Installing Reflection for Secure IT UNIX to a non-default location on Solaris 11.3

  • 7023051
  • 05-Jun-2018
  • 03-Jul-2018

Environment

Reflection for Secure IT Client or Server for UNIX 8.0.2

Situation

This note provides steps on how to install Reflection for Secure IT UNIX to a non-default location on Solaris 11.3 Operating System.

Software package named rsit-server-8.0.2.138-sparc-solaris11.tar.gz will be used in this example.  Reflection files are relocated to non-default folders of /opt/usr and /opt/etc/ssh2. These folder locations are examples, not requirements.

Resolution

1. Copy/upload rsit-server-8.0.2.138-sparc-solaris11.tar.gz to the Solaris server.

2. On the Solaris system, login as root and cd to the folder where the Reflection for Secure IT (RSIT) file is stored.
From within the folder, run the following commands in order:
 pkgrepo create microfocus-repository

 pkgrepo -s microfocus-repository set publisher/prefix=microfocus

 tar xvfo rsit-server-8.0.2.138-sparc-solaris11.tar.gz

 pkgmogrify -D prefix=/opt/usr -D sysconfdir=/opt/etc/ssh2 -P pkgs/etc/rsit.conf sshdmanifest relocate.mog | pkgfmt > sshdmanifest.relocate

 pkgsend -s microfocus-repository publish -d pkgs sshdmanifest.relocate

 pkg set-publisher -p microfocus-repository

 pkg install RSITsshs
3. Post install, if you want to configure the RSIT server to listen under a different port number, modify the /opt/etc/ssh2/sshd2_config file. Restart the RSIT server if you make this change.

Cause

With Solaris 11.3, Oracle ships both Sun SSH and OpenSSH.packages. By default, the Operating System is installed with Sun SSH.  If an administrator uninstalls the current ssh product, the other package will installs itself in its place. Another word, if one removes Sun SSH, OpenSSH installs automatically.  There are no documentation from Oracle that provides details on how to remove their packages and replace it with a 3rd party software like Reflection.  If a site does require Reflection , one has to install Reflection to a non-default location.

Additional Information

If Solaris currently has OpenSSH server installed, after running step 9 "pkg install RSITsshs",  the install will fail.  The message points to conflicts with the OpenSSH package stating that "These packages may not be installed together".

One may see something similar to the following output:

pkg install RSITsshs
Creating Plan (Checking for conflicting actions): /
pkg install: The following packages all deliver user actions to sshd:

  pkg://solaris/network/openssh@7.4.0.1,5.11-0.175.3.21.0.4.0:20170605T171559Z
  pkg://microfocus/service/network/RSITsshs@8.0.2.109,5.11:20170919T173825Z

These packages may not be installed together. Any non-conflicting set may
be, or the packages must be corrected before they can be installed.

The following packages all deliver group actions to sshd:

  pkg://solaris/network/openssh@7.4.0.1,5.11-0.175.3.21.0.4.0:20170605T171559Z
  pkg://microfocus/service/network/RSITsshs@8.0.2.109,5.11:20170919T173825Z

These packages may not be installed together. Any non-conflicting set may
be, or the packages must be corrected before they can be installed.



To resolve this, remove the OpenSSH server and replace it wilth Sun SSH.  Re-run step 9 to complete the Reflection install.