RedHat/CentOS 7 Alpaca Installation

This is an installation guide for a clean RedHat/CentOS 7 server.

Assumptions

  • A clean install of CentOS7.
  • This is not an upgrade.
  • A valid SSL certificate for the Alpaca Server's hostname.
  • Credentials to access the Alpaca server as root.
  • Credentials to access the connected BroadWorks Application and Profile Servers.
  • BroadWorks Credentials to make changes via bwcli.
  • Working knowledge of ssh and file transfer tool such as scp.

Guide

The guide is split into sections based on the server or machine that the operations should be performed. It is also in chronological order. Performing the steps from top to bottom is the desired procedure.

Local Work Station

  • Step: O-1
    1. Download the TimesTen installation archive. This requires accepting the license agreement and having an Oracle account.
    2. Transfer the downloaded archive to the Alpaca Server's "/tmp" directory.
  • Step: O-2
    1. Download the Alpaca Server installation RPM. This requires an ECG Portal Account.
    2. Transfer the downloaded installation package to the Alpaca Server's "/tmp" directory.
  • Step: O-3
    1. Download the Alpaca Remote installation RPM. This requires an ECG Portal Account.
    2. Transfer the downloaded installation package to the each BroadWorks Application Server's "/tmp" directory.
  • Step: O-4
    1. Download the Alpaca license file. This requires an ECG Portal Account.
    2. Transfer the downloaded license file "ecg.license.txt" to the Alpaca Server's "/tmp" directory.
    3. Transfer the downloaded license file "ecg.license.txt" to each BroadWorks Application Server's "/tmp" directory.
  • Step: O-5
    1. Transfer the SSL certificate chain "fullchain.pem" and private key "privkey.pem" file to the Alpaca Server's "/tmp" directory.

Alpaca Server

  • Step: A-1
  • Commands:

    1. # cd /tmp
    2. # tar xf timesten112280.linux8664.tar.gz
    3. # cd linux8664/
    4. # ./setup.sh

      WARNING: You are about to install TimesTen as root. TimesTen daemon processes will
               run with root privileges. See the TimesTen Installation Guide for additional
               information.
      
    5. Are you sure that you want to install as root? [ no ] y

      NOTE: Each TimesTen installation is identified by a unique instance name.
            The instance name must be a non-null alphanumeric string, not longer
            than 255 characters.
      
    6. Please choose an instance name for this installation? [ tt1122 ] tt1122

      Instance name will be 'tt1122'.
      
    7. Is this correct? [ yes ] y

      Of the three components:
      
        [1] Client/Server and Data Manager
        [2] Data Manager Only
        [3] Client Only
      
    8. Which would you like to install? [ 1 ] 3

      Of the following options :
      
        [1] /opt
        [2] /tmp
        [3] Specify a location
        [q] Quit the installation
      
    9. Where would you like to install the tt1122 instance of TimesTen? [ 1 ] 1

      Installing into /opt/TimesTen/tt1122 ...
      Creating /opt/TimesTen/tt1122 ...
      Uncompressing ...
      
      NOTE: For security, we recommend that you restrict access to the
            TimesTen installation to members of a single OS group. Only members of
            that OS group will be allowed to perform direct mode connections to
            TimesTen, and only members of that OS group will be allowed to perform
            operations that access TimesTen data stores, TimesTen files and shared
            memory. The OS group defaults to the primary group of the instance
            administrator. You can default to this group, choose another OS group
            or you can make this instance world-accessible. If you choose to make
            this instance world-accessible, all database files and shared memory
            are readable and writable by all users.
      
    10. Restrict access to the the TimesTen installation to the group 'root'? [ yes ] n

    11. Do you want to restrict access to the TimesTen installation to a different group? [ yes ] n

    12. Are you sure you want to make this instance world-accessible? [ yes ] y

      In order to use the 'Oracle TimesTen Application-Tier Database Cache' feature in any databases
      created within this installation, you must set a value for the TNS_ADMIN
      environment variable. It can be left blank, and a value can be supplied later
      using <install_dir>/bin/ttModInstall.
      
