2. LinOTP Installation Guide

• 1. Supported Operating Systems
  • 1.1. Supported Database systems
• 2. Checklist
  • 2.1. Decide which distribution you want to use
  • 2.2. Decide which token database you want to use
  • 2.3. SSL certificate
  • 2.4. LinOTP Admin
  • 2.5. User databases
  • 2.6. User tokens
  • 2.7. Authentication
  • 2.8. Location in your network
• 3. Server installation
  • 3.1. LinOTP Virtual Appliance installation
  • 3.2. Installing Debian packages
    • 3.2.1. Installing from APT repositories
  • 3.3. LinOTP Server Installation – the tar.gz, virtualenv and pip way
    • 3.3.1. Setup token database
    • 3.3.2. LinOTP and the Apache webserver
    • 3.3.3. Further changes for RedHat and CentOS 6
    • 3.3.4. Testing LinOTP Server installation
    • 3.3.5. Creating self signed SSL certificate
  • 3.4. LinOTP on Univention Corporate Server UCS
    • 3.4.1. App Center
    • 3.4.2. Join Scripts
  • 3.5. Configuration background information
    • 3.5.1. LinOTP Server configuration
• 4. Installing Management Clients
  • 4.1. Install the Debian packages
  • 4.2. Install python packages
  • 4.3. Management Client Installation on Windows
    • 4.3.1. Installing Yubikey components
• 5. Installing Authentication Modules
  • 5.1. Enabling PAM authentication with pam_linotp
    • 5.1.1. Configure pam_linotp
  • 5.2. Enabling RADIUS authentication with rlm_linotp2
    • 5.2.1. Configure rlm_linotp2
    • 5.2.2. Using rlm_linotp2 and SSL
    • 5.2.3. Fail-over configuration for RADIUS
  • 5.3. Enabling RADIUS authentication with Radiator
  • 5.4. Enabling RADIUS authentication with rlm_perl
    • 5.4.1. Configure radius_linotp.pm
  • 5.5. Enable SAML Identify Provider
• 6. Customization
  • 6.1. Templates
  • 6.2. Style Sheets
  • 6.3. Changing the Logo
• 7. Database connection
  • 7.1. Running LinOTP with DB2 on RedHat
    • 7.1.1. Overview
    • 7.1.2. Installation
    • 7.1.3. Configuration
  • 7.2. Running LinOTP with Oracle on RedHat
    • 7.2.1. Overview
    • 7.2.2. Installation
    • 7.2.3. Configuration
  • 7.3. Running LinOTP with Microsoft SQL
    • 7.3.1. Overview
    • 7.3.2. Installation
    • 7.3.3. Configuration
  • 7.4. Special parameters for database connections
    • 7.4.1. Pool recyle
    • 7.4.2. Implicit returning
• 8. Security Modules
  • 8.1. Defining Security Modules
  • 8.2. Defining SafeNet LunaSA
    • 8.2.1. Partition Password
  • 8.3. Setting up SafeNet LunaSA
    • 8.3.1. Requirements
    • 8.3.2. Network settings
    • 8.3.3. LunaSA server certificate
    • 8.3.4. Initialization of HSM
    • 8.3.5. Setting up HSM clients and assigning clients to HSM partitions
    • 8.3.6. Troubleshooting
  • 8.4. Create AES Keys
  • 8.5. Backup and restore with LunaSA
    • 8.5.1. Backup
    • 8.5.2. Restore
  • 8.6. Setting up HA and Load balancing for LunaSA
    • 8.6.1. Register LinOTP
    • 8.6.2. Creating HA group
    • 8.6.3. Monitoring
  • 8.7. Managing Passwords with LunaSA
    • 8.7.1. Changing admin Password
    • 8.7.2. Changing HSM PED Password
    • 8.7.3. Changing Partition Passwords
