3. LinOTP Installation Guide

• 3.1. Supported Operating Systems
  • 3.1.1. Supported Database systems
• 3.2. Checklist
  • 3.2.1. Decide which distribution you want to use
  • 3.2.2. Decide which token database you want to use
  • 3.2.3. SSL certificate
  • 3.2.4. LinOTP Admin
  • 3.2.5. User databases
  • 3.2.6. User tokens
  • 3.2.7. Authentication
  • 3.2.8. Location in your network
• 3.3. Server installation
  • 3.3.1. Offline Installation as a Smart Virtual Appliance
    • Introduction
    • Offline Installation
  • 3.3.2. Installing from APT repositories
    • Debian Buster
  • 3.3.3. LinOTP Administrators
    • Logins for administrative interfaces
      • Overview
      • Administrative Users
      • UserIdResolver
      • Realm
      • Policy
    • Manage the Administrators
      • Create local Administrators from GUI
      • Create local Administrators from Shell
  • 3.3.4. LinOTP Server configuration background
    • LinOTP Server configuration
      • Token database
      • RADIUS token communication
      • linotp server
      • Apache web server
        • Apache configuration file
        • Authenticating to the Management Interface
        • Issuing Certificate Authority
• 3.4. Installing Authentication Modules
  • 3.4.1. Enabling PAM authentication with pam_linotp
    • Configure pam_linotp
  • 3.4.2. Enabling RADIUS authentication with rlm_linotp2
    • Configuring rlm_linotp2
    • Activating rlm_linotp2
    • Using rlm_linotp2 and SSL
    • Testing rlm_linotp2
    • Fail-over configuration for RADIUS
  • 3.4.3. Enabling RADIUS authentication with Radiator
  • 3.4.4. Enabling RADIUS authentication with rlm_perl
    • Configuring radius_linotp.pm
    • Testing rlm_perl
  • 3.4.5. Enable SAML Identify Provider
• 3.5. Customization
  • 3.5.1. Custom LinOTP3 Selfservice
  • 3.5.2. Style Sheets - LinOTP3
  • 3.5.3. Changing the Logo
• 3.6. Database connection
  • 3.6.1. Configure a redundant mariadb database with master-master-replication
    • Introduction
    • Replication user
    • Configure replication
    • Setup slaves
    • Synching the machines
    • Activate the Replication Mode in LinOTP
  • 3.6.2. Configure a redundant MySQL database with master-master-replication
    • Introduction
    • Replication user
    • Configure replication
    • Setup slaves
    • Synching the machines
    • Activate the Replication Mode in LinOTP
• 3.7. Security Modules
  • 3.7.1. Defining Security Modules
  • 3.7.2. Defining SafeNet LunaSA
    • Partition Password
  • 3.7.3. Setting up SafeNet LunaSA
    • Requirements
    • Network settings
    • LunaSA server certificate
    • Initialization of HSM
      • Create HSM Admin PED Key
      • Create Domain PED Key
      • HSM security polices
      • Create HSM Partitions
      • Partition policies
      • Activate Partitions
    • Setting up HSM clients and assigning clients to HSM partitions
    • Troubleshooting
  • 3.7.4. Create AES Keys
  • 3.7.5. Backup and restore with LunaSA
    • Backup
    • Restore
  • 3.7.6. Setting up HA and Load balancing for LunaSA
    • Register LinOTP
    • Creating HA group
    • Monitoring
      • Restore an HA group
  • 3.7.7. Managing Passwords with LunaSA
    • Changing admin Password
    • Changing HSM PED Password
    • Changing Partition Passwords
    • Resetting Partition Passwords
• 3.8. Integration examples
  • 3.8.1. OTP Authentication with an Apache web server
    • Download
    • Compile
    • Configuration
  • 3.8.2. Firewall integration
  • 3.8.3. Authentication with third party OTP solutions
    • Configure FreeRADIUS LDAP
    • Configure FreeRADIUS proxy
    • Configure proxy decision
  • 3.8.4. Restrict access to certain devices to certain users
    • Install LDAP FreeRADIUS module
    • Adapt the configuration
    • modules/ldap
    • clients.conf
    • policy.conf
    • site-enabled/linotp
  • 3.8.5. Map certain RADIUS clients to specific LinOTP realms
    • Example Data
    • Configuration
    • Define two client networks
    • Define the mapping policy
    • Add the shortname to the request
    • Activate policy during authentication
  • 3.8.6. Authenticating RADIUS clients that pass the ntdomain
  • 3.8.7. LinOTP and MIT Kerberos
    • Setting up OTP with Kerberos
    • Setting up FAST
  • 3.8.8. Deny access for disabled users in Active Directory
  • 3.8.9. Use LDAPs in UserIdResolvers
• 3.9. Migrating to LinOTP 3
  • 3.9.1. Configuration
    • Configuration directory
    • Configuration file
    • Configuration file locations for Debian packages (as per linotp-cfg-default)
    • New configuration settings
    • Removed settings
  • 3.9.2. Database encoding migration
  • 3.9.3. Administrator authentication
  • 3.9.4. API endpoints requiring POST requests
  • 3.9.5. User interface
    • Audit trail tab of ManageUI
  • 3.9.6. Howto migrating from LinOTP 2 to LinOTP 3
• 3.10. Security advisories
  • 3.10.1. Locked Users
  • 3.10.2. UserIdResolver
• 3.11. Troubleshooting
  • 3.11.1. Connecting to userstores
  • 3.11.2. Distribution not Found: LinOTP2
  • 3.11.3. SQLAlchemy error
  • 3.11.4. Access denied for user root@localhost

3.12. Indices and tables

• Index

• Module Index

• Search Page