst1 # step into db2 instance user shell $ ls -ld /home/db2inst1/db* drwxr-xr-x 2 db2inst1 dbsysadm 256 Jan 5 19:16 /home/db2inst1/dbpath drwxr-xr-x 2 db2inst1 dbsysadm 256 Jan 5 19:16 /home/db2inst1/dbstor1 drwxr-xr-x 2 db2inst1 dbsysadm 256 Jan 5 19:16 /home/db2inst1/dbstor2 drwxr-xr-x 2 db2inst1 dbsysadm 256 Jan 5 19:16 /home/db2inst1/dbstor3 drwxr-xr-x 2 db2inst1 dbsysadm 256 Jan 5 19:16 /home/db2inst1/dbstor4 Start db2: $ db2start 01/15/ :39: SQL1063N DB2START processing was successful. SQL1063N DB2START processing was successful. Create database ldapdb managed by AUTOMATIC STORAGE o with USERSPACE1 tablespace in dbstor1 and dbstor2 paths $ db2 "create database ldapdb on '/home/db2inst1/dbstor1','/home/db2inst1/dbstor2' dbpath on '/home/db2inst1/dbpath' using codeset UTF-8 territory US" DB20000I The CREATE DATABASE command completed successfully. Connect to database: $ db2 connect to ldapdb user db2inst1 using passwd Database Connection Information Database server = DB2/AIX SQL authorization ID = DB2INST1 Local database alias = LDAPDB IBM Security Directory Suite Page 81

82 Create storage group for LDAPSPACE tablespace $ db2 "create stogroup ldap_sto_grp on '/home/db2inst1/dbstor3','/home/db2inst1/dbstor4'" DB20000I The SQL command completed successfully. Create 32K page size bufferpool - LDAPBP $ db2 "create bufferpool LDAPBP SIZE automatic PAGESIZE 32K" DB20000I The SQL command completed successfully. Update default 4K page size bufferpool IBMDEFAULTBP to be automatic $ db2 "ALTER BUFFERPOOL IBMDEFAULTBP SIZE automatic" DB20000I The SQL command completed successfully. Create 32K page size LDAPSPACE tablespace managed by AUTOMATIC STORAGE $ db2 "CREATE LARGE TABLESPACE LDAPSPACE PAGESIZE 32K MANAGED BY AUTOMATIC STORAGE BUFFERPOOL LDAPBP NO FILE SYSTEM CACHING AUTORESIZE YES INCREASESIZE 256 M EXTENTSIZE 6 PREFETCHSIZE 12 MAXSIZE NONE USING STOGROUP LDAP_STO_GRP" DB20000I The SQL command completed successfully. Update svcename database manager parameter $ db2 "update dbm cfg using svcename db2inst1svc" DB20000I The UPDATE DATABASE MANAGER CONFIGURATION command completed successfully. SQL1362W One or more of the parameters submitted for immediate modification were not changed dynamically. Client changes will not be effective until the next time the application is started or the TERMINATE command has been issued. Server changes will not be effective until the next DB2START command. Update logfilsiz database parameter $ db2 "update db cfg for ldapdb using logfilsiz 10000" DB20000I The UPDATE DATABASE CONFIGURATION command completed successfully. SQL1363W One or more of the parameters submitted for immediate modification were not changed dynamically. For these configuration parameters, the database must be shutdown and reactivated before the configuration parameter changes become effective. Update auto_runstats database parameter $ db2 "update db cfg for ldapdb using auto_runstats off" DB20000I The UPDATE DATABASE CONFIGURATION command completed successfully. Set DB2 registry variable DB2COMM to TCPIP $ db2set $ db2set DB2COMM=TCPIP $ db2set DB2COMM=TCPIP Disconnect from DB2 database $ db2 connect reset DB20000I The SQL command completed successfully. IBM Security Directory Suite Page 82

