Skip to main content

OpenLM SLM and Identity Service installation on Linux using RPM, DEB, and TAR packages

This document describes the steps required to install the OpenLM SLM and Identity Service in a Linux machine using RPM, DEB, and TAR packages

Requirements​

Linux Package Dependencies:

SLM: systemd, redhat-lsb, libgdiplus, dotnet core, powershell core

Identity Service: systemd, dotnet core, powershell core

Software as Putty and WinSCP software are the prerequisites for the OpenLM SLM installation. These are Windows-only tools and are needed to interact with the Linux machine from the Windows machine. You can use any tool apart from Putty / WinSCP that can open a console and copy a file to a Linux machine. Protocols: Putty (SSH protocol), WinSCP (SCP protocol).

Connect to a Linux machine using PuTTY​

To connect to a Linux machine using Putty, add the Linux machine address in the Putty session window. Enter the hostname and IP address of the Linux machine to connect to. Select the Open button after entering the required details.

PuTTY session window with the Linux machine hostname and IP entered.

Connect to the Linux machine using your login credentials, enter your system password:

PuTTY console prompting for the Linux system login credentials.

For RPM: Type the below-mentioned command to check if you have any OpenLM applications installed:

sudo rpm -qa | grep openlm

In case no information is returned that means no OpenLM applications are installed.

For DEB: Type the below-mentioned command to check if you have any OpenLM applications installed:

sudo apt list -installed | grep openlm

For Tar.Gz: Type the below-mentioned command to check if you have any OpenLM applications installed:

sudo ps -aux | grep openlm

OR

ls /etc/systemd/system

OR

ls /opt

In case no relevant information is returned that means no OpenLM applications are installed.

Note: In case you encounter a display glitch with the putty console, open the CMD windows and use the below command:

ssh [user]@[IP|Hostname]

Installing the OpenLM SLM using RPM​

To install the OpenLM SLM:

  1. Download the RPM installation file on your machine (for example, in the Downloads folder).

  2. Open WinSCP and connect it to the Linux machine.

WinSCP connected to the Linux machine to transfer the RPM file.

  1. Login using your login credentials, and drag and drop the downloaded RPM file from your machine to the Linux machine.

Note: There are some dependencies included in the RPM package. To install all these dependencies automatically, use the below-mentioned command if your distribution include yum:

sudo yum install [RPMFILE]

Otherwise, after the copying process is complete, return to Putty and run the below-mentioned command:

sudo rpm -i [RPMFILE]
(for example, sudo rpm -i openlm_server-21.6.9-937.x86_64.rpm)

Note: To check the dependencies with RPM, use the commands:

rpm -qp [RPMFILE] -provides

rpm -qp [RPMFILE] -requires

PuTTY console running the rpm install command for the OpenLM SLM package.

  1. When the window with database configuration opens, create a new empty database in your preferred database provider.

Note: The following databases are compatible: MS SQL Server, MySQL, MariaDB.

OpenLM SLM database configuration window opening during RPM installation.

OpenLM SLM database configuration prompt to select the database provider.

Provide the server name, database name, and user credentials (User ID and Password), select Test Connection and Approve button.

OpenLM SLM database configuration with server name, database, and credentials entered.

Message confirming the OpenLM SLM installation completed successfully.

This message confirms that the installation process is done.

  1. Add the license to your OpenLM SLM.

Direct cp command into /opt/openlm/license folder.

PuTTY console copying the license file into the /opt/openlm/license folder.

OR

In Putty, go to the OpenLM folder using this command: cd /opt/openlm

Go to WinSCP, and drag and drop the license file from your machine to the Linux machine to the /opt/openlm/license folder.

WinSCP dragging the license file into the /opt/openlm/license folder.

Restart the OpenLM service to apply the license. Run the below-mentioned command to restart the OpenLM service:

sudo service openlm restart

OR

sudo systemctl restart openlm

OpenLM installation is now completed. The OpenLM SLM on the Linux Machine is available through the link: http://[IP|Hostname]:5015 in the browser.

OpenLM SLM web interface open in a browser on port 5015 after installation.