    • 8.7.4. Resetting Partition Passwords
• 9. Integration examples
  • 9.1. OTP Authentication with Apache2
    • 9.1.1. Download
    • 9.1.2. Compile
    • 9.1.3. Configuration
  • 9.2. Firewall integration
  • 9.3. Authentication with third party OTP solutions
    • 9.3.1. Configure FreeRADIUS LDAP
    • 9.3.2. Configure FreeRADIUS proxy
    • 9.3.3. Configure proxy decision
  • 9.4. Restrict access to certain devices to certain users
    • 9.4.1. Install LDAP FreeRADIUS module
    • 9.4.2. Adapt the configuration
    • 9.4.3. modules/ldap
    • 9.4.4. clients.conf
    • 9.4.5. policy.conf
    • 9.4.6. site-enabled/linotp
  • 9.5. Map certain RADIUS clients to specific LinOTP realms
    • 9.5.1. Example Data
    • 9.5.2. Configuration
    • 9.5.3. Define two client networks
    • 9.5.4. Define the mapping policy
    • 9.5.5. Add the shortname to the request
    • 9.5.6. Activate policy during authentication
  • 9.6. Authenticating RADIUS clients that pass the ntdomain
  • 9.7. LinOTP and MIT Kerberos
    • 9.7.1. Setting up OTP with Kerberos
    • 9.7.2. Setting up FAST
  • 9.8. Deny access for disabled users in Active Directory
  • 9.9. Use LDAPs in UserIdResolvers
  • 9.10. Configure a redundant MySQL database with master-master-replication
    • 9.10.1. Introduction
    • 9.10.2. Replication user
    • 9.10.3. Configure replication
    • 9.10.4. Setup slaves
    • 9.10.5. Synching the machines
• 10. Updates
  • 10.1. Updating from LinOTP 2.6.1.1 to LinOTP 2.7
    • 10.1.1. Updating a deb install
    • 10.1.2. Updating a pip install
    • 10.1.3. Changelog
  • 10.2. Updating from LinOTP 2.6.1 to LinOTP 2.6.1.1
    • 10.2.1. Updating a deb install
    • 10.2.2. Updating a pip install
    • 10.2.3. Changelog
  • 10.3. Updating from LinOTP 2.6.0.3 to LinOTP 2.6.1
    • 10.3.1. Updating a deb install
    • 10.3.2. Updating a pip install
    • 10.3.3. Changelog
  • 10.4. Updating from LinOTP 2.6 to LinOTP 2.6.0.3
    • 10.4.1. Updating a deb install
    • 10.4.2. Updating a pip install
    • 10.4.3. Changelog
  • 10.5. Updating from LinOTP 2.6 to LinOTP 2.6.0.1
    • 10.5.1. Updating a deb install
    • 10.5.2. Updating a pip install
    • 10.5.3. Changelog
  • 10.6. Updating from LinOTP 2.5.2 to LinOTP 2.6
    • 10.6.1. Updating a deb install
    • 10.6.2. Updating a pip install
    • 10.6.3. Changelog
  • 10.7. Updating from LinOTP 2.5.1 to LinOTP 2.5.2
    • 10.7.1. Updating a deb install
    • 10.7.2. Updating a pip install
    • 10.7.3. Changelog
  • 10.8. Updating from LinOTP 2.5.0 to LinOTP 2.5.1
    • 10.8.1. Updating a deb install
    • 10.8.2. Updating a pip install
    • 10.8.3. Changelog
  • 10.9. Updating from LinOTP 2.4.4 to LinOTP 2.5.0
    • 10.9.1. Updating a deb install
    • 10.9.2. Updating a pip install
    • 10.9.3. Changelog
• 11. Migrating from LinOTP 1.3 or LinOTP 1.0
• 12. Security advisories
  • 12.1. Locked Users
  • 12.2. UserIdResolver
• 13. Troubleshooting
  • 13.1. Connecting to userstores
  • 13.2. Distribution not Found: LinOTP2
  • 13.3. SQLAlchemy error
  • 13.4. Access denied for user root@localhost