Esli pogibli sertifikaty na servere
ovcm -newcacert
# zapusk sertifikat-servera
/opt/OV/lbin/sec/ovcs -checkinit
ovc -start ovcs
Posle udaleniya Operations (ovoremove)
udalit' VSE sertifikaty.
(a eshche luchshe sdelat' eto DO udaleniya Opereshens,
potomu chto ovcert pri udalenii tozhe snositsya)
ovcert -list
ovcert -remove .....
ovcert -remove CA_.....
ovcert -remove ..... -ovrg server
ovcert -remove CA_..... -ovrg server
i kontrol'nyj - v golovu
rm -f /var/opt/OV/datafiles/sec/ks/*
rm -f /var/opt/OV/shared/server/datafiles/sec/ks/*
i tol'ko posle etogo installirovat' vse snova.
ovoinstall -t
Preodolevaem krivye Kornevye sertifikaty
Udalyaem vse v servernom hranilishche
ls -la /var/opt/OV/shared/server/datafiles/sec/ks
Udalyaem vse v agentskom hranilishche
ls -al /var/opt/OV/datafiles/sec/ks
dlya etogo:
ovcert -list
ovcert -remove .....
ovcert -remove CA_.....
ovcert -remove ..... -ovrg server
ovcert -remove CA_..... -ovrg server
Generim novye CA-sertifikaty
ovcm -newcacert
Generim sertifikat servera
ovcm -issue -file /tmp/jjj -pass hp -name `uname -n` -coreid `ovcoreid`
Vtyagivaem ego na server
ovcert -importcert -file /tmp/jjj -pass hp -ovrg server
Vtyagivaem ego na servernogo agenta
ovcert -importcert -file /tmp/jjj -pass hp
ovc -start ovcs # obyazatel'no
opcsv -start
opcsv
ovcert -list # posmotret', kakie sertifikaty est'
ovcert -check # posmotret', ubedit'sya, chto ih net
1 VARIANT: klient prosit, server podpisyvaet po svoemu soblagovoleniyu:
Na node
ovcert -certreq # sgenerit' svoyu paru klyuchej i poprosit' CA-server ee podpisat'
Na servere
### opccsacm -list_pending_cr # posmotret', kto prosil podpisat' sertifikat
### opccsacm -grant certifikat-id
ovcm -listpending
ovcm -grant ......
2 VARIANT: server generit dlya klienta klyuch "podatelya sego podpisat' avtomatom"
Na servere$ opccsacm -genInstKey -file /tmp/mos057.p12 -pass 4rg54
mos057$ ovcert -certreq -instkey A:\mos057.p12 -pass 4rg54
3 VARIANT: server generit dlya klienta sertifikaty sam, klient ih importiruet
Na servere$ opccsacm -issue -name mos057 -file /tmp/mos057.p12 -pass 4rg54
mos057$ ovcert importcert -file A:\mos057.p12 -pass 4rg54
Backing Up Server Certificates
/opt/OV/bin/OpC/opcsvcertbackup -backup
A tar archive file is created at the following default address:
/tmp/opcsvcertbackup.datetime.tar
Restoring Server Certificates
Stop the HP OpenView platform processes.
/opt/OV/bin/ovstop
Install the backup from the old OVO management server installation
onto the newly installed system with the command:
/opt/OV/bin/OpC/opcsvcertbackup -restore file filename pass password force
* Installyaciya Oracle for OpenView on Itanium IA64 *
Skript dlya prostanovki kernel-parametrov chto-nibud' tipa:
(tochnye znacheniya soobshchit opcinstall
#!/bin/sh
echo DYNAMIC
echo
/usr/sbin/kctune -B -C "OVO" max_thread_proc=1090
/usr/sbin/kctune -B -C "OVO" maxssiz=0x8000000
/usr/sbin/kctune -B -C "OVO" maxssiz_64bit=0x40000000
/usr/sbin/kctune -B -C "OVO" maxuprc=3690
/usr/sbin/kctune -B -C "OVO" nflocks=4150
/usr/sbin/kctune -B -C "OVO" shmmni=512
/usr/sbin/kctune -B -C "OVO" shmseg=400
echo
echo STATIC
echo
/usr/sbin/kctune -h -B -C "OVO" msgmni=4096
/usr/sbin/kctune -h -B -C "OVO" msgseg=32767
/usr/sbin/kctune -h -B -C "OVO" msgtql=4096
/usr/sbin/kctune -h -B -C "OVO" msgmap=4098
/usr/sbin/kctune -h -B -C "OVO" ncsize=34848
/usr/sbin/kctune -h -B -C "OVO" ninode=34848
/usr/sbin/kctune -h -B -C "OVO" semmni=4096
/usr/sbin/kctune -h -B -C "OVO" semmns=8192
/usr/sbin/kctune -h -B -C "OVO" semmnu=4092
/usr/sbin/kctune -h -B -C "OVO" semume=250
/usr/sbin/kctune -h -B -C "OVO" vps_ceiling=64
Sozdanie neobhodimoj struktury distributivov v kataloge /media
Oracle:
/media/database/doc
/media/database/install
/media/database/response
/media/database/runInstaller
/media/database/stage
/media/database/welcome.html
Operation:
/media/OVOCD1
/media/OVOCD2
/media/OVOSSPI
/media/OVOSSPICD2
NNM
/media/OVNNMCD1
/media/OVNNMCD2
#!/bin/sh
cd /media
unzip 10gr2_database_hpi.zip
mkdir OVOCD1
mkdir OVOCD2
mkdir OVOSSPI
mkdir OVOSSPICD2
mv OVO81_IA64_CD1.tar OVOCD1/OVO81_IA64_CD1.tar
mv OVO81_IA64_CD2.tar OVOCD2/OVO81_IA64_CD2.tar
mv OVO81_SPI_IA64_CD1.tar OVOSSPI/OVO81_SPI_IA64_CD1.tar
mv OVO81_SPI_IA64_CD2.tar OVOSSPICD2/OVO81_SPI_IA64_CD2.tar
cd /media/OVOCD1
tar -xfv OVO81_IA64_CD1.tar
cd /media/OVOCD2
tar -xfv OVO81_IA64_CD2.tar
cd /media/OVOSSPI
tar -xfv OVO81_SPI_IA64_CD1.tar
cd /media/OVOSPICD2
tar -xfv OVO81_SPI_IA64_CD2.tar
cd /media
mv OVOCD1/OVO81_IA64_CD1.tar /media
mv OVOCD2/OVO81_IA64_CD2.tar /media
mv OVOSSPI/OVO81_SPI_IA64_CD1.tar /media
mv OVOSSPICD2/OVO81_SPI_IA64_CD2.tar /media
gunzip NNM7.50-IPF.tar.gz
tar -xfv NNM7.50-IPF.tar
mv /media/disk1 /media/OVNNMCD1
mv /media/disk2 /media/OVNNMCD2
dobavit' gruppy dba i oinstall s nomerami > 100
dobavit' pol'zovatelya oracle, /home/oracle osn.gruppa oinstall, vtorichnaya dba
useradd -m -g oinstall -G dba oracle
umask 022
# dlya Oracle 9.2
mkdir -p /opt/oracle/product/9.2.0 /opt/oracle/oraInventory
chown -R oracle:dba /opt/oracle
# dlya Oracle 10.2
mkdir -p /opt/oracle/product/10.2.0 /opt/oracle/oraInventory
chown -R oracle:oinstall /opt/oracle
dobavil v /home/oracle/.profile
#####################################################
export ORACLE_BASE=/opt/oracle
# export ORACLE_HOME=$ORACLE_BASE/product/9.2.0
export ORACLE_HOME=$ORACLE_BASE/product/10.2.0
export PATH=$PATH:$ORACLE_HOME/bin
export ORACLE_SID=openview
export NLS_LANG=american_america.WE8ISO8859P1
# export NLS_LANG=russian_russia.WE8ISO8859P5
case "$TERM" in
hpterm) export ORACLE_TERM=hp ;;
dtterm|*) export ORACLE_TERM=ansii ;;
esac
#####
umask 022
export ENV=$HOME/.shrc
export HISTFILE=$HOME/.sh_history
#####################################################
Dlya installyacii s cdroma
/usr/sbin/pfs_mountd &
/usr/sbin/pfsd &
Use an editor to add the following line to the file /etc/pfs_fstab:
/SD_CDROM pfs-rripc xlat=unix 0 0
where is the CD-ROM device file.
