Welcome Serena Central users! CLICK HERE
The migration of the Serena Central community is currently underway. Be sure to read THIS MESSAGE to get your new login set up to access your account.
Highlighted
mjuricek1 Absent Member.
Absent Member.
1100 views

IDM 4.7 - configure UserApp to use existing driverset

Hi guys,

I am struggling really a lot with new IDM 4.7 and with distributed installation.
I do not comment installation of UserApp. Installer installs everything (postgres, sspr, osp,...) on the one server without asking but OK. We can simply do not need to use it and configure UserApp later. But I did not find a way how to install e.g. tomcat from IDM 4.7 media only and install SSPR only there. Also from installation media. It was super convenient in the previous versions of IDM. And also no comment to uninstaller which destroys everything what you have previously done. ..."good work" NetIQ.
The most painful thing is configure.sh
Did you someone try to configure IDM 4.7 UserApp to use existing driverset? I mean second driverset what you can have in your environment. We have few driversets in our IDM implementation and on of these driversets is used for UserApplication and other simple drivers.
Basically as an example, we have driverset2 on the lnxsrv2 where IDM 4.7 engine is installed too. eDirectory running on this server is rw replica of the lnxsrv1 where IDM 4.6.2 is running and drivers are in driverset1.
When I start configure.sh from the IDM 4.7 installation media, one of the steps is to define driverset name and path where the driverset will be placed. So I set driverset2, then path to driverset container and finish the installation/configuration process.
After, I open iManager and surprise! Driverset2 is without assigned server, all existing drivers are (of course) in undefined state and new UserApplication drivers are without configuration at all.

Did you try to install new IDM 4.7 in distributed environment too? Do you have similar issues? How do you deal with it?

Regards,
Milan
Labels (1)
Tags (2)
0 Likes
7 Replies
Micro Focus Expert
Micro Focus Expert

Re: IDM 4.7 - configure UserApp to use existing driverset

On 4/10/18 4:24 AM, mjuricek wrote:
>
> Hi guys,
>
> I am struggling really a lot with new IDM 4.7 and with distributed
> installation.
> I do not comment installation of UserApp. Installer installs everything
> (postgres, sspr, osp,...) on the one server without asking but OK. We
> can simply do not need to use it and configure UserApp later. But I did
> not find a way how to install e.g. tomcat from IDM 4.7 media only and
> install SSPR only there. Also from installation media. It was super
> convenient in the previous versions of IDM. And also no comment to
> uninstaller which destroys everything what you have previously done.
> ..."good work" NetIQ.
> The most painful thing is configure.sh
> Did you someone try to configure IDM 4.7 UserApp to use existing
> driverset? I mean second driverset what you can have in your
> environment. We have few driversets in our IDM implementation and on of
> these driversets is used for UserApplication and other simple drivers.
> Basically as an example, we have driverset2 on the lnxsrv2 where IDM 4.7
> engine is installed too. eDirectory running on this server is rw replica
> of the lnxsrv1 where IDM 4.6.2 is running and drivers are in
> driverset1.
> When I start configure.sh from the IDM 4.7 installation media, one of
> the steps is to define driverset name and path where the driverset will
> be placed. So I set driverset2, then path to driverset container and
> finish the installation/configuration process.
> After, I open iManager and surprise! Driverset2 is without assigned
> server, all existing drivers are (of course) in undefined state and new
> UserApplication drivers are without configuration at all.
>
> Did you try to install new IDM 4.7 in distributed environment too? Do
> you have similar issues? How do you deal with it?
>
> Regards,
> Milan
>
>

Greetings,
I would suggest opening a Service Request on this. For the IDM 4.7
release, the ability to install in a distributed environment was removed
in the new Linux install/configure. If you are on Windows, you will
have the "same" installers from IDM 4.6 so it is possible to install in
a fully distributed environment.

--
Sincerely,
Steven Williams
Principal Enterprise Architect
Micro Focus
0 Likes
ukrause Trusted Contributor.
Trusted Contributor.

