IZ59260: IMPROVEMENTS NEEDED IN THE TSAM INSTALLATION AND USER'S GUIDE

APAR status

• Closed as documentation error.

Error description

• Customer has detected some crucial documentation issues upon
  performing an installation of TSAM.
  
  The following list contains information that must be added to
  the TSAM Installation and User's Guide.  Without this
  information in the guide,it is not possible for someone to
  successfully install TSAM.
  
  The version of the TSAM Installation and User's Guide that I
  followed when installing TSAM was given to me by Balu
  Ramachandran in April,  2009. We found more reliable information
  in the "Tivoli Service Automation
  Manager Installation Experience: Cookbook" located here in
  Cattail:
  http://cattail.cambridge.ibm.com/cattail/?source=v#view=peter.ta
  ube@de.i
  bm.com/files/25557FD0DAF73DD8864FEA767F000001
  
  1.  The AIX Administrative Server must have openssh version 4.7
  and openssl version 9.8.602.  Without these versions, the TSAM
  installation will fail.
  AIX 5.3 comes with openssh 4.3 and openssl 0.9.71-1 (openssl is
  a prerequisite for openssh).  These versions won't work for a
  TSAM installation.  You can get the required versions here:
  Download Openssl from IBM portal ( login required )
  https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source
  =aixbp
  Download Openssh from sorceforge: It's not the newest version so
  drill into the AIX 5.3 fileset and select 4.7p1
  https://sourceforge.net/projects/openssh-aix/
  The ssh commands that need to be run are noted in the cookbook.
  This needs to be in the TSAM Installation and User's Guide also.
  The check_req_packages_aix.sh script that is run before
  installing TSAM must be updated to check for the correct version
  of each required package.  This script does verify that I have
  the openssh and openssl
  packages, but it doesn't check for the required versions.
  
  2.  These filesystem requirements for AIX must be added to the
  TSAM Installation and User's Guide.  A TSAM installation will
  fail without the following minimum requirements:
      * /home: 12GB
      * /opt: 17GB (without ITM optional software)
      * /opt: 27GB (with ITM optional software)
      * /usr: 5GB
      * /Tivoli: 50GB
      * /var/tmp: 5.2GB
      * /tmp: 2GB
      * /: 400MB
       The pre-installation summary shown by the TSAM installer
  will catch some of these if there is not enough space, but not
  all.
  
  3.  Joachim Hagmeier (IBM STG, Systems Software Development TSAM
  Test &
  Installation Support in Germany)  logged on to our AIX
  management server and noticed that the home directory for root
  was ?/?.  He said this is a potential problem and recommended
  having the root's home set to /home/root on AIX; this is also
  where the middleware installer  seems to look for the root
  user's home.
  Someone should verify that it is really necessary to change the
  home directory for root.  If so, note the security issues in
  doing so.
  If this step is truly necessary, the steps to do so should be
  documented:
      * create /home/root directory
      * update /etc/passwd file to define root's new home
  directory
      * move all ?.*? files from the root's original home to the
  new home
      * log out and back in with root, verify that $HOME is now
  set to /home/root
  
  4.  Prior to installing TPM, a tioadmin userid is created.  The
  TPM installation process tries to log in with this id for the
  first
  time. By default, AIX will require a user to change the password
  at the first log in.  This will cause the TPM installation to
  fail.
  An AIX administrator can change the setting to not require a
  password change at the first log in, but this isn't a good idea
  for
  security reasons.
   The best action to take to solve this is probably to create the
  tioadmin userid, log in with it once to set the password
  correctly to what the TPM installation script will expect it to
  be.  This needs to be documented.
  Some should verify whether the TPM installation process will
  create the tioadmin userid if it doesn't exist already.  If so,
  then the same problem will be encountered where the password
  needs to be changed when the installer tries to log in for the
  first time with that id.
  
  5.The TSAM installation guide should be enhanced to provide more
  detail on what actions must be taken when an installation
  attempt fails. Actions must be taken on both the Windows
  administrative server and the
  AIX management server.  It is NOT possible to simply start over,
  or to uninstall what has already been done and try again.
  A backup of each server should be taken after all the server
  preparation steps, and before the first installation attempt.
  These will have to be restored after a failure prior to trying
  another install.  The current
  documentation does mention getting a backup of the management
  server, but the Windows server is never mentioned.
  
