Contents
Please keep in mind this is not the only method or set of guides that can be used. Each environment is unique and different. Our setup consists of three different sets of servers. We have non-clustered NetWare servers on HP BL460c blades. We have a 16-node NCS NetWare Cluster on the same type of blades. Lastly, we have about 35 servers (HP DL385) in our regional offices. As such, each server type required a slightly different approach.
We found that because we have a large number of home directories and ZEN NAL app objects, as well as an IDM environment in use that all of our migrations would be done using the ID Transfer scenario. The exception to this is our NCS Cluster (which has not been done yet). Because the majority of our regional servers also have GroupWise on them, we figured it would be quicker to just migrate all the services, and then do an ID Transfer. As such, this is a variation on a theme.
As always, TEST, and TEST some more. Use whatever method works best for you, preferably one that is supported.
I've tried to remove all server names, IP addresses, and incriminating evidence.
Lastly, read the product documentation as there are some pre-requisites (ie, make sure eDir is healthy, a specific eDir version, backups, etc.) you need to make sure you have met.
Before you even attempt to install OES2, you must make a few decisions:
In this example, I am installing OES2 SP2 64-bit on an HP BL460c blade with multipathing onto a Xiotech Magnitude 3000 SAN.
First, if this is a dual-SAN connected server, make sure to disconnect the secondary path and only run the setup with the first connection.
There are many ways to install OES2. We find it faster to install from the network, after we boot from the SLES 10 SP3 DVD. However, you can also use the local DVD/CD drive, or for the blade servers, use the HP ILO to accomplish the same thing (although ILO is limited to 100MB connection, so it's usually faster to boot from the virtual DVD, and pull the install DVD/CD info from the Linux server we setup as an install source). If you are using the CD/DVD method, please use the SLES 10 SP3 DVD media (to avoid CD swapping). The OES install is only on CD.
If using the media, boot from the SLES 10 SP3 media, select Installation and hit Enter. Then you can skip to page 3. Currently we are only using OES2 SP2 64-bit codebase.
On page 8, you would modify the instructions so that you select CD for the OES2 SP2 CD media (if using the local CD/DVD drive or HP ILO virtual media).
Alternative boot method:
Ie: install=nfs://slesadmin.abc.com/install/SLES10SP3_32/CD1 hostip=192.168.10.9 netmask=255.255.255.0 gateway=192.168.1.1 nameserver=192.168.10.10
Next
Check the "include add-on products" and click Next
Click Add
Click NFS
Then click Next.
Click OK. Be careful here to make sure the "bit" of OES2 matches the "bit" of your SLES (ie, 32-bit SLES and 32-bit OES2 or 64-bit SLES and 64-bit OES2). You do not want to mix the two.
Click Yes, and then Next.
Click Next
Set the "Hardware Clock Set To" to Local Time (this means you're telling it what the CMOS clock is set to, and on the HP Blades, it's ALWAYS local time). Make sure USA and Eastern are set as well and click Next. Later we'll configure for NTP time.
(I forgot to screenshot the above screen for OES2 SP2 64-bit, so it shows SP1).
Click Partitioning (we need to change some stuff).
Click "Create Custom Partition Setup" and then click Next (what you see on the next screen may vary depending on if this is a dual-pathed Blade or the standalone regional servers). Your environment may vary and you may wish to use LVM. We chose to use "native partitions".
Why do we do this? We don't like to setup one big LUN (virtual disk, logical drive, whatever your RAID hardware calls it) for / (root partition) using Reiserfs.
With OES2, you ALWAYS want to setup a dedicated LUN for your "boot" code, and leave a separate LUN for NSS (if using NSS). NEVER allocate all your disk space to one LUN. Think of this as NetWare, in the sense that you had your DOS partition separate from NetWare partitions, and SYS volume separate from your other volumes.
Select Custom Partitioning and then click Next.
We have two LUNs here. A "boot" LUN (the 15.0 GB LUN) and a secondary LUN for NSS volumes. We are only going to setup the boot LUN for now.
Click Create.
Select 1: /dev/sda and click OK. (the naming will change depending upon your hardware)
Select Primary Partition and click OK
Make sure to set the file system to Ext3 and the size to 1.0 GB and the mount to /boot
Click OK
Click Create
Choose 1: /dev/sda and click OK
Choose Primary Partition and click OK
Change "file system" to Swap.
Set to 2GB and click OK (don't forget the mount point of swap)
Click Create and Primary Partition again.
Change file system to Ext3 and let it use the rest of the LUN and mount point is /
Click Finish as I'm not sure what other partitions to make at this point. You can only have 4 Primary Partitions in Linux/OES (per disk/device/LUN).
We're going to leave LUN #2 alone for now. This will be used later for NSS/EVMS volumes.