    13. Please enter a value for TNS_ADMIN (s=skip)? [ ] s

    14. Do you want to install the Quick Start Sample Programs and the TimesTen Documentation? [ no ] n

    15. Would you like to install the documentation (without the Quick Start Sample Programs)? [ yes ] n

      Installing client components ...
      
    16. What is the name of the host running the TimesTen server? [ alpaca.ecg.co ] ⏎

    17. What is the TCP/IP port number that the TimesTen server is listening on? [ 53397 ] ⏎

      The documentation was not installed.
      To manually install the documentation, run the command 'setup.sh -installDoc'
      
      The 11.2.2.8 Release Notes are located here :
        '/opt/TimesTen/tt1122/README.html'
      
      End of TimesTen installation.
      
    18. # rm -f /opt/TimesTen/tt1122/lib/ttjdbc{5,6,7}.jar

    19. # echo "/opt/TimesTen/tt1122/lib" > /etc/ld.so.conf.d/timesten.conf

    20. # ldconfig -v | grep TimesTen -A 7

      /opt/TimesTen/tt1122/lib:
          libttcoD.so -> libttcoD.so
          libttco.so -> libttco.so
          libttclassesCS.so.gcc346 -> libttclassesCS.so.gcc346
          libttclient.so.gcc346 -> libttclient.so.gcc346
          libttclassesCS.so.gcc410 -> libttclassesCS.so.gcc410
          libttJdbcCS.so -> libttJdbcCS.so
          libttclient.so.gcc410 -> libttclient.so.gcc410
      
  • Step: A-2

  • Commands:

    1. # echo -e "[mongodb-org-4.0]\nname=MongoDB Repository\nbaseurl=https://repo.mongodb.org/yum/redhat/\$releasever/mongodb-org/4.0/x86_64/\ngpgcheck=1\nenabled=1\ngpgkey=https://www.mongodb.org/static/pgp/server-4.0.asc" > /etc/yum.repos.d/mongodb-org-4.0.repo
  • Step: A-3

  • Commands:

    1. # cd /tmp
    2. # yum install -y alpaca-server-ALPACA_VERSION.x86_64.rpm

      Installed:
        alpaca-server.x86_64 0:6.6.0-RC_SNAPSHOT20190116042343
      
      Dependency Installed:
        alsa-lib.x86_64 0:1.1.6-2.el7                                        copy-jdk-configs.noarch 0:3.3-10.el7_5                dejavu-fonts-common.noarch 0:2.33-6.el7           dejavu-sans-fonts.noarch 0:2.33-6.el7
        fontconfig.x86_64 0:2.13.0-4.3.el7                                   fontpackages-filesystem.noarch 0:1.44-8.el7           giflib.x86_64 0:4.1.6-9.el7                       java-1.8.0-openjdk.x86_64 1:1.8.0.191.b12-1.el7_6
        java-1.8.0-openjdk-headless.x86_64 1:1.8.0.191.b12-1.el7_6           javapackages-tools.noarch 0:3.4.1-11.el7              libICE.x86_64 0:1.0.9-9.el7                       libSM.x86_64 0:1.2.2-2.el7
        libX11.x86_64 0:1.6.5-2.el7                                          libX11-common.noarch 0:1.6.5-2.el7                    libXau.x86_64 0:1.0.8-2.1.el7                     libXcomposite.x86_64 0:0.4.4-4.1.el7
        libXext.x86_64 0:1.3.3-3.el7                                         libXi.x86_64 0:1.7.9-1.el7                            libXrender.x86_64 0:0.9.10-1.el7                  libXtst.x86_64 0:1.2.3-1.el7
        libfontenc.x86_64 0:1.1.3-3.el7                                      libjpeg-turbo.x86_64 0:1.2.90-6.el7                   libpng.x86_64 2:1.5.13-7.el7_2                    libxcb.x86_64 0:1.13-1.el7
        libxslt.x86_64 0:1.1.28-5.el7                                        lksctp-tools.x86_64 0:1.0.17-2.el7                    mongodb-org.x86_64 0:4.0.5-1.el7                  mongodb-org-mongos.x86_64 0:4.0.5-1.el7
        mongodb-org-server.x86_64 0:4.0.5-1.el7                              mongodb-org-shell.x86_64 0:4.0.5-1.el7                mongodb-org-tools.x86_64 0:4.0.5-1.el7            python-javapackages.noarch 0:3.4.1-11.el7
        python-lxml.x86_64 0:3.2.1-4.el7                                     ttmkfdir.x86_64 0:3.0.9-42.el7                        tzdata-java.noarch 0:2018i-1.el7                  xorg-x11-font-utils.x86_64 1:7.5-21.el7
        xorg-x11-fonts-Type1.noarch 0:7.5-9.el7
      
