2.6 Installing Bridge Patch to the EBA Enabled Server

2.6.1 Installing Bridge Patch to Multiple Replica Servers with EBA in Linux

IMPORTANT:Before upgrading to OpenText eDirectory 9.3.0, ensure that all the replica or master servers are on 9.2.8 or 9.2.9 version of OpenText eDirectory. To upgrade any of these servers, install the EBA bridge patch bundled with OpenText eDirectory 9.3.0 build. OpenText eDirectory 9.3.0 does not start if schema extension is not applied before applying the bridge patch.

When OpenText eDirectory 9.3.0 is installed on a new server and added into a replica ring where the master server is OpenText eDirectory 9.2.8 or 9.2.9 and EBA is enabled, apply the EBA bridge patch to the OpenText eDirectory 9.2.8 or 9.2.9 servers prior to installing OpenText eDirectory 9.3.0.

  • To install the bridge patch on Linux for a root user, follow the below steps.

  1. Download and untar the OpenText eDirectory build and navigate to the untared location <Untarred_edirectory_location>/eDirectory/eba_bridge_patch and execute the following steps. After untaring, locate the eba_bridge.sch in this location. Extend the bridge patch schema using below command -

    ndssch [-h <hostname>[:<port>]][-t <treename>] <admin-FDN> <schemafile> 

    For example:

    ndssch  -h 10.10.10.10:524 -t tree1 admin.novell eba_bridge.sch
  2. To apply the bridge patch login as a root user, run the following command-

    rpm -ivh --force novell-eba-9.2.8.0000.x86_64.rpm
  3. Restart the ndsd services.

  • To install the bridge patch on Linux for a non-root user, follow the below steps.

  1. Download and untar the OpenText eDirectory build and navigate to the untared location <Untarred_edirectory_location>/eDirectory/eba_bridge_patch and execute the following steps. After untaring, locate the eba_bridge.sch in this location. Extend the bridge patch schema using below command -

    ndssch [-h <hostname>[:<port>]][-t <treename>] <admin-FDN> <schemafile> 

    For example:

    ndssch  -h 10.10.10.10:524 -t tree1 admin.novell eba_bridge.sch
  2. Copy the below library files in /home/nuser/eDirectory/opt/novell/eDirectory/lib64., where /home/nuser is a user specific path.

    libebacli.so, libebasrv.so, libebassl_cli.so, libebassl_srv.so and libgssapi.so
  3. Restart the ndsd services.

NOTE:OpenText eDirectory does not start if schema extension is not applied before applying the bridge patch.

2.6.2 Installing Bridge Patch to Multiple Replica Servers with EBA in Windows

To install the bridge patch on Windows, follow the below steps

  1. Unzip the OpenText eDirectory build located at <extracted_patch>eDirectory\eba_bridge_patch

  2. Update the upgrade.ni file present in preUpgrade_930 folder. Mention the tree name, server name and admin credential of the existing eDirectory server in the upgrade.ni response file. Below is a sample upgrade.ni response file shown with the upgrade configuration.

    [NWI:NDS]
    mode=configure
    Tree Name=enewtree
    Server Name=enewserver
    Server Container=org
    Admin Context=org
    Admin Login Name=Admin
    Admin Password=env:PASSWORD_VAR
    Require IPV6=NO
    Require EBA=NO
    Require FIPS for TLS=YES
    LDAP TCP Port=389
    LDAP SSL Port=636
    Require TLS=Yes
    Require SS=Yes
    Existing Server=10.10.10.10
    Existing Server Port=524
    [NWI:SNMP]
    Stop service=No
    [NWI:NMAS]
    Methods=CertMutual,Challenge Response,DIGEST-MD5,NDS,Simple Password,SAML
  3. Run the below command from powershell.

    preUpgrade.ps1 -rfile <path_for_Configuration>/upgrade.ni
  4. Stop OpenText eDirectory services before copying these DLLs: ebacli.dll, ebai18n.dll, ebaldap.dll, ebassl_cli.dll, ebasym.dll, from <extracted_patch>eDirectory\eba_bridge_patch to C:\NetIQ\eDirectory (OpenText eDirectory binary location).

  5. Start the ndsd services.

2.6.3 Installing Bridge Patch to Multiple Replica Servers with EBA in Container

To install the bridge patch on container, follow the below steps.

  1. Download and untar the OpenText eDirectory build and navigate to the untarred location <Untarred_edirectory_location>/eDirectory_930/eba_bridge_patch and execute the following steps.

  2. After untarring,

    1. Copy eba_brdge.sch to the container and execute the following command.

      docker cp eba_brdge.sch <eDirectory Container name>:/config
    2. Copy novell-eba-9.2.8.0000.x86_64.rpm to the container, execute below command.

      docker cp novell-eba-9.2.8.0000.x86_64.rpm <eDirectory Container name>:/config 
  3. Login to the container, navigate to the directory where you copied the schema file in Step 2.a, and run the below command.

    Extending Schema

    ndssch [-h <hostname>[:<port>]][-t <treename>] <admin-FDN> <schemafile>

    For example:

    ndssch  -h 10.10.10.10:524 -t tree1 admin.novell eba_bridge.sch
  4. To install the EBA bridge patch RPM, execute below steps.

    1. Login to the container as a root user.

      docker exec -it -u root <eDirectory Container name> /bin/bash
    2. Navigate to the directory where you copied the rpm in Step 2b on age 146, and run the below command.

      rpm -ivh --force novell-eba-9.2.8.0000.x86_64.rpm
  5. To restart ndsd services, restart OpenText eDirectory container using the below command.

    docker restart <eDirectory Container name>