Re: IDM 4.7 - configure UserApp to use existing driverset

@Steven: Seriously??? You (NetIQ / MF) remove the distributed Installer for the most used platform and leave it on Windows??? What the heck is going on here? Event the fact that there is no Option to use existing driver sets is far away from reality.

stevewdj;2478950 wrote:
On 4/10/18 4:24 AM, mjuricek wrote:
>
> Hi guys,
>
> I am struggling really a lot with new IDM 4.7 and with distributed
> installation.
> I do not comment installation of UserApp. Installer installs everything
> (postgres, sspr, osp,...) on the one server without asking but OK. We
> can simply do not need to use it and configure UserApp later. But I did
> not find a way how to install e.g. tomcat from IDM 4.7 media only and
> install SSPR only there. Also from installation media. It was super
> convenient in the previous versions of IDM. And also no comment to
> uninstaller which destroys everything what you have previously done.
> ..."good work" NetIQ.
> The most painful thing is configure.sh
> Did you someone try to configure IDM 4.7 UserApp to use existing
> driverset? I mean second driverset what you can have in your
> environment. We have few driversets in our IDM implementation and on of
> these driversets is used for UserApplication and other simple drivers.
> Basically as an example, we have driverset2 on the lnxsrv2 where IDM 4.7
> engine is installed too. eDirectory running on this server is rw replica
> of the lnxsrv1 where IDM 4.6.2 is running and drivers are in
> driverset1.
> When I start configure.sh from the IDM 4.7 installation media, one of
> the steps is to define driverset name and path where the driverset will
> be placed. So I set driverset2, then path to driverset container and
> finish the installation/configuration process.
> After, I open iManager and surprise! Driverset2 is without assigned
> server, all existing drivers are (of course) in undefined state and new
> UserApplication drivers are without configuration at all.
>
> Did you try to install new IDM 4.7 in distributed environment too? Do
> you have similar issues? How do you deal with it?
>
> Regards,
> Milan
>
>

Greetings,
I would suggest opening a Service Request on this. For the IDM 4.7
release, the ability to install in a distributed environment was removed
in the new Linux install/configure. If you are on Windows, you will
have the "same" installers from IDM 4.6 so it is possible to install in
a fully distributed environment.

--
Sincerely,
Steven Williams
Principal Enterprise Architect
Micro Focus
0 Likes
Micro Focus Expert
Micro Focus Expert

Re: IDM 4.7 - configure UserApp to use existing driverset

On 4/12/18 2:26 AM, ukrause wrote:
>
> @Steven: Seriously??? You (NetIQ / MF) remove the distributed Installer
> for the most used platform and leave it on Windows??? What the heck is
> going on here? Event the fact that there is no Option to use existing
> driver sets is far away from reality.
>
> stevewdj;2478950 Wrote:
>> On 4/10/18 4:24 AM, mjuricek wrote:
>>>
>>> Hi guys,
>>>
>>> I am struggling really a lot with new IDM 4.7 and with distributed
>>> installation.
>>> I do not comment installation of UserApp. Installer installs

>> everything
>>> (postgres, sspr, osp,...) on the one server without asking but OK. We
>>> can simply do not need to use it and configure UserApp later. But I

>> did
>>> not find a way how to install e.g. tomcat from IDM 4.7 media only and
>>> install SSPR only there. Also from installation media. It was super
>>> convenient in the previous versions of IDM. And also no comment to
>>> uninstaller which destroys everything what you have previously done.
>>> ..."good work" NetIQ.
>>> The most painful thing is configure.sh
>>> Did you someone try to configure IDM 4.7 UserApp to use existing
>>> driverset? I mean second driverset what you can have in your
>>> environment. We have few driversets in our IDM implementation and on

>> of
>>> these driversets is used for UserApplication and other simple drivers.
>>> Basically as an example, we have driverset2 on the lnxsrv2 where IDM

>> 4.7
>>> engine is installed too. eDirectory running on this server is rw

>> replica
>>> of the lnxsrv1 where IDM 4.6.2 is running and drivers are in
>>> driverset1.
>>> When I start configure.sh from the IDM 4.7 installation media, one of
>>> the steps is to define driverset name and path where the driverset

>> will
>>> be placed. So I set driverset2, then path to driverset container and
>>> finish the installation/configuration process.
>>> After, I open iManager and surprise! Driverset2 is without assigned
>>> server, all existing drivers are (of course) in undefined state and

>> new
>>> UserApplication drivers are without configuration at all.
>>>
>>> Did you try to install new IDM 4.7 in distributed environment too? Do
>>> you have similar issues? How do you deal with it?
>>>
>>> Regards,
>>> Milan
>>>
>>>

>> Greetings,
>> I would suggest opening a Service Request on this. For the IDM 4.7
>> release, the ability to install in a distributed environment was removed
>> in the new Linux install/configure. If you are on Windows, you will
>> have the "same" installers from IDM 4.6 so it is possible to install in
>> a fully distributed environment.
>>
>> --
>> Sincerely,
>> Steven Williams
>> Principal Enterprise Architect
>> Micro Focus

>
>

Greetings,
I would encourage you to please open the Service Request and
provide your feedback there.

