JES - jednoduchá instalace

Obsah

Úvod

Tento text slouží jako jednoduchá demostrace instalace SW produktu Sun Java Enterprise System.

Sun Java Enteprise System (dále JES) je implementace softwaru pro podnikovou infrastrukturu, který umožňuje rychlé nasazení obchodních aplikací a webových služeb na platformě Java. Základními stavebními prvky jsou Identity Server, Portal Server a Application Server, konkrétní informace jsou na JES na sun.cz

Instalace

Stažení SW

Pro instalaci jsem použil poslední dostupnou verzi 2004Q2 dostupnou pro SPARC Solaris v8 a 9 a pro x86 Solaris verze 9. Celý JES je jeden iso soubor veliky necelých 500MB.
Balík se rozbalí a spustí javovský instalátor, textová instalace lze spustit pomocí: ./installer -nodisplay -noconsole -state /root/jes.state.

Licence agreement

Je nutné odsouhlasit licenci. 

   Welcome to the Sun Java(TM) Enterprise System; serious software made
   simple..
         
   Before you begin, please refer to the Release Notes and Installation Guide,
   available at http://docs.sun.com/doc/817-5760.
   
  You can install any or all of the Enterprise Network Services provided by
  the Java Enterprise System.
                           
  Copyright 2003-2004 Sun Microsystems, Inc. All rights reserved.
  Use is subject to license terms.

Výběr jazyka

Bohužel čeština mezi nimi není a jen tak asi nebude.

Language Support
Select the language support you want to install.
Note that English will always be installed

1.French
2.Spanish
3.Korean
4.Traditional Chinese
5.Simplified Chinese
6.German
7.Japanese
8.English only

Výběr instalovaných balíčků

V tomto kontkrétním případě jsem instaloval Calendar Server, IM Server, Portal a Identity Server. Pro webové služby jsem pro jednoduchost zvolil Web Server místo aplikačního, který dostačoval pro tento kokrétní případ.

Pro názornost je zde obrázek v grafice:

Výběr cílových adresářů

Nedoporučuji tyto adresáře měnit, bohužel mám špatnou zkušenost s instalačními rutinami. 

  Installation Directories
  ------------------------
  Enter the name of the target installation directory for each product:
     Application Server [/opt/SUNWappserver7] 
     Server Configuration: [/var/opt/SUNWappserver7/domains] 
     Product Configuration: [/etc/opt/SUNWappserver7] 
     Identity Server [/opt]  --->  /opt/SUNWam
     Directory Server, Server Root [/var/opt/mps/serverroot] 
     Web Server [/opt/SUNWwbsvr] 
     Calendar Server [/opt] --->  /opt/SUNWics
     Messaging Server [/opt/SUNWmsgsr]

Systémové požadavky

Jak je níže vidět, skripty vypisuje málo paměti pro vybrané balíku SW. Pro testovací účely dostačuje i 512MB na celý JES, i když to je skutečně minimum. Procesor doporučuji alespon' USIII.
Samozřejmě konfigurace HW záleží vždy na konkrétním využití. 

  Checking System Status

  Available disk space...     : OK                        
  Memory installed...         : Low - 1,024MB detected.                   
  Operating system patches... : OK                        
  Operating system resources... : OK                      

  System ready for installation

Poinstalační požadavky

Potřeba samostatné konfigurace:

  The following component products cannot be configured during installation. 
  You have to configure them after installation is complete.

  Sun Java(TM) System Calendar Server 6 2004Q2
  Sun Java(TM) System Messaging Server 6 2004Q2

Závislosti balíčků:

  Warnings - Product Dependency Checks
  ------------------------------------
  The products selected for installation have dependency requirements or
  installation options as indicated below.

  [Sun Java(TM) System Message Queue 3.5 SP 1]
  ------------------------------------------------------------------------ 
  The installer has detected previous versions of component products. You should
  not install other components until you upgrade these previous versions. See the
  "Upgrading" chapter of the Installation Guide at http://docs.sun.com/doc/817-
  5760 for instructions.

Všeobecné nastavení

IP adresa a doménové jméno se kontrolují, musí být validní. Také doporučuji instalovat pro konečné jméno - hostname, přizpůsobení aplikací (portálu apod.) na změnu jména je velmi pracné, snadnější je JES raději přeinstalovat. 

  Common Server Settings

  The following settings apply to all installed component products.
     Enter Host Name [portal] 
     Enter DNS Domain Name [iforce.cz] 
     Enter IP Address [192.100.1.10] 
     Enter Server admin User ID [admin] 
     Enter Admin User's Password (Password cannot be less than 8 characters) 
     Confirm Admin User's Password [] 
     Enter System User [root] portal
     Enter System Group [other] portal

Web server nastavení

Doporučuji zapnout automatické startování web serveru, jinak je nutné poeditovat /etc/init.d/amserver 

     Enter  Server Admin User ID [admin] 
     Enter Admin User's Password [] 
     Retype Password [] 
     Enter Host Name [portal.iforce.cz] 
     Enter Administration Port [8888] 
     Enter Administration Server User ID [root]

      Enter System User ID [webservd] 
      Enter System Group [webservd] 
      Enter HTTP Port [80] 
      Enter content Root [/opt/SUNWwbsvr/docs] 
      Do you want to automatically start Web Server when system re-starts.(Y/N)

Application Server: Administration

Administrační webová konzole pro Web servr. 

