Test 928: IBM Tivoli Directory Server V6.1

Section 1 - Planning and Design

1. Given the customer’s business objectives and the current directory server environment, analyze the data sources and scope of data to be placed into the ITDS V6.1 environment so that a design document can be created

With emphasis on performing the following:
1. Determine the purpose of ITDS V6.1 in the proposed solution
2. Determine sources and nature of data to be stored in ITDS V6.1 solution
3. Survey the customer’s environment for products or applications to be used in the ITDS V6.1 solution


2. Given the design document, schema and the namespace design, determine the hierarchical structure of the ITDS V6.1 directory environment so that an implementation document describing the schema and namespace environment is created

With emphasis on performing the following:
1. Survey the customer’s environment for end-user needs
2. Survey the customer’s environment for application needs
3. Survey the customer’s environment for deployment needs
4. Survey the customer’s environment for infrastructure constraints
5. Determine the data structure
6. Determine the source of data
7. Determine the characteristics of the data elements
8. Survey the customer’s environment for custom object class and/or custom attribute definitions
9. Determine a correct naming convention for the ITDS V6.1 suffix to match to the customer’s expectations.
10. Determine the ITDS V6.1 Directory Information Tree (DIT) layout for the containers
11. Determine an ITDS V6.1 naming style to provide a consistent naming convention


3. Given the customer’s privacy and security requirements, determine the security configuration elements, so that a security implementation document can be created

With emphasis on performing the following:
1. Determine SSL/TLS requirements
2. Determine port assignments
3. Determine ITDS V6.1 Administrator roles and assignments
4. Determine encryption strategy for password and necessary encrypted attributes
5. Determine the required password policy
6. Determine Access Control List (ACL) strategy
7. Determine authentication design strategy
8. Determine authorization design strategy
9. Determine the Operating System (OS) user/group security requirements for the instance ownership


4. Given the requirements for the ITDS V6.1 directory infrastructure deployment along with the existing infrastructure, determine topologies, configurations, and parameters so that an implementation document detailing the design of the directory server infrastructure including replication, partitioning, and network strategy can be created

With emphasis on performing the following:
1. Determine the configuration, number, and location of the ITDS V6.1 servers
2. Determine how the data is to be distributed
3. Determine the distributed (proxy) or non distributed directory server topology
4. Determine the topology for directory server replication
5. Determine the plan for disaster recovery including backup and restore procedures
6. Determine parameters and guidelines for performance planning

Section 2 - Installation

1. Given ITDS V6.1 system requirements, verify the minimum installation requirements are met as per the current Installation and Configuration guide so that the system is ready for a ITDS V6.1 installation

With emphasis on performing the following:
1. Verify system meets all minimum system requirements (CPU, Memory, Disk space etc)
2. Locate ITDS V6.1 Install and Configuration Guide
3. Locate OS specific section of Install and Configuration guide and make sure it is followed


2. Given input from the design document, verify the availability of OS utilities and locate the correct ITDS V6.1 software package so that the appropriate install image is identified

With emphasis on performing the following:
1. Verify the available OS utilities (SSH, X-Windows, VNC, etc)
2. Identify the correct ITDS V6.1 install image for the method chosen


3. Given the installation method selected, gather the components so that the correct ITDS V6.1 install image is obtained

With emphasis on performing the following:
1. Determine the purpose of the ITDS V6.1 installation (full server, client only, proxy server, WebAdmin only, white pages)
2. Locate ITDS V6.1 install image for product(s) desired based on install method to be used (ISMP/native)


4. Given the supported levels of DB2 and Global Security Kit (GSKit), determine if they are installed so that the prerequisite software installation is verified

With emphasis on performing the following:
1. Use OS or DB2 utilities to determine if a supported version of DB2 is installed
2. Use OS or Global Security Kit (GSKit) utilities to verify GSKit 7.0.3.30 or later is installed


5. Given the design document and the existing WAS environment, determine the version of WAS that the Web Administration Tool will be deployed upon, so that a decision is made whether to install the system with an embedded WAS or to use an existing full WAS installation

With emphasis on performing the following:
1. Determine the WAS installation


6. Given the customers’ requirements for the system, determine whether the system will require a Directory White Pages installation, so that the system is correctly utilized

With emphasis on performing the following:
1. Identify the hardware capabilities of the environment
2. Identify OS based product and prerequisite product requirements
3. Define the purpose of the system within the planned topology


7. Given the customers’ requirements for the system, determine whether the system will require co-existence with previous ITDS or other vendor products, so that the system is planned appropriately

With emphasis on performing the following:
1. Identify the OS and hardware capabilities of the environment.
2. Determine the need for multiple product versions (co-existence)
3. Identify any currently installed LDAP software versions.

