Symantec Identity Manager - Linux Install Guide
search cancel

Symantec Identity Manager - Linux Install Guide

book

Article ID: 33190

calendar_today

Updated On:

Products

CA Identity Manager CA Identity Governance CA Identity Portal

Issue/Introduction

This guide will assist you in properly installing CA Identity Manager (IDM) on Linux Operating Systems.

 

Environment

Component: Identity Manager 14.X

Resolution

Instructions: 


IDM 14.3 related link
https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-enterprise-software/layer7-identity-and-access-management/identity-manager/14-3/installing/installation-prerequisites/software-specifications/operating-system-requirements.html

IDM 14.4 related link:
https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/identity-manager/14-4/installing/installation-prerequisites/software-specifications/operating-system-requirements.html

     NOTE: You can use newer versions of the packages.
     NOTE: If you wish to use Provisioning Manager, you will need to download CA IdentityMinder 14.x Server components for Windows and install Provisioning Manager on a Windows OS.

 

  • Login into the system as root

 

  • Prior to running each of the installers, execute the following commands:
    • mv /dev/random /dev/random.orig
    • ln -s /dev/urandom /dev/random
    • chkconfig iptables off
    • service iptables stop
    • vi /etc/selinux/config
      • SELINUX=permissive
    • setenforce 0

 

  • Install CA Directory
    • Install required prerequisite packages
      • yum install tcsh
    • Create CA Directory User Store (Only use this step if your User store will be CA Directory) (EXAMPLE ONLY)
      • Get a copy of NeteAuto.ldif from the Identity Manager samples and upload it to the "Your Own Path" directory
      • su - dsa
      • dxnewdsa mydsa 11389 dc=security,dc=com
      • dxserver stop mydsa
      • dxloaddb mydsa "Your Own Path"/NeteAuto.ldif
      • dxserver start mydsa
      • dxserver status

 

    • Install Provisioning Directory
      • Install required prerequisite packages
        • yum install glibc.i686
        • yum install libXext.i686
        • yum install libXtst.i686
        • yum install ncurses-devel.i686
        • yum install ksh

 

      • Make a temporary directory, and download the IM 12.6/14.x installer (tar file) to that directory
      • tar -xvf GEN01140749E.tar
      • cd Provisioning/ProvisioningDirectory
      • ./setup -console
        • to get past the license agreement, hold down the enter key for a while, then enter "q" to quit, then enter "Y"
        • when prompted for the provisioning server host, enter:  yourHostName
        • Please configure your shared secret password (Save in a secure location, you will need this password in the future)

 

  • Configure SEMMNI parameter in kernel
    • vi /etc/sysctl.conf
    • Add the following at the end of the file:
      • kernel.sem = 250 32000 32 260
    • /sbin/sysctl -p

 

  • Install Provisioning Server
    • Install required prerequisite packages
      • yum install compat-libstdc++.i686
      • yum install libstdc++.i686
      • yum install libidn.i686
      • yum install libgcc.i686

 

    • From the temporary directory where you unzipped the IM 12.6.x/14.x installer:
      • cd Provisioning/ProvisioningServer
      • ./setup -console
        • to get past the license agreement, hold down the enter key for a while, then enter "q" to quit, then enter "Y"
        • when prompted for the directory server host, enter:  yourHostName
        • Please configure your shared secret password (Save in a secure location, you will need this password in the future)
        • for the username, enter:  etaadmin or your desired name (Save in a secure location, you will need this in the future)
        • for the connectors you  wish to select, enter: *

 

  • Install Connector Server
    • Install required prerequisite packages
      • yum install glibc.i686
      • yum install libX11.i686
      • yum install libxcb.i686
      • yum install libXtst.i686
      • yum install libXau.i686
      • yum install libXi.i686
      • yum install libXext.i686
      • yum install nss-softokn-freebl.i686
      • yum install libXmu.i686
      • yum install libXft.i686
      • yum install libXpm.i686

 