   Administrator User ID [admin] 
   Administrator Password [] 
   Retype Password [] 
   Administration Server Port [4848] 
   HTTP Server Port [81]

Directory Server: General Settings

Instalace LDAPu, předem je nutné rozmyslet si doménu. 

     Enter Server Admin ID [admin] 
     Enter Admin User's Password (At least 8 characters long) []
     Enter Directory Manager DN [cn=Directory Manager]
     Enter Directory Manager's Password 

     Enter Server Identifier [portal]
     Enter Server Port [389] 
     Enter Suffix [dc=iforce,dc=cz] 
     Enter Administration Domain [iforce.cz]
     Enter System User [root]
     Enter System Group [other]

Administration Server: Server Settings

Administrační portál pro LDAP servr. 

    Enter the  Server Root [/var/opt/mps/serverroot] 
    Enter the Administration Port [390] 
    Enter the Administration Domain [iforce.cz] 
    Enter System User [root] 
    Enter System Group [other]
    Enter the AdministrationID for Configuration Server 
    Administration ID [admin] 
    Enter the admin Password [] 
    Enter the Configuration Directory Host [portal.iforce.cz] 
    Enter the Configuration Directory Port [389]

Identity Server: Administration

Administrace identity serveru, asi nejdůležitější část pro administraci JESu. Jedná se o webovou konzoli. 

    Administrator User ID: amAdmin
    Administrator Password [] 
    LDAP User ID: amldapuser
    LDAP Password [] 
    LDAP User ID: amldapuser
    LDAP Password [] 
    Retype Password [] 
    Password Encryption Key [7U6fr4B+ItWTQaE6DO4BSghn5qR+yDkJ]

    Host Name [portal.iforce.cz] 
    Web Server Instance Directory [/opt/SUNWwbsvr/https-portal.iforce.cz] 
    Web Server Port [80] 
    Document Root Directory [/opt/SUNWwbsvr/docs] 
    Secure Server Instance Port [No]

    Potential Configuration Problems 
          
    The installer cannot correctly configure Identity Server for deployment 
    in this instance of Web Server because the runtime owner of the instance 
    is not the superuser. The installer can change the runtime owner
    (userid/group) of this instance from webservd/webservd to root/other (the
    superuser). Alternatively, you can correct the configuration after
    installation, as described in the Installation Guide at http://docs.sun.
    com/doc/817-5760. 
    Would you like the installer to change ownership of this Web Server
    instance to root/other? 
                                            
    Select either Y or N [Y]

    Host Name [portal.iforce.cz]
    Services Deployment URI [amserver] 
    Common Domain Deployment URI [amcommon] 
    Cookie Domain(Assure it is not a top level domain) [.iforce.cz] 
    Administration Console [Yes] 
    Console Deployment URI [amconsole] 
    Password Deployment URI [ampassword]

    Directory Server Host [portal.iforce.cz] 
    Directory Server Port [389] 
    Directory Root Suffix [dc=iforce,dc=cz] 
    Directory Manager DN [cn=Directory Manager] 
    Directory Manager Password []

Portal Server: Sun Java System Application Server

    Installation Directory [/opt/SUNWappserver7] 
    Domain Directory [/var/opt/SUNWappserver7/domains/domain1] 
    Server Instance [server1] 
    Server Instance Port [81] 
    Is server instance port secure [No] 
    Document Root Directory
    [/var/opt/SUNWappserver7/domains/domain1/server1/docroot] 
    Administration Port [4848] 
    Is administration server port secure [No] 
    Administrator User ID [admin] 
    Administrator Password []

Portal Server, Secure Remote Access: Gateway Information

Elegatní zabezpečení je možné pomocí jednoduchého gateway programu s minimální pravepodobností nalezení a zneužití chyby v něm. Na gateway se přistupuje pomocí https a dále stačí již http. 

    Gateway Protocol [2]
    Gateway Domain [iforce.cz]
    Gateway Port [443]
    Gateway Profile Name [default]
    Log User Password [] 
    Retype Password []

Portal Server, Secure Remote Access: Gateway

   Protocol [2] 
   Host Name [portal] 
   Subdomain [] 
   Domain [iforce.cz] 
   Host IP Address [192.100.1.10] 
   Access Port [443]
   Gateway Profile [default] 
   Log User Password [] 
   Start Gateway after installation [Yes]

Portal Server, Secure Remote Access: Netlet Proxy

Přistup ke službám JESu pomocí šifrovaného tunelování portů. Jedná se o jednoducou a elegantní aplikaci v jave. 

   Host Name [portal]
   Subdomain [] 
   Domain [iforce.cz] 
   Host IP Address [192.100.1.10] 
   Access Port [10555] 
   Gateway Profile [default] 
   Log User Password [] 
   Start Netlet Proxy after installation [Yes]

Závěr

Před ukončením instalace si instalátor ještě neodpustí varování o nedostatku paměti a doporučí ihned dokument na pro ladění výkonu. 

  Software installation has completed successfully. You can view the installation
  summary and log by using the choices below. Summary and log files are available
  in /var/sadm/install/logs/.

  This host has less than the recommended amount of memory.
  You may experience degraded performance.

  Your next step is to perform the postinstallation configuration and
  verification tasks documented in the Postinstallation Configuration and Startup
  Chapter of the Sun Java(TM) Enterprise System Installation Guide. See: http:
  //docs.sun.com/doc/817-5760.

Zdroje

Autor

07/2004 Lukáš Cirkva