Installing the Identity Service using RPM​

To install Identity Service:

  1. Copy Identity Service RPM file. Move it to the Linux machine through WinSCP and install it.

WinSCP transferring the Identity Service RPM file to the Linux machine.
PuTTY console installing the Identity Service RPM package.

  1. Create a new database and indicate this database during the Identity Service installation.

Identity Service database configuration prompt during RPM installation.

Identity Service database configuration with the new database indicated.

  1. Select the Identity Service port (default 5000, press enter).

PuTTY console prompting for the Identity Service port during RPM installation.

PuTTY console confirming the Identity Service port selection.

  1. Open Identity Service through the link: http://[FQDN]:5000. Here, FQDN means Fully Qualified Domain Name.

Identity Service web interface open in a browser on port 5000.

Connect it to the OpenLM SLM.

Identity Service configuration connecting it to the OpenLM SLM.

Run the below-mentioned command to restart the OpenLM service (the account should exist in the OpenLM SLM):

sudo service openlm restart

OR

sudo systemctl restart openlm

PuTTY console restarting the OpenLM service after connecting the Identity Service.

OpenLM SLM appsettings.json: To check that the configuration is fine, use the command:

cat /opt/openlm/bin/appsettings.json

appsettings.json output showing the Client Secret, Authority, and EnableSecurity set to True.

The Client Secret and Authority field should be filled with the EnableSecurity field as True.

Useful RPM-specific Linux sudo commands​

To Install the RPM:

sudo rpm -i [RPMFILE]

OR

sudo yum install [RPMFILE]

To Upgrade the RPM:

sudo rpm -U [RPMFILE]

OR

sudo yum update [RPMFILE]

To Uninstall:

To check installed OpenLM items: sudo rpm -qa | grep openlm

To uninstall one of the installed items: sudo rpm -e [name]

To Repair:

sudo rpm -i -replacepkgs [PackageNAme]

OpenLM SLM:

sudo cp [YourLicenseFile] /opt/openlm/license/

Restart Service

sudo service openlm restart

Optional Tool Server:

DB Configuration:

sudo pwsh /opt/openlm/tools/postinstall/start-serverdbconfiguration.ps1

All DB Upgrade:

sudo pwsh /opt/openlm/tools/postinstall/start-alldbupgradeapi.ps1

Optional Tool Identity Service:

DB Configuration:

sudo /opt/securityservice/tools/postinstall/start-identitydbconfiguration.ps1

Installing OpenLM SLM using DEB​

  1. Copy the Debian Package to your server.

  2. Use apt binaries to install it. Run the below-mentioned command:

  • sudo apt install ./[DebName]

PuTTY console installing the OpenLM SLM Debian package with apt.
PuTTY console output during the OpenLM SLM DEB installation.

  1. Configure the database access.

OpenLM SLM database access configuration during DEB installation.

OpenLM SLM database configuration details entered during DEB installation.

The following lines files will appear:

PuTTY console output lines shown after configuring the OpenLM SLM database.

  1. Check that the OpenLM service is running. Command mentioned below:

-sudo service openlm status

PuTTY console showing the OpenLM service status as running.

  1. Copy the license file to /opt/openlm/license. Command mentioned below:
  • sudo cp [LicenseFileName] /opt/openlm/license/[LicenseFileName]
  1. Connect to OpenLM SLM Interface:

Link: http://[hostname]:5015 in a web browser. Here, hostname is the hostname of the server where the OpenLM SLM is installed.

Installing the Identity Service using DEB​

  1. Copy Debian (DEB) package to your server.

  2. Use apt binaries to install it. Run the below-mentioned command.

  • sudo apt install ./[DebName]

PuTTY console installing the Identity Service Debian package with apt.
PuTTY console output during the Identity Service DEB installation.

  1. Configure the database access.

Identity Service database access configuration during DEB installation.

Identity Service database configuration details entered during DEB installation.

  1. Select the Identity server port (5000 by default, press enter).

PuTTY console prompting for the Identity Service port during DEB installation.

Database created:
PuTTY console confirming the Identity Service database was created.

  1. Connect to the Identity Web Browser with: http://[FQDN]:[Port]. Here, FQDN means Fully Qualified Domain Name.

Note: In case a blank page appears, it means the correct FQDN is not used.

