ADUCID 4.x

User Tools

Site Tools

Trace:
installation:03-aducid-software

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision 		Previous revision
installation:03-aducid-software [2019/11/11 15:40]
mpospisek 		installation:03-aducid-software [2021/02/19 14:55] (current)
mpospisek
Line 17: Line 17:
 </codedoc> </codedoc>
 Files for aducid-aaa-modules.  Files for aducid-aaa-modules. 
-**Please check your server hostname in these files, as indicated.** 
  
 Export system variables Export system variables
Line 130: Line 129:
   * Copy the repository directory from the ADUCID Server Kit DVD to  /media/ADUCID   * Copy the repository directory from the ADUCID Server Kit DVD to  /media/ADUCID
  
-Install and run the aducid-installer script+Install the aducid-installer script (into /usr/local/bin) and start it
 <codedoc code:bash> <codedoc code:bash>
 # in this directory, rpm files are located # in this directory, rpm files are located
Line 137: Line 136:
 yum localinstall aducid-repository-1.0-4.el7.centos.noarch.rpm yum localinstall aducid-repository-1.0-4.el7.centos.noarch.rpm
 # dtto as above # dtto as above
-yum localinstall aducid-installer-4.1.0-1.rc1.el7.centos.noarch.rpm    +yum localinstall aducid-installer-4.x.y-1.z.el7.centos.noarch.rpm    
-# now, the install script will be in the path (/usr/local/bin), invoke it+#
 aducid-installer aducid-installer
 </codedoc> </codedoc>
 +
 +{{ :installation:aim4_installer.png?600 |}}
  
 The aducid-installer script (see /usr/local/bin/aducid-installer.sh) asks about AIM server parameters: The aducid-installer script (see /usr/local/bin/aducid-installer.sh) asks about AIM server parameters:
  
-| hostname | Preferably whole DNS name | +| AIM host | Preferably whole DNS name | 
-| service provider ID | AIM machine inner identification. DNS hostname is a good candidate. | +| SPID | (Service Provider ID) AIM machine inner identification. DNS hostname is a good candidate. | 
-| icon file | 100x100 .png file that will be seen on client PEIGs. This can be changed anytime, files are located in /usr/share/pixmaps | +| Display Name | AIM identification that will be displayed on user PEIGs |  
-| replication password | In fact, DB access password for account created during install |+| Internal Network | Network for R4 (Server App <-> AIM) communication | 
 +| AIM Sync Public/Private Key | Certificates used to secure direct synchronization between two AIM servers (e.g. during identity link data transfers) | 
 +| DB Password | Password for DB access | 
 +| Server icon | 100x100 .png file that will be displayed on user PEIGs. This can be changed anytime, files are located in /usr/share/pixmaps | 
 +| Proofing | If you need to install sample proofing applications (Yes/No) |
  
 ===== Post-install checks ===== ===== Post-install checks =====
Line 160: Line 165:
 </codedoc> </codedoc>
  
-Other certificates used by ADUCID server are listed in /opt/tomcat/conf/ADUCID.properties. After you set this parameters to your certificate files, restart of the tomcat9.service is needed.+Other certificates used by ADUCID server are listed in /opt/tomcat/conf/ADUCID.properties, see AIM Sync Public/Private Keys above. After you set this parameters to your certificate files, restart of the tomcat9.service is needed.
 <sxh bash> <sxh bash>
 PUBLIC_KEY=/opt/aaa/certs/wild.aducid.com.crt PUBLIC_KEY=/opt/aaa/certs/wild.aducid.com.crt
Line 173: Line 178:
 postinstall checks postinstall checks
 <codedoc code:bash> <codedoc code:bash>
-orange-d3:~ root$ systemctl -l status httpd.service+aim:~ root$ systemctl -l status httpd.service
 ● httpd.service - The Apache HTTP Server ● httpd.service - The Apache HTTP Server
    Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vendor preset: disabled)    Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vendor preset: disabled)
Line 188: Line 193:
            └─5528 /usr/sbin/httpd -DFOREGROUND            └─5528 /usr/sbin/httpd -DFOREGROUND
  
-orange-d3:~ root$ systemctl -l status aducid-aaa.service+aim:~ root$ systemctl -l status aducid-aaa.service
 ● aducid-aaa.service - The ADUCID AAA Module ● aducid-aaa.service - The ADUCID AAA Module
    Loaded: loaded (/usr/lib/systemd/system/aducid-aaa.service; enabled; vendor preset: disabled)    Loaded: loaded (/usr/lib/systemd/system/aducid-aaa.service; enabled; vendor preset: disabled)
Line 201: Line 206:
            └─908 aaa/4            └─908 aaa/4
    
