Install on UNIX manually

Perform the following steps to install the Centrify for DB2 package manually.

To install the Authentication Service for IBM DB2 manually:

  1. Copy the shared libraries. Run the following commands as the instance user to copy the shared libraries to the target directories where db2inst1 is the instance name:

    • For a 64 bit DB2 instance:

      cp /usr/share/centrifydc/lib64/libcentrifydc_db2gsskrb5.so ~db2inst1/sqllib/security64/plugin/client/centrifydc_db2gsskrb5.so
      cp /usr/share/centrifydc/lib/libcentrifydc_db2gsskrb5.so 
      ~db2inst1/sqllib/security32/plugin/client/centrifydc_db2gsskrb5.so
    • For 32 bit instances, run:

      cp /usr/share/centrifydc/lib/libcentrifydc_db2gsskrb5.so
      ~db2inst1/sqllib/security32/plugin/client/centrifydc_db2gsskrb5.so
  2. Set up the DB2 configuration variables. As the DB2 instance user, run the following commands to tell DB2 to use server authentication schemes:

    db2 update dbm cfg using LOCAL_GSSPLUGIN centrifydc_db2gsskrb5 
    db2 update dbm cfg using AUTHENTICATION SERVER
  3. On some platforms, the DB2 client may not be able to run due to the Kerberos library conflict between the system and Centrify DirectControl. The centrifydc_db2gsskrb5 plugin has to be linked against the one from DirectControl.

    To work around the issue, Centrify recommends that you add the library search path. Please do the modification as below:

    Note:   The environment variable name and value for library search path is platform specific, and the example below is for Linux x86_64.

    For Bourne, Korn and bash shell users, add the following lines to $INSTHOME/sqllib/userprofile:

    Copy
    LD_LIBRARY_PATH=/usr/share/centrifydc/lib64:/usr/share/centrifydc/kerberos/lib64:$LD_LIBRARY_PATH
    export LD_LIBRARY_PATH

    For C shell users, add the following line to $INSTHOME/sqllib/usercshrc:

    Copy
    setenv LD_LIBRARY_PATH=/usr/share/centrifydc/lib64:/usr/share/centrifydc/kerberos/lib64:$LD_LIBRARY_PATH