Ensure that you upgrade Identity Vault before upgrading the Identity Manager engine. The Identity Manager engine upgrade process updates the driver shim files that are stored in the file system on the host computer.
Download the Identity_Manager_4.8_Linux.iso as instructed in Where to Get Identity Manager in the NetIQ Identity Manager Overview and Planning Guide.
Mount the downloaded.iso.
From the root directory of the .iso file, navigate to the IDVault/setup directory.
Run the following command:
./nds-install
Accept the license agreement and proceed with the installation.
Specify adminDN. For example, cn=admin.ou=sa.o=system.
Specify y when prompted for stopping eDirectory instances and upgrading NICI.
Specify if you want to configure Enhanced Background Authentication.
NOTE:Run ndsconfig upgrade after nds-install, if DIB upgrade fails and the nds-install command prompts to do so. If eDirectory services are not starting after an upgrade, run the ndsconfig upgrade command. For more information, see the NetIQ eDirectory Installation Guide.
Verify that the drivers are stopped. For more information, see Stopping the Drivers.
Perform the following steps to upgrade the Identity Manager Engine:
Download the Identity_Manager_4.8_Linux.iso from the NetIQ Downloads website.
Mount the downloaded .iso.
Run the following command:
./install.sh
Read through the license agreement.
Enter y to accept the license agreement.
Specify whether you want upgrade the Identity Manager components. The available options are y and n.
Select Identity Manager Engine.
Specify the following details:
Identity Vault Administrator: Specify the Identity Vault administrator name.
Identity Vault Administrator Password: Specify the Identity Vault Administrator password.
The engine upgrade process retains some of the existing MapDB cache files (dx*) in the Identity Vault’s DIB directory. You must manually remove these files for a driver using MapDB after upgrading the driver. For more information, see Working with MapDB 3.0.5.
Identity Manager adds support for MapDB 3.0.5. In addition to Identity Manager Engine, MapDB is used by the following Identity Manager drivers:
Data Collection Services
JDBC
LDAP
Managed System Gateway
Office 365 and Azure Active Directory
Salesforce
If you are using any of these drivers, you must review the following sections before upgrading the driver:
Review the following considerations before upgrading an Identity Manager driver that uses MapDB:
Drivers shipped with Identity Manager 4.8 are compatible with Identity Manager 4.8 Engine or Remote Loader. You must follow the driver upgrade steps from the specific driver implementation guide.
Drivers shipped before Identity Manager 4.8 are not compatible with Identity Manager 4.8 Engine or Remote Loader.
Drivers shipped with Identity Manager 4.8 are not backward compatible with Identity Manager 4.7.x Engine or Remote Loader.
Drivers shipped with Identity Manager 4.8 are not backward compatible with Identity Manager 4.6.x Engine or Remote Loader.
The Identity Manager Engine upgrade process leaves some of the existing MapDB cache files (dx*) in the Identity Vault’s DIB directory (/var/opt/novell/eDirectory/data/dib). You must manually remove these files for your driver after upgrading the driver. This action ensures that your driver works correctly with Identity Manager 4.8 engine.
The following table lists the MapDB cache files that must be removed:
|
Identity Manager Driver |
MapDB State Cache File To Remove |
|---|---|
|
Data Collection Services |
DCSDriver_<driver instance guid>-* <driver instance guid>-* |
|
JDBC |
jdbc_<driver instance guid>_* |
|
LDAP |
ldap_<driver instance guid>* |
|
Managed System Gateway |
MSGW-<driver-instance-guid>.* |
|
Office 365 and Azure Active Directory |
<Azure driver name>_obj.db.* |
|
Salesforce |
<Salesforce driver name>.* <Salesforce driver name> |
where * represents the version of the MapDB state cache file. Any MapDB state cache files containing the above names, regardless of the versions, must be removed. In case of a Salesforce driver, the MapDB state cache files are also represented by the driver name. Below are some examples of these files.
DCSDriver_<driver instance guid>-0.t, <driver instance guid>-1.p
jdbc_<driver instance guid>_0.t, jdbc_<driver instance guid>_0, jdbc_<driver instance guid>_1
ldap_<driver instance guid>b, ldap_<driver instance guid>b.p
MSGW-<driver instance guid>.p, MSGW-<driver instance guid>.t
<Azure driver name>_obj.db.t, <Azure driver name>_obj.db.p
<Salesforce driver name>.p, <Salesforce driver name>.t, Salesforce driver1
Perform this action only if you have installed Identity Manager engine as a non-root user.
Download the Identity_Manager_4.8_Linux.iso from the NetIQ Downloads website.
Mount the downloaded .iso.
Run the following command:
./install.sh
Select Identity Manager Engine and press Enter.
Specify the non-root install location for Identity Manager engine. For example, /home/user/eDirectory/.
Specify y to complete the upgrade.
If you are running the Remote Loader, you need to upgrade the Remote Loader files.
Create a backup of the Remote Loader configuration files.
Verify that the drivers are stopped. For more information, see Stopping the Drivers.
Stop the Remote Loader service or daemon for each driver.
rdxml -config path_to_configfile -u
Download the Identity_Manager_4.8_Linux.iso from the NetIQ Downloads website.
Mount the downloaded .iso.
Run the following command:
./install.sh
Read through the license agreement.
Enter y to accept the license agreement.
Specify whether you want upgrade the Identity Manager components. The available options are y and n.
Select Remote Loader.
After the installation finishes, verify that your configuration files contain your environment’s information.
(Conditional) If there is a problem with the configuration file, copy the backup file that you created in step 1. Otherwise, continue with the next step.
Start the Remote Loader service or daemon for each driver.
rdxml -config path_to_config_file
IMPORTANT:If your driver uses MapDB, manually remove the existing MapDB state cache files for the driver after upgrading the driver. This is required because Identity Manager engine upgrade process does not remove all of these files from the Identity Vault’s DIB directory. For more information, see Working with MapDB 3.0.5.
Create a backup of the Java Remote Loader configuration files.
Verify that the drivers are stopped. For more information, see Stopping the Drivers.
Stop the Remote Loader service or daemon for each driver.
dirxml_jremote -config path_to_configfile -u
Download the Identity_Manager_4.8_Linux.iso from the NetIQ Downloads website.
Mount the downloaded .iso.
Navigate to the /IDM/packages/java_remoteloader directory.
Copy and replace the dirxml_jremote_dev.tar.gz file in your existing Java Remote Loader installed directory.
Based on the file present in your existing setup, copy and replace one of the following files in your existing Java Remote Loader installed directory:
dirxml_jremote.tar.gz
dirxml_jremote_mvs.tar
Extract the files that you have copied in step 7 and step 8.
For example, tar -zxvf dirxml_jremote.tar.gz
(Conditional) If there is a problem with the configuration file, copy the backup file that you created in step 1. Otherwise, continue with the next step.
NOTE:Use the version.txt file to ensure that you have the latest version of Java Remote Loader.
Start the Remote Loader service or daemon for each driver.
dirxml_jremote -config path_to_config_file