Best Practices for Implementing Unicenter Service Desk r11.x in an HA MSCS Environment -Part 4: HA MDB with eIAM and HA Primary Server Last Revised January.

Best Practices for Implementing Unicenter Service Desk r11.x in an HA MSCS Environment -Part 4: HA MDB with eIAM and HA Primary Server Last Revised January 31, 2007

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 2 Agenda -This presentation will cover the following topics: -Installing HA MDB with eIAM -Installing HA Primary Server connecting to HA MDB with eIAM

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 3 Support Considerations -USD does not currently provide support for High Availability architectures, however, the following best practices demonstrate how a degree of High Availability can be achieved when implemented with assistance from your local CA Technical Services (CATS) team. -The failover process is not entirely automatic. If the MDB fails over to another cluster node, active clients will need to re-login to USD. -Additional questions regarding these guidelines can be directed to ImpCDFeedback@ca.com and every effort will be made to respond as quickly as possible.”ImpCDFeedback@ca.com

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 4 Glossary The following terms and abbreviations are used in this presentation: -“HA” = Highly Available -“USD” = Unicenter Service Desk -“eIAM” = CA eTrust Embedded Identity and Access Management -“MSCS” = Microsoft Cluster Server -“Cluster Name” = Network name associated with the cluster group

Introduction

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 6 Disclaimer -eIAM has built-in features for failover and replication. This presentation does not cover those features. -The procedures described here require eIAM to be installed with an HA MDB. Although eIAM will not be HA it will provide HA features and will be active on cluster nodes. -The Ingres instance will run on a local drive and will not be controlled as a cluster resource. -As a result if eIAM policies are defined, they need to defined on all cluster nodes

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 7 Objectives -The main objective of this presentation is to install and HA MDB with eIAM that can be used by Unicenter Service Desk. -In addition, the HA Primary Server will be installed in the same cluster but allowed to be active in different cluster nodes, thus providing a degree of Cluster Active – Active functionality

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 8 Active - Active This shows Primary Server and MDB active on the different cluster nodes MSCS Cluster

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 9 Active - Passive This shows Primary Server, eIAM and MDB active on the same cluster node MSCS Cluster

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 10 Active - Active This shows Primary Server with eIAM and MDB active on the different cluster node MSCS Cluster

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 11 eTrust Services Prior to Install -This shows eTrust services prior to eIAM install

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 12 eIAM Services -eTrust Directory Administration Daemon – master -eTrust Directory SSL daemon - iTechPoz-Server -eTrust Directory - iTechPoz- -eTrust Directory - iTechPoz- - Router -Ingres Intelligent Database [ET] -iTechnology iGateway 4.0

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 14 Identify Resource Group -Identify the SQL Instance Cluster Group where USD remote components will be installed. -In addition, identify cluster group where the Primary Server will be installed -Should be different from the SQL Cluster Group in order to allow Primary Server and Remote Components to be active on different cluster nodes. Running Primary Server on one cluster node and the MDB on different cluster node provides additional scalability -Cluster group where Primary Server is to be installed must have “Network Name” resource type defined

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 15 Verify Shared Disk -Verify the shared disk has adequate free space for USD folder. It requires approximately 2 GB of free space. -Ingres database installed by eIAM will be created on the local disk. This defaults to C: drive

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 16 Shared Disk Shared “Disk G:” will be used to create USD Folder

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 17 Cluster Setup -The following example shows two cluster groups: -1 with SQL instance “SQLINSTA” installed -1 with “Network Name” cluster resource type -So, for this setup -Remote Components will be installed in Group SQL -Primary Server will be installed in Group USD_r11.1

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 18 MDB Resource Group eIAM will be installed with MDB server but no specific cluster resources are defined. eIAM will be active all cluster nodes. The Primary Server will connect to the eIAM on the active MDB node