83 Enable multi page file allocation for ldapdb database $ db2empfa ldapdb Stop and Start DB2 $ db2stop 01/15/ :56: SQL1064N DB2STOP processing was successful. SQL1064N DB2STOP processing was successful. $ ipclean Application ipclean: Removing DB2 engine and client IPC resources for db2inst1 $ db2start 01/15/ :56: SQL1063N DB2START processing was successful. SQL1063N DB2START processing was successful. 19. Configuration on SDS VA to connect to remote database Update default encryption keys (seed and salt) to known / required values o If you are going to import data (exported from another SDS/TDS 8.0.* or 6.* instance), its very important to keep the same seed and salt values on the new SDS VA directory server instance too. o You may use a new set of seed and salt values on SDS VA directory server instance o In this case use the same new seed and salt while exporting data when using idsdb2ldif from source instance o Login to LMI command line via ssh / putty and run idsgendirksf command which will update ibmslapddir.ksf in instance s etc folder (/home/sdsinst1/idsslapd-sdsinst1/etc/) and also provide the same in CustomOut folder too. sds801va1> sds server_tools idsgendirksf -e encrypt_seed -s encrypt_salt -l ibmslapddir.ksf -n You have chosen to perform the following actions: GLPKEY009I The following directory key stash file will be created: '/userdata/directory/customout/ibmslapddir.ksf'. GLPKEY011I Creating directory key stash file: '/userdata/directory/customout/ibmslapddir.ksf'. GLPKEY012I Created directory key stash file: '/userdata/directory/customout/ibmslapddir.ksf'. Configure SDS VA directory instance to connect with remote DB2 database using idscfgdb: sds801va1> sds server_tools idscfgdb -I sdsinst1 -a sdsinst1 -t ldapdb -w sdsinst1 -Y -S l /home/db2inst1 -P sdsrh7a -u db2inst1 -p passwd -n GLPWRP123I The program '/opt/ibm/ldap/v8.0.1/sbin/64/idscfgdb' is used with the following arguments '-I sdsinst1 -a sdsinst1 -t ldapdb -w ***** -Y -S l /home/sdsinst1 -P sdsrh7a -u db2inst1 -p ***** -n'. You have chosen to perform the following actions: IBM Security Directory Suite Page 83

84 GLPCDB023I Database 'ldapdb' will be configured. GLPCDB035I Adding database 'ldapdb' to directory server instance: 'sdsinst1'. GLPCTL008I Starting database manager for database instance: 'sdsinst1'. GLPCTL009I Started database manager for database instance: 'sdsinst1'. GLPCTL020I Updating the database manager: 'sdsinst1'. GLPCTL021I Updated the database manager: 'sdsinst1'. GLPCDB005I Configuring database 'ldapdb' for directory server instance: 'sdsinst1'. GLPCDB006I Configured database 'ldapdb' for directory server instance: 'sdsinst1'. GLPCTL011I Stopping database manager for the database instance: 'sdsinst1'. GLPCTL012I Stopped database manager for the database instance: 'sdsinst1'. GLPCTL008I Starting database manager for database instance: 'sdsinst1'. GLPCTL009I Started database manager for database instance: 'sdsinst1'. GLPCDB003I Added database 'ldapdb' to directory server instance: 'sdsinst1'. To unconfigure SDS VA directory instance remote DB2 database using idsucfgdb: sds801va1> sds server_tools idsucfgdb -I sdsinst1 -Y -n GLPWRP123I The program '/opt/ibm/ldap/v8.0.1/sbin/64/idsucfgdb' is used with the following arguments '-I sdsinst1 -Y -n'. You have chosen to perform the following actions: GLPUDB017I The database for directory server instance 'sdsinst1' will be unconfigured. GLPUDB018I Database will be left on your system. GLPUDB002I Removing the DB2 database from directory server instance: 'sdsinst1'. GLPCTL008I Starting database manager for database instance: 'sdsinst1'. GLPCTL009I Started database manager for database instance: 'sdsinst1'. GLPUDB005I Unconfiguring database 'ldapdb' for directory server instance: 'sdsinst1'. GLPUDB006I Unconfigured database 'ldapdb' for directory server instance: 'sdsinst1'. GLPCTL014I Uncataloging database instance node: 'sdsinst1'. GLPCTL015I Uncataloged database instance node: 'sdsinst1'. GLPCTL011I Stopping database manager for the database instance: 'sdsinst1'. GLPCTL012I Stopped database manager for the database instance: 'sdsinst1'. GLPUDB003I Removed the DB2 database from directory server instance: 'sdsinst1'. IBM Security Directory Suite Page 84