Click Finish
(again, forgot to screenshot the above for OES2 SP2 64-bit)
Click Software
We always uncheck the Novell AppArmor. For OES it will depend upon what type of install you are doing. All our OES2 servers should have the following items selected:
Depending upon your server (new install vs. migration) you may also check the "Novell Pre-Migration Server). For a new server install (as opposed to one you are going to migrate with the ID Transfer) you would NOT check that box. We choose to install NSS even if we aren't going to use it right away (again, never know when you may want/need it). I find the NCP server handy so that you can use native Linux EXT3 partitions and attach to them with Windows PC's via the Novell Client (as opposed to having to muck around with SAMBA configurations). This also adds NCP file locking if using GroupWise and the ConsoleOne Windows Management snapins.
For an Identity Transfer operation (migration), make sure that you selected the Pre-Migration Server option.
Depending on the server you are transferring, you may have to select iPrint and DHCP, in addition to other items. Scroll down and make sure you selected NSS.
I also install the C/C Compiler tools because you never know when you may need them.
(Most notably on Vmware, or if using the HP Proliant Support Pack--because it installs non-kernel drivers sometimes and therefore you need the Compiler to recompile the kernel for non-stock drivers).
Click Accept.
Click Accept again.
Click Accept again.
Click Install
Wait for it to create the partitions
It should reboot and launch the rest of the install
Enter in the password. This should be different than the eDirectory Admin password. Click Next.
Uncheck the "change hostname via DHCP". We don't give out DHCP in the server room. Follow your standard naming convention.
Identity Transfer/Migrations – Server Naming:
You must enter a TEMPORARY name here. I suggest a format of:
Temp-oldserver (ie: temp-main, temp-nw1, etc.)
Click Next.
Set firewall to disabled (for now).
Also Disable IPv6. I've had issues with it in the past.
Click Network Interfaces
On the Blade servers, the first HP NIC is usually the "primary" one. You must double-check by looking at ILO for the MAC address and comparing to what SLES shows.
Sometimes Linux assigns the NIC in reverse order (ie, 2nd NIC will be eth0, 1st NIC will be eth1). Make sure to find the MAC address of the NIC and compare against what Linux finds (click Edit and you can go to the Advanced section and verify the hardware address). Otherwise you may THINK that first NIC listed is the primary NIC (eth0) and it's not. Then your install fails later because of this. Alternatively you can disable the secondary NIC in the BIOS and re-enable it later. (We have had problems with the DL385 HP servers where disabling the 2nd onboard NIC also disables the on-board RAID controller for some odd reason).
Set the IP and Netmask.
Click Hostname and Name Server
FOR Identity Transfer/Migration:
You must use a TEMPORARY IP address. When the migration is finished, the temporary server name and IP will be removed automatically from the OES2 server.
Enter the appropriate DNS servers and click OK (double-check that hostname and domain are still correct).
Click the Routing button
Enter the default gateway and click OK (obviously the gateway can differ depending on where the server is installed).
Click Next
I believe it puts the "configured" NIC on the top now, even though we hopefully configured the second one. Click Next.
Select the VNC Remote Administration so that it is enabled. We choose to use this so that we can use the NRM (Novell Remote Manager) VNC Consoles option. ILO will work as well, albeit slower (and the mouse cursor has issues until you install the HP drivers). Note: There may be an issue with this but we are still waiting for a response from Novell for our active SR with VNC causing high CPU utilization.
Click Next.
We may change the Proxy section later. (obviously if your environment requires this, you can enable it now or later—it's up to you).
I usually skip the test.
Click Next
DO NOT use LDAP with OES. OES uses it's own LDAP server (eDirectory). You CANNOT use OpenLDAP and eDir at the same time.
For this, we'd install into the existing tree. Insert the proper tree name. (Assuming you are installing into an existing environment, vs. a brand new install).
I also uncheck the Require TLS for Simple Binds. It tends to cause issues if you don't uncheck it. DSFW may require different options (we don't use it here). I also believe SecretStore is optional as well (usually you'll be told if they need to be installed or not).
Click Next.
Input whatever IP contains a replica of the partition you plan to install this server into. If you have a DS Master or R/W replica server, I suggest you use that.
Enter the admin userid in LDAP format (ie: cn=admin,o=something) and the password.
Please note there may be an issue here if you have funky/long passwords (passwords with "odd" characters in them).
Click Next.
Be careful here. Enter the server context in LDAP format (there's no browse button, so you have to know where the server will be installed to). I leave everything else the same.
We may change the DIB location later, not sure yet. (It really depends upon how large your dib set is and if you want or have dedicated a mount point for /var).
Click Next.