Section 3 - Configuration

1. Given the user and group name along with the instance location, create a valid instance owner so that the server environment can be configured

With emphasis on performing the following:
1. Create user (and group if necessary) with appropriate name, group membership and instance location
2. Change password if necessary


2. Given the instance parameters, use the ITDS V6.1 tools to create an ITDS V6.1 server instance, so that the instance is ready to be configured as proxy or full server

With emphasis on performing the following:
1. Use the command line or GUI tool to create the instance


3. Given an existing instance seed and salt values, cryptographically synchronize multiple ITDS V6.1 server instances, so that the servers can share encrypted data efficiently

With emphasis on performing the following:
1. Obtain salt value from existing instance
2. Use the salt value in creating the new instance (or instances)


4. Given an existing instance, user and database parameters, configure the database so that the data can be stored

With emphasis on performing the following:
1. Configure a database for an existing ITDS V6.1 instance


5. Given the appropriate server instances and specifications for splitting the data, use the ITDS V6.1 tools to configure and load an ITDS V6.1 proxy environment, so that the proxy server is set up and the back end servers are loaded

With emphasis on performing the following:
1. Create user(s) for the Global Administration Group
2. Add user(s) to the Global Administration Group
3. Set up proxy partitions for identified suffixes
4. Set up health check settings
5. Set up fail-back failover setting
6. Set up plug-in/hash algorithm
7. Set up server roles
8. Set up server priorities (tiers)
9. Split initial data
10. Load initial data on back end servers


6. Given the administrator distinguished name (DN) and password, use the ITDS V6.1 tools to configure ITDS V6.1 Server to contain an administrator DN and administrator password for an instance, so that the server can be administered

With emphasis on performing the following:
1. Configure admin DN and password


7. Given the suffix definitions and design document, configure suffix (or suffixes) so that ITDS V6.1 namespace is defined

With emphasis on performing the following:
1. Configure suffix (or suffixes)


8. Given the object class and attribute requirements, modify and/or create the ITDS V6.1 schema, so that customized data can be loaded and accessed

With emphasis on performing the following:
1. Add/modify objectclass definitions
2. Add/modify attribute definitions


9. Given the customer’s requirements for monitoring changes in the environment, use the ITDS V6.1 tools to configure ITDS V6.1 server instance with changelog database settings, so that the server instance with the changelog can be configured or unconfigured

With emphasis on performing the following:
1. Configure change log database
2. Unconfigure change log database


10. Given the customer’s environment, design document use the ITDS V6.1 tools to configure ITDS V6.1 server with administrative roles for various functions, so that delegation of administrative responsibilities is possible

With emphasis on performing the following:
1. Define the administrative group
2. Add users to the administrative group
3. Define roles for each administrative group member


11. Given an existing ITDS V6.1 server instance and one or more existing directory servers, configure pass-through authentication for the ITDS V6.1 server instance using the appropriate parameters, so that users can log on to the ITDS V6.1 server instance using the credentials stored on another directory server

With emphasis on performing the following:
1. Determine the scenarios for using the pass-through authentication
2. Configure the ITDS V6.1 instance with the existing directory servers for pass-through authentication


12. Given the customer’s requirement for log management configure the ITDS V6.1 server instance, so that the log management strategy is implemented

With emphasis on performing the following:
1. Configure the ITDS V6.1 server log management


13. Given the customer’s audit logging requirements, use the ITDS V6.1 tools to configure and enable (or disable) audit logging, so that ITDS V6.1 operations can be recorded

With emphasis on performing the following:
1. Enable and select ITDS V6.1 operations to audit
2. Disable audit log


14. Given the customer’s server performance requirements, use the ITDS V6.1 tools to configure and enable (or disable) autonomic attribute caching, so that ITDS V6.1 performance can be automatically optimized

With emphasis on performing the following:
1. Enable and configure autonomic attribute cache
2. Disable the autonomic attribute cache


15. Given an ITDS V6.1 server instance, create a new ITDS V6.1 server instance based on the existing instance, so that the new directory server instance has the same configuration settings and data as the existing one

With emphasis on performing the following:
1. Configure the existing ITDS V6.1 server instance for online back up
2. Clone new instance from existing instance


16. Given an ITDS V6.1 server instance from which a database needs to be unconfigured and/or deleted, unconfigure the database, so that a new database can be configured

With emphasis on performing the following:
1. Unconfigure database

Section 4 - Migration

1. Given the current ITDS V6.1 topology, identify a migration strategy with minimum impact, so that a full topology migration with little or no down time can be achieved

