Installation Guide
Installation Guide Red Hat Directory Server 11 Instructions for installing Red Hat Directory Server
subscription-manager list --all --available --matches 'Red Hat Directory Server' Subscription Name: Example Subscription Provides: Red Hat Directory Server Pool ID: 5ab6a8df96b03fd30aba9a9c58da57a1 Available: 1 subscription-manager attach --pool= 5ab6a8df96b03fd30aba9a9c58da57a1 Successfully attached a subscription for: Example Subscription subscription-manager repos --enable=dirsrv-11.9-for-rhel-8-x86_64-rpms Repository 'dirsrv-11.9-for-rhel-8-x86_64-rpms' is enabled for this system. yum module install redhat-ds:11 dscreate create-template /root/instance_name.inf instance_name (str) Description: Default value: localhost instance_name = instance_name root_password (str) Description: Default value: directory manager password root_password = password create_suffix_entry (bool) Description: Default value: False create_suffix_entry = True suffix (str) Description: Default value: suffix = dc=example,dc=com dscreate from-file /root/instance_name.inf Starting installation Completed installation for instance_name systemctl status firewalld ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled) Active: active (running) since Fri 2018-06-15 14:06:33 CEST; 1h 17min ago systemctl start firewalld systemctl enable firewalld firewall-cmd --permanent --add-port={389/tcp,636/tcp} firewall-cmd --reload dscreate interactive dscreate interactive Install Directory Server (interactive mode) =========================================== Enter system's hostname [server.example.com]: Enter the instance name [server]: instance_name Enter port number [389]: Create self-signed certificate database [yes]: Enter secure port number [636]: Enter Directory Manager DN [cn=Directory Manager]: Enter the Directory Manager password: password Confirm the Directory Manager Password: password Enter the database suffix (or enter "none" to skip) [dc=server,dc=example,dc=com]: dc=example,dc=com Create sample entries in the suffix [no]: Create just the top suffix entry [no]: yes Do you want to start the instance after the installation? [yes]: Are you ready to install? [no]: yes Starting installation Completed installation for instance_name systemctl status firewalld ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled) Active: active (running) since Fri 2018-06-15 14:06:33 CEST; 1h 17min ago systemctl start firewalld systemctl enable firewalld firewall-cmd --permanent --add-port={389/tcp,636/tcp} firewall-cmd --reload https:// server.example.com :9090 systemctl status firewalld ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled) Active: active (running) since Fri 2018-06-15 14:06:33 CEST; 1h 17min ago systemctl start firewalld systemctl enable firewalld firewall-cmd --permanent --add-port={389/tcp,636/tcp} firewall-cmd --reload dscreate create-template /root/instance_name.inf instance_name (str) Description: Default value: localhost instance_name = instance_name root_password (str) Description: Default value: directory manager password root_password = password full_machine_name (str) Description: Default value: loadbalancer.example.com full_machine_name = loadbalancer.example.com strict_host_checking (bool) Description: Default value: True strict_host_checking = False create_suffix_entry (bool) Description: Default value: False create_suffix_entry = True suffix (str) Description: Default value: suffix = dc=example,dc=com dscreate from-file /root/instance_name.inf Starting installation Completed installation for instance_name systemctl status firewalld ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled) Active: active (running) since Fri 2018-06-15 14:06:33 CEST; 1h 17min ago systemctl start firewalld systemctl enable firewalld firewall-cmd --permanent --add-port={389/tcp,636/tcp} firewall-cmd --reload KRB5_KTNAME=/etc/dirsrv/slapd- instance_name /ldap.keytab systemctl restart dirsrv@ instance_name ldapsearch -H ldap:// loadbalancer.example.com -Y GSSAPI ldapsearch -H ldap:// server1.example.com -Y GSSAPI subscription-manager repos --disable dirsrv-11.8-for-rhel-8-x86_64-rpms Repository 'dirsrv-11.8-for-rhel-8-x86_64-rpms' is disabled for this system. subscription-manager repos --enable=dirsrv-11.9-for-rhel-8-x86_64-rpms Repository 'dirsrv-11.9-for-rhel-8-x86_64-rpms' is enabled for this system. yum module update redhat-ds systemctl stop dirsrv@ instance_name systemctl disable dirsrv@ instance_name db2ldif -Z instance_name -n userRoot -a /tmp/userRoot.ldif systemctl stop dirsrv@ instance_name rm /etc/dirsrv/slapd-instance_name/cert*.db /etc/dirsrv/slapd-instance_name/key*.db /etc/dirsrv/slapd-instance_name/pin.txt chown dirsrv:root /etc/dirsrv/slapd-instance_name/cert8.db /etc/dirsrv/slapd-instance_name/key3.db /etc/dirsrv/slapd-instance_name/pin.txt chmod 600 /etc/dirsrv/slapd-instance_name/cert8.db /etc/dirsrv/slapd-instance_name/key3.db /etc/dirsrv/slapd-instance_name/pin.txt systemctl start dirsrv@ instance_name rm /etc/dirsrv/slapd-instance_name/cert8.db /etc/dirsrv/slapd-instance_name/key3.db cp /tmp/99user.ldif /etc/dirsrv/slapd- instance_name /schema/ chmod 644 /etc/dirsrv/slapd- instance_name /schema/99user.ldif chown root:root /etc/dirsrv/slapd- instance_name /schema/99user.ldif systemctl restart dirsrv@ instance_name dsconf -D 'cn=Directory Manager' ldap://server.example.com backend import userRoot /var/lib/dirsrv/slapd- instance_name /ldif/migration.ldif yum module remove redhat-ds subscription-manager repos --disable=dirsrv-11-for-rhel-8-x86_64-rpms Repository 'dirsrv-11-for-rhel-8-x86_64-rpms' is disabled for this system. subscription-manager list --consumed Subscription Name: Example Subscription Pool-ID: 5ab6a8df96b03fd30aba9a9c58da57a1 subscription-manager remove --pool= 5ab6a8df96b03fd30aba9a9c58da57a1 2 local certificates have been deleted. The entitlement server successfully removed these pools: 5ab6a8df96b03fd30aba9a9c58da57a1 The entitlement server successfully removed these serial numbers: 1658239469356282126