Personal tools
You are here: Home → support → WiKID Documentation Center → Installation How-tos → How to install the WiKID Community Edition 3.x

How to install the WiKID Community Edition 3.x

This How-to applies to: WiKID Strong Authentication Server Community Edition
This How-to is intended for: System Administrator

The steps needed to install the open source version of the WiKID Strong Authentication System Community Edition, Version 3.x RPMs.

Requirements

Hardware Requirements

  • 8+ gigs of hard drive space.
  • 1 gig of RAM
  • 2 Ethernet connenctions
  • Moderate CPU required
  • These hardware specs are for production. The server has been tested in a 256 meg RAM vmware image.

Doing the work

Please note that with the 3.x versions we have moved the commands from generic "start" and "stop" to "wikidctl start", "wikidctl stop", "wikidctl setup" etc.

  1. Install Postgresql and related 
    2. su -c yum install postgresql postgresql-libs postgresql-jdbc postgresql-server postgresql-pl
  2. Download and install the JDK. You can download the JDK from the Java site. Be sure to download the Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files or else the certificate generation will not work.
  3. Make sure that alternatives has the correct Java:
    4. /usr/sbin/alternatives --install /usr/bin/java java /usr/java/latest/bin/java 2
    /usr/sbin/alternatives --config java
  4. Test that the system is using the correct Java:
    5. java -version
  5. Our replication package requires compat-libstdc++-296 (and it's not yet a dependency).
    6. yum install compat-libstdc++-296
  6. The WiKID rpms require perl-libwww-perl, ntp and system-config-date
    7. # yum install ntp system-config-date perl-libwww-perl
  7. Download the WiKID rpms from Sourceforge and install them. You will need both the wikid-server-community-3.0.0beta rpm and the wikid-utility rpm. (Use --nodeps if you have installed the openjdk.)
    8. su -c rpm -ivh wikid-*
  8. Create a sym link for Java: (or ln -s /usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0/jre/ /opt/java
    if you are using the openjdk, for example)
    # ln -s /usr/java/latest/ /opt/java
  9. Configure your box for WiKID: 
    # /opt/WiKID/sbin/wikidserver_config.sh
  10. If you haven't already, be sure to initialize the database: 
    # service postgresql initdb
  11. Reboot or run:
    12. #/opt/WiKID/conf/templates/wikid-firstboot.sh
  12. Setup the WiKID server. The WiKID token clients communicate with the WiKID via port 80 (https is not needed because the PINs and OTPs are asymmetrically encrypted, so you will need a routable IP address. If you are just testing, then just make sure that the PC running the client can get to the server. 
    13. /opt/WiKID/bin/wikidctl setup
    The script will pick up your existing network settings, walk you through them and create an SSL cert for the server.
  13. Once setup, start the server
    14. /opt/WiKID/bin/wikidctl start
  14. Go to https:///WiKIDAdmin/ to complete the set up. From here, you can follow the standard documentation. If you like short docs, I recommend the Quickstart Cheatsheet:

More Information

You may need to install the JCE Unlimited Strength Jurisdiction Policy Files to avoid the "Illegal Key Size error".

The WiKID token clients require port 80. You can use NAT, but it needs to be routable for the token clients. The following services may only need internal access based on your needs:

  • The WiKIDAdmin uses 443.
  • wAuth uses 8388
  • LDAP uses 10389
  • TACACS+ uses 49

Disclaimer

We test this stuff on our own machines, really we do. But you may run into problems, if you do, come to #fedora on irc.freenode.net

Added Reading

starting tacacs

Posted by admin at Feb 12, 2009 04:55 PM
If the tacacs listener is not starting on the WiKID server, run:
/opt/WiKID/bin/tac_plus -C /opt/WiKID/private/tacacs.conf

Downloading the jdk

Posted by admin at Mar 16, 2009 11:58 AM
We can't provide a direct link to download Sun's java jdk because Sun uses dynamic links. The links are also too long for wget to use :). So try using wget -O as in:

# wget -O java.rpm.bin http://reallylongsunrl....

# chmod +x java.rpm.bin

# ./java.rpm.bin

That should expand the rpms.

/jre/lib/security/'

Posted by http://nowen.myopenid.com/ at Apr 30, 2009 05:40 PM
if you get the error:

[root@localhost ~]# /opt/WiKID/sbin/wikidserver_config.sh
/bin/cp: cannot create regular file `/jre/lib/security/': No such file or directory
/bin/cp: target `/jre/lib/security/' is not a directory

you need to create a symbolic link:

# ln -s /usr/java/latest/ /opt/java

HTH