For now, I pointed to our Unix server for time. Basically if you already have an NTP time source, point it to that. If you don't, you can probably use one of the public ones out there. If this is going into an existing eDir tree, I strongly suggest you point to the same NTP source as your other NW or OES2 servers are pointed to.
Be sure to enter the SLP information and add the IP's in there. Click Next.
I leave these as-is. Click Next.
I click Next here.
For us, we also scrolled down to the LUM section and configured it. We chose to LUM-enable ALL Services except for FTP currently. You can do this later, but if you know you want to LUM-enable everything, might as well do it now.
(as an example, it won't LUM enable login, etc. We chose to change those items).
You would click the "Linux User Management" to configure.
The Directory Server Address should be the IP of the OES2 server you're currently installing. Normally all the blanks are filled correctly at this point. Leave the proxy user/password section blank. Just make sure that the Unix config context is pointed to the highest level in your tree (usually the O=ABC or whatever), and that the Unix workstation object context MATCHES where the server will be installed to (ie, the edirectory container).
I click Next here.
Click the Select All and then UNCHECK ftp. (again, up to you)
Then click Next
You are then taken back to the original install screen and you can click Next to proceed.
Now wait a long time for this and iManager to install.
Note: There is a "bug" in this install. If you are installing a server (the 2nd or 3rd server) into an existing eDir tree with just a [ROOT] replica and it's a large tree, and it takes more than 5 minutes to add the replicas onto the server, your eDirectory install will fail here. No amount of retries will fix the situation in that case. I don't know why Novell coded it this way (NetWare does not have this problem). Your only remedy in that case is to partition the tree further, or add two more NetWare servers and have this be the 4th server, so that it won't get an automatic replica copy.
For now we leave this be local. We may change to LDAP later, but unsure (plus there's a LUM module in OES as well). Basically this means that any accounts created on this Linux server are ONLY stored on this server (same for passwords). We don't plan on creating other "local only" accounts.
Click Next.
Click Next
Click Yes.
Click Next.
Click Next.
We can always clone it for autoyast later, but until we get all the specifics ironed out, I'm un-checking this and click Finish.
Technically at this point, you are finished with the install. However, it is STRONGLY advised that you patch the server before:
This assumes you are using an SMT server to patch. You can use alternative methods to patch however. The key point is that you really really really want to patch your system BEFORE attempting any further configuration or migration changes.
Once the server is up and running, before creating any NSS partitions or enabling Multi-pathing, we need to apply updates. We have setup an SMT (Subscription Management Tool) server on Linux (the same server that hosts our install media and our Auto-yast configurations). SMT is a patch "proxy" server that downloads all the patches from the Novell Customer Center (NCC) so that we don't have to configure every server to download these patches from the internet. Instead, we point the servers to the SMT server. Think of it as a "lite" version of Patchlink for Linux/OES2. If you do not have an SMT you can register with the NCC and put your registration codes in and pull the updates from Novell's servers.
You may either use the SLES/OES2 server to get the SMT conf file or you can use WinSCP and copy it from your PC to the SLES/OES2 server.
Once you have the script from the SMT server:
Type:
chmod x clientSetup4SMT.sh
Now type:
./clientSetup4SMT.sh –host smt.abc.com
That's a " - -" (dash dash without a space) in front of the host line
Hit Enter
Y
Then type:
suse_register
Hit Enter and wait
The icon will normally be orange at this point. (Green means you have all security and mandatory patches applied, but that you have OPTIONAL patches to apply. A "globe" icon means you are fully patched—even optional ones).
Click it.
It will usually come up and tell you a few patches to update. Update those (this updates the ZMD process itself).
If it needs a reboot, it will tell you.
I would advise rebooting the server at this point, as sometimes it'll hang on the next step if you don't.
After the reboot, wait a minute or two and then the icon should show up again. Click it again (unless it's a globe).
Wait a little while longer (or reboot if you want) and then it'll usually come up with a list of many packages to update.
The default list will contain security patches first, followed by "mandatory/recommended" patches to SLES10 and OES2.
I usually apply those (reboot needed I believe)
After that, you'll usually get a GREEN icon like above. I do NOT apply the optional patches.
After patching, you may have problems with iPrint Plugins in iManager on OES2 SP2. Check out TID #7005152. You'll have to change the property pages for two objects.
This section is how to enable multi-pathing (MPIO) when booting from the SAN. As you can see, we have two paths.
Now, we follow TID #3594167 (which states we need a fully patched system, so that's why I patch first).
So far we've done steps 1-4, now we do step 5.
(Quit out of the partitioner)
Open a terminal and type:
(as per step 5)
Step 6:
Type:
NEW STEP:
Edit multipathd.conf file as per Xiotech:
At the prompt type:
gedit /etc/multipath.conf
Enter the information as shown:
(note the spaces).
