Tuesday, April 29, 2008

Installing Dell OMSA on a 64-bit Debian Server

Dell doesn't quite support Debian(my favorite GNU/Linux server distro) for its OpenManage services line, but much work has been made by others on this front. Getting this done on 64-bit is a bit trickier still.

First, the easiest way to get OMSA(the openmanage service) on your box is to add the sara repositories to your apt.

add to the bottom of /etc/apt/sources.list:
deb ftp://ftp.sara.nl/pub/sara-omsa dell  sara


Now, (as root) run
aptitude update

to update your package list(from this new repository) then
aptitude install dellomsa

to download and install the package.

Once that is done, you may need to start the service:

/etc/init.d/dsm_om_connsvc start

If you are running 32-bit, you are done. If you have 64-bit, here is where it gets a lil hairy.

You have to download the following 32-bit debs from the main debian repository. Links provided are for the STABLE branch, if you are running unstable, please find your own links ;-)

After you downloaded each of these 32-bit(i386) debs, extract the files out of them(do not install) with the dpkg -x command. If you can't figure out how to do that, just read the dpkg manual.

Example:
dpkg -x libselinux1_1.32-3_i386.deb ./temp

When you are done you should find the following 4 files wherever you extracted them.
libsepol.so.1
libselinux.so.1
pam_unix.so
pam_nologin.so

Once you find these files, copy the two files that start with "libse" to the /lib32 directory and the two "pam_" files to the /lib32/security directory(you may have to create the security subdirectory).

Now, edit the /etc/pam.d/omauth file and replace the uncommented out lines with the path starting with /lib/security to /lib32/security. It should look something like this when you are done.(ignoring the commented out lines at the top)
auth       required     /lib32/security/pam_unix.so nullok
auth required /lib32/security/pam_nologin.so
account required /lib32/security/pam_unix.so nullok

One last step! Its an easy one. Just run the command ldconfig. This will update pam to read the new config files(the one you just edited) and now openmanage will be looking in the correct spot!

Now just browse to your web interface:(change IP as necessary). Make sure you use https to browse it, http will not work.
https://10.1.1.1:1311/

Login as root and BAM you are done.

This guide was built from a conglomoration of sites:(kudos to them!)

http://linux.dell.com/debian_9g.shtml

http://lists.us.dell.com/pipermail/linux-poweredge/2007-June/031531.html

http://blog.loftninjas.org/?p=100

22 comments:

  1. There seem to be a couple of typos in the URLs for the 32 bit Etch packages you suggest. Specifically the first two, libpam-modules and libsepol1 both lead to a page that complains 'multiple architectures are selected' the correct syntax is: (Replace stable with /etch/i386/

    http://packages.debian.org/etch/i386/libpam-modules/download

    http://packages.debian.org/etch/i386/libsepol1/download

    HTH

    ReplyDelete
  2. Thank you, I have edited the links to say etch instead of stable.

    ZZ

    ReplyDelete
  3. Thank you for this page.

    There is a typo with the /etc/init.d/dsm_om/connsvc start - it should be /etc/init.d/dsm_om_connsvc .

    Also installed is /etc/init.d/dsm_om_shrsvc and /etc/init.d/dsm_sa_ipmi - what are these?

    Also do you know the tools to automatically email a user if there are any problems?

    Thank you

    Ogden

    ReplyDelete
  4. Thanks Ogden for the typo fix.

    Don't worry about the other two services...I'm not 100% sure what they do but they aren't needed for this.

    For the emailing if there are any problems, you need to install IT Assistant on a Windows Machine and have it translate the traps it receives from your servers and sends them along as emails.

    ReplyDelete
  5. deb ftp://ftp.sara.nl/pub/sara-omsa dell sara

    The repo is gone... any other ideas?

    ReplyDelete
  6. can you be kind to email me the sara package? the ftp.sara.nl/pub/... directory does not exist anymore. thanks.

    ReplyDelete
  7. http://terii.kbcowboy.net/files/debs/dellomsa_5.4.0-1_amd64.deb

    I was able to retrieve the file off one of my servers APT cache directory I deployed few months ago. I am not sure if that's the latest one or not.

    ReplyDelete
  8. You can still find the files on their site:

    http://ftp.sara.nl/pub/sara-omsa/dists/dell/sara/binary-amd64/

    I think their repo is just screwed up a lil

    ReplyDelete
  9. [...] to work on other platforms than Redhat can be a bitch, but I was lucky to come across this article. Following those steps I had dellomsa up and running a couple of minutes later. Then I went [...]

    ReplyDelete
  10. [...] to work on other platforms than Redhat can be a bitch, but I was lucky to come across this article. Following those steps I had dellomsa up and running a couple of minutes later. Then I went [...]