    • From the temporary directory where you unzipped the IM 12.6.x/14.x installer:
      • cd Provisioning/ConnectorServer
      • ./setup -console
        • to get past the license agreement, hold down the enter key for a while, then enter "q" to quit, then enter "Y"
        • when asked whether to register the connection to the provisioning server, enter "Y"
        • when prompted for the provisioning server host, enter:  yourHostName
        • for the username, enter: etaadmin or your desired name (Save in a secure location, you will need this in the future)
        • Please configure your shared secret password (Save in a secure location, you will need this password in the future)

 

  • 4016: IM Installation
    • Login as root
    • Configure /etc/hosts as needed
    • Install required prerequisite packages
        • yum install glibc.i686
        • yum install libXext.i686
        • yum install libXtst.i686
        • yum install ncurses-devel.i686
        • yum install ksh

 

    • JDK(example)
      • NOTE: JAVA 1.7u72 has a bug please avoid this version.
      • Download JDK 1.7u79 (jdk-7u79-linux-x64.tar.gz) to the /opt folder
        • 1.8.x depending on IDM version.
      • tar -xvf jdk-7u79-linux-x64.tar.gz
      • Upload Unlimited JCE Policy (UnlimitedJCEPolicyJDK7.zip) to the /opt folder
      • unzip UnlimitedJCEPolicyJDK7.zip
        • if using 1.8 you will need the corresponding JCE file
      • copy the two jar files to /opt/jdk1.7.0_71/jre/lib/security

 

    • JBOSS (example)
      • Upload JBoss EAP 6.4 (jboss-eap-6.4.0.zip) to the /opt folder
      • unzip jboss-eap-6.4.0.zip

 

    • Install IM Server (example)
      • From the temporary directory where you unzipped the IM 12.6/14.x installer:
        • ./ca-im-12.6.x-linux.bin -i console
          • to get past the license agreement, hold down the enter key, then enter "Y"
          • when prompted for which options to select enter:  1,3
          • when prompted for the app server, choose your application server, and enter the path to where application server is installed
          • when prompted for the jdk, select option 1, and enter the path to where the jdk is installed, including "/bin/java"
          • when prompted for the database, select either SLQ or Oracle, and enter the necessary parameters.
          • when prompted to enter a username enter: imadmin or your any admin account name of your choice (Save in a secure location, you will need this in the future)
          • Please configure your shared secret password (Save in a secure location, you will need this password in the future)

 

    • After installation completes:
      • Start up your application server and confirm functionality.

 

Additional Information:

Here is a list of common errors and resolutions:

  • EXEC(err): -bash: /src/CADirectory/dxserver/samples/impd-main/setup.sh: /bin/csh: bad interpreter: No such file or directory (When installing provisioning directory)  

      Resolution: 

      Confirm that you have installed csh / reinstall csh

 

  • Checking operating system...

    Checking kernel parameters for required minimum values...

    Cannot find version information for existing installation. Installation procedure aborted.

     

    Resolution: 

     

    Check your eCSinstall and confirm you are not experiencing any kernel value problems if not try removing the following file and reinstall.

     

    /etc/.ecspath

 

  • An earlier version of CA Identity Manager has been detected (12.6.5.0.386), but

    the Installer is unable to locate the installation files

    Please uninstall the previous version of CA Identity Manager and rerun.

     

    Resolution:

     

    In the path /var exists some hide files that you need to erase:

    .com.zerog.registry.xml and another file with the name : .CA_configuration_settings find and delete those.

 

  • Custom Action:

                              Status: ERROR

                              Additional Notes: ERROR - Command failed: Invoking Framework Installer

    Return Value: /tmp/498449.tmp/install_fw.sh: line 1: /home/nambiar/install/idm_install\Framework\iamfw.exe: No such file or directory

     

     

    Stdout: {2}

    Stderr: {3}

     

    Cause / Resolution:

     

    If you did not untar the file locally before and used winscp or filezilla to transfer the file the binary sometimes gets messed up. Please completely delete your install media, and execute tar -xvf IDM media.tar locally on the machine.