To install Identity Manager on a server running Red Hat Enterprise Linux or later operating systems, ensure that the server meets a specific set of prerequisites.
NetIQ recommends that you review the following prerequisites:
If you have a loopback address alias to the hostname of the system in an /etc/hosts entry, it must be changed to the hostname or IP address. That is, if you have an entry similar to the one below in your /etc/hosts file, it needs to be changed to the correct entry given in second example below.
The following example has problems when any utility tries to resolve to the ndsd server:
<loopback IP address> test-system localhost.localdomain localhost
The following is a correct example entry in /etc/hosts:
<loopback IP address> localhost.localdomain localhost <IP address> test-system
If any third-party tool or utility resolves through localhost, it needs to be changed to resolve through a hostname or IP address and not through the localhost address.
If you have configured Security-Enhanced Linux (SELinux) on RHEL 8.x, you must
set the value to permissive to install Identity Manager Engine. Otherwise, the Engine installation fails with the following error: Identity Vault configuration failed with the exit code 10
For example, to set the value of SELinux to permissive, perform the following steps:
Modify the config file located at the /etc/selinux/ directory.
In the SELINUX field, set the value to permissive.
Save the changes and restart the system.
disable SELinux, if Identity Reporting is installed on a different server than Identity Manager Engine and Identity Applications. Otherwise, the Tomcat service will not come up and the Identity Reporting database configuration reports liquibase errors.
Install the appropriate libraries on the server. For more information, see Ensuring that the Server has Dependent Libraries.
Ensure that you set the Java path in either of two environment variables, $PATH or $JAVA_HOME on the server where you want to install Remote Loader. You must perform this action before running the ./RHEL-Prerequisite.sh script. To set the Java path, run the following command:
export PATH=<java installed location>/bin:$PATH
For example, export PATH=/opt/netiq/common/jre/bin/:$PATH
On a 64-bit platform, the required libraries for RHEL vary according to your chosen method of installation. Install the dependent libraries or RPMs in the following order.
NOTE:To add a ksh file, you can enter the following command:
yum -y install ksh
glibc-*.i686.rpm
libgcc-*.i686.rpm
libXtst-*.i686.rpm
libXrender-*.i686.rpm
libXi-*.i686.rpm
unzip
bc
lsof
net-tools
libncurses
NOTE:For Identity Manager, you can edit the ./RHEL-Prerequisite.sh script and remove all the occurrences of compat-libstdc++-33.x86_64.rpm and compat-libstdc++-33-*.i686.rpm. These packages are no longer necessary for Identity Manager installation.
If your RHEL 9.x server needs a repository for the installation media, you can manually create one.
NOTE:Your RHEL server must have the appropriate libraries installed. For more information, see Ensuring that the Server has Dependent Libraries.
To set up a repository for the installation:
Create a mount point on your local server.
For example,
mkdir -p /mnt/rhel9
Mount the RHEL 9.x installation ISO:
mount -o loop <RHEL9.x.iso> /mnt/rhel9
For example,
mount -o loop rhel-server-9.0-x86_64-dvd.iso mnt/rhel9
Copy the media.repo file from the mounted directory to /etc/yum.repos.d/ and set the required permissions.
For example:
cp /mnt/rhel9/media.repo /etc/yum.repos.d/rhel9.repo
chmod 644 /etc/yum.repos.d/rhel9.repo
Modify the rhel9.repo file and add the following content:
[InstallMedia] name=Red Hat Enterprise Linux 9.0.0 mediaid=None metadata_expire=-1 gpgcheck=0 cost=500 enabled=1 baseurl=file:///mnt/rhel9/BaseOS/ gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
If you want to install the 32-bit packages, change the value of exactarch parameter from 1 to 0 in the /etc/yum.conf file.
Run the following command:
yum clean all
(Conditional) If you want to retrieve the package list from the DVD repository, run the following command:
yum --noplugins list
Install the yum-utils package.
yum install createrepo dnf-utils
To install the required packages for Identity Manager on RHEL 9.x, create an install.sh file and add the following contents to the file:
NOTE:If you observe any warnings specific to duplicate RPMs, you must manually manage the warnings using the appropriate yum command.
#!/bin/bash yum clean all yum repolist yum makecache PKGS="ksh gettext.x86_64 libXrender.i686 libXau.i686 libxcb.i686 libX11.i686 libXext.i686 libXi.i686 libXtst.i686 glibc-*.i686.rpm libstdc++.x86_64 libgcc-*.i686.rpm unzip bc lsof net-tools" for PKG in $PKGS; do yum -y install "$PKG" done
Install the following packages:
yum install libgcc*.i686 libnsl* libnsl*.i686 libncurses*
Run the install.sh file.
To confirm if the prerequisites are met, run the script as mentioned in Running a Prerequisite Check.
Install Identity Manager 4.9.
If your RHEL 8.x server needs a repository for the installation media, you can manually create one.
NOTE:Your RHEL server must have the appropriate libraries installed. For more information, see Ensuring that the Server has Dependent Libraries.
To set up a repository for the installation:
Create a mount point on your local server.
For example,
mkdir -p /mnt/rhel8
Mount the RHEL 8 installation ISO:
mount -o loop rhel-server-8.0-x86_64-dvd.iso mnt/rhel8
Copy the media.repo file from the mounted directory to /etc/yum.repos.d/ and set the required permissions.
For example:
cp /mnt/rhel8/media.repo /etc/yum.repos.d/rhel8.repo
chmod 644 /etc/yum.repos.d/rhel8.repo
Modify the rhel8.repo file and add the following content:
[dvd-BaseOS] name=DVD for RHEL8 - BaseOS baseurl=file:///RHEL8/BaseOS enabled=1 gpgcheck=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release [dvd-AppStream] name=DVD for RHEL8 - AppStream baseurl=file:///RHEL8/AppStream enabled=1 gpgcheck=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
If you want to install the 32-bit packages, change the value of exactarch parameter from 1 to 0 in the /etc/yum.conf file.
Run the following command:
yum clean all
(Conditional) If you want to retrieve the package list from the DVD repository, run the following command:
yum --noplugins list
Install the yum-utils package.
yum install createrepo yum-utils
To install the required packages for Identity Manager on RHEL8, create an install.sh file and add the following contents to the file:
NOTE:If you observe any warnings specific to duplicate RPMs, you must manually manage the warnings using the appropriate yum command.
#!/bin/bash yum clean all yum repolist yum makecache PKGS="ksh gettext.x86_64 libXrender.i686 libXau.i686 libxcb.i686 libX11.i686 libXext.i686 libXi.i686 libXtst.i686 glibc-*.i686.rpm libstdc++.x86_64 libgcc-*.i686.rpm unzip bc lsof net-tools" for PKG in $PKGS; do yum -y install "$PKG" done
Install the following packages:
yum install libgcc*.i686 libnsl* libnsl*.i686 libncurses*
Run the install.sh file.
To confirm if the prerequisites are met, run the script as mentioned in Running a Prerequisite Check.
Install Identity Manager 4.9.
You can generate a report of the missing prerequisites for each Identity Manager component. Run the ./RHEL-Prerequisite.sh script located in the mount directory of the installation kit.