Welcome!

Linux Authors: Elizabeth White, Esmeralda Swartz, Pat Romanski, Adrian Bridgwater, Michael Thompson

Related Topics: Linux

Linux: Blog Feed Post

Doing a Linux Based Victory Lap

My current project is requiring me to install Virtual Directory Server for HCM and GRC

OK, I admit it, when I solve a particularly confounding problem, I like to get up, proclaim “Victory Lap!” and walk around in a small circle (Sometimes two for bigger problems). I think it's important to celebrate development successes particularly when they result in helping to really move progress ahead. I’d like to share with you folks my latest cause for a Victory Lap.

My current project is requiring me to install Virtual Directory Server for HCM and GRC along with an IDM Dispatcher on a Red Hat LINUX server.  Now I’ve dabbled with LINUX before and even run it as my personal Operating System once upon a time, but Ithink it’s safe to say that I was going to learn a bit during this process, andlearn I did!

There are two important things to remember about LINUX thattrip up someone coming from a DOS/Windows background:

  • Directories are separated by a forward slash ( / ) rather than the backslash ( \ ) Incidentally, after doing some research I found out that the proper name for these characters are the solidus and the reverse solidus respectively.<
IDM Default Path
IDM Default Install Path

Remember, even those two paths have the same basic content; they are different files since the case is different in each path. Personally I recommend using the VDS install path.  I don’t know that I have any terribly well-defined reason except for the fact that the VDS configuration has more moving parts in relationship to the Operating System so it seems like it makes more sense not to rock that boat more than absolutely necessary.

For all of that it was an interesting find and one that I’m happy toshare, but it was not quite worthy of taking the Victory Lap. The issues that followed on the other hand...

Along with VDS, I also installed a dispatcher for IDM.Pretty standard stuff, generate the dispatcher from the MMC Admin console, movethe files over to the LINUX box via SCP, check permissions and then edit them to reflect the new environment.I made the required changes to the shell script and tested the configuration.This brings me to another interesting difference between a Windowsimplementation and a LINUX implementation:

In a Windows configuration the dispatcher is tested by using the command:

Dispatcher_Service_[DispatcherName].bat test checkconfig

however in LINUX all you need to enter is:

Dispatcher_Service_[DispatcherName].bat checkconfig

Again, not quite Victory Lap worthy, and regardless, the check came out just fine and thedispatcher fired off without a problem. However that’s when the problems began.While I was able to observe through the MMC console that IDM saw the dispatcher running on the LINUX box, it would not pick up any jobs that I triedto execute through it. Each and every one would eventually time out leaving mewondering why.

I examined all of the settings in the Dispatcher’s shellscript and didn’t really find anything wrong; double checked the permissions andthose seemed to be fine as well. Eventually I went to look at the Dispatcher’sPROP file. It seemed OK, but what did I know? After much consultation among myfellow IDM experts around the world, one thing stuck out as a piece of advice:

 

"Since prop file is onUNIX – EVERYTHING has to point to UNIX.”

So I took another look at the files and noticed an entry inthe PROP file and saw this:
DSECLASSPATH=%DSE_HOME%/Java/DSE.jar:%DSE_HOME%/Java:%DSE_HOME%/Java/sapjco.jar:C:\\oracle\\product\\10.2.0\\client_1\\jdbc\\lib\\ojdbc14.jar

what's with that %DSE_HOME% reference?  That's DOS not LINUX!  Made a quick search and replace, %DSE_HOME%for /usr/sap/IdM/identitycenter and everything started working!

So, what were the lessons here?

  • Double check everything!
  • LINUX is particular about case
  • Remember the joys of multi-platform systems and make sure everything is set for the correct OS.

Read the original blog entry...

More Stories By Matthew Pollicove

Matt Pollicove is an Identity Management architect, engineer, trainer, project manager, author and blogger with experience in user account provisioning, data synchronization, virtual directory and password management solutions. As a MaXware Technical Consultant and later as a System Engineer, he worked extensively with MaXware (now SAP) software products in large customer environments. In the past Matt has worked with several leading national and international consulting firms and is currently a Sr. Principal Consultant for Commercium Technologies. He is currently the Practice Lead for SAP NetWeaver Identity Management and SailPoint IIQ.