Installing the agent on Solaris systems

This section covers information about installing the Centrify Agent for *NIX on Solaris systems. The procedures differ depending on whether you're installing svr4 or IPS packages. If you're installing IPS packages onto a system with Solaris 11 child zones, there's a separate procedure for that deployment.

For which packaged file to use for installation, refer to the table below.

Solaris agent installation packages

Solaris version	Package type	x86 or Sparc	Agent package filename
Solaris 10	svr4	x86	centrify-server-suite-2021.1-sol10-x86.tgz
Solaris 10	svr4	Sparc	centrify-server-suite-2021.1-sol10-sparc.tgz
Solaris 11	svr4	x86	centrify-server-suite-2021.1-sol10-x86.tgz
Solaris 11	svr4	Sparc	centrify-server-suite-2021.1-sol10-sparc.tgz
Solaris 11	IPS	x86	centrify-server-suite-2021.1-sol11-i386.tgz
Solaris 11	IPS	Sparc	centrify-server-suite-2021.1-sol11-sparc.tgz

This section includes the following topics:

Installing the Solaris svr4 agent packages

Download the solaris package appropriate for your Solaris system and run the install.sh script as mentioned in Install interactively on a computer. You can follow the same procedure if you're installing on a system with or without child zones.

You can run the following command to verify the Solaris agent package svr4 installation status:

pkginfo | grep -i centrify

Note that there is no space between "pkg" and "info"; if you search for "pkg info" you'll be searching for IPS packages.

Installing the Solaris IPS agent packages

This procedure is for systems where you are doing a fresh install of Centrify software onto a Solaris 11 system with IPS support.

This procedure is the same as for the regular install script, except that you run the install-ips.sh script, not the install.sh script: Install interactively on a computer.

You'll need the centrify-infrastructure-services-2021.1-sol11-i386.tgz file or the centrify-infrastructure-services-2021.1-sol11-sparc.tgz file for this procedure, depending on the type of system you have.

To install the Solaris IPS packages:

1. Download the Centrify Server Suite package for your version of Solaris.

2. Extract the Centrify packages onto the system.

3. Run the install-ips.sh script. For example:

   ./install-ips.sh

4. Follow the prompts displayed to select the services you want to install and the tasks you want to perform. For example, you can choose whether you want to:

   • Perform a default installation.
   • Perform a custom installation by selecting the specific packages to install.
   • Join a domain automatically at the conclusion of the installation.

   Depending on your selections, you may need to provide additional information, such as the user name and password for joining the domain.

5. You can run the following command to verify the Solaris agent package IPS installation status:

   pkg info | grep -i centrify

   Note the space between "pkg" and "info"; if you search for "pkginfo" you'll be searching for svr4 packages.

Installing the Solaris IPS agent packages with child zones

When you install the agent onto a Solaris 11 computer enabled with IPS that also has one or more child zones configured, you need to import the agent packages into a new repository and then install directly from the repository.

You do this install in the global zone and the repository will automatically install the files into the child zones.

You'll need the centrify-infrastructure-services-2021.1-sol11-i386.tgz file or the centrify-infrastructure-services-2021.1-sol11-sparc.tgz file for this procedure, depending on the type of system you have.

To install the Solaris IPS agent packages onto a system with one or more child zones:

1. Create a directory and extract the IPS tgz file into that directory.

   For example, create directory called "install-ips" and extract the contents of the tgz file into that directory.

   1. Create a repository:

      For example, run the following command to create a repository called "my-repo":

      Tip:     You can run the zfs list command to list all of the zone filesystems.

      zfs create rpool/export/my-repo

      zfs set atime=off rpool/export/my-repo 

      pkgrepo create /export/my-repo 

      pkgrepo set -s /export/my-repo publisher/prefix=centrify

      pkgrepo -s /export/my-repo refresh

      pkgrepo -s /export/my-repo info

      pkg set-publisher -G '*' -M '*' -g /export/my-repo centrify 

      pkg publisher

      You should see the repository listed.

      PUBLISHER 	TYPE	 STATUS 	P 	LOCATIONcentrify 	origin 	online 		F 	file:///export/my-repo
      

2. Import the packages into the repository. You need to import the packages that end with .p5p and you need to import them one at a time.

   1. In the directory where you extracted the Centrify Agent packages, list out the files in that directory (use the ls command).

      The full package list of files that you need to import into the repository looks something like this:

      centrifyda-3.7.0-sol11-i386.p5p

      centrifydc-5.7.0-sol11-i386.p55

      centrifydc-curl-5.7.0-sol11-i386.p5p

      centrifydc-ldapproxy-5.7.0-sol11-i386.p5p

      centrifydc-nis-5.7.0-sol11-i386.p5p

      centrifydc-openldap-5.7.0-sol11-i386.p5p

      centrifydc-openssh-5.7.0-sol11-i386.p5p

      centrifydc-openssl-5.7.0-sol11-i386.p5p

   2. Import each package into the repository.

      For example, if you're installing all 8 packages, you'll run the following 8 commands:

      pkgrecv -s centrifyda-3.7.0-sol11-i386.p5p -d /export/my-repo '*'

      pkgrecv -s centrifydc-5.7.0-sol11-i386.p55 -d /export/my-repo '*'

      pkgrecv -s centrifydc-curl-5.7.0-sol11-i386.p5p -d /export/my-repo '*'

      pkgrecv -s centrifydc-ldapproxy-5.7.0-sol11-i386.p5p -d /export/my-repo '*'

      pkgrecv -s centrifydc-nis-5.7.0-sol11-i386.p5p -d /export/my-repo '*'

      pkgrecv -s centrifydc-openldap-5.7.0-sol11-i386.p5p -d /export/my-repo '*'

      pkgrecv -s centrifydc-openssh-5.7.0-sol11-i386.p5p -d /export/my-repo '*'

      pkgrecv -s centrifydc-openssl-5.7.0-sol11-i386.p5p -d /export/my-repo '*'

   3. You can verify that the packages imported correctly by listing out the repository packages.

      For example, run the following command:

      pkgrepo list -s /export/my-repo

      You'll see a list of packages where each package has a long version. For example:

      centrify security/centrifydc 5.7.0.207:20200726T052946Z

3. Install the packages from the repository into the parent and child zones.

   Be sure to reference the package's entire version. When you install the centrifydc package, the other packages for cURL, OpenLDAP, and OpenSSL are also installed.

   For example, to install centrifydc, you'd run the following command, :

   pkg install -r security/centrifydc@5.7.0.207:20200726T052946Z

   For example, to install all the packages with one command, you'd run something like this:

   pkg install -r security/centrifydc@5.7.0.207:20200726T052946Z security/centrifydc-ldapproxy@5.7.0.207:20200726T053320Z  security/centrifydc-nis@5.7.0.207:20200726T053352Z  security/centrifydc-openssh@5.7.0.207:20200727T065442Z security/centrifyda@3.7.0.171:20200725T014652Z

4. You can run the following command to verify the Solaris agent package IPS installation status:

   pkg info | grep -i centrify

   Note the space between "pkg" and "info"; if you search for "pkginfo" you'll be searching for svr4 packages.