Performing upgrades on UNIX computers

The process for simultaneous upgrades on UNIX computers is similar to that for Linux computers. However, the native package managers on different platforms vary in their ability to perform simultaneous upgrades.

This section includes the following topics:

 

Upgrading packages on Solaris computers

On Solaris computers, it is necessary to spool all packages that are to be installed simultaneously. The package manager can then take the spooled packages and install them all at once using one command. Before upgrading on Solaris computers, however, you should stop all Centrify processes that are running.

Note:   On Solaris 10 computers that use Solaris zones, you should upgrade the core agent packages as a separate step. You can then upgrade other Centrify packages using a simultaneous upgrade.

To perform upgrades on Solaris computers:

  1. Stop existing Centrify processes.

    For example, if you are upgrading the core agent, Centrify-enabled OpenSSH, and Centrify NIS packages, you would enter commands similar to the following:

    /usr/share/centrifydc/bin/centrifydc stop 
    etc/init.d/centrify-sshd stop
    /etc/init.d/adnisd stop (on Solaris 9)
    svcadm disable centrifydc_server (on Solaris 10 or later)
  2. Create a new admin file.

    If you are upgrading an existing installation, make a copy of the system default admin file (/var/sadm/install/admin/default) and modify it to ignore dependencies. In the examples below, this file is called my_admin. It should look like this:

    mail=
    instance=overwrite
    partial=nocheck
    runlevel=nocheck
    idepend=nocheck
    rdepend=quit
    space=quit
    setuid=nocheck
    conflict=nocheck
    action=nocheck
    basedir=default

    If you are performing a fresh installation, you can use the original system admin file and keep the default settings.

  3. Unzip and extract each package into a temporary directory, for example, my_tmp_dir.

    To unzip and extract the agent core packages, you would enter commands similar to the following:

    gunzip centrifydc-5.4.0-platform-arch-local.tgz
    tar xvf centrifydc-5.4.0-platform-arch-local.tar

    gunzip centrifydc-openssl-5.4.0-platform-arch-local.tgz
    tar xvf centrifydc-openssl-5.4.0-platform-arch-local.tar

    gunzip centrifydc-openldap-5.4.0-platform-arch-local.tgz
    tar xvf centrifydc-openldap-5.4.0-platform-arch-local.tar

    gunzip centrifydc-curl-5.4.0-platform-arch-local.tgz
    tar xvf centrifydc-curl-5.4.0-platform-arch-local.tar
  4. Spool the packages.

    Spool the packages to a specified directory, for example, my_spool_dir.

    To spool the core packages, you would run commands similar to the following:

    pkgadd -s /my_spool_dir -d /my_tmp_dir/CentrifyDC CentrifyDC
    pkgadd -s /my_spool_dir -d /my_tmp_dir/CentrifyDC-openssl CentrifyDC-openssl
    pkgadd -s /my_spool_dir -d /my_tmp_dir/CentrifyDC-openldap CentrifyDC-openldap
    pkgadd -s /my_spool_dir -d /my_tmp_dir/CentrifyDC-curl CentrifyDC-curl
  5. Upgrade the packages.

    To upgrade the core packages, you would enter commands similar to the following:

    /usr/sbin/pkgadd -a my_admin -n -d /my_spool_dir CentrifyDC-openssl
    /usr/sbin/pkgadd -a my_admin -n -d /my_spool_dir CentrifyDC-openldap CentrifyDC-curl /usr/sbin/pkgadd -a my_admin -n -d /my_spool_dir CentrifyDC
  6. Restart Centrify processes after the upgrade is complete.

  7. Verify the upgrade.

    To verify that the upgrade was successful, run the following command:

    /usr/bin/pkginfo | grep -i centrify

Upgrading packages on HP-UX computers

On HP-UX computers, it is necessary to spool all packages that are to be installed. The package manager can then take the spooled packages and install them all at once using one command.

To perform upgrades on HP-UX computers

  1. Copy and unzip all depot.gz packages into a temporary directory, for example, my_dir.

    To unzip and extract the agent core packages, enter commands similar to the following:

    gunzip centrifydc-5.4.0-platform-arch.depot.gz
    gunzip centrifydc-openssl-5.4.0-platform-arch.depot.gz
    gunzip centrifydc-openldap-5.4.0-platform-arch.depot.gz
    gunzip centrifydc-curl-5.4.0-platform-arch.depot.gz
  2. Spool each package.

    On HP-UX computers, you can use the default spool directory, but you must create a working directory, for example my_dir.

    To spool the agent core packages to my_dir, enter commands similar to the following:

    swcopy -s /full_path/my_dir/centrifydc-openssl-5.4.0-platform-arch.depot CentrifyDC-openssl
    swcopy -s /full_path/my_dir/centrifydc-openldap-5.4.0-platform-arch.depot CentrifyDC-openldap
    swcopy -s /full_path/my_dir/centrifydc-curl-5.4.0-platform-arch.depot CentrifyDC-curl
    swcopy -s /full_path/my_dir/centrifydc-5.4.0-platform-arch.depot CentrifyDC
  3. Upgrade the packages.

    Use a single command to upgrade all packages. For example, to update the core agent packages, enter a command similar to the following:

    swinstall -s CentrifyDC-openssl CentrifyDC-openldap CentrifyDC-curl CentrifyDC
  4. Verify the upgrade.

    Verify that the upgrade was successful by running the following commands:

    swlist | grep -i centrify
    swverify CentrifyDC

Upgrading packages on AIX computers

On AIX computers, it is necessary to unzip all packages that are to be installed. The package manager can then take the unzipped packages and install them all at once, using one command.

To perform upgrades on AIX computers

  1. Copy and Unzip the packages to a directory, for example, my_dir.

    If you are upgrading the core agent packages, you would run commands similar to the following:

    gunzip centrifydc-5.4.0-platform-arch-bff.gz
    gunzip centrifydc-openssl-5.4.0-platform-arch-bff.gz
    gunzip centrifydc-openldap-5.4.0-platform-arch-bff.gz
    gunzip centrifydc-curl-5.4.0-platform-arch-bff.gz
  2. Upgrade the packages.

    You can now upgrade the packages using commands similar to the following:

    inutoc . 
    installp -aY -d my_dir all