Infrastructure upgrade in v4.2.1.13

For convenience, the upgrade process of OpenIAM infrastructure components is performed by running the upgrade scripts for every component one needs to upgrade. After initialization or upgrading of OpenIAM, the required scripts will be stored in /usr/local/openiam/utils.

To upgrade HTTPD for an internet-based upgrade, please use the httpd_upgrade.sh script.

For a non-internet-based upgrade, follow the steps below.

1. Download the specified HTTPD tar file from the link provided in the above HTTPD script.
2. Place the file in the designated location (/usr/src/).
3. Comment out the download line in the script before executing it.

To upgrade Flyway the flyway_upgrade.sh script applicable for both internet and non-internet-based upgrades.

To upgrade RabbitMQ, please use the rabbitmq_upgrade.sh script for both internet and non-internet-based upgrades.

To upgrade Tomcat, please use the tomcat_upgrade.sh script for both internet and non-internet-based upgrades.

In the event the OpenIAM version is older than v4.2.1.12 and the upgrade script is not available, the alternative manual upgrade route to upgrade Tomcat is given below.

1. Download latest zip-file from https://tomcat.apache.org/download-90.cgi.
2. Copy the downloaded zip file on Linux server where OpenIAM is installed into /usr/local/openiam.
3. Stop OpenIAM UI service by running the following command.

systemctl stop openiam-ui

4. Backup current UI folder with the command:

mv ui ui_backupp

5. Unzip the zip file.

unzip apache-tomcat-9.0.102.zip

6. Rename to create new UI folder with the following command

mv apache-tomcat-9.0.102/ ui/

7. Remove temporary files by running

rm -rf /usr/local/openiam/ui/webapps/*

8. Copy OpenIAM war files:

cp /usr/local/openiam/ui_backup/webapps/*.war /usr/local/openiam/ui/webapps/

9. Change owner with

chown -R openiam:openiam ui/

10. Make fixing files executable.

chmod +x ui/bin/*.sh 

11. Apply a vulnerability fix of verbose messaging as shown below...

edit file ui/conf/server.xml

... and add

        <Valve className="org.apache.catalina.valves.ErrorReportValve" showReport="false" showServerInfo="false"/>

into Host Tag, as shown in the image below.