  6.  The format of the /etc/hosts file on the management server
  must be more clearly documented.
  The Installation and User's Guide (page 40) states that the line
  for the server must be the first entry, and the loopback
  localhost must be the second entry.  It says "Note: The order is
  important!  You must first
  define the real IP address and then the local host IP address
  (127.0.0.1)."  There is no mention of whether additional lines
  can be added after those (we did add a line after the loopback
  line for our
  administrative server).  According to the TSAM Installation and
  User's Guide, our /etc/hosts file should look like:
  
  129.40.157.27        p14n27.pbm.ihost.com        p14n27
  #TSAM
  management server
  127.0.0.1        loopback                localhost
  
  The cookbook has a different example.  It shows a line for the
  TSAM administrative server also.  According to this document,
  our /etc/hosts file should look like:
  
  129.40.157.27        p14n27.pbm.ihost.com        p14n27
  #TSAM management server
  129.40.121.1        b73n10.pbm.ihost.com        b73n10
  #TSAM administrative server
  127.0.0.1        loopback                localhost
  
  If we follow the cookbook, we will get an error from the
  preinstall_check_aix.sh script.  I looked at the script.  It
  specifically looks for 127.0.0.1 to be the second entry.  If it
  isn't, the check will fail.
  
  7.  The TSAM Installation and User's Guide does not specify how
  to correctly set file and directory permissions for AIX.  Only
  the cookbook mentions to execute 'chmod -R 755
  <mgmt_inst_root>'.  The TSAM installation will fail if correct
  permissions are not set.
  
  8.  The TSAM install guide does not provide correct / all
  instructions for TPM install. We had to refer to TPM install
  guide for AIX  for correct information.  Balu Ramachandran can
  provide additional details on this if necessary.
  
  9.  Miscellaneous Documentation problems for the TSAM
  Installation and User's Guide:
  
      * There is a typo on page 37.  It says, ?To set the umask
  setting to 022 using SMIT on AIX??.  It should really be ?002?.
  
      * On page 24 (Preparing the TSAM installation source), there
  are many packages that I am told where to put on the
  administrative server. The TSAM Base package
  (TivSAM_Base_V710.zip) is not mentioned here.
  Later in the document when I needed to run TSAM_Installer.exe, I
  realized I didn't have it.  I put TivSAM_Base_V710.zip under my
  <adm_inst_root> directory and extracted the contents.
  
      * The section explaining what parts to download to the
  management server (p. 28) only mentions CCMDB 7.1.1 Middleware
  and TPM 5.1.1.  Then  when I continue on in the document to the
  "Preparing an AIX  (System p)
  management server" (p. 35), it starts telling me to run
  utilities that are from the TSAM Base install.  I have to
  download
  TivSAM_Base_V710.zip.  This should have been mentioned back on
  p. 28 so that it would already be there.
  
      * On page 24 and 25, I am told to download the 3 TCCMDB
  launchpad zip files to my management server and extract the
  contents.Then I don't find out until page 37 that I need to
  download a set of required
  packages (including unzip) to install on my management server. I
  knew I could also use 'jar xvf' to unzip, but the document
  should be updated so that one would acquire the unzip package
  prior to being told to unzip
  the TCCMDB files.
  
      * On page 42, I am told to untar TPM_V511_Disk1_aix.tar in
  myserver:/install_source/tpm_511.  I have already done this back
  on page 28 where I was told to untar this file into
  <mgmt_inst_root>/aix/tpm_511.  I'm assuming that
  <install_source> here is the same as <mgmt_inst_root>/aix,
  although <install_source>  was never
  mentioned earlier in the document.
  
      * On page 48, the steps for ?Performing a simple
  installation of TSAM? need to be reviewed.  They don't map
  exactly to the actual panels you see form the TSAM installer.
  For example, step 1 says to select the
  language, but in reality that panel doesn?t come until much
  later.
  

Local fix

• N/A
  

Problem summary

• The TSAM documentation is incomplete or not clear in some
  aspects. A technote is required with updates for installtion
  documentation.
  

Problem conclusion

• A technote on 'Updates to installation documentation' was
  published at
  http://www.ibm.com/support/docview.wss?uid=swg21405218
  that covers the documentation updates required as a result of
  this APAR.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels