.. _installing_from_apt:

Installing from APT repositories
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

The LinOTP components are available via two apt repositories. You can use this
method to install the LinOTP server and also the client components on Debian
Stretch (64bit), Debian Jessie (64bit), Ubuntu 12.04 LTS (64bit) and Ubuntu
14.04 LTS (64bit).

.. note:: Instead of installing LinOTP on Debian you could use our
 Virtual Appliance (currently based on Jessie), that includes all required
 repositories, packages and a preconfigured FreeRADIUS server.

Debian
.......

The repository is hosted on linotp.org.

For Debian Stretch (64bit) add the following line to your ``/etc/apt/sources.list.d/linotp.list``::

   deb http://linotp.org/apt/debian stretch linotp

For Debian Jessie (64bit) add the following line to your ``/etc/apt/sources.list.d/linotp.list``::

   deb http://linotp.org/apt/debian jessie linotp

You have to import the LinOTP GPG key to verify the packages:

* Debian Stretch::

   apt-get install dirmngr
   apt-key adv --recv-keys 913DFF12F86258E5

* Debian Jessie::

   gpg --search-keys 913DFF12F86258E5
   gpg --keyserver keys.gnupg.net --recv-keys 913DFF12F86258E5
   gpg --export 913DFF12F86258E5 | apt-key add -

For a more convenient setup you should install the desired database first (e.g.
mysql)::

  apt-get update
  apt-get install mysql-server

Now the LinOTP packages can be installed::

   apt-get update
   apt-get install linotp                   # Follow the dialog for passwords and certificate.
   apt-get install linotp-smsprovider       # [optional]
   apt-get install linotp-adminclient-cli   # [optional]
   apt-get install libpam-linotp            # [optional]

If you install the database after LinOTP or if you would like to change the
used database type you can reinitialize the setup procedure with::

 dpkg-reconfigure linotp

.. note:: During reconfiguration you are asked, if you want to create a new
 encryption key. If you do so, you will not be able to read your old data in the
 token database. But the encryption key is backed up to /etc/linotp2/encKey.old.

If your users are located in an LDAP or Active Directory you also need to
install the python LDAP package::

   apt-get install python-ldap

Some configuration screens will pop up, when installing the LinOTP package.
This configuration will take care of creating the logging directory
``/var/log/linotp`` and creating an encryption key ``/etc/linotp2/encKey``.

If you did not choose to create the token database during the configuration,
you may now create the token database manually as described in section
:ref:`setup_token_database`.

Ubuntu 12.04 / 14.04
.....................

The repository is hosted on launchpad, so that you can do a simple::

   add-apt-repository ppa:linotp/stable
   apt-get update

For a more convenient setup you should install the desired database first (e.g.
mysql)::

  apt-get update
  apt-get install mysql-server

Now you can start the installation of LinOTP with::

   apt-get install linotp