Installing Zivios Server On Ubuntu

This howto explains installing Zivios Master Service version 0.5.0. Zivios is an n-tiered PHP-5 application, providing identity management, single sign-on, user, group and computer provisioning, as well as remote management of services. It uses MySQL and OpenLDAP as it's data store, with OpenLdap being the primary back end for identity management and application integration and MySQL being used for panel specific data.

Supported Platforms

• Ubuntu Hardy Server 8.04
• Ubuntu Gutsy Server 7.10 (untested -- should work however. Please report success at zivios-discuss@lists.zivios.org)

Domain Name Service Requirements

The Zivios installer will work off an IP address. However, the services that Zivios configures (Kerberos, Certificate Authority, etc.) require proper name resolution. It is highly recommended that you configure DNS for the hostname you are working with.

Extraction

Download the Zivios package: zivios-0.5.0.tar.bz2 and copy it to your server at: /usr/local/src/.

Note: the zivios package (zivios-0.5.0.tar.bz2) MUST be saved in /usr/local/src. Currently, the web based installer does not allow the option of specifying where the source folder is. If this is a problem, simply create a symlink from your actual source directory to /usr/local/src/.

Preparation

Your Ubuntu server installation should be absolutely minimal. Barring SSHd, no additional packages should be installed at this stage. For the purpose of this setup, we are working with the following hostname and IP address:

• hostname : master.zivios.net
• IP address : 192.168.0.31

Note: it is a requirement that you use a sub-domain as your hostname. This does not mean that your LDAP basedn, kerberos realm or mail domain has to be master.yourdomain, it means quite simply that Zivios will be served from an apache virtual host called: master.yourdomain.

Also: the sub-domain does not need to be "master", it can be anything you like. If you are confused about this, please ask on the zivios-discuss mailing list or on the IRC channel before proceeding.

Ensure your system is updated via:

apt-get update
apt-get dist-upgrade

Reboot (if required or recommended by the operating system).

The following base packages are required to run the master web service:

apt-get install apache2 libapache2-mod-php5 php5-curl php5-gd php5-imap php5-ldap php5-mcrypt \
php5-mysql php5-xmlrpc mcrypt mysql-server-5.0 mysql-client-5.0 build-essential ssl-cert less \
bzip2 xml-core lsb-release file libssl-dev libldap2-dev ntp memcached python python-ldap \
python-pyopenssl python-twisted php5-memcache

Note: You will be prompted for a password for the MySQL root user. Please note this password down.

Installing Pre-requisites

Install libnss-ldap

The libnss-ldap package requires some information which we already have. Simply follow the example:

Our primary domain name for this demo installation is zivios.net. This makes our LDAP base-DN: dc=zivios,dc=net. The base-DN is your "Base Distinguished Name", which is made up of your "Domain Components".

Server URI: ldap://127.0.0.1

Distinguished name of search base: dc=zivios,dc=net

LDAP Version to Use: 3

Make local root Database admin: No

Does the LDAP database require login: No

apt-get install libnss-ldap

... enter your answers.

Install Python bindings

The following packages are required for the Zivios Agent installation, install them via:

apt-get install python python-ldap python-pyopenssl python-twisted

Install Heimdal and Openldap Dependencies

As the web based process requires certain prerequisites to be in place for auto-compilation to succeed, we need to installed required libraries accordingly. For debian based systems, this is quite simple.

apt-get build-dep heimdal
apt-get build-dep slapd

Enable Memcached

Zivios uses memcached to accelerate common lookups. Zivios cannot work without memcached enabled.

Enable the PHP Memcached extension. This must be done manually.

You must edit /etc/php5/apache2/conf.d/memcache.ini and uncomment the line to enable memcached:

  extension=memcache.so

Start Memcached. The Zivios Panel WILL NOT WORK without a running memcached.

/etc/init.d/memcached start

Install libssh2 and php-ssh2

SSH2 is required to enable zivios agents on remote computers. This is used by Zivios when adding a server to install and configure a Zivios agent on them.

It is required that you use libssh2-0.14 for this purpose (provided with Zivios). Newer versions seem not to work properly with the php5-ssh2 extension

Copy the required libs over for compilation:

cd /usr/local/src/zivios-0.5/spkgs
cp libssh2-0.14.tar.tgz ssh2-0.10.gz /usr/local/src
cd /usr/local/src

Compile libssh:

tar xvfz libssh2-0.14.tar.tgz
cd libssh2-0.14
./configure
make all install

Install PHP5 module development package:

apt-get install php5-dev

Compile the php5-ssh2 extension:

tar xfvz ssh2-0.10.gz
cd ssh2-0.10
phpize
./configure
make
make install

Enable the php-ssh extension:

Edit /etc/php5/apache2/php.ini.

Add:

   extension=ssh2.so

to the bottom of the file or where other extension directives are listed.