85 To reconfigure (unconfigure/configure) SDS VA directory local/embedded DB2 database: sds801va1> sds server_tools idsucfgdb -r -n GLPWRP123I The program '/opt/ibm/ldap/v8.0.1/sbin/64/idsucfgdb' is used with the following arguments '-r -n -I sdsinst1'. You have chosen to perform the following actions: GLPUDB017I The database for directory server instance 'sdsinst1' will be unconfigured. GLPUDB019I Database will be completely removed. GLPUDB002I Removing the DB2 database from directory server instance: 'sdsinst1'. GLPCTL008I Starting database manager for database instance: 'sdsinst1'. GLPCTL009I Started database manager for database instance: 'sdsinst1'. GLPCTL040I Removing local loopback from database: 'ldapdb2b'. GLPCTL041I Removed local loopback from database: 'ldapdb2b'. GLPUDB005I Unconfiguring database 'sdsinst1' for directory server instance: 'sdsinst1'. GLPUDB006I Unconfigured database 'sdsinst1' for directory server instance: 'sdsinst1'. GLPCTL031I Removing database: 'sdsinst1'. GLPCTL032I Removed database: 'sdsinst1'. GLPCTL011I Stopping database manager for the database instance: 'sdsinst1'. GLPCTL012I Stopped database manager for the database instance: 'sdsinst1'. GLPUDB003I Removed the DB2 database from directory server instance: 'sdsinst1'. sds801va1> sds server_tools idscfgdb -I sdsinst1 -a sdsinst1 -w sdsinst1 -t sdsinst1 -l /home/sdsinst1 -n GLPWRP123I The program '/opt/ibm/ldap/v8.0.1/sbin/64/idscfgdb' is used with the following arguments '-I sdsinst1 -a sdsinst1 -w ***** -t sdsinst1 -l /home/sdsinst1 -n'. You have chosen to perform the following actions: GLPCDB023I Database 'sdsinst1' will be configured. GLPCDB024I Database 'sdsinst1' will be created at '/home/sdsinst1' GLPCDB035I Adding database 'sdsinst1' to directory server instance: 'sdsinst1'. GLPCTL017I Cataloging database instance node: 'sdsinst1'. GLPCTL018I Cataloged database instance node: 'sdsinst1'. GLPCTL008I Starting database manager for database instance: 'sdsinst1'. GLPCTL009I Started database manager for database instance: 'sdsinst1'. GLPCTL026I Creating database: 'sdsinst1'. GLPCTL027I Created database: 'sdsinst1'. GLPCTL034I Updating the database: 'sdsinst1' GLPCTL035I Updated the database: 'sdsinst1' IBM Security Directory Suite Page 85

86 GLPCTL020I Updating the database manager: 'sdsinst1'. GLPCTL021I Updated the database manager: 'sdsinst1'. GLPCTL023I Enabling multi-page file allocation: 'sdsinst1' GLPCTL024I Enabled multi-page file allocation: 'sdsinst1' GLPCDB005I Configuring database 'sdsinst1' for directory server instance: 'sdsinst1'. GLPCDB006I Configured database 'sdsinst1' for directory server instance: 'sdsinst1'. GLPCTL037I Adding local loopback to database: 'sdsinst1'. GLPCTL038I Added local loopback to database: 'sdsinst1'. GLPCTL011I Stopping database manager for the database instance: 'sdsinst1'. GLPCTL012I Stopped database manager for the database instance: 'sdsinst1'. GLPCTL008I Starting database manager for database instance: 'sdsinst1'. GLPCTL009I Started database manager for database instance: 'sdsinst1'. GLPCDB003I Added database 'sdsinst1' to directory server instance: 'sdsinst1'. Configure SDS VA directory instance to connect with remote changelog database using idscfgchglg: sds801va1> sds server_tools idscfgchglg -I sdsinst1 -Y -n GLPWRP123I The program '/opt/ibm/ldap/v8.0.1/sbin/64/idscfgchglg' is used with the following arguments '-I sdsinst1 -Y -n' You have chosen to perform the following actions: GLPCCH012I Change log will be configured. GLPCCH013I Change log maximum entries will be set to ' '. GLPCCH014I Change log maximum age limit will be set to '0' days '0' hours. GLPCCH026I Adding change log to directory server instance: 'sdsinst1'. GLPCTL008I Starting database manager for database instance: 'sdsinst1'. GLPCTL009I Started database manager for database instance: 'sdsinst1'. GLPCCH005I Configuring change log database 'ldapclog' for directory server instance: 'sdsinst1'. GLPCCH006I Configured change log database 'ldapclog' for directory server instance: 'sdsinst1'. GLPCTL011I Stopping database manager for the database instance: 'sdsinst1'. GLPCTL012I Stopped database manager for the database instance: 'sdsinst1'. GLPCTL008I Starting database manager for database instance: 'sdsinst1'. GLPCTL009I Started database manager for database instance: 'sdsinst1'. GLPCCH003I Added change log to directory server instance: 'sdsinst1' IBM Security Directory Suite Page 86

