Once registered, the One Identity Manager Service is governed by cluster handling for site resilience and load balancing. The service is installed on a virtual server that simulates the cluster. All computer-related operations and service data operate, transparently, with the virtual server and not the real computer (cluster nodes). This also applies to clients that contact the service through the server name, for example RPC (ORPC, DCOM), TCP/IP (Winsock, Named Pipes), or HTTP.
Because the service is in the context of the virtual server, note the following facts:
-
The service-specific settings for the node on which the virtual server is located are replicated to all other nodes. Therefore, the service always has the same configuration irrelevant of the node on which it is actually started.
-
The service is always started only on the current node of the virtual server (the virtual server's current node). The service is stopped on all other nodes.
-
The service is booted and shutdown with the virtual server. If the cluster is not enabled, the service is stopped on all nodes.
-
Services on nodes are brought automatically into the required state (Manual or Stopped) before they are registered by the program.
Related topics
The installation of server components from the One Identity Manager installation medium needs to be done on all the physical nodes of the cluster.
NOTE: In the configuration of the JobServiceDestination, the Queue parameter must contain the name of the virtual server.
After saving the configuration, the configuration file in the One Identity Manager Service installation directory needs to be copied to all the physical nodes. You must not change the name of the configuration file.
NOTE: One Identity Manager Service configuration is not part of a cluster resource. Thus, each node keeps its own configuration. For this reason, you must ensure that the configuration files on the physical nodes are consistent. If this is not the case, correct functionality cannot be guaranteed after changing cluster nodes.
Setting up a cluster resource for the One Identity Manager Service
In the Cluster Administrator program, set up a new cluster resource for the One Identity Manager Service and make this available online. For information about this procedure, refer to Microsoft Technet under http://technet.microsoft.com/en-us/library/cc787285(WS.10).aspx. Note the following when creating the cluster resource:
-
Select the Generic Service resource type.
-
Select the following One Identity Manager Service dependencies.
-
Do not enter additional registration keys.
NOTE: After setting up the One Identity Manager Service in a cluster system it is advisable to simulate a failover so that possible problems with the cluster do not arise during live operations.
Storing the One Identity Manager Service log file on a shared volume
-
In the Cluster Administrator program, set up a new cluster resource for the and make this available online. Note the following when creating the cluster resource:
-
Select the File Share resource type.
-
Select at least the following dependency:
One Identity One Identity Manager Service
-
In the configuration file of the One Identity Manager Service, adapt the directory information in the Log file (OutPutFile) parameter of the log writer.
-
Copy the configuration file to all the physical cluster nodes in the One Identity Manager Service install directory after you have changed it.
Related topics
Local installation and updating of software in particular can prove to be problematic due to the distributed structure of servers and workstations. To help guarantee an acceptable workload for network administrators, a One Identity Manager automatic update method has been developed for One Identity Manager. Apart from updating the usual One Identity Manager installation files, new custom files can be simply added to the procedure and are, therefore, distributed to workstations and servers in the One Identity Manager network using the automatic software updating mechanism.
Detailed information about this topic
All files in a One Identity Manager installation are saved with their name and binary code in QBMFileRevision in the One Identity Manager database. The file size and hash values of each file are stored to identify them. Additionally, each file's affiliation to machine roles and installation packages is entered in the QBMFileHasDeployTarget table.
The necessary files are loaded into the One Identity Manager database and updated when a hotfix, a service pack or a full version update is run.
In the database, a semaphore software revision is maintained. When a file is added, changed, or deleted in the database, the semaphore value is recalculated by the DBQueue Processor. In every One Identity Manager installation directory there is a Softwarerevision.viv file. This file is assigned the Read only and Not visible permissions in the file system, and therefore is not normally displayed by the operating system.
The Softwarerevision.viv contains the following information:
-
The installation revision number
The revision status is determined from the value of the Softwarerevision semaphore in the database.
-
The start time of the last modification
As of One Identity Manager version 8.0, the Update.zip file is stored in the QBMFileRevision table. The file plays a central role in automatic updating. The zip archive contains all the files that are required on the clients or server for updating the product. The zip archive is not part of the One Identity Manager installation data but is recreated after the database has been updated by the Configuration Wizard and also the Software Loader.
The zip archive contains the following files:
-
Update.exe
-
VI.Base.dll
-
NLog.dll
-
Newtonsoft.Json.dll
-
InstallManager.Msi.dll
-
InstallManager.Core.dll
The zip archive is extended with all files from the installation data that correspond to the *.Update.dll name filter. This makes it possible for different modules to contribute more functionality to the automatic update.
In addition, the installation directory of all One Identity Manager installations contains the InstallState.config file. This file contains information about the installed machine roles, installation packages and files.
Whether or not a software update is required, depends on the comparison of semaphore values from the database and the .softwarerevision.viv file. If semaphore values vary, machine roles for the computer or server are determined based on the InstallState.config. Each file belonging to a machine role is check to see if the file is known to the database.
If the file exists in the data, make the following checks:
-
Has the file size changed?
In this case, the file is added to the list of files to be updated.
-
Has the hash value changed?
In this case, the file is added to the list of files to be updated.
New files that have been loaded into the One Identity Manager database through a hotfix, a service pack, or a version update are also added to the list. All the files in the list are updated.
All actions are logged in the file update.log. After the update has finished, the current semaphore value is copied from the database to the file softwarerevision.viv.
Related topics
