Tiêu đề Lab Exercise Guide Module 14 rev1.pdf ✅

Lab Exercise Guide Bootcamp for Managing Security Device • Select UbuntuServer22_Mod14.vbox. Click Open. • Open Settings. • Go to System section, set the base memory: 4096 MB. • Go to Network section, select Port Forwarding, set to the following parameters • Click OK. Then, click OK again. • Click Start button. • Wait until it ready to login. Task 2: PrivacyIDEA Installation • Open Terminal (Konsole) in the Host VM. • Connect to the Ubuntu 22 VM via SSH. ssh -p 2222 localhost • Insert the password: labootcamp • Go to root privilege. sudo su • Go to root directory cd ~ • Update and upgrade the system. apt update && apt upgrade -y • Download the PrivacyIDEA signing key wget https://lancelot.netknights.it/NetKnights-Release.asc • Verify the fingerprint gpg --import --import-options show-only --with-fingerprint NetKnights- Release.asc
Lab Exercise Guide Bootcamp for Managing Security Device • Add the signing key mv NetKnights-Release.asc /etc/apt/trusted.gpg.d/ • Add the repository for your release (Ubuntu 22/jammy) add-apt-repository http://lancelot.netknights.it/community/jammy/stable • Press Enter to continue. • Update the repository. apt update • Install PrivacyIDEA and the module for FreeRadius. apt install privacyidea-apache2 privacyidea-radius -y • If there is pop up options is show up, just press Enter. Wait until installation is finished. Task 3: PrivacyIDEA Configuration • Create user admin. pi-manage admin add admin -e admin@localhost • Insert password, in example: labootcamp. • If success, it should be “Admin admin was registered successfully.” • Open PrivacyIDEA web interface via browser (Konqueror) in the Host VM, then go to https://localhost:8443. • Login using the admin credentials. Username: admin Password: your_password (i.e. labootcamp) • Click Next button, then click Dive In button. Select No to not create default realm.
Lab Exercise Guide Bootcamp for Managing Security Device • We will create a user for access the Radius Server. Select Config tab, then Users tab, select New Passwdresolver. • Before we fill the box above, go back to Terminal. Create user via command: /opt/privacyidea/bin/privacyidea-create-pwidresolver-user -d 'LA user for Radius' -u laradius -i 10 -p labootcamp >> /etc/privacyidea/privacyidea_user note: -d: description, -u: username, -i: uid, -p: password /etc/privacyidea/privacyidea_user: the location or path to store the user data • Then, go to the browser and fill the box. Fill the “resolver name”, i.e. radius_resolver. Fill the “File name” with the above user data path: /etc/privacyidea/privacyidea_user. Then, Save Resolver. • Go to Realms tab. Create the Realm, fill the “Realm Name”, i.e. radius_realm. Then, select the Resolvers that just created before. Then, Create Realm.