87 To unconfigure SDS VA directory instance remote changelog database using idsucfgchglg: sds801va1> sds server_tools idsucfgchglg -I sdsinst1 -Y -n To reconfigure (unconfigure/configure) SDS VA directory local/embedded DB2 database: sds801va1> sds server_tools idsucfgchglg -I sdsinst1 -n sds801va1> sds server_tools idscfgchglg -I sdsinst1 -n [-m max_entries] [-y max_days] [-h max_hours] 20. Data import / export methods Upload data.ldif over to CustomIn folder of Custom File Management Navigate to All Files -> CustomIn folder Click on Upload IBM Security Directory Suite Page 87

88 Browse and select the data.ldif file that need to be imported Click on Save Configuration The uploaded data.ldif file is now visible in CustomIn folder Use idsldif2db command to import ldif file: sds801va1> sds server_tools idsldif2db -I sdsinst1 -i data.ldif GLPCTL113I Largest core file size creation limit for the process (in bytes): '-1'(Soft limit) and '-1'(Hard limit). GLPCTL119I Maximum Data Segment(Kbytes) soft ulimit for the process is -1 and the prescribed minimum is GLPCTL119I Maximum File Size(512 bytes block) soft ulimit for the process is -1 and the prescribed minimum is GLPCTL122I Maximum Open Files soft ulimit for the process is 1024 and the prescribed minimum is 500. GLPCTL119I Maximum Stack Size(Kbytes) soft ulimit for the process is -1 and the prescribed minimum is GLPCTL119I Maximum Virtual Memory(Kbytes) soft ulimit for the process is -1 and the prescribed minimum is GLPCOM022I The database plugin is successfully loaded from libbackconfig.so. GLPSRV221I Replication of security attributes feature is disabled. GLPSRV247I Initializing primary REMOTE database 'ldapdb' and its connections. VAUUID check on the remote database passed. VAUUID check on the remote database passed. IBM Security Directory Suite Page 88

89 VAUUID check on the remote database passed. GLPRPL137I Restricted Access to the replication topology is set to false.... GLPRDB002W ldif2db: entries have been successfully added out of attempted. Use idsbulkload command to parse ldif file and create a tar.gz file containing table specific load files: sds801va1> sds server_tools idsbulkload -I sdsinst1 -i data.ldif -a parseonly -Y GLPBLK150I No status file is found (/home/sdsinst1/idsslapdsdsinst1/logs/bulkload_status). This is a clean start. GLPCTL113I Largest core file size creation limit for the process (in bytes): '-1'(Soft limit) and '-1'(Hard limit). GLPCTL119I Maximum Data Segment(Kbytes) soft ulimit for the process is -1 and the prescribed minimum is GLPCTL119I Maximum File Size(512 bytes block) soft ulimit for the process is -1 and the prescribed minimum is GLPCTL122I Maximum Open Files soft ulimit for the process is 1024 and the prescribed minimum is 500. GLPCTL119I Maximum Stack Size(Kbytes) soft ulimit for the process is -1 and the prescribed minimum is GLPCTL119I Maximum Virtual Memory(Kbytes) soft ulimit for the process is -1 and the prescribed minimum is GLPSRV221I Replication of security attributes feature is disabled. GLPSRV247I Initializing primary REMOTE database 'ldapdb' and its connections. VAUUID check on the remote database passed. VAUUID check on the remote database passed. VAUUID check on the remote database passed. GLPCTL113I Largest core file size creation limit for the process (in bytes): '-1'(Soft limit) and '-1'(Hard limit). GLPCTL114I Largest file size creation limit for the process (in bytes): '-1'(Soft limit) and '-1'(Hard limit). GLPCTL115I Maximum data segment limit for the process (in bytes): '-1'(Soft limit) and '-1'(Hard limit). GLPCTL116I Maximum physical memory limit for the process (in bytes): '-1'(Soft limit) and '-1'(Hard limit). GLPBLK072I Bulkload started. GLPBLK050I Extracting parent DNs percent done. GLPBLK061I Parsing entries GLPBLK004I entries parsed successfully out of attempts. GLPBLK073I Bulkload completed. The file 'remote_bulkload.tar.gz' can be downloaded and viewed under CustomOut folder in LMI. IBM Security Directory Suite Page 89

