Installation guide

22 NetIQ eDirectory 8.8 SP8 Installation Guide
To determine the version of SUSE Linux you are running, see the /etc/SuSE-release file.
Ensure that the latest
glibc patches are applied from Red Hat Errata (http://rhn.redhat.com/errata)
on Red Hat systems. The minimum required version of the
glibc library is version 2.4.
eDirectory also requires the following:
 A minimum of 1 GB RAM for eDirectory
 300 MB of disk space for the eDirectory server
 150 MB of disk space for every 50,000 users
2.2 Prerequisites
IMPORTANT: Check the currently installed NetIQ and Third Party applications to determine if
those products are supported on eDirectory 8.8 before upgrading your existing eDirectory
environment. The prerequisites for other NetIQ products can be found on the NetIQ Documentation
site (http://www.netiq.com/documentation/). We also recommend you back up an eDirectory
instance before performing any upgrades on that instance.
 (Conditional) Novell International Cryptographic Infrastructure (NICI) 2.7 and eDirectory 8.8
support key sizes up to 4096 bits. If you want to use a 4 KB key size, every server must be
upgraded to eDirectory 8.8. In addition, every workstation using the management utilities, for
example, iManager must have NICI 2.7 installed on it.
When you upgrade your Certificate Authority (CA) server to eDirectory 8.8, the key size will not
change but will still be 2 KB. The only way to create a 4 KB key size is recreate the CA on an
eDirectory 8.8 server. In addition, you would have to change the default from 2 KB to 4 KB for
the key size, during the CA creation.
When you install eDirectory, the nds-install utility automatically installs NICI. For more
information about installing eDirectory, see Section 2.6.2, “Using the nds-install Utility to Install
eDirectory Components,” on page 30. However, if you need to install only NICI, and not
eDirectory itself, on a workstation that has the management utilities installed, you must install
NICI manually. For more information about manually installing NICI, see “Installing NICI” on
page 33.
 Service Location Protocol (SLP) installed and configured
With eDirectory 8.8, SLP does not get installed as part of the eDirectory installation.
Only a root user can install SLP.
For more information on installing SLP, refer to “Using SLP with eDirectory” on page 29.
 The Linux host enabled for multicast routing
To check if the host is enabled for multicast routing, enter the following command:
/bin/netstat -nr
The following entry should be present in the routing table:
224.0.0.0 0.0.0.0
If the entry is not present, log in as root and enter the following command to enable multicast
routing:
route add -net 224.0.0.0 netmask 240.0.0.0 dev interface