We may change round-robin, but I'm not sure yet. Have to find out from Novell about clustering and if this is acceptable.
STEP 8 from the Novell TID:
(there didn't appear to be any changes required when I tested)
STEP 9:
STEP 10:
Reboot the server
STEP 11:
Open a terminal prompt and type:
multipath –ll
Here's a key for the output of the multipath command:
For the OES2 Cluster servers, this section should only be used for ADDING new LUNs. There is nothing we need to currently do for EXISTING NSS LUNS.
To configure NSS, you must add devices to the physical server first. This means carving out LUNs.
Currently, on a standalone server, we currently have one LUN for all volumes. On the Cluster servers, each volume is a LUN.
For OES2, we will be creating one LUN for the OS, and at LEAST one more LUN for the data volumes.
Use the appropriate utility for creating the LUN. It is strongly recommended that you do not create multiple LUNs of the same size because it makes it difficult to figure out which LUN is to be used for what. If you do need identical LUNs, create the LUN one at a time, then create the NSS volume/pool on it, and then create the second LUN, etc. That way there's no confusion.
Do not partition the LUN. Ensure that the OES2 server sees the LUN. You can verify by running the Yast -> Partitioner.
Once you've verified that the system can see the LUN (may require a reboot), you can then use iManager to create the NSS pools/partitions in preparation for migration.
We are going to create pools with the SAME NAME and equal or greater size for servers that we are going to migrate from NetWare.
To do this, login to iManager on an OES2 server (you don't have to use the iManager on the actual OES2 server you're working on, but you can do that if you want).
Go into iManager -> Storage -> Devices
Use the magnifying glass icon thingy to find the server you are wanting to create the NSS volume on and wait for it to retrieve the system information. (sometimes it takes a few seconds).
Select the appropriate device from the list (in this case, I am selecting "sdb"). You'll notice that the Initialize button is now selectable. Double-check the Capacity to make sure you have selected the proper LUN. Please use this with caution. If you initialize the wrong disk, you will permanently erase all the data on it.
Now click Initialize Disk.
If you are certain, click OK.
After a few seconds, the Devices screen in iManager will have updated to reflect the newly initialized disk.
Now, access the Volumes menu on the left-hand side.
Click New
Enter the volume name (if migrating make sure this volume name matches the name of the volume from the "source" server).
Click Next
Click New Pool
I like to keep the volume and pool name the same (it'll add a "pool" to the pool in eDirectory).
Click Next
Check the box next to "used size" and enter in the amount you want to use. For most of our servers we are letting the volume grow to the size of the pool. The Pool, by default, will be the same size as the LUN itself. Check the box Mount on Creation
Click Finish
Check the box for the desired pool and click Next (this is assigning the volume to the pool). A quota of zero means that it can use all the space.
So I checked the box next to "GW" and clicked Next
For our (your environment may vary) NON-GroupWise volumes, you want the following attributes. We use Symantec NetBackup which doesn't let us use Compression. Otherwise we would enable it:
For GW volumes, you want:
We are not going to enable Compression on any volumes. NetBackup doesn't work with it (it will decompress them anyway).
I checked the "Allow Mount point to be Renamed" and clicked Finish
NOTE: While the Novell OES2 documentation states that it's advised to NOT use the Unix lookup Namespace (in fact, it defaults to Long), it has been suggested that for GROUPWISE only (with less than a million files) that you use Unix to force case-sensitivity. I have tested unix namespace with groupwise and it seems to work okay. Plus it makes changing the case significantly easier.
According to the docs, if you enable directory quotas (like for H drives and stuff), you have to do this after you create the volume:
/etc/init.d/ncp2nss restart
Lastly, for GroupWise volumes, we have to use a special switch in the /etc/fstab file to not adversely affect performance.
Edit the /etc/fstab file (you can use vi or gedit)
Find the line where it mounts the GW volume and add the word: noatime before the 0,0 like shown below:
During the testing scenario, we discovered that if you choose DHCP during the installation, it doesn't prompt you for the same installation screens that you need, vs if you install DHCP after the initial server install.
Based upon that (in order to get the same screens as Novell's own documentation), you have to install OES2 without DHCP, and then after the server is installed and setup, go into YaST and add DHCP pattern.
So this assumes the server has been installed and setup, but nothing migrated yet.
Therefore, go into YaST -> Open Enterprise Server -> OES Install
Support
Documentation
Learning Services
Partner Programs
-
MigrationDeletedUser
-
Cancel
-
Vote Up
0
Vote Down
-
-
Sign in to reply
-
More
-
Cancel
Comment-
MigrationDeletedUser
-
Cancel
-
Vote Up
0
Vote Down
-
-
Sign in to reply
-
More
-
Cancel
Children