      Dependency Updated:
        freetype.x86_64 0:2.8-12.el7          nspr.x86_64 0:4.19.0-1.el7_5         nss.x86_64 0:3.36.0-7.el7_5     nss-softokn.x86_64 0:3.36.0-5.el7_5     nss-softokn-freebl.x86_64 0:3.36.0-5.el7_5     nss-sysinit.x86_64 0:3.36.0-7.el7_5
        nss-tools.x86_64 0:3.36.0-7.el7_5     nss-util.x86_64 0:3.36.0-1.el7_5
      
      Complete!
      
  • Step: A-4

  • Commands:

    1. # service mongod start

      Redirecting to /bin/systemctl start mongod.service
      
  • Step: A-5

  • Commands:

    1. # mv ecg.license.txt /opt/alpaca
    2. # openssl pkcs12 -export -in fullchain.pem -inkey privkey.pem -out keystore.pkcs12
    3. Enter Export Password: KEYCHAIN_PASSWORD
    4. Verifying - Enter Export Password: KEYCHAIN_PASSWORD
    5. # mv keystore.pkcs12 /opt/alpaca/config
    6. # vi /opt/alpaca/application-https.yml
      • Set the "key-store-password" field to the value set during export.
    7. # service alpaca-server start

      Starting alpaca-server.d (via systemctl):                  [  OK  ]
      

BroadWorks Application Server

These steps are performed for each BroadWorks Application Server that will be monitored by Alpaca. Log in to the server as bwadmin. A BroadWorks admin login will be required to make the required AS_CLI changes.

  • Step: AS-1
  • Commands:

    1. AS_CLI> cd /Applications/ExecutionAndProvisioning/PS/Logging/InputChannels/AuditLog
    2. AS_CLI/Applications/ExecutionAndProvisioning/PS/Logging/InputChannels/AuditLog> set accountInfo true

      ...Done
      
    3. AS_CLI/Applications/ExecutionAndProvisioning/PS/Logging/InputChannels/AuditLog> set verbose true

      ...Done
      
    4. AS_CLI/Applications/ExecutionAndProvisioning/PS/Logging/InputChannels/AuditLog> q;q;Output

    5. AS_CLI/Applications/ExecutionAndProvisioning/PS/Logging/OutputChannels> set AuditLog enabled true

      ...Done
      
    6. AS_CLI/Applications/ExecutionAndProvisioning/PS/Logging/OutputChannels> cd /Applications/OpenClientServer/ExternalAuthentication/AccessControlList

    7. AS_CLI/Applications/OpenClientServer/ExternalAuthentication/AccessControlList> get

      IP Address  Description
      =========================
      
      0 entry found.
      
      • If no entries are found skip step 8.
      • If the BroadWork's XSP IP address is already listed skip step 8.
    8. AS_CLI/Applications/OpenClientServer/ExternalAuthentication/AccessControlList> add *<kbd>XSP-IP* description xsp

      ...Done
      
  • Step: AS-2

  • Commands:

