If you want to manually install a software package using a native installation program instead of the Centrify installation script, you can follow the instructions in the Upgrade and Compatibility Guide for the most common native package installers, such as the Red Hat or Debian package manager. You should note that these native packages are signed with a GNU Privacy Guard (GPG) key. You need to import the key to verify the package authenticity before installing the package. You can download the RPM-GPG-KEY-centrify file from the Centrify Download Center.
Alternatively, you can use any other installation program you have available for the local operating environment. For example, if you use another program such as SMIT, YAST, APT, SUSE, or YUM to install and manage software packages, you can use that program to install Server Suite software packages.
Perform the following steps to install the Centrify Agent using a native installation program that does not require a connection to a package repository. To use a native installation program that requires a repository connection (such as yum, SUSE or APT), see Enabling package repositories.
To install the agent using a native installation program:
- Log on as or switch to the root user.
- If you are installing from a CD and the CD drive is not mounted automatically, use the appropriate command for the local computer’s operating environment to mount the cdrom device.
-
Copy the appropriate package for the local computer’s operating environment to a local directory.
For example, if installing from the CD and the operating environment is Solaris 10 SPARC:
cp /cdrom/cdrom0/Unix/centrifydc-release-sol10-sparc-local.tgz .
-
If the software package is a compressed file, unzip and extract the contents. For example, on Solaris:
gunzip -d centrifydc-release-sol10-local.tgz
tar -xf centrifydc-release-sol10-sparc-local.tar -
Run the appropriate command for installing the package based on the local computer’s operating environment. For example, on Solaris:
pkgadd –d CentrifyDC-a adminIf you are not sure which command to use for the local operating environment, see the documentation associated with the package installer you are using.
Enabling package repositories
You can also download and install agents using Linux package management software for your operating system. To do this, you set up a repository for your operating system and then use the software's command line tools to manage automatic agent updates.
-
RedHat, CentOS, or Amazon systems: Use the "Yellowdog Updater, Modified (yum)" tool to update the rpm-redhat repository. For details, see To set up and configure a RedHat, CentOS, or Amazon repository.
-
SuSE systems: Use the Zypper tool to update the rpm-suse repository. For details, see To set up and configure a SUSE repository.
-
Debian or Ubuntu systems: Use the Advanced Package Tool (APT), apt-get, or Aptitude tools to update the deb repository. For details, see To set up and configure a Debian or Ubuntu repository.
-
Atomic systems: Use curl or wget to update the wget repository. For details, see To access a raw package (WGET) repository .
-
Alpine Linux systems: For details, see To set up and configure an Alpine Linux repository.
You must perform one of the following procedures to enable the repository.
Note: The procedures in this section require that you log in to the Centrify Support Portal and go to the Centrify Repo site. On that page, click the link to generate the repo key. You will then specify the repo key in a yum (RHEL, SUSE, and so forth) or APT (Debian, Ubuntu, and so forth) configuration file. There are some examples on the Centrify repo site about how to add the key to your configuration file.
Note: For additional details about configuring and using SUSE or yum repositories, see the documentation for the distribution of Linux you are using. For additional details about configuring and using APT repositories, see the documentation for the distribution of Debian Linux or Ubuntu you are using.
WARNING: If you specify your repository on the command line, be sure to clean out your command history afterwards. Because the URL for your repository includes the credentials to access it, leaving this information around in command history is not a secure practice.
To set up and configure a RedHat, CentOS, or Amazon repository
-
Create a /etc/yum.repos.d/centrify-rpm-redhat.repo configuration file to use the official Centrify package repository, and download a RPM-GPG-KEY-centrify key from the Centrify Support Portal.
You can manually create the configuration file or you can use a setup script to generate the file automatically.
Note: For the baseurl parameter, enter your Centrify repo URL token in place of <URLtoken>.
-
To create the repository configuration file manually
Create a file with the following:
Copy# Source: CENTRIFY
# Repository: CENTRIFY / rpm-redhat
# Description: YUM repository for RedHat packages (RPMs)
[centrify-rpm-redhat]
name=centrify-rpm-redhat
baseurl=https://cloudrepo.centrify.com/<URLtoken>/rpm-redhat/rpm/any-distro/any-version/$basearch
repo_gpgcheck=1
enabled=1
gpgkey=https://downloads.centrify.com/products/RPM-GPG-KEY-centrify
gpgcheck=1
sslverify=1
sslcacert=/etc/pki/tls/certs/ca-bundle.crt
metadata_expire=300
pkg_gpgcheck=1
autorefresh=1
type=rpm-md -
To create the repository configuration file automatically from a script
Copycurl -1sLf 'https://cloudrepo.centrify.com/<URLtoken>/rpm-redhat/cfg/setup/bash.rpm.sh' | sudo -E bashYou should see output that lists out your repository details, such as the following example:
Copy# Source: CENTRIFY
# Repository: CENTRIFY / rpm-redhat
# Description: YUM repository for RedHat packages (RPMs)
[centrify-rpm-redhat]
name=centrify-rpm-redhat
baseurl=https://cloudrepo.centrify.com/<URLtoken>/rpm-redhat/rpm/el/6/$basearch
repo_gpgcheck=1
enabled=1
gpgkey=https://cloudrepo.centrify.com/<URLtoken>/rpm-redhat/cfg/gpg/gpg.BDD3FD95B65ECA48.key
gpgcheck=1
sslverify=1
sslcacert=/etc/pki/tls/certs/ca-bundle.crt
metadata_expire=300
pkg_gpgcheck=1
autorefresh=1
type=rpm-mdNote: The gpgkey listed in the output is a public key.
