To install the auxiliary database software

Purpose

The following steps describe how to install and initialize the auxiliary database software.

Note: You must perform the procedure on each auxiliary database cluster in a geo-redundant deployment.

Note: You require root user privileges on each auxiliary database station.

Note: A leading # character in a command line represents the root user prompt, and is not to be included in a typed command.

Steps

Start the PKI server, if the server is not running; perform To configure and enable a PKI server.

Note: The PKI server is required for internal system configuration purposes.

Open a console window.

Enter the following:

# cp /opt/nsp/nfmp/auxdb/install/config/install.config.default /opt/nsp/nfmp/auxdb/install/config/install.config ↵

Open the /opt/nsp/nfmp/auxdb/install/config/install.config file using a plain-text editor such as vi.

CAUTION

Service disruption

Changing a parameter in the auxiliary database install.config file can have serious consequences that include service disruption.

Do not change any parameter in the install.config file, other than the parameters described in the step, without guidance from technical support.

Edit the following lines in the file to read:

hosts=internal_IP1,internal_IP2...internal_IPn

export_hosts=internal_IP1[export_IP1],internal_IP2[export_IP2]...internal_IPn[export_IPn]

where

internal_IP1, internal_IP2...internal_IPn are the IP addresses that the stations use to communicate with each other

export_IP1, export_IP2...export_IPn are the IP addresses that the stations use for communication with other components in the deployment

The following is an export_hosts configuration example:

export_hosts=10.1.1.10[198.51.100.10],10.1.1.11[198.51.100.11],10.1.1.12[198.51.100.12]

Note: If required, for a single-station auxiliary database you can specify the same address for internal communication and for communication with other components. In such a scenario, you must specify the same address as the internal_IP value and the export_IP value.

To enable TLS, edit the following lines in the file to read as shown below:

Note: The secure value must match the secure value in the auxdb section of the NSP and NFM-P system configurations.

secure=true

pki_server=server

pki_server_port=port

where

server is the PKI server IP address or hostname

port is the PKI server port number

Save and close the install.config file.

Enter the following:

# /opt/nsp/nfmp/auxdb/install/bin/auxdbAdmin.sh install ↵

The script sequentially prompts for the root user password of each auxiliary database station.

Enter the required password at each prompt. The script installs the software on the station.

When the script execution is complete, if you are deploying a geo-redundant auxiliary database, perform the following steps on each auxiliary database station in the current cluster.

Log in to the station as the root user.
Open a console window.
Enter the following:

bash$ su - samauxdb ↵
Enter the following for each station in the geo-redundant cluster:

bash$ ssh-copy-id station_IP ↵

where station_IP is the IP address of a station in the geo-redundant cluster

Perform the following steps on each auxiliary database station in the current cluster.

Log in to the station as the root user.
Open a console window.
Enter the following:

# systemctl start nspos-auxdbproxy.service ↵

The auxiliary database proxy starts.

If no other components are to be deployed, stop the PKI server by entering Ctrl+C in the console window.

Close the open console windows.

End of steps