--
Sincerely,
Steven Williams
Principal Enterprise Architect
Micro Focus
0 Likes
mjuricek1 Absent Member.
Absent Member.

Re: IDM 4.7 - configure UserApp to use existing driverset

SR is already raised (not for a feedback but for a help with installation).
I asked our customer to remove server from replica ring and install new server. We will start from scratch again on Friday, April 13. If we have any issues with installation again, NetIQ support will connect remotely afternoon.

Regards,
Milan
0 Likes
Micro Focus Expert
Micro Focus Expert

Re: IDM 4.7 - configure UserApp to use existing driverset

On 4/12/18 9:34 AM, mjuricek wrote:
>
> SR is already raised (not for a feedback but for a help with
> installation).
> I asked our customer to remove server from replica ring and install new
> server. We will start from scratch again on Friday, April 13. If we have
> any issues with installation again, NetIQ support will connect remotely
> afternoon.
>
> Regards,
> Milan
>
>

Greetings Milan and Uwe,
It has been pointed out that I might have misunderstood your
original post. If you were looking on how to install SSPR only, that is
covered in the 4.7 documentation in Section 10.3.3 "Performing an
Interactive Installation of SSPR" Here is the link:

https://www.netiq.com/documentation/identity-manager-47/setup_linux/data/t458jh1p4lw1.html#t45mytot6f0b


Also, what I was thinking of as a distributed environment may not
match your definition. If that is the case, I am sorry for any confusion.

Related, in this set-up are you upgrading from 4.6 to 4.7?




--
Sincerely,
Steven Williams
Principal Enterprise Architect
Micro Focus
0 Likes
tburt Absent Member.
Absent Member.

Re: IDM 4.7 - configure UserApp to use existing driverset

Milan,

I see two concerns being raised here;
1. How do you handle a distributed install of SSPR
2. Problems with upgrading a server to 4.7

With regard to question/problem#1 we actually do support distributed product installation. You specifically asked about tomcat & sspr. If you look to section 10.3.3 of the install docs, you will see how to install SSPR on its own.

On item#2, that sounds like a cross between upgrade and new install but I am not completely following the process. It sounds like you have opened a SR so we should be able to address it. The scenario you outlined, as I understand it, should be achievable.
0 Likes
mjuricek1 Absent Member.
Absent Member.

Re: IDM 4.7 - configure UserApp to use existing driverset

ok, we installed a new server from scratch and basically all works fine. I was more careful only. I found and error in the log during and installation process of UserApplications. The problem was that the temporary keystore was not created in /tmp and certificates were not imported to the new created keystore. We do not know why this happened but I had to import CA cert to the right keystore before ./configure part and then the UA drivers were created without problems.
Another problem was that when I uninstalled all components, some rpm packages are still installed/registered. I tried to uninstalled them all and manually deleted all novell/netiq directories. But I forgot for one package. When the next installation started, this package was not installed and therefore the system-ctl service was not created.

...and basically yes, we do a combination of migration and new installation:
- new server is added to the same tree and new server is added to the driverset. The UA driver is configured to run on the new server.
- migrate UA driver (which also required one manual change in eDIR - you have to change manually the driver version in AppConfig object).
- install new UserApp in on the new server (do not create DB now but to file as existing)
- import postgreSQL DB from old server to new
- adjust ism-configuration.properties to use "old/migrated" UA driver + set flag to generate DB tables (this should create missing tables).

Now we are struggling with DB migration. We wanted to take the DB from IDM v.4.5.3 but obviously, we have to migrate old UserApp to 4.5.6 to get some DB changes and then we will migrate the DB to the new server. This gonna happen in you test in coming days. Let's hope it will work.
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.