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 20 eIAM Architecture and USD Service Desk R11.x Other App eIAM server Ingres global users, roles app 1 user info, policies app 2 user info, policies Web UI Shared Server Global Users either in CA-MDB, or referenced from ADS/eDirectory/ eTrust Admin

Install Overview

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 23 USD Components Installed on Two Node Cluster

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 24 Install Task Summary -Make Node A active -Define SQL Alias for Node A -Install Remote Components - HA MDB and eIAM. -Install Primary Server using a different cluster group -Run USD Configuration -Stop USD Services -Take a backup of nx.env file -Verify USD Setup -Delete SQL Alias -Move MDB and USD Group to Node B -Define SQL Alias for Node B -Install Remote Components - HA MDB and eIAM -Customize eIAM -Install Primary Server -Stop USD Service -Define USD Cluster Resource -Define MDB Cluster Resource -Configure eIAM -Install non HA Secondary Server -Run pdm_edit to define domsrvs, web engines and directors -Run USD Configuration

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 25 Node B Installation Options -Select the same options / features as Node A -This includes destination folder, web host name, eIAM application, etc -Copy eIAM certificates from Node A to Node B -This is required as USD folder is shared

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 26 USD r11.2 Install Caveat -USD r11.2 install process includes a check to determine if the pm.xml and wl.xml files already exist in the CATALINA_BASE\webapps folder -If they are not detected, the install copies the epdc.jar file from the CATALINA _BASE\common\lib to the tomcat\4.1.31\common\lib directory in Shared Components. -OK for first node on cluster -On subsequent nodes, because the install detects the files, an upgrade is performed instead -Since the epdc.jar file copy step is not included in an upgrade, the following error will be generated. Cannot load JDBC driver class 'com.ca.common.EncodedPwDriver‘ -To avoid this, manually copy epdc.jar to the Shared Components\tom cat\4.1.31\common\lib before starting the service on subsequent cluster nodes -This only applies to USD r11.2 - it does not affect r11.1.

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 27 SQL Alias -To install Remote Components, SQL Alias will have to be defined - After install of remote components, this SQL alias should be deleted. It is only required during the install process

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 28 How to Define SQL Alias Real Cluster Node name SQL Instance Name SQL VNode name

Walk-Through Installation of HA MDB, eIAM and Primary Server on NodeA

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 30 Remote Components Install -Review “Best Practices for Implementing Unicenter Service Desk r11.x in an HA MSCS Environment: Part 1” for additional information -In that presentation, Remote Components are installed on all cluster nodes without eIAM -In this presentation, Remote Components are installed with MDB and eIAM.

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 34 Database Configuration SQL Alias must already be defined for this to work.

Primary Server Install

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 40 Primary Server Cluster Group -For this install, Cluster Group USD_r11.1 is selected. This group has two shared drives. Shared Drive G: will be used for the USD folder as it has adequate free space

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 42 Destination Location Select shared drive. This shared drive must be part of the cluster group where Primary Server is to be installed

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 43 Shared Components - Location Select local drive

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 47 General Settings Change Primary Server Node to cluster name (default is real node name)

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 48 General Settings Change to cluster name

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 52 MS-SQL Database Configuration HA MDB

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 53 Web Interface Web Host set to cluster name

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 57 Verify Setup -To verify Primary Server has been correctly configured, launch Web Client and run some basic tests

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 58 Stop Services -Stop Unicenter Service Desk -Make backup copy of \Program Files\CA\Unicenter Service Desk\NX.env. This file will be updated when USD is installed on NodeB. -This copy should not be needed again. It is simply a backup as some of the options, such as @NX_DUMMY,@NX_EIAM_CERT_PASSWORD, @NX_CAWF_PASSWORD, will be updated by the install process on subsequent nodes -Change the Service to Manual (if not already set to Manual)

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 59 Move Group -Move Groups so that USD can be installed on the other cluster nodes. Groups that should be moved include: -MDB Cluster group -USD Cluster Group

