Steps

Obtain and Install Oracle Server JRE 1.8.x and Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files

• You can find the download site in the address: http://www.oracle.com/technetwork/java/javase/downloads/index.html
• Refer to Oracle online documentation for installing the Server JRE: https://docs.oracle.com/javase/8/docs/technotes/guides/install/linux_server_jre.html
• Instructions to install JCE Policy Files are included in the download package

Set up a system wide JRE_HOME environment variable

• In Linux the method and best practice may vary based on your distribution, but one of following approaches should work:
  • define JRE_HOME in the /etc/environment file
  • create a new file called e.g. /etc/profile.d/identity.server.sh and define JRE_HOME in it.
• Set the JRE_HOME environment variable so it refers to the Server JRE's jre directory (e.g. JRE_HOME=/usr/local/java/jdk1.8.0_144/jre .)
• Note, that /etc/sudoers may enforce a secure environment. Make sure that the configuration exports JRE_HOME and JAVA_HOME in /etc/sudoers.

Unpack the Software

Unpack the tar archive to /usr/local/ubisecure. Assuming the archive is in the current directory, we could do the following:

mkdir -p /usr/local/ubisecure
tar -xzvf ubilogin-sso-6.x.x.xxxxx.tar.gz -C /usr/local/Ubisecure

Install dependencies

For 64 bit Redhat linux, the glibc and libgcc packages for i686 must be installed, update needs to be run for 64bit version of libgcc to prevent version mismatch problem:

yum install glibc.i686
yum update libgcc
yum install libgcc.i686

Modify the Configuration Template

Copy the configuration template to /usr/local/ubisecure/ubilogin-sso/ubilogin:

cd /usr/local/ubisecure/ubilogin-sso/ubilogin
cp config/unix.config .

Open unix.config file in a text editor. Modify the public visible URL address of the Ubisecure deployment, which is set with key uas.url. The installation is only accessible from the local machine if the value is set as localhost. The resulting line for uas.url might look like the following:

uas.url = https://sso.example.com:8443

Finally, create the configuration files with the setup.sh script.

./setup.sh

yum install glibc.i686

Set Up the System User

Run the following command to set up the system user ubilogin. The newly-created user will be used for running the Ubisecure SSO and Ubisecure Directory.

./config/unix/setupuser.sh

Install Ubisecure Directory

Install OpenLDAP using following command:

./ldap/openldap/install.sh

When the OpenLDAP install script prompts for LDAP Password, type secret and press return.

yum install libgcc.i686 

yum install redhat-lsb

./start.sh

./import.sh ../cnroot.ldif
 ./import.sh ../uas.ldif
 ./import.sh ../secrets.ldif
 ./import.sh ../system-password.ldif
 ./import.sh groups.ldif

Install Ubisecure SSO Tomcat

Run the Tomcat install script to install and configure Tomcat to start automatically when Linux is started:

./config/tomcat/install.sh

The install script does the following:

1. Creates a self-signed SSL certificate for test purposes.
2. Installs the applications in ubilogin/webapps for Tomcat.
3. Creates the init scripts used to start and stop the Tomcat process.

Start Ubisecure SSO

Start the Ubisecure SSO process using the following commands.

/etc/init.d/ubilogin-directory start  
/etc/init.d/ubilogin-server start

Continue on page Installation steps by verifiying the installation was successful.