With emphasis on performing the following:
1. Identify the hardware capabilities of the environment
2. Identify OS based product and prerequisite product requirements
3. Define the purpose of the system within the planned topology
4. Identify the number of databases and database types to be migrated
5. Identify custom schema
6. Identify dependency issues of client applications
7. Design a migration strategy
8. Perform a staged migration


2. Given the schema, data, and configuration files from the current ITDS environment, migrate the existing environment to ITDS V6.1 so that the customer is on ITDS version 6.1

With emphasis on performing the following:
1. Identify the hardware capabilities of the environment
2. Identify OS based product and prerequisite product requirements
3. Define the purpose of the system within the planned topology
4. Identify the number of databases and database types to be migrated
5. Identify custom schema
6. Identify dependency issues of client applications
7. Uninstall the previous ITDS environment
8. Install ITDS V6.1
9. Create and configure a new ITDS V6.1 server instance


3. Given the current database configuration, complete a successful database migration so that the current database is at the latest supported ITDS V6.1 level

With emphasis on performing the following:
1. Identify the hardware capabilities of the environment
2. Identify OS based product and prerequisite product requirements
3. Define the purpose of the system within the planned topology
4. Identify the number of databases and database types to be migrated
5. Identify dependency issues of client applications
6. Perform a database migration


4. Given the existing instance configuration in the customer’s environment, successfully migrate each instance to the ITDS V6.1 release so that they are at the latest supported level

With emphasis on performing the following:
1. Identify the hardware capabilities of the environment
2. Identify OS based product and prerequisite product requirements
3. Define the purpose of the system within the planned topology
4. Identify the number of databases and database types to be migrated
5. Identify custom schema
6. Identify dependency issues of client applications
7. Identify the number and configuration of each instance in the current environment


5. Given the customer’s requirements, perform a successful Web Administration Tool (WAT) migration, so that the WAT is at the latest supported level for ITDS V6.1

With emphasis on performing the following:
1. Identify the hardware capabilities of the environment
2. Identify OS based product and prerequisite product requirements
3. Define the purpose of the system within the planned topology
4. Identify the number of databases and database types to be migrated
5. Identify custom schema
6. Identify dependency issues of client applications
7. Perform the WAT migration

Section 5 - Customization

1. Given the customer’s requirements, design and implement a customized subtree design, so that the data is structured in an efficient Directory Information Tree (DIT) structure for the anticipated typical workload

With emphasis on performing the following:
1. Identify the hardware capabilities of the environment
2. Identify prerequisite product requirements
3. Define the purpose of the system within the planned topology
4. Identify the estimated size of the DIT
5. Identify any defined groups (dynamic, nested, static and so on)
6. Identify typical workload
7. Identify any custom schema required by client applications
8. Implement the DIT


2. Given the design document and client applications that will use the ITDS V6.1 server instance, design a modified schema and implement the changes in the schema, so that the ITDS V6.1 server instance uses the schema definition

With emphasis on performing the following:
1. Define the purpose of the system within the customer environment
2. Identify any custom schema required by client applications
3. Define indexes for frequently used attributes
4. Implement the change in schema


3. Given the customer’s transport layer security requirements, create key store for configuration of ITDS V6.1, so that transport layer encryption can be utilized

With emphasis on performing the following:
1. Establish a signer certificate
2. Create a key store via GSK7ikm
3. Determine whether to use server or client-server authentication
4. Configure the ITDS V6.1 directory server to use SSL
5. Perform a key exchange if using a client-server model


4. Given the customer’s transport layer security requirements, create key store for configuration of ITDS V6.1 Web Administration Tool (WAT), so that transport layer encryption can be utilized

With emphasis on performing the following:
1. Establish a signer certificate on the ITDS V6.1 directory server instance
2. Export signer certificate in Binary DER format
3. Create JKS key store
4. Import signer certificate
5. Configure the WAT to use SSL


5. Given that the Directory Information Tree (DIT) exists, configure the appropriate access control list (ACL), so that access to the information is granted to appropriate users and groups

With emphasis on performing the following:
1. Determine the syntax and level within the DIT of the ACL
2. Configure the appropriate ACL on the correct parent entry within the DIT


6. Given the customer’s existing global/subtree/user password policy requirements, implement the password policy using the command line or GUI, so that a valid password policy is implemented in ITDS V6.1 directory server

With emphasis on performing the following:
1. Implement password policy using command line or GUI


7. Given the identified ITDS V6.1 server instances and network topology, implement an appropriate replication topology, so that a high availability implementation of the ITDS V6.1 solution is achieved

With emphasis on performing the following:
1. Define the purpose of the instance within the planned topology
2. Identify any network or physical location issues
3. Implement replication topology
4. Define associated maintenance and monitoring needs for the replication topology


8. Given the Web Administration Tool (WAT) console requirements, customize the WAT interface, so that server instances can be administered