    ReplyDelete
  11. There some problem with dellomsa_5.5.0-4, it ignores settings in /etc/pam.d/omauth and uses directories /lib/security and not /lib32/security configured in omauth.
    Does anybody know any workaround?

    ReplyDelete
  12. The links provided are for "etch", not for "stable" (which is "lenny"), the text is therefore misleading.

    Here is a correct link to get the latest stable version:

    http://packages.debian.org/stable/i386/libpam-modules/download

    ReplyDelete
  13. @oxymoron: No problem for me with 5.5.0-4 on "lenny", I followed the instructions on that page and it worked immediately.

    ReplyDelete
  14. Installing on Ubuntu 9.04 64bit following your instructions returns this error after apt-get install dellomsa....

    Stopping & Starting dellomsa...
    Stopping Systems Management Device Drivers:
    Stopping dcdbas: *
    Starting Systems Management Device Drivers:
    Starting dcdbas: *
    Starting Systems Management Data Engine:
    Starting dsm_sa_datamgr32d: /opt/dell/srvadmin/dataeng/bin/dsm_sa_datamgr32d: error while loading shared libraries: libdcsmil32.so.5: cannot open shared object file: No such file or directory
    *
    Starting dsm_sa_eventmgr32d: /opt/dell/srvadmin/dataeng/bin/dsm_sa_eventmgr32d: error while loading shared libraries: libdcsupt32.so.5: cannot open shared object file: No such file or directory


    Which implies that the problem is still resolving 32bit dependencies for the 64bit platform. Will update as progress continues.

    ---As a sidenote - this most definitely installs postfix and walks you through the conf as normal.

    ReplyDelete
  15. Tutorial appears to have worked - but I am having login issues.

    I downloaded the packages and extracted them to their own folders just to keep track of things...

    dpkg -x libpam-modules_0.79-5+etch1_i386.deb ./tmp
    dpkg -x libselinux1_1.32-3_i386.deb ./tmp2
    dpkg -x libsepol1_1.14-2_i386.deb ./tmp3

    Each of the files was where expected so I made a lib32 and lib32/security folder to keep them out of the 64bit works...

    cp ./tmp/lib/security/pam_unix.so /lib32/security/pam_unix.so
    cp ./tmp/lib/security/pam_nologin.so /lib32/security/pam_nologin.so
    cp ./tmp2/lib/libselinux.so.1 /lib32/libselinux.so.1
    cp ./tmp3/lib/libsepol.so.1 /lib32/libsepol.so.1


    Editing the omauth file was easy enough since all I had to do was add '32' to the path...

    sudo nano /etc/pam.d/omauth

    sudo ldconfig

    sudo /etc/init.d/dsm_om_connsvc restart


    Shutting down DSM SA Connection Service: *
    Starting DSM SA Connection Service: *



    I'm trying to log in with local credentials and it isn't working - some quick googling suggests a 'root/calvin' login. Kinda stuck now... I have a feeling this is something obvious to dealing with PAM. Feel free to shoot me an email if someone knows what I'm missing.

    ReplyDelete
  16. Ok - this was easy.

    Installing the 32bit libraries was completely unnecessary. as of 5.whateverI'm at - this works with the 64 bit libraries out of the box.

    I changed omauth back to the old modules and reprocessed the config via sudo ldconfig.

    Many thanks for the tutorial.

    ReplyDelete
  17. TO JARED STARKEY:
    I've solved that problem using libpam-modules_1.0.1-5+lenny1_i386.deb .
    See the post above from Stéphane Bortzmeyer about the bad link provided etch => lenny

    ReplyDelete
  18. [...] for getting OMSA logins working on Debian AMD64 (I was using Ubuntu but the same package names exist on [...]

    ReplyDelete
  19. Hi, Thank you for the guide.

    Would it be possible to add version 6.2.0 of OMSA? This will add support for the new PowerEdge R710.

    (http://ftp.dell.com/sysman/OM_6.2.0_ManNode_A00.tar.gz)

    Regards,
    Tommy

    ReplyDelete
  20. Works fine also on debian lenny, just need to select correct packages from mirrors.

    thanks for help.

    --
    Eero

    ReplyDelete
  21. Thank you so much for this post. After many many hours of trying to figure out how to get OMSA to work on my debian box this finally got everything working for me!

    thanks again.

    ReplyDelete
  22. Thanks for sharing your post, it's been a great help in the past.

    When configuring a new box again I decided to browse aground the repo's and found they also had a version 6 of omsa:

    deb ftp://ftp.sara.nl/pub/sara-omsa dell6 sara

    And on the SARA OMSA page (https://subtrac.sara.nl/oss/omsa_2_deb) they mentioned Dell actually has a Ubuntu repository for OMSA 6.3
    http://linux.dell.com/repo/community/deb/

    ReplyDelete