Page History

Inventory

1. Go to the

1. distribution folder

1. .
2. Change the name of the inventory.template

1. file to

1. inventory.

Edit the inventory file:

1. In the managment section, specify the FQDN address of the management server

1. .
2. In the access section, specify the FQDN address of the SSH Proxy access server.
3. For all of the servers except the local one, add the following line: remote_ssh_user=root ansible_ssh_password=123 ansible_become_password=123.
   1. remote_ssh_user=root

1. 1. — username for remote connection to the resource.
   2. ansible_ssh_password=123

1. 1. — user password for remote connection to the resource.
   2. ansible_become_password=123

1. 1. — user password for remote connection to the resource.
2. Comment out all fields that have not been changed

1. .
2. Save.

# NOTE: To access docker host use local.docker name instead of localhost

[management]
pammng.test.local

[access]
pamgtw.test.local remote_ssh_user=root ansible_ssh_password=123 ansible_become_password=123

#[haproxy]
#HAPROXY_SERVER_FQDN_OR_IP

#[rds]
#RDS_SERVER_FQDN_OR_IP

# Use this section to override vars
#[all:vars]
#server_fqdn=OVERRIDE_SERVER_FQDN

Configuration

Files

Unzip the downloaded configuration files and move the extracted folders to

axidian-pam-linux\state.

Certificates

Certification Authority Certificate

Move the CA certificate along the path

axidian-pam-linux\state\ca-certificates.

Server Certificates

1. Go to

1. axidian-pam-linux\state\certs and create a separate folder for the management server. Name it with the FQDN

1. of the management server.

   Page properties
   hidden true
   Image Modified

   
   

2. Move the management server certificate to the folder corresponding to the management server.

   Page properties
   hidden true
   Image Modified

   
   

3. Go to

1. axidian-pam-linux\state\keys\rdp-proxy and create a separate folder for the access server. Name it with the FQDN

1. of the access server.

1. Page properties
   hidden true
   Image Added

   
   

2. Move the access server certificate to the folder corresponding to the access server.

1. Page properties
   hidden true
   Image Added

   
   

vars

1. Go to

1. axidian-pam-linux\scripts\ansible and open the file vars.yml.
2. In the # pfx_pass: "ENTER_HERE" line remove the # symbol.
3. Instead of ENTER_HERE, specify the password for the certificates.
4. Save.

Installation

1. Move the distribution to the target Linux resource.

2. If CIS Benchmark Docker security settings are applied, then run the installation script with the command:

   Code Block
   language bash
   sudo bash run-deploy.

1. sh

   If CIS Benchmark Docker security settings are not applied, then run the installation script with the command:
   

   Code Block
   language bash
   sudo bash run-deploy.sh --bench-skip

   
   

2. When prompted, enter your local sudo

1. username (for example, root) and password.
2. Wait for the installation to finish.

Components Restarting

Management Server

1. Go to the /etc/

1. axidian/

1. axidian-

1. privilege folder.
2. Restart

1. Axidian Privilege management server components using the following commands:

   1. Restarting all of the components:
      

      Code Block
      language bash
      sudo docker compose -f docker-compose.management-server.yml down sudo docker compose -f docker-compose.management-server.yml up -d

1. 1. or

      Code Block
      language bash
      sudo docker-compose -f docker-compose.management-server.yml down sudo docker-compose -f docker-compose.management-server.yml up -d

      
      

   2. Restarting a specific component:
      

      Code Block
      language bash
      sudo docker compose -f docker-compose.management-server.yml up -d

1. 1. <component

1. 1. name> --force-recreate

1. 1. or

      Code Block
      language bash
      sudo docker-compose -f docker-compose.management-server.yml up -d

1. 1. <component

1. 1. name> --force-recreate

      
      

   2. Example of restarting the

1. 1. Axidian Privilege Core component:
      

      Code Block
      language bash
      sudo docker compose -f docker-compose.management-server.yml up -d core --force-recreate

1. 1. or

      Code Block
      language bash
      sudo docker-compose -f docker-compose.management-server.yml up -d core --force-recreate

      
      

Access Server

1. Go to the /etc/

1. axidian/

1. axidian-

1. privilege folder.

2. Restart

1. Axidian Privilege access server components using the following commands:
   

   Code Block
   language bash
   sudo docker compose -f docker-compose.access-server.yml down sudo docker compose -f docker-compose.access-server.yml up -d

1. or

   Code Block
   language bash
   sudo docker-compose -f docker-compose.access-server.yml down sudo docker-compose -f docker-compose.access-server.yml up -d