Create the directory /SD_CDROM.
mkdir /SD_CDROM
/usr/sbin/pfs_mount -t rripc -o xlat=unix /dev/cdrom /SD_CDROM
xhost +
su - oracle
export DISPLAY=mos137:0.0
# esli s cdrom
/SD_CDROM/install/hpunix/runInstaller &
# esli s /media
/media/database/install/runInstaller &
dalee sledovat' instrukcii, bazu ne sozdavat'
(bazu openview sozdast sebe sam - opcconfig).
dva skripta zapustit' v samom konce iz pod root:
su - root
/opt/oracle/oraInventory/orainstRoot.sh
/opt/oracle/product/10.2.0/root.sh
Enter the full pathname of the local bin directory
[/usr/local/bin]:
Enter: /usr/lbin
# Propisyvaem parametry yadra i perezagruzhaemsya
/media/my_kernel_tuner
shutdown -ry 0
###################################
su - oracle
( echo startup ; echo exit ) | sqlplus / as sysdba
######## Konec installyacii Oracle ##############
######## Installyaciya Operation ##############
# zapuskaem listener oracle (ne obyazatel'no?)
lsnrctl start
# zapuskaem oracle (ne obyazatel'no? - sam zapuskaetsya)
### v installyatore est' glyuk s pravami, obhodim tak: #######
su - oracle
while sleep 2 ; do echo "grant all privileges to opc_op ;" | sqlplus / as sysdba ; done
su - root
umask 027
export LANG=C
/media/OVOCD1/ovoinstall -t
starat'sya pobol'she otvechat' po umolchaniyu
# If installation aborts, skip configuration phase:
CD MountPoint/ovoinstall -restart
# rekonfiguraciya
export LANG=C
export NLS_LANG=american_america.WE8ISO8859P1
# ustanovka chistoj db
/opt/OV/bin/OpC/opcdbinit -c
/opt/OV/bin/OpC/opcdbsetup ??
/opt/OV/bin/OpC/opcdbinst ??
/opt/OV/bin/OpC/install/opcconfig
Configure database automatically? Y
Oracle user system password [manager]: CR
opc_op password: opc_op (repeat)
opc_report password: opc_report (repeat)
Start database at boot time (yes): CR
Data directory: CR
Index directory: CR
Oracle SID (openview): CR
Oracle base (/opt/oracle): CR
Oracle home (/opt/oracle/product/9.2.0): CR
dba user (oracle): CR
This step can take a few minutes, too.
Read opc.log (y/n) ? n
Ukazat' ispol'zuemyj brouzer mozhno i potom v
/etc/opt/OV/share/conf/Ovweb.conf :
Browser: /usr/local/bin/netscape
Port: 3443
V PATH vklyuchit': /opt/OV/bin/OpC:/opt/OV/bin
Proverka:
/opt/OV/bin/OpC/opcsv -status
/opt/OV/bin/OpC/opcagt -status
/opt/OV/bin/ovc
/opt/OV/bin/OpC/utils/submit.sh
opc user opc_adm passwd OpC_adm
opcragt
# Posmotret' installyacionnye logi
tail /var/opt/OV/log/opc_inst.log
tail /var/opt/OV/log/OpC/mgmt_sv/inst_err.log
# rabota s licenziyami
opclic -list
Deinstallyaciya Operation
opcsv -stop
# Remove the OVO configuration and OpenView database
opcdbsetup d
swremove
+ PHCO_27958
mountall cumulative patch, Dev IDs enabler
+ PHCO_30269
cumulative sh-posix patch
+ PHKL_25993
thread nostop for NFS, rlimit, Ufalloc fix
+ PHSS_28871
ld(1) and linker tools cumulative patch
CHARACTER SET = "american_america.WE8ISO8859P15"
If NLS_LANG is not set in the environment, OVO uses the value specified
in the file:
/etc/opt/OV/share/conf/ovdbconf
language_territory.characterset
OVO checks the character set of the Oracle database, and stores this
information as part of its configuration. Oracle provides a dynamic
database table v$nls_parameters that contains the settings for the
language and character-set parameters.
17. Reset the name of the OVO management server in the database by
changing the IP address using the opc_node_change.pl script.
Use the following "old name / new name" scheme:
/opt/OV/bin/OpC/utils/opc_node_change.pl -oldname
OLD_FQDN -oldaddr OLD_IP_ADDR -newname NEW_FQDN -newaddr
NEW_IP_ADDR
Since opcdbsetup was run on the database-server system, the entry
in the database for the OVO management server uses the hostname
and IP address of the database-server system. This is incorrect: the
entry needs to be changed to reflect the hostname and IP address of
the OVO management server itself.
Last-modified: Wed, 02 Aug 2006 13:19:12 GMT