Walk-Through Installation of HA MDB, eIAM and HA Primary Server on NodeB

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 62 Remote Components - Install -Install Remote Components on NodeB. The install process is similar to the install process on NodeA. -During Database Configuration, it will display a message indicating MDB has been previously configured. This is true, as it has been configured during USD install on Node A. -Click “Yes” to continue

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 65 eIAM Configuration -This lists the basic configuration required. -There should be not any special considerations for configuring eIAM to use External directory for eIAM authentication (this is described later in this presentation)

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 66 Edit Router File -This change is required for non-HA install as well -Edit the following file: \Program Files\CA\eTrust Directory\dxserver\config \knowledge \iTechPoz- -Router.dxc -Change -Address = tcp localhost port 1684 to -Address = tcp localhost port 1684, tcp “ ” port 1684 -Where is real cluster node name This change is required for NodeA and NodeB

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 67 Edit Router File Updated File Original File Repeat this change for NodeA and NodeB

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 68 Copy Certificate files from NodeA -Rename %DXHOME%\config\ssld\personalities\itechpoz- -router.pem to %DXHOME%\config\ssld\personalities\itechpoz- -router.pem_orig -Rename %DXHOME%\config\ssld\personalities\itechpoz- -.pem to %DXHOME%\config\ssld\personalities\itechpoz- -.pem_orig -Copy from NodeA server %DXHOME%\config\ssld\personalities\itechpoz- -router.pem to NodeB Server as %DXHOME%\config\ssld\personalities\itechpoz- -router.pem -Copy from NodeAserver %DXHOME%\config\ssld\personalities\itechpoz-.pem to NodeB as %DXHOME%\config\ssld\personalities\itechpoz-.pem

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 69 Rename Files -Save original pem files

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 71 Restart eIAM Services -Can be done from Service Control manager or by executing the eIAM_restart.cmd script (included in the USD Cluster resource kit) -It executes the following commands -dxserver stop all -ssld stop -dxserver start all -ssld start

Install Primary Server on Node B

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 74 Destination Folder Select the same shared disk as NodeA install

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 75 Shared Components Folder Select local disk for Shared Components folder

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 76 Select Features Select the same features as NodeA

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 80 Configuration -USD folder is shared by NodeA and NodeB -Thus nx.env will be shared by NodeA and NodeB -NodeB configuration will display same options as NodeA

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 85 MS-SQL Database Configuration HA MDB

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 86 MS SQL Database Config Database was previously configured by NodeA

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 87 eIAM Configuration Same eIAM application label as NodeA. eIAM admin password must be same as NodeA eIAM admin password

Secondary Server

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 91 Secondary Server -No additional considerations for the Secondary Server if using HA Primary Server and / or HA MDB -During Secondary Server configuration, identify cluster name (i.e., network name for your USD cluster group) as the Primary Server name

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 92 Secondary Server Configuration Set to Primary Server Cluster Resource Group Network Name

USD MDB Failover Customization

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 94 MDB failover -If the MDB fails over to another cluster node, web clients will not be able to reconnect. This is because sqlagent detects a network glitch and will not reconnect to the database. -Active users will simply wait. New users will not be able to connect to the pdmweb. The symptoms are similar to when a non-HA MDB server is being rebooted.

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 95 Define Cluster Resource -Extract the contents of the USD Cluster resource kit (usdcluster.zip) to your SQL Shared Drive. The directory name must be as follows: -usdCluster -Cd /usdCluster/bin directory -Update define_resource.cmd file -Execute updated define_resource.cmd to build the cluster resource

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 96 Update define_resources.cmd Update the above script with your cluster details

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 97 Define Cluster Resource Usdcluster_resource SQL, H:, “SQL Server (SQLINSTA)”

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 98 Build Cluster Resource Execute updated define_resources script