-Jun 25 23:03:03 orange-d3.aducid.com aaa[906]: sess.created:1529960583 +Jun 25 23:03:03 aim.aducid.com aaa[906]: sess.created:1529960583 
-Jun 25 23:03:03 orange-d3.aducid.com aaa[906]: sess.modified:1529960583 +Jun 25 23:03:03 aim.aducid.com aaa[906]: sess.modified:1529960583 
-Jun 25 23:03:03 orange-d3.aducid.com aaa[906]: sess.expires:1529967783 +Jun 25 23:03:03 aim.aducid.com aaa[906]: sess.expires:1529967783 
-Jun 25 23:03:03 orange-d3.aducid.com aaa[906]: 127.0.0.1:36274 sent 168 byte(s) +Jun 25 23:03:03 aim.aducid.com aaa[906]: 127.0.0.1:36274 sent 168 byte(s) 
-Jun 25 23:03:03 orange-d3.aducid.com aaa[905]: 127.0.0.1:52677 recv 94 byte(s) +Jun 25 23:03:03 aim.aducid.com aaa[905]: 127.0.0.1:52677 recv 94 byte(s) 
-Jun 25 23:03:03 orange-d3.aducid.com aaa[905]: sess.id:a6ae3724b541fb22127a207882e99ee2d1b0c762922ceff78dd4839872a712ab +Jun 25 23:03:03 aim.aducid.com aaa[905]: sess.id:a6ae3724b541fb22127a207882e99ee2d1b0c762922ceff78dd4839872a712ab 
-Jun 25 23:03:03 orange-d3.aducid.com aaa[905]: sess.created:1529960583 +Jun 25 23:03:03 aim.aducid.com aaa[905]: sess.created:1529960583 
-Jun 25 23:03:03 orange-d3.aducid.com aaa[905]: sess.modified:1529960583 +Jun 25 23:03:03 aim.aducid.com aaa[905]: sess.modified:1529960583 
-Jun 25 23:03:03 orange-d3.aducid.com aaa[905]: sess.expires:1529967783 +Jun 25 23:03:03 aim.aducid.com aaa[905]: sess.expires:1529967783 
-Jun 25 23:03:03 orange-d3.aducid.com aaa[905]: 127.0.0.1:52677 sent 168 byte(s)+Jun 25 23:03:03 aim.aducid.com aaa[905]: 127.0.0.1:52677 sent 168 byte(s)
    
-orange-d3:~ root$ systemctl -l status tomcat9.service+aim:~ root$ systemctl -l status tomcat9.service
 ● tomcat9.service - Apache Tomcat 9.0.6 Servlet Container ● tomcat9.service - Apache Tomcat 9.0.6 Servlet Container
    Loaded: loaded (/usr/lib/systemd/system/tomcat9.service; enabled; vendor preset: disabled)    Loaded: loaded (/usr/lib/systemd/system/tomcat9.service; enabled; vendor preset: disabled)
Line 219: Line 224:
  Main PID: 921 (java)  Main PID: 921 (java)
    CGroup: /system.slice/tomcat9.service    CGroup: /system.slice/tomcat9.service
-           └─921 /usr/java/default/bin/java -Djava.util.logging.config.file=/opt/tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djdk.tls.ephemeralDHKeySize=2048 -Djava.protocol.handler.pkgs=org.apache.catalina.webresources -server -Dcom.sun.management.jmxremote.port=8086 -Dcom.sun.management.jmxremote.ssl=false -Dcom.sun.management.jmxremote.authenticate=false -Djava.security.egd=file:/dev/./urandom -Djava.awt.headless=true -Xms2g -Xmx2g -XX:+UseG1GC -XX:+UseStringDeduplication -XX:MaxGCPauseMillis=100 -Dignore.endorsed.dirs= -classpath /opt/tomcat/bin/bootstrap.jar:/opt/tomcat/bin/tomcat-juli.jar -Dcatalina.base=/opt/tomcat -Dcatalina.home=/opt/tomcat -Djava.io.tmpdir=/opt/tomcat/temp org.apache.catalina.startup.Bootstrap start+           └─921 /usr/java/default/bin/java -Djava.util.logging.config.file=/opt/tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djdk.tls.ephemeralDHKeySize=2048 -Djava.protocol.handler.pkgs=org.apache.catalina.webresources -server -Djava.security.egd=file:/dev/./urandom -Djava.awt.headless=true -Xms2g -Xmx2g -XX:+UseG1GC -XX:+UseStringDeduplication -XX:MaxGCPauseMillis=100 -Dignore.endorsed.dirs= -classpath /opt/tomcat/bin/bootstrap.jar:/opt/tomcat/bin/tomcat-juli.jar -Dcatalina.base=/opt/tomcat -Dcatalina.home=/opt/tomcat -Djava.io.tmpdir=/opt/tomcat/temp org.apache.catalina.startup.Bootstrap start
    
-Jun 25 22:54:50 orange-d3.aducid.com systemd[1]: Starting Apache Tomcat 9.0.6 Servlet Container... +Jun 25 22:54:50 aim.aducid.com systemd[1]: Starting Apache Tomcat 9.0.6 Servlet Container... 
-Jun 25 22:54:50 orange-d3.aducid.com tomcat-startup.sh[887]: + cd /opt/tomcat +Jun 25 22:54:50 aim.aducid.com tomcat-startup.sh[887]: + cd /opt/tomcat 
-Jun 25 22:54:50 orange-d3.aducid.com tomcat-startup.sh[887]: + ./bin/startup.sh +Jun 25 22:54:50 aim.aducid.com tomcat-startup.sh[887]: + ./bin/startup.sh 
-Jun 25 22:54:50 orange-d3.aducid.com systemd[1]: Started Apache Tomcat 9.0.6 Servlet Container.+Jun 25 22:54:50 aim.aducid.com systemd[1]: Started Apache Tomcat 9.0.6 Servlet Container.
 </codedoc> </codedoc>
  
Line 234: Line 239:
  
 <codedoc code:bash> <codedoc code:bash>
-orange-d3:~ root$ tail -f /opt/tomcat/logs/catalina.out+aim:~ root$ tail -f /opt/tomcat/logs/catalina.out
 Not found in 'org.owasp.esapi.resources' directory or file not readable: /opt/apache-tomcat-9.0.6/validation.properties Not found in 'org.owasp.esapi.resources' directory or file not readable: /opt/apache-tomcat-9.0.6/validation.properties
 Not found in SystemResource Directory/resourceDirectory: .esapi/validation.properties Not found in SystemResource Directory/resourceDirectory: .esapi/validation.properties
Line 262: Line 267:
  
  
 +[<>] 
  
installation/03-aducid-software.1573486849.txt.gz · Last modified: 2019/11/11 15:40 by mpospisek

Page Tools

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki