Installation Guide Red Hat Directory Server 11 Instructions for installing Red Hat Directory Server

Commands:
subscription-manager list --all --available --matches 'Red Hat Directory Server' Subscription Name: Example Subscription Provides: Red Hat Directory Server Pool ID: 5ab6a8df96b03fd30aba9a9c58da57a1 Available: 1
subscription-manager attach --pool= 5ab6a8df96b03fd30aba9a9c58da57a1 Successfully attached a subscription for: Example Subscription
subscription-manager repos --enable=dirsrv-11.9-for-rhel-8-x86_64-rpms Repository 'dirsrv-11.9-for-rhel-8-x86_64-rpms' is enabled for this system.
yum module install redhat-ds:11
dscreate create-template /root/instance_name.inf
instance_name (str) Description: Default value: localhost instance_name = instance_name root_password (str) Description: Default value: directory manager password root_password = password
create_suffix_entry (bool) Description: Default value: False create_suffix_entry = True
suffix (str) Description: Default value: suffix = dc=example,dc=com
dscreate from-file /root/instance_name.inf Starting installation Completed installation for instance_name
systemctl status firewalld ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled) Active: active (running) since Fri 2018-06-15 14:06:33 CEST; 1h 17min ago
systemctl start firewalld systemctl enable firewalld
firewall-cmd --permanent --add-port={389/tcp,636/tcp}
firewall-cmd --reload
dscreate interactive
dscreate interactive Install Directory Server (interactive mode) =========================================== Enter system's hostname [server.example.com]: Enter the instance name [server]: instance_name Enter port number [389]: Create self-signed certificate database [yes]: Enter secure port number [636]: Enter Directory Manager DN [cn=Directory Manager]: Enter the Directory Manager password: password Confirm the Directory Manager Password: password Enter the database suffix (or enter "none" to skip) [dc=server,dc=example,dc=com]: dc=example,dc=com Create sample entries in the suffix [no]: Create just the top suffix entry [no]: yes Do you want to start the instance after the installation? [yes]: Are you ready to install? [no]: yes Starting installation Completed installation for instance_name
systemctl status firewalld ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled) Active: active (running) since Fri 2018-06-15 14:06:33 CEST; 1h 17min ago
systemctl start firewalld systemctl enable firewalld
firewall-cmd --permanent --add-port={389/tcp,636/tcp}
firewall-cmd --reload
https:// server.example.com :9090
systemctl status firewalld ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled) Active: active (running) since Fri 2018-06-15 14:06:33 CEST; 1h 17min ago
systemctl start firewalld systemctl enable firewalld
firewall-cmd --permanent --add-port={389/tcp,636/tcp}
firewall-cmd --reload
dscreate create-template /root/instance_name.inf
instance_name (str) Description: Default value: localhost instance_name = instance_name root_password (str) Description: Default value: directory manager password root_password = password
full_machine_name (str) Description: Default value: loadbalancer.example.com full_machine_name = loadbalancer.example.com
strict_host_checking (bool) Description: Default value: True strict_host_checking = False
create_suffix_entry (bool) Description: Default value: False create_suffix_entry = True
suffix (str) Description: Default value: suffix = dc=example,dc=com
dscreate from-file /root/instance_name.inf Starting installation Completed installation for instance_name
systemctl status firewalld ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled) Active: active (running) since Fri 2018-06-15 14:06:33 CEST; 1h 17min ago
systemctl start firewalld systemctl enable firewalld
firewall-cmd --permanent --add-port={389/tcp,636/tcp}
firewall-cmd --reload
KRB5_KTNAME=/etc/dirsrv/slapd- instance_name /ldap.keytab
systemctl restart dirsrv@ instance_name
ldapsearch -H ldap:// loadbalancer.example.com -Y GSSAPI
ldapsearch -H ldap:// server1.example.com -Y GSSAPI
subscription-manager repos --disable dirsrv-11.8-for-rhel-8-x86_64-rpms Repository 'dirsrv-11.8-for-rhel-8-x86_64-rpms' is disabled for this system.
subscription-manager repos --enable=dirsrv-11.9-for-rhel-8-x86_64-rpms Repository 'dirsrv-11.9-for-rhel-8-x86_64-rpms' is enabled for this system.
yum module update redhat-ds
systemctl stop dirsrv@ instance_name systemctl disable dirsrv@ instance_name
db2ldif -Z instance_name -n userRoot -a /tmp/userRoot.ldif
systemctl stop dirsrv@ instance_name
rm /etc/dirsrv/slapd-instance_name/cert*.db /etc/dirsrv/slapd-instance_name/key*.db /etc/dirsrv/slapd-instance_name/pin.txt
chown dirsrv:root /etc/dirsrv/slapd-instance_name/cert8.db /etc/dirsrv/slapd-instance_name/key3.db /etc/dirsrv/slapd-instance_name/pin.txt chmod 600 /etc/dirsrv/slapd-instance_name/cert8.db /etc/dirsrv/slapd-instance_name/key3.db /etc/dirsrv/slapd-instance_name/pin.txt
systemctl start dirsrv@ instance_name
rm /etc/dirsrv/slapd-instance_name/cert8.db /etc/dirsrv/slapd-instance_name/key3.db
cp /tmp/99user.ldif /etc/dirsrv/slapd- instance_name /schema/ chmod 644 /etc/dirsrv/slapd- instance_name /schema/99user.ldif chown root:root /etc/dirsrv/slapd- instance_name /schema/99user.ldif systemctl restart dirsrv@ instance_name
dsconf -D 'cn=Directory Manager' ldap://server.example.com backend import userRoot /var/lib/dirsrv/slapd- instance_name /ldif/migration.ldif
yum module remove redhat-ds
subscription-manager repos --disable=dirsrv-11-for-rhel-8-x86_64-rpms Repository 'dirsrv-11-for-rhel-8-x86_64-rpms' is disabled for this system.
subscription-manager list --consumed Subscription Name: Example Subscription Pool-ID: 5ab6a8df96b03fd30aba9a9c58da57a1
subscription-manager remove --pool= 5ab6a8df96b03fd30aba9a9c58da57a1 2 local certificates have been deleted. The entitlement server successfully removed these pools: 5ab6a8df96b03fd30aba9a9c58da57a1 The entitlement server successfully removed these serial numbers: 1658239469356282126