(Conditional) NICI 2.7 and eDirectory 8.8 support key sizes up to 4096 bits. If you want to use a 4 KB key size, every server must be upgraded to eDirectory 8.8. In addition, every workstation using the management utilities, for example, iManager and ConsoleOne, must have NICI 2.7 installed on it.

When you upgrade your Certificate Authority (CA) server to eDirectory 8.8, the key size will not change; it will be 2 KB. The only way to create a 4 KB key size is recreate the CA on an eDirectory 8.8 server. In addition, you would have to change the default from 2 KB to 4 KB for the key size, during the CA creation.

For more information, refer to Installing NICI.

SLP installed and configured

With eDirectory 8.8, SLP does not get installed as part of the eDirectory installation.

Only a root user can install SLP.

For more information on installing SLP, refer to Using SLP with eDirectory.

The Linux host enabled for multicast routing

To check if the host is enabled for multicast routing, enter the following command:

/bin/netstat -nr

The following entry should be present in the routing table:

224.0.0.0 0.0.0.0

If the entry is not present, log in as root and enter the following command to enable multicast routing:

route add -net 224.0.0.0 netmask 240.0.0.0 dev interface

The interface could be a value such as eth0, hme0, hme1, or hme2, depending on the NIC that is installed and used.

For more information on multicast and broadcast routes, refer to the Open SLP User Guide.

Network server time synchronized

Use Network Time Protocol's (NTP) xntpd to synchronize time across all network servers.

compat-libstdc++ RPM

If the compat-libstdc++ RPM is not present on your host machine, install it. This RPM contains libstdc++-libc6.1-1.so.2.

(Conditional) compat-libstdc++-33-3.2.3-61.i386.rpm

If you are installing eDirectory on RHEL5.0, install compat-libstdc++-33-3.2.3-61.i386.rpm.

compat

If the compat RPM is not present on your machine, install it. This RPM or the ncurses contains libncurses.so.4.x or libncurses.so.5.x. eDirectory 8.8 supports libncurses.so.4.x and libncurses.so.5.x.

For YaST based installation:

(Conditional) If you are installing a secondary server, all the replicas in the partition that you install the product on should be in the On state.

(Conditional) If you are installing a secondary server into an existing tree as a nonadministrator user, create a container and then partition it. Ensure that you have the following rights:

(Conditional) If you are installing a secondary server into an existing tree as a nonadministrator user, ensure that at least one of the servers in the tree has the same or higher eDirectory version as that of the secondary being added as container admin. In case the secondary being added is of later version, then the schema needs to be extended by the admin of the tree before adding the secondary using container admin.

While configuring eDirectory, you must enable SLP services and an NCP™ port (the default is 524) in the firewall to allow the secondary server addition. Additionally, you can enable the following service ports based on your requirements:

In case, if you have enabled user-defined ports, you must mention these ports while configuring eDirectory.

Do not set the user-defined ports to 8008 and 8010 while upgrading eDirectory 882 or later versions to 886. If the ports are set to 8008 or 8010, ndsconfig assumes that the server is a pre-eDirectory 8.8x server and automatically resets them to 8028 and 8030 respectively.

During eDirectory upgrade, if SecretStore has not already been configured with the previous versions, or you do not want to configure SecretStore, use the -m no_ss option with the nds-install utility.