Useful DEB-specific Linux commands​

To install and upgrade the Debian package and its configuration files from your system, run the command: sudo apt install ./[DEBNAME] (same command line to be used for upgrade).

To remove the Debian package and its configuration files from your system, run the command: Sudo apt purge [DEBNAME]

Installing the OpenLM SLM using TAR​

To install OpenLM SLM:

  1. Download TAR installation file on your machine (for example, in the Downloads folder).

  2. Open WinSCP and connect it to Linux machine.

WinSCP connected to the Linux machine to transfer the TAR file.

  1. Login using your login credentials, and drag and drop the downloaded TAR file from your machine to the Linux machine.

  2. After the copying process is complete, return to Putty and run the below-mentioned commands:

sudo tar -xvf [TARname]

OR

sudo tar -xvf [TARname] -C [destination]

PuTTY console extracting the OpenLM SLM TAR file with the tar command.

cd [destination]

sudo /bin/bash ./installer.sh

PuTTY console running the installer.sh script for the OpenLM SLM.

  1. When the window with database configuration opens, create a new empty database in your preferred database provider.

OpenLM SLM database configuration window opening during TAR installation.

OpenLM SLM database configuration prompt during TAR installation.

Indicate the created database in Putty, select Test Connection and Approve button.

OpenLM SLM database configuration with the created database indicated in PuTTY.

The following lines file will appear:

PuTTY console output lines shown after configuring the OpenLM SLM database via TAR.

  1. Add the license to your OpenLM SLM.

PuTTY console copying the license file into the OpenLM SLM license folder.

OR

In Putty, go to OpenLM folder using this command: cd /opt/openlm

Go to WinSCP, and drag and drop the license file from your machine to the Linux machine to the /opt/openlm/license folder.

WinSCP dragging the license file into the /opt/openlm/license folder.

Restart the OpenLM service to apply the license. Run the below-mentioned command to restart the OpenLM service:

sudo service openlm restart

OR

sudo systemctl restart openlm

The OpenLM installation is now completed. The OpenLM SLM on the Linux Machine is available through the link: http://[IP|Hostname]:5015 in the browser.

OpenLM SLM web interface open in a browser on port 5015 after TAR installation.

Installing the Identity Service using TAR​

To install the Identity Service:

  1. Copy the Identity Service TAR file. Move it to the Linux machine through WinSCP and install it.

Run the below-mentioned commands:

sudo tar -xvf [TARname]

OR

sudo tar -xvf [TARname] -C [destination]

PuTTY console extracting the Identity Service TAR file with the tar command.

cd [destination]

sudo /bin/bash ./installer.sh

PuTTY console running the installer.sh script for the Identity Service.

  1. Create a new database and indicate this database during the Identity Service installation.

Identity Service database configuration prompt during TAR installation.

Identity Service database configuration with the new database indicated.

  1. Select the identity server port (default 5000, press enter).

PuTTY console prompting for the Identity Service port during TAR installation.

PuTTY console confirming the Identity Service port selection during TAR installation.

  1. Open Identity Service through the link: http://[FQDN]:5000. Here, FQDN means Fully Qualified Domain Name.

Identity Service web interface open in a browser on port 5000 after TAR installation.

Connect it to the OpenLM SLM. Run the below-mentioned command to restart the OpenLM service (the account should exist in OpenLM SLM):

sudo service openlm restart

OR

sudo systemctl restart openlm

PuTTY console restarting the OpenLM service after connecting the Identity Service.

PuTTY console output after restarting the OpenLM service.

Use the following command as shown in the screen below to check that the "Auth" section is filled by the connection process above in the OpenLM config file.

OpenLM config file output showing the Auth section filled by the connection process.

Useful TAR-specific Linux commands​

tar -xvf [Tarfile] -C [DestinationFolder]: In this command, -xvf means extraction with force overwrite and verbose mode. -C defines a custom extraction path.

sudo /bin/bash ./install.sh: This command opens a bash process running the installer.sh script.

sudo ps -aux | grep openlm: To list the processes that are currently opened and filter the one containing the OpenLM pattern.

Acronyms​

FQDN - Fully Qualified Domain Name

Last updated on by Maria Gilca