-
-
Execute the yum info command to verify the repository connection. You should see output similar to the following.
Copy#yum info CentrifyDC
Loaded plugins: langpacks, product-id, search-disabled-repos, subscription-manager
2020-11-24 10:20:22,669 [INFO] yum:17896:MainThread @connection.py:905 - Connection built: host=subscription.rhsm.redhat.com port=443 handler=/subscription auth=identity_cert ca_dir=/etc/rhsm/ca/ insecure=False
2020-11-24 10:20:22,671 [INFO] yum:17896:MainThread @repolib.py:464 - repos updated: Repo updates
Total repo updates: 0
Updated
<NONE>
Added (new)
<NONE>
Deleted
<NONE>
This system is not registered with an entitlement server. You can use subscription-manager to register.
Available Packages
Name : CentrifyDC
Arch : x86_64
Version : 5.7.0
Release : 207
Size : 23 M
Repo : centrify-rpm-redhat/x86_64
Summary : Centrify DirectControl Agent
URL : http://www.centrify.com/
License : BSD with portions copyright (c) Centrify Corporation 2006-2020 and licensed under Centrify End User License Agreement
Description : RPM to install Centrify DirectControl on Linux platforms. -
Install the Centrify Agent for *NIX rpm package.
# yum install CentrifyDCNote: To uninstall the Centrify Agent rpm file, you can use the erase command. For example:
# yum erase CentrifyDC
To set up and configure a SUSE repository
-
If you have used a Centrify repository before, it's recommended that you first delete the old repositories in the /etc/zypp/repos.d/*centrify* directory.
-
Create a new SUSE repository.
You can manually create the repository or you can use a setup script to create the repository automatically.
Note: For the baseurl parameter, enter your Centrify repository URL token in place of <URLtoken>.
-
To create the SUSE repository configuration file manually
Create a file with the following:
Copy/etc/zypp/repos.d # cat /etc/zypp/repos.d/centrify-rpm-suse.repo
[centrify-rpm-suse]
name=centrify-rpm-suse
enabled=1
autorefresh=1
baseurl=https://cloudrepo.centrify.com/<URLtoken>/rpm-suse/rpm/any-distro/any-version/$basearch
type=rpm-md
repo_gpcheck=1
gpgcheck=1
gpgkey=https://downloads.centrify.com/products/RPM-GPG-KEY-centrify -
To create the SUSE repository configuration file automatically from a script
Copycurl -1sLf 'https://cloudrepo.centrify.com/<URLtoken>/rpm-suse/cfg/setup/bash.rpm.sh' | sudo -E bash
-
-
Refresh the cache.
/etc/zypp/repos.d # zypper refresh
-
Verify the connection to the repository.
/etc/zypp/repos.d # zypper packages |grep centrifyYou should see output similar to the following:
Copymysusemachine:/etc/zypp/repos.d # zypper refresh
Retrieving repository 'centrify-rpm-suse' metadata ---------------[\]
Retrieving repository 'centrify-rpm-suse' metadata ...............[done]
Building repository 'centrify-rpm-suse' cache ....................[done]
All repositories have been refreshed.
utsles15ppcle:/etc/zypp/repos.d # zypper packages | grep Centrify
| centrify-rpm-suse | CentrifyDA | 3.7.0-172 | ppc64le
| centrify-rpm-suse | CentrifyDA | 3.6.1-324 | ppc64le
| centrify-rpm-suse | CentrifyDC | 5.7.0-207 | ppc64le
| centrify-rpm-suse | CentrifyDC | 5.6.1-330 | ppc64le
| centrify-rpm-suse | CentrifyDC-cifsidmap | 5.7.0-207 | ppc64le
| centrify-rpm-suse | CentrifyDC-cifsidmap | 5.6.1-330 | ppc64le
| centrify-rpm-suse | CentrifyDC-curl | 5.7.0-207 | ppc64le
| centrify-rpm-suse | CentrifyDC-curl | 5.6.1-330 | ppc64le
| centrify-rpm-suse | CentrifyDC-ldapproxy | 5.7.0-207 | ppc64le
| centrify-rpm-suse | CentrifyDC-ldapproxy | 5.6.1-330 | ppc64le
| centrify-rpm-suse | CentrifyDC-nis | 5.7.0-207 | ppc64le
| centrify-rpm-suse | CentrifyDC-nis | 5.6.1-330 | ppc64le
| centrify-rpm-suse | CentrifyDC-openldap | 5.7.0-207 | ppc64le
| centrify-rpm-suse | CentrifyDC-openldap | 5.6.1-330 | ppc64le
| centrify-rpm-suse | CentrifyDC-openssh | 8.2p1-5.7.0.207 | ppc64le
| centrify-rpm-suse | CentrifyDC-openssh | 7.9p1-5.6.1.329 | ppc64le
| centrify-rpm-suse | CentrifyDC-openssl | 5.7.0-207 | ppc64le
| centrify-rpm-suse | CentrifyDC-openssl | 5.6.1-330 | ppc64le -
Install the Centrify Agent rpm package.
# zypper install CentrifyDC
Note: To uninstall the Centrify Agent rpm file, you can use the remove command. For example:
# zypper remove CentrifyDC
To set up and configure a Debian or Ubuntu repository
-
Create the repository:
You can manually create the repository or you can use a setup script to create the repository automatically.
-
To create the Debian or Ubuntu repository configuration file manually
-
Update the /etc/apt/sources.list file to include the official Centrify package repository.
Copydeb https://cloudrepo.centrify.com/<URLtoken>/deb/deb/debian any-version main /etc/apt/sources.list.d/centrify-deb.list -
Import your GPG key and update the repository.
Copy# bash -c 'wget -O - https://downloads.centrify.com/products/RPM-GPG-KEY-centrify | apt-key add -' -
Comment out the no-debsig line in /etc/dpkg/dpkg.cfg to enable GPG signature validation.
-
Clean and update the local archives.
Copy# apt-get clean
# apt-get update
-
-
To create the Debian or Ubuntu repository configuration file automatically from a script
Copycurl -1sLf 'https://cloudrepo.centrify.com/<URLtoken>/deb/cfg/setup/bash.deb.sh' | sudo -E bashNote: Enter your Centrify repository URL token in place of <URLtoken>.
If you manually created your APT repository, the configuration details are in the /etc/apt/sources.list file. If you used the setup script to create the APT repository, the configuration details are in a separate file such as centrify-deb.list in the /etc/apt/sources.list.d directory.
-
-
Execute the apt list command to verify the repository connection. You should see output similar to the following.
Copy# apt list --all-versions | grep centrify
centrifyda/buster 3.7.0-172 amd64
centrifyda/buster 3.6.1-324 amd64
centrifydc-adbindproxy/buster 5.7.0-217 amd64
centrifydc-adbindproxy/buster 5.6.1-334 amd64
centrifydc-cifsidmap/buster 5.7.0-207 amd64
centrifydc-cifsidmap/buster 5.6.1-330 amd64
centrifydc-curl/buster 5.7.0-207 amd64
centrifydc-curl/buster 5.6.1-330 amd64
centrifydc-ldapproxy/buster 5.7.0-207 amd64
centrifydc-ldapproxy/buster 5.6.1-330 amd64
centrifydc-nis/buster 5.7.0-207 amd64
centrifydc-nis/buster 5.6.1-330 amd64
centrifydc-openldap/buster 5.7.0-207 amd64
centrifydc-openldap/buster 5.6.1-330 amd64
centrifydc-openssh/buster 8.2p1-5.7.0.207 amd64
centrifydc-openssh/buster 7.9p1-5.6.1.329 amd64
centrifydc-openssl/buster 5.7.0-207 amd64
centrifydc-openssl/buster 5.6.1-330 amd64
centrifydc/buster 5.7.0-207 amd64
centrifydc/buster 5.6.1-330 amd64 -
Execute the apt install or apt-get install commands to install Centrify packages. For example:
Copy# apt install centrifydc centrifydc-nis
# apt-get install centrifydc-5.7.0-207Note: To uninstall the Centrify Agent for *NIX rpm, you can use the remove command to delete the Centrify Agent for *NIX package or the purge command to also delete any configuration files. For example:
# apt remove centrifydc=5.7.0-207
To access a raw package (WGET) repository
Use the WGET repository for Atomic packages or any raw or plain files such as *.zip, *.tar, *.tgz, and so forth .
-
Browse the package index to determine which file you want to download. You can view the package index in HTML or JSON:
-
HTML version is at https://cloudrepo.centrify.com/<URLtoken>/wget/raw/
-
JSON version is at https://cloudrepo.centrify.com/<URLtoken>/wget/raw/index.json
Note: Enter your Centrify repository URL token in place of <URLtoken>.
-
-
Download the desired file using either curl or wget. For example:
curl -1 -O 'https://cloudrepo.centrify.com/<URLtoken>/wget/raw/versions/Latest/CentrifyDC-atomic.x86_64.tgz'
or
wget 'https://cloudrepo.centrify.com/<URLtoken>/wget/raw/versions/Latest/CentrifyDC-atomic.x86_64.tgz'
To set up and configure an Alpine Linux repository
-
To configure the repository automatically, run the following commands:
Copysudo apk add --no-cache bash
curl -1sLf \ 'https://cloudrepo.centrify.com/<URLtoken>/apk/setup.alpine.sh' \ | sudo -E bashNote: Enter your Centrify repository URL token in place of <URLtoken>.
-
Or, if you want to manually configure the repository, run the following commands:
Copycurl -1sLf 'https://cloudrepