Cluster Server Installation Guide for Solaris x64 5.0 - Storage ...

Cluster Server Installation Guide for Solaris x64 5.0 - Storage ... Cluster Server Installation Guide for Solaris x64 5.0 - Storage ...

sfdoccentral.symantec.com
from sfdoccentral.symantec.com More from this publisher
13.07.2015 Views

28 Preparing to install and configure VCSPreparing to install VCS 5.06 Review the output as the installvcs program checks for the installedpackages on the system.The installvcs program lists the packages that will be installed on thesystem. Press Enter to continue.7 Review the output as the installer installs the root broker on the system.8 Enter y when the installer prompts you to configure the Symantec ProductAuthentication Service.9 Enter a password for the root broker. Make sure the password contains aminimum of five characters.10 Enter a password for the authentication broker. Make sure the passwordcontains a minimum of five characters.11 Press Enter to start the Authentication Server processes.Do you want to start Symantec Product Authentication Service processes now? [y,n,q] y12 Review the output as the installer starts the Authentication Service.13 If you plan to configure the Authentication Service during VCS installation,choose to configure the cluster in secure mode when the installer promptsyou.See “Installing and configuring VCS 5.0” on page 48.Creating encrypted files forSymantec Product Authentication ServiceCreate encrypted files only if you plan on choosing the semiautomatic mode thatuses an encrypted file to configure the Authentication Service. The encryptedfiles must be created by the administrator on the root broker node. Theadministrator must create encrypted files for each node that would be a part ofthe cluster before you configure the Authentication Service for VCS. See VeritasCluster Server User’s Guide for more information. You can configure theAuthentication Service during or after VCS installation.See “Symantec Product Authentication Service” on page 20.To create encrypted files1 Determine the root broker domain name. Enter the following command onthe root broker system:east> # vssat showalltrustedcredsFor example, the domain name would resemble“Domain Name: root@east.symantecexample.com” in the output.

Preparing to install and configure VCSPreparing to install VCS 5.0292 For each node in the cluster, make sure that you have created an account onroot broker system.For example, to verify on node north:east> # vssat showprpl --pdrtype root \--domain root@east.symantecexample.com --prplname north■■If the output displays the principal account on root broker for theauthentication broker on the node, then delete the existing principalaccounts. For example:east> # vssat deleteprpl --pdrtype root \--domain root@east.symantecexample.com \--prplname north --silentIf the output displays an error similar to “Failed To Get Attributes ForPrincipal,” then the account for given authentication broker is notcreated on this root broker. Proceed to step 3.3 Create a principal account for each authentication broker in the cluster. Forexample:east> # vssat addprpl --pdrtype root --domain \root@east.symantecexample.com --prplname north \--password password --prpltype serviceYou must use this password that you create in the input file for theencrypted file.4 Make a note of the following information that is required for the input filefor the encrypted file.■■■■■hash - The root hash string that consists of 40 characters, as shown bythe command:east> # vssat showbrokerhashidentity - Authentication broker identityThe value that you provide for --prplname in step 3 (for example,north).password - Authentication broker passwordThe value that you provide for --password in step 3.root_domain - Domain name of the root broker systemThe value that you determined in step 1.broker_admin_password - Authentication broker password forAdministrator account on the nodeProvide a password of at least five characters long.5 For each node in the cluster, create the input file for the encrypted file.The installer presents the format of the input file for the encrypted filewhen you proceed to configure the Authentication Service using encryptedfile. For example, the input file for authentication broker on north wouldresemble:

28 Preparing to install and configure VCSPreparing to install VCS <strong>5.0</strong>6 Review the output as the installvcs program checks <strong>for</strong> the installedpackages on the system.The installvcs program lists the packages that will be installed on thesystem. Press Enter to continue.7 Review the output as the installer installs the root broker on the system.8 Enter y when the installer prompts you to configure the Symantec ProductAuthentication Service.9 Enter a password <strong>for</strong> the root broker. Make sure the password contains aminimum of five characters.10 Enter a password <strong>for</strong> the authentication broker. Make sure the passwordcontains a minimum of five characters.11 Press Enter to start the Authentication <strong>Server</strong> processes.Do you want to start Symantec Product Authentication Service processes now? [y,n,q] y12 Review the output as the installer starts the Authentication Service.13 If you plan to configure the Authentication Service during VCS installation,choose to configure the cluster in secure mode when the installer promptsyou.See “Installing and configuring VCS <strong>5.0</strong>” on page 48.Creating encrypted files <strong>for</strong>Symantec Product Authentication ServiceCreate encrypted files only if you plan on choosing the semiautomatic mode thatuses an encrypted file to configure the Authentication Service. The encryptedfiles must be created by the administrator on the root broker node. Theadministrator must create encrypted files <strong>for</strong> each node that would be a part ofthe cluster be<strong>for</strong>e you configure the Authentication Service <strong>for</strong> VCS. See Veritas<strong>Cluster</strong> <strong>Server</strong> User’s <strong>Guide</strong> <strong>for</strong> more in<strong>for</strong>mation. You can configure theAuthentication Service during or after VCS installation.See “Symantec Product Authentication Service” on page 20.To create encrypted files1 Determine the root broker domain name. Enter the following command onthe root broker system:east> # vssat showalltrustedcredsFor example, the domain name would resemble“Domain Name: root@east.symantecexample.com” in the output.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!