Install LinOTP on Debian Buster

Note: Only a minimal OS installation is required to install LinOTP.

Download the repository's public key and store it in the APT trust database:

$ # curl https://dist.linotp.org/debian/gpg-keys/linotp-archive-current.asc | sudo tee /etc/apt/trusted.gpg.d/linotp-archive-current.asc

Add the linotp.org repository to your APT setup:

$ # echo 'deb http://dist.linotp.org/debian/linotp3 buster linotp' | sudo tee /etc/apt/sources.list.d/linotp.list

(Feel free to use `https://…` since the repository is also available via HTTPS.)

If you would like to run the preferred database and webserver, install MariaDB and Apache.
(other webservers, database servers, or external databases may be used but that requires additional configuration):

$ # sudo apt-get update
$ # sudo apt-get install mariadb-server
$ # sudo service mysql start
$ # sudo mysql_secure_installation

Next install LinOTP and the linotp.org keyring package:

$ # sudo apt-get install linotp-archive-keyring linotp

Use the linotp CLI to add your first user:

$ # linotp local-admins add <username>
$ # linotp local-admins password <username>

Now, LinOTP should be up and running. Note: It might be necessary to manually start the apache service depending on your system configuration.

If you opted (during package installation) to configure LinOTP to use the apache webserver and generated a self-signed certificate, you should be able to access https://host/manage/ and sign in. Without apache, use linotp run to start a testing instance.

Please refer to the LinOTP Manual to find out how to set up LinOTP and the Authentication Modules.