05 Dec 07 Setting Up a 2-node Fail-over Cluster with OES 1

Step 11: Install & Configure iFolder Enterprise & iFolder Web Access

Install but do not configure iFolder Enterprise and iFolder Web Access on all the nodes.

Before configuring iFolder, prepare the shared storage device.

Follow the procedure in Step 5 to create and cluster enable the SAN device.

Configuring iFolder Enterprise

Before configuring iFolder on the master node, the shared volume must be mounted on the node. This is because the configuration will place some files onto the storage deivce which has to be shared with other nodes later.

From YaST, configure iFolder Enterprise Server. Take note that the System Store Path should be the (mounted) share volume created above. In addition append a data directory at the end of the mount point for the shared volume because it is recommended not to store the data files at the root of the shared volume.

Something peculiar about the setting here is that the example given for the iFolder Admin DN has only the cn and o components. In practice, you need another context, an Organization Unit under Organization to host the iFolder Admin account. It may be necessary for you to create the ou manually.

At the end of the configuration procedure, Apache will be restarted. test if the service is working by entering the URL of the master node http://<dns_name_of_master_node>/simias10/Simias.asmx

Manual Configuration

Copy the /var/lib/wwwrun/.local directory to the mount point of the shared volume:

cp -a /var/lib/wwwrun/.local /mnt/mount_ifolder

Remove the /var/lib/wwwrun/.local directory and replcae it with a symbolic link (of an identical name) to the .local directory which was copied to the shared volume. Then change the ownership.

rm -f /var/lib/wwwrun/.local
ln -s /mnt/mount_ifolder/.local /var/lib/wwwrun/
chown -R wwwrun:www /var/lib/wwwrun/.local

Finally restart Apache and go to the URL http://<dns_name_of_node_1>/simias10/Simias.asmx to check that you get an authentication prompt.

Configuring iFolder Web Accessss

The alias that you use for node 1 should be the same for the other node i.e. /ifolder

For the iFolder server URL use https://localhost

Finally unmount the shared storage so that other nodes can mount it.

Configure Other Nodes

Start YaST and configure iFolder Enterprise Server. For these non-master nodes, set the System Store Path to /tmp/ifolder. This value will be replaced later.

It is important that you do not specify the shared storage – stick with the temporary folder for the configuration.

Check the URL after the configuration to ensure that iFolder was configured correctly.

Configure iFolder Web Acces. Use https://localhost as well.

Stop the Apache service. Copy the file /top/novell/ifolder3/etc/simias-server-bootstrap.config file from the master node (the first one that was configured) and replace the existing one on the other nodes.

Delete the /var/lib/wwwrun/.local directory and replace it with a symbolic link to the shared volume’s .local directory. Change the ownership of this link as well.

Configure the iManager Plug-in for iFolder

After iFolder is installed, iManager should show on the homepage that there is a plug-in waiting to be installed. Follow the link. Alternatively, you can click on the Configure icon, click on Module Installatoin > Available Novell Plug-in Modules. There should only be one – iFolder3.npm. Select it and click on Install.

Close iManager and restart Tomcat:

rcnovell-tomcat4 restart

Provision Users for iFolder 3.x

If ther are no users for the system, create their accounts and a container to hold them. From iManager, click on View Objects at the top. Go to the container ifcontext. Click on this object and select Create Object. Choose Organization Unit. Give this object the name Users.

Then create users from iManager > Roles and Tasks. Select Users > Create User. Put these users into the Users container created under the context ifcontext.

From iManager, Novell iFolder 3 > System, provide the highly available IP for iFolder as the iFolder server.

Enter the iFolder user name ifolderadmin and the password for authenticatoin and click OK.

Click OK again to import the security certificate.

Click on the LDAP tab and click Modify.

The server host should be the highly available DNS name of the master resource (i.e. the DNS name of the cluster).

In the Search DN’s field, select the object Users.ifcontext.main

Click on OK and then Update and Synchronize Now.

Install the Client

From the cluster URL, click on the iFolder 3.0 link on the left and click on iFolder 3.0 Windows Client. Install the client and restart the workstation. (Of course this requires that you have administrative privileges to the workstation.)

Make sure that the firewall in Windows XP is not blocking the MOno-XSP server.

Configure iFolder Accounts and Create iFolders

Make sure that the user accounts are already created in eDirectory. Log in to a workstation with the user account. You will be prompted whether you want to set up an iFolder account.

After logging into the server, you will be able to cconvert your folders into iFolders

Useful Info

• /opt/novell/ifolder3/etc/simias_server_bootstrap.config is modified by the YaST configuratoin tool for iFolderEnterprise
• iFolder3.npm can be found at /var/opt/novell
• Security certificates for iPrint are stored in /var/opt/novell/iManager/nps/portal/modules/iPrintX/certstore. removing the file in this directory will revoke the certificates
• /var/opt/novell/iprint/htdocs/images/{maps | printers} are where the maps and printer icons should be placed
• http://<dns_name_of_iprint_store>/maptool.htm is the map designer. The created map should be plaed in /var/opt/novell/iprint/htdocs
• The backup database for iPrint is in /var/opt/novell/iprint/psmdb
• iPrint can be made to look for more than one eDirectory server by adding DSServer2, DSServer3, etc. to the files /etc/opt/novell/iprint/iprint_mgr.ipsmd.conf (or idsd..conf I forget)
• iFolder setup script is located at /opt/novell/ifolder3/bin/simias-server-setup
• The PID file for iFolder is /var/opt/novell/ifolder/run/ifolder.pid
• A file iprint.ini is in each server where iPrint is installed. This file controls whether the user is prompted before the updated client is installed without user intervention. Look out for the line “Allow Auto Update”.
• TIDs
  • #10100002 Troubleshooting OES SP2 Patch Process
  • #3377050 Guide to patching Novell Linux products
  • #3045794 How to correctly patch an OES Linux via RUG
  • #3003435 How to create an OES cluster resource with a native Linux file system
  • #10100285 Config Report tool
  • #3248305 Correcting Expired Certificates in the iFolder 3.x Keystore
  • #10098796 Export eDirectory Certificate and import into OpenSSL for iFolder
  • #3130715 Cannot login to iFolde3
  • #3827266 lputil does not discover Emulex cards after upgrading to SLES9 SP3

Pages: 1 2 3

Tags: oes1