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 100 Startup Script -Update the startup script to restart Unicenter Service Desk on the Primary Server -If Unicenter NSM is installed and Event Agent is running on the Primary Server, you can use cawto command to trigger MRA on the Primary Server -The example shows in-house utility being used to restart the Unicenter Service Desk Service on the Primary Server

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 101 Customize Options -If using in-house utility, specify the Primary Server details. Update usdService_restart.dat to specify the primary Server name

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 102 Restart USD Service This shows in-house utility being used to restart the USD Service on the Primary Server. Restart status is logged to the Windows Event Log file

USD Primary Server Failover Customization

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 104 Customization -USD Install on NodeA and NodeB is now complete -Define Cluster Resource for USD Service (pdm_daemon_manager)

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 105 Task Summary -NodeB is active node -Launch web client to verify setup -Stop USD service -Define Cluster Resource -Online Cluster Resource -Move Group -Launch web client to verify setup

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 106 usdPSCluster Package -Extract USD cluster resource kit usdPSCluster.zip file onto shared disk on which USD folder was created (G: drive in this example) -Directory name “usdPSCluster” will be created on shared G: drive (name cannot be changed)

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 107 Define Cluster Resource -Modify \usdPSCluster\bin\define_resource.cmd -Example for this Install -Cd G:\usdPSCluster\bin -Usdpscluster_resource USD_r11.1, G: “Cluster Name” -

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 108 Define Cluster Resource Usdpscluster_resource USD_r11.1, G:, “Cluster Name”

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 109 Define Resource -Execute define_resources.cmd

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 111 Simulate Failover -Online USD Resource “CA_USD Service” -Move Group to simulate failover

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 112 Primary Server Failover -If the primary server fails over, the web clients will detect that the Primary Server service restarted and report accordingly -Web client users will be returned to the login screen

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 114 Configuration -Any further Primary Server Configuration requires the service to be stopped and restarted. -If special care is not taken, the Primary Server will move from one node to another -Thus, prior to Configuration, change the Cluster Resource to “offline” -In most cases, Configuration should not be required on all cluster nodes – only the active node should suffice. However, there may be some changes, such as passwords, that require configuration to be run on all cluster nodes

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 115 Offline Cluster Resource -Take cluster resource offline before configuration is run

eIAM Customization

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 123 NodeB -Repeat the same changes on all cluster nodes -The Ingres database resides on the local drive and that is why policy is not shared -Ingres database can be relocated on the shared drive if required. This is explained on “MDB Care and Feeding presentation”. However, it requires additional customization, which is outside scope of this document

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 124 Reconfigure -Run USD Configuration to set eIAM Authentication option

Failover Test for Primary Server

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 126 MDB Active NodeA Prior to Failover

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 127 Primary Server Active NodeB Prior to Failover

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 128 Web Client Prior to Failover: Web Client launched from a different server to Primary Server

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 130 Failover – Primary Server After Failover: Primary Server active on NodeA

© 2005 Computer Associates International, Inc. (CA). All trademarks, trade names, services marks and logos referenced herein belong to their respective companies. 132 Web Client – After Failover Click OK to return to login screen

Best Practices for Implementing Unicenter Service Desk r11.x in an HA MSCS Environment -Part 4: HA MDB with eIAM and HA Primary Server Last Revised January.

Similar presentations

Presentation on theme: "Best Practices for Implementing Unicenter Service Desk r11.x in an HA MSCS Environment -Part 4: HA MDB with eIAM and HA Primary Server Last Revised January."— Presentation transcript:

Similar presentations

About project

Feedback

Log in

Auth with social network:

Best Practices for Implementing Unicenter Service Desk r11.x in an HA MSCS Environment -Part 4: HA MDB with eIAM and HA Primary Server Last Revised January.

Similar presentations

Presentation on theme: "Best Practices for Implementing Unicenter Service Desk r11.x in an HA MSCS Environment -Part 4: HA MDB with eIAM and HA Primary Server Last Revised January."— Presentation transcript:

Similar presentations

About project

Feedback