Skip to main contentIBM Cloud Pak Playbook

Shared services

Most components from the IBM Cloud Pak for Automation need access to a database server and a directory service. BACA and ECM specifically need access to a non-containerized DB2 database service.

The following sections provide instructions on how to install DB2 and the LDAP service provided by the IBM Security Directory Server.

Install DB2

Download the software archives

Download the following IBM DB2 v11.1 archives and fixpack in your working directory:

  • IBM DB2 Advanced Workgroup Server Edition Restricted Use Activation V11.1 for Linux, UNIX and Windows Multilingual (CNB21ML).
  • IBM DB2 Advanced Workgroup Server Edition Server Restricted Use V11.1 for Linux on AMD64 and Intel EM64T systems (x64) Multilingual (CNB8FML).
  • IBM DB2 11.1.x Universal Fixpack

Install the base DB2 version

  • Install unzip if not present:
yum install unzip
  • Download the DB2 response file db2dba.rsp and edit the file to provide your password in the <you-password> placeholders.

  • Expand the archive and start the install:

tar xzvf DB2_AWSE_REST_Svr_11.1_Lnx_86-64.tar.gz
unzip DB2_AWSE_Restricted_Activation_11.1.zip
./server_awse_o/db2setup -r db2dba.rsp

You will see the following warnings, which you can ignore.

Summary of prerequisites that are not met on the current system:
DBT3514W The db2prereqcheck utility failed to find the following 32-bit library file: "/lib/libpam.so*".
DBT3514W The db2prereqcheck utility failed to find the following 32-bit library file: "libstdc++.so.6".
  • Add the license
/opt/ibm/db2/V11.1/adm/db2licm -a awse_o/db2/license/db2awse_o.lic

Install the fixpack

For more information, see for example this page of the IBM Knowledge Center.

## Expend the archive of the fixpack
tar xvf v11.1.4fp4a_linuxx64_universal_fixpack.tar.gz
## precheck before upgrade
cd universal
./db2prereqcheck -v 11.1.1.1 -i -s
## list all db2 instances
/opt/ibm/db2/V11.1/instance/db2ilist
db2inst1

Connection information

Upon install completion, you can test the install using the following connection information:

  • URL: <host>:50000
  • User: db2inst1
  • Password: <your-password>

Install LDAP

Download the software archives

Download the following IBM Security Directory Server V6.4 archives and fixpack in your working directory:

  • IBM Security Directory Server Premium Feature Activation Package v6.4 Multiplatform Multilingual eAssembly (CRV3IML)
  • IBM Security Directory Server V6.4 Client-Server ISO without entitlement for Linux x86-64 Multilingual (CN487ML)

Mount the SDS ISO

mkdir /mnt/iso
mount -t iso9660 -o loop /data/downloads/sds/sds64-linux-x86-64.iso /mnt/iso/

Install SDS

yum install ksh
## Setup ldap user and group
groupadd idsldap
useradd -g idsldap -d /home/idsldap -m -s /bin/ksh idsldap
passwd idsldap
## enter '<your-password>'
usermod -a -G idsldap root

Operating the SDS Server

## Start the directory server
./ibmslapd -I dsinst1
## Stop the directory server
./ibmslapd -I dsinst1 -k
## Start or stop the administration server
./ibmdiradm -I dsinst1

Import LDAP users and groups

  • Install a tool such as JXplorer to browse your LDAP directory.
  • Import the cp4a.ldif LDAP Data Interchange Format file using this tool.

Uninstall SDS

# Remove existing GSK
rpm -qa | grep -i gsk
rpm -e `rpm -qa | grep -i gsk`
# Remove all the other rpm
rpm -ev idsldap-srv64bit64-6.4.0-0.x86_64.rpm
rpm -qa | grep -i idsldap
rpm -ev `rpm -qa | grep -i idsldap`

Connection information

Upon install completion, you can test the install using the following connection information:

  • URL: ldap://<host>:389
  • User: cn=root
  • Password: <your-password>