|
|
|
|
|
|
For information about installing WLE Security Service software on an NT, Windows 98, or Windows 95 system, see WLE Security Service Installation on Windows NT, 98, and 95 Systems.
The WLE Security Service software is packaged on a CD that is separate from the WLE product box. A WLE Security Service CD is distributed only if you purchased this software. This software provides 56-bit or 128-bit Secure Sockets Layer (SSL) and Link Level Encryption (LLE) features for WLE applications. Each level of encryption is packaged on a separate CD.
The installation screens are similar for both levels of security. In this chapter, the sample screens are from a WLE Security Service 56-bit installation on a Solaris 2.6 system.
This section describes the following topics:
Before You Install
Before you can install the WLE Security Service 5.0 software, you must first install at least one WLE 5.0 server component, or one of the following WLE 5.0 client component options:
Confirming That the WLE 5.0 Software Has Been Installed
The environment variables discussed in the section Setting Up Your Environment on UNIX Systems must be set prior to installing the WLE Security Service software. The TUXDIR
and dynamic shared library path variables are critical to the success of this Security Service installation, because the SSL plug-in registration step depends on these variables.
During the 56-bit or 128-bit Security Service installation, the procedure will prompt you for the required LDAP server information shown in the following list.
If you do not know the appropriate LDAP values for the prompts, contact the person in your organization or company who is responsible for defining the LDAP server tree. At most companies, this person is the Security Administrator or Directory Services Administrator.
Note:
After the installation, it is not possible to modify a file to adjust these values. The only way to change these values is to re-install the product. Therefore, it is important that you understand the appropriate values for the requested information before you start the installation.
Environment Variables
LDAP Information Required During the Installation
Note: These LDAP prompts are not presented if the target system only has the TUXEDO server or client software installed (from WLE 5.0). In this case, only the WLE Security Service's Link-Level Encryption (LLE) components are installed on the target system. During the WLE Security Service installation procedure, the Secure Sockets Layer (SSL) components are not installed on this type of target system.
If you are re-installing the 56-bit or 128-bit WLE Security Service software on a system, the installation procedure will overwrite the LDAP filter file if you selected its default name and location. By default, the LDAP filter file is installed in $TUXDIR/udataobj/security/bea_ldap_filter.dat
, where TUXDIR
is the directory in which you installed the WLE software. The filter file is used to define search filters that can further refine the scope of searches in the LDAP server tree.
On re-installation, the Security Service installation procedure will also overwrite the LDAP peer validation rule file, $TUXDIR/udataobj/security/peer_val.rul
.
Before you re-install the Security Service software, temporarily rename these files if you do not want the installation procedure to overwrite them. After the installation procedure, rename the files back to their original names and locations.
Before beginning the installation, ensure that no BEA TUXEDO or WLE client or server applications are running. For information about the tmshutdown
command, see Starting and Shutting Down Applications in the Administration section of the WebLogic Enterprise online documentation.
On most systems, you need superuser privileges to mount the software CD. The account that you log on to to perform the installation must have administrative privileges.
The platforms listed in Table 5-1 are supported.
Before Re-installation, Back Up LDAP Files
Stopping WLE or BEA TUXEDO Applications and Related Services
Checking That Your Account Has Administrator Privileges
Platforms Supported
Vendor |
Operating System |
Release/Version |
|---|---|---|
For the hardware and software requirements for these operating systems, see WLE Platform Data Sheets.
This section describes how to install the 56-bit or 128-bit WLE Security Service software on the supported UNIX systems. The sample screens show the installation of the 56-bit software on a Solaris 2.6 system.
It takes approximately 10 minutes to install the software.
To install the WLE Security Service software on a UNIX operating system, perform the following steps:
sh install.sh
.
If all the files are in uppercase characters, begin the installation by entering:
sh INSTALL.SH
1) HP-UX v11.0
2) Sun Solaris v2.6
3) Sun Solaris 7
Install which platform's files? [01- 03, q to quit, l for list]:
Enter 1
to install the Security Service on an HP-UX system; or enter 2
to install the Security Service on a Solaris 2.6 system; or enter 3
to install the Security Service on a Solaris 7.0 system.
** You have chosen to install software for ** BEA WebLogic Enterprise Release 5.0 This directory contains the BEA WLE Installation Software for Is this correct? [y,n,q]: Enter y
to proceed; or enter n
to redisplay the platform menu; or enter q
to quit the installation.
To terminate the installation at any time The following components are available: 1 security BEA Security Service 56 Enter the number 1
to select the Security Service; or enter a single question mark (?
) to display a brief help message; or enter two question marks (??
) to redisplay the menu; or enter q to quit the installation.
The following packages are available: 1 sec56 BEA Security Service 56 For WLE Select the package(s) you wish to install (or 'all' to install Enter the number 1
or the word all
to install the Security Service for WLE; or enter a single question mark (?