90 Download remote_bulkload.tar.gz from CustomOut folder You may also directly download the remote_bulkload.tar.gz file to remote DB2 server system using ==> curl -u admin:password -k -O On remote DB2 server system - extract remote_bulkload.tar.gz file: ==> su - db2inst1 $ mkdir remote_bulkload_data $ cd remote_bulkload_data/ $ mv../remote_bulkload.tar.gz. $ gunzip -c remote_bulkload.tar.gz tar -xf - From the same folder review the script ldapdb_remote.sh (for AIX/Linux) [ldapdb_remote.bat for windows] o Update the DB2INSTANCE variable to the correct db2 instance name and run the script as below $./ldapdb_remote.sh db2inst1 passwd + PATH=/usr/bin:/etc:/usr/sbin:/usr/ucb:/home/db2inst1/bin: /usr/bin/x11:/sbin:.:/home/db2inst1/sqllib/bin:/home/db2inst1/sqllib/adm: /home/db2inst1/sqllib/misc:/home/db2inst1/sqllib/db2tss/bin: + export DB2INSTANCE=db2inst1 + RC=0 + LOAD_FAILED=102 + LOAD_SUCCEEDED=103 + rm -f bulkload_status.tmp + rm -f db2load.rc Database Connection Information Database server = DB2/AIX SQL authorization ID = DB2INST1 Local database alias = LDAPDB + RC=0 IBM Security Directory Suite Page 90

91 + [[ 0 -ne 0 ]] + ATTR=ldap_entry + MSG=ldap_entry.msgs + db2 load from./ldap_entry of del lobs from "./" modified by DELPRIORITYCHAR FASTPARSE lobsinfile chardel savecount warningcount 1 messages ldap_entry.msgs insert into SDSINST1.LDAP_ENTRY NONRECOVERABLE Number of rows read = Number of rows skipped = 0 Number of rows loaded = Number of rows rejected = 0 Number of rows deleted = 0 Number of rows committed = RC=0 + [[ 0 -ne 0 ]] + echo street >> bulkload_status.tmp + db2 commit DB20000I The SQL command completed successfully. + RC=0 + [[ 0 -ne 0 ]] + db2 terminate DB20000I The TERMINATE command completed successfully. + RC=0 + [[ 0 -ne 0 ]] + echo 0 + 1> db2load.rc + echo REMOTE BULKLOAD SUCCEEDED. REMOTE BULKLOAD SUCCEEDED. + exit 0 o Run idsdb2ldif command to export data into ldif file sds801va1> sds server_tools idsdb2ldif -I sdsinst1 -o vadata.ldif GLPCTL113I Largest core file size creation limit for the process (in bytes): '-1'(Soft limit) and '-1'(Hard limit). GLPCTL119I Maximum Data Segment(Kbytes) soft ulimit for the process is -1 and the prescribed minimum is GLPCTL119I Maximum File Size(512 bytes block) soft ulimit for the process is -1 and the prescribed minimum is GLPCTL122I Maximum Open Files soft ulimit for the process is 1024 and the prescribed minimum is 500. GLPCTL119I Maximum Stack Size(Kbytes) soft ulimit for the process is -1 and the prescribed minimum is GLPCTL119I Maximum Virtual Memory(Kbytes) soft ulimit for the process is -1 and the prescribed minimum is GLPSRV221I Replication of security attributes feature is disabled. GLPSRV247I Initializing primary REMOTE database 'ldapdb' and its connections. VAUUID check on the remote database passed. IBM Security Directory Suite Page 91

92 VAUUID check on the remote database passed.... GLPD2L011I entries have been successfully exported from the directory. Download the file from CustomOut folder: IBM Security Directory Suite Page 92