With emphasis on performing the following:
1. Customize WAT console administrator user ID and password
2. Identify all ITDS V6.1 server instances in the environment to be managed by the WAT
3. Determine a policy for updating and maintaining the username and password for the WAT console management
4. Configuring the navigation tree for the WAT


9. Given an ITDS V6.1 server loaded with data, perform the necessary steps to tune the server instance so that optimal efficiency is achieved

With emphasis on performing the following:
1. Run idsrunstats
2. Run idsperftune
3. Identify attributes which should be indexed
4. Develop a plan for regular running of idsrunstats based upon the workload

Section 6 - Administration and Maintenance

1. Given the directory server instance name and amount of system memory to be allocated, perform basic or advanced tuning so that the directory server performance is optimal

With emphasis on performing the following:
1. Perform basic tuning
2. Perform advanced tuning


2. Given the ITDS V6.1 server topology and online documentation, administer the existing DB2 environment, so that it is fully functional and meets customer needs

With emphasis on performing the following:
1. Perform database reorganization
2. Perform online/offline backup
3. Administrate DB2 administrator user and password


3. Given a desired ITDS V6.1 replication topology, build and manage the topology so that correct data is available across all ITDS V6.1 servers

With emphasis on performing the following:
1. Modify an existing replication topology
2. Identify and debug any replication failures
3. Identify and implement desired changes to the replication topology
4. Synchronize data across the replication topology


4. Given the instance specification, create and administer an ITDS V6.1 instance design so that it is available according to specifications

With emphasis on performing the following:
1. Create instance
2. Administer instances
3. Drop an instance
4. List instances


5. Given the user and group specification and the design document, implement the specification so that an ITDS V6.1 user and group design is implemented

With emphasis on performing the following:
1. Identify schema requirements
2. Add and/or modify user to the ITDS V6.1 server
3. Add and/or modify groups to the ITDS V6.1 server
4. Implement user and group specifications


6. Given the extended operation, required input and bind credentials, issue the extended operation so that the intended outcome is achieved

With emphasis on performing the following:
1. Issue the extended operation using the idsldapexop command


7. Given the administration server port and the bind credentials to bind to the administration server, use the administration server so that administrative tasks can be accomplished

With emphasis on performing the following:
1. Run idsldapexop on the administration server to issue dynamic configuration updates
2. Run idsldapexop on the administration server to read various logs
3. Search the schema backend


8. Given the ITDS V6.1 server port, hostname and bind credentials, use the idsldapsearch command so that the server’s changelog can be viewed

With emphasis on performing the following:
1. Search the server for changelog entries


9. Given installed IBM Tivoli Directory Integrator (ITDI) V6.1.1 software and the ITDS V6.1 server instance name, use the idslogmgmt tool so that log archiving can be done

With emphasis on performing the following:
1. Run the idslogmgmt tool on the server instance


10. Given a change request to the proxy topology, implement the changes, so that the proxy topology meets requirements

With emphasis on performing the following:
1. Modify proxy topology as per change request
2. Resume role of failed back end server
3. Maintain proxy authorization


11. Given a change request or the certificate specification, existing certificate and key store, use the GSKit tool to administrate the certificate environment so that servers are SSL enabled

With emphasis on performing the following:
1. Administrate certificate environment


12. Given a change request and the ITDS V6.1 server instance name, along with the LDIF file to import or export data, export LDIF data so that the data can be loaded into another directory server and import LDIF data so that the instance database has the new data so that the LDIF operation completes successfully

With emphasis on performing the following:
1. Export data from ITDS V6.1 server in the LDIF format
2. Import data from an LDIF file into the directory server

Section 7 - Problem Determination

1. Given the customer’s requirements for the level of logging desired, determine and configure the ITDS V6.1 so that the correct logging level is achieved

With emphasis on performing the following:
1. Utilize the ITDS V6.1 administration guide to determine default settings and locations of logging utilities
2. Modify log settings to meet requirements


2. Given the ITDS V6.1 collected server information and product documentation, identify and analyze the log messages and refer to the product documentation so that the problem component and problem details are identified

With emphasis on performing the following:
1. Determine appropriate log file based on the problem observed
2. Analyze the error message in the log file by referring to the messages guide
3. Refer to the problem determination guide
4. Analyze relevant data


3. Given an identified ITDS V6.1 product component(s) failure, perform basic troubleshooting with the help of ITDS V6.1 product documentation, so that either the problem is resolved or traces are collected for advanced analysis and debugging

With emphasis on performing the following:
1. Determine the necessary basic troubleshooting by referring to the problem determination guide
2. Verify that all prerequisites are met
3. Perform necessary troubleshooting
4. Gather appropriate traces if necessary by referring to the product documentation