    1. $ cd /tmp
    2. $ yum install -y alpaca-remote-ALPACA_VERSION.x86_64.rpm

      Installed:
        alpaca-remote-21sp1.x86_64 0:6.6.0-RELEASE_1
      
      Dependency Installed:
        alsa-lib.x86_64 0:1.1.6-2.el7                                        copy-jdk-configs.noarch 0:3.3-10.el7_5                dejavu-fonts-common.noarch 0:2.33-6.el7             dejavu-sans-fonts.noarch 0:2.33-6.el7
        fontconfig.x86_64 0:2.13.0-4.3.el7                                   fontpackages-filesystem.noarch 0:1.44-8.el7           giflib.x86_64 0:4.1.6-9.el7                         java-1.8.0-openjdk.x86_64 1:1.8.0.191.b12-1.el7_6
        java-1.8.0-openjdk-headless.x86_64 1:1.8.0.191.b12-1.el7_6           javapackages-tools.noarch 0:3.4.1-11.el7              libICE.x86_64 0:1.0.9-9.el7                         libSM.x86_64 0:1.2.2-2.el7
        libX11.x86_64 0:1.6.5-2.el7                                          libX11-common.noarch 0:1.6.5-2.el7                    libXau.x86_64 0:1.0.8-2.1.el7                       libXcomposite.x86_64 0:0.4.4-4.1.el7
        libXext.x86_64 0:1.3.3-3.el7                                         libXi.x86_64 0:1.7.9-1.el7                            libXrender.x86_64 0:0.9.10-1.el7                    libXtst.x86_64 0:1.2.3-1.el7
        libfontenc.x86_64 0:1.1.3-3.el7                                      libjpeg-turbo.x86_64 0:1.2.90-6.el7                   libpng.x86_64 2:1.5.13-7.el7_2                      libxcb.x86_64 0:1.13-1.el7
        libxslt.x86_64 0:1.1.28-5.el7                                        lksctp-tools.x86_64 0:1.0.17-2.el7                    python-javapackages.noarch 0:3.4.1-11.el7           python-lxml.x86_64 0:3.2.1-4.el7
        ttmkfdir.x86_64 0:3.0.9-42.el7                                       tzdata-java.noarch 0:2018i-1.el7                      xorg-x11-font-utils.x86_64 1:7.5-21.el7             xorg-x11-fonts-Type1.noarch 0:7.5-9.el7
      
      Dependency Updated:
        freetype.x86_64 0:2.8-12.el7          nspr.x86_64 0:4.19.0-1.el7_5         nss.x86_64 0:3.36.0-7.el7_5     nss-softokn.x86_64 0:3.36.0-5.el7_5     nss-softokn-freebl.x86_64 0:3.36.0-5.el7_5     nss-sysinit.x86_64 0:3.36.0-7.el7_5
        nss-tools.x86_64 0:3.36.0-7.el7_5     nss-util.x86_64 0:3.36.0-1.el7_5
      
      Complete!
      
    3. From your workstation log in to Alpaca. From there a BroadWorks cluster must be configured according to the Configuration Guide. An application server token will also need to be created for the cluster. This application server token will be configured on this application server in the "/opt/alpaca-remote/config/application-prod.yml" file under the "authenticationToken" field.

    4. Update the "hostname", "port", "broadWorksLicensePath", and "reader.directory" configuration settings. Reference the Configuration Guide.

    5. $ mv ecg.license.txt /opt/alpaca

    6. $ service alpaca-remote start

BroadWorks Profile Server

These steps are performed for each BroadWorks Profile Server that will be accessed by Alpaca to perform migrations and data retrieval. Log in to the server as bwadmin. A BroadWorks admin login will be required to make the required PS_CLI changes.

  • Step: PS-1
  • Commands:

    1. PS_CLI> cd /Applications/BroadworksFileRepos/NetworkAccessLists/WebDav
    2. PS_CLI/Applications/BroadworksFileRepos/NetworkAccessLists/WebDav> add ALPACA-IP description alpaca-server

      ...Done
      
  • Step: PS-2 (BroadWorks R22 Only)

  • Commands:

    1. PS_CLI> cd /Applications/BroadworksFileRepos/Users
    2. PS_CLI/Applications/BroadworksFileRepos/Users> add alpaca-server get put delete
    3. New Password: CREATE_A_FILE_REPO_USER_PASSWORD
    4. Re-type New Password: CREATE_A_FILE_REPO_USER_PASSWORD

      ...Done