) to display a brief help message; or enter two question marks (??
) to redisplay the menu; or enter q to quit the installation.
BEA Security Service 56 For WLE SSLplus is a trademark of Certicom Corporation, 1999. WebLogic Enterprise must be installed prior to installing the Security Service Location of existing BEA software installation (default: /usr/local/wledir) [?,q]: Press the Enter key if the default value shown matches the base directory location of the WLE software; or enter the correct path to the WLE base directory.
Using /usr/local/wledir as the base directory Determining if sufficient space is available ...
Note:
In the following displays and steps, all the SSL-related messages and prompts starting with "Unloading...SECSSL.Z"
through "
Registering SSL plug-in...finished"
(in step 20) are not displayed if the system only has TUXEDO server or client software from a WLE 5.0 software installation. In this case, the Security Service installation procedure installs the LLE software, but not the SSL software.
Moving /usr/local/wledir/lib/libgp.so.65 to /usr/local/wledir/lib/libgp.so.65.0 Moving /usr/local/wledir/lib/libgp.a to /usr/local/wledir/lib/libgp.a.0 Unloading /usr/local/wledir/spsol26/security/sec56/SEC56.Z ... Unloading /usr/local/wledir/spsol26/security/sec56/SECSSL.Z ... Enter fully qualified hostname for URL of the LDAP server system. [?,q]: Enter the LDAP server's fully qualified node name and domain, such as myhost.mydomain.com.
Note:
This prompt is not displayed if the system only has TUXEDO server or client software from a WLE 5.0 software installation.
Enter a port number for the URL of the LDAP server system. [?,q]: For example, enter 389
if that is the correct port number. If you are not sure, check the value with the system administrator of the LDAP server.
Note:
This prompt is not displayed if the system only has TUXEDO server or client software from a WLE 5.0 software installation.
Using 'myhost.mydomain.com:389' as the URL of the LDAP server/port Enter a base object for searches in the LDAP server. The base object is the point in the LDAP tree at which you want users to start searching (in this case, to start searching for certificates). There are no strict rules about the syntax for this value. Enter the base object string exactly as it was specified in the LDAP server tree.
Enter a base object for search in LDAP server. [?,q]: o=mydomain.com For example, you could enter a value such as o=mydomain.com
, or a value such as o=trixie@trixieweb.com
.
Note:
This prompt is not displayed if the system only has TUXEDO server or client software from a WLE 5.0 software installation.
Using 'o=mydomain.com' as the base object
Note:
This message is not displayed if the system only has TUXEDO server or client software from a WLE 5.0 software installation.
Location and name of LDAP filter file. (default: /usr/local/wledir/udataobj/security/bea_ldap_filter.dat) [?,q]: The file's default location is shown. Press the Enter key to accept this default; or enter a new value and click Enter.
Note:
This prompt is not displayed if the system only has TUXEDO server or client software from a WLE 5.0 software installation.
Using 'file:///usr/local/wledir/udataobj/security/bea_ldap_filter.dat' as the location and name of LDAP filter file
Note:
This message is not displayed if the system only has TUXEDO server or client software from a WLE 5.0 software installation.
Registering SSL plug-in...
Note:
The Registering SSL...
message is not displayed if the system only has TUXEDO server or client software from a WLE 5.0 software installation.
Changing file permissions... Installation of BEA Security Service 56 For WLE was successful Please don't forget to fill out and send in your registration card
Sun Solaris v2.6 on Sun SPARC.
press the interrupt key,
typically <del>, <break>, or <ctrl+c>.
Select the one you wish to install [?,??,q]:
all packages) (default: all) [?,??,q]:
(sparc) Release 5.0
Copyright (c) 1999 BEA Systems, Inc.
All Rights Reserved.
BEA and WebLogic are trademarks of BEA Systems, Inc.
BSAFE is a trademark of RSA Data Security, Inc., 1999.
5818 blocks are required
1032768 blocks are available to /usr/local/wledir
lib/libgp.so.65
lib/libgp.a
2750 blocks
... finished
lib/liborbssl.so.65
lib/libjsec.so
lib/libsecssl.so.65
lib/libwlesec.so.65
lib/libwlesys.so.65
locale/C/IJSSLN.text
locale/C/IJSSLN_CAT
udataobj/security/bea_ldap_filter.dat
udataobj/security/certs/peer_val.rul
udataobj/security/certs/revoked.crl
udataobj/security/certs/trust_ca.cer
2970 blocks
... finished
... finished
... finished
To remove the WLE Security Service software from your UNIX system, you must:
This also removes the WLE Security Service software, if present.
|
|
|
Copyright © 1999 BEA Systems, Inc. All rights reserved.
|