All servers which you plan to install Indeed Identity PAM components on must use the same DNS server and must resolve each other by full DNS names, and must also be located on the same network or have network interactions with each other:
- SSH (22) — for ansible access via ssh.
- HTTPS (443), ssh-custom (default 2222), rdp (3389) — for health checks at the end of deployment.
All Linux servers on which you plan to install Indeed Identity PAM components must have a lowercase hostname in FQDN format and it must match the DNS name of the server.
The following components must be installed on all servers where you plan to install Indeed Identity PAM components:
| Component | Version |
|---|---|
| iptables | 1.4 and higher According to Docker documentation |
| python | If Python 2, then version 2.7 and higher If Python 3, then version 3.5 and higher |
| openssh-server | According to Ansible documentation |
If nftables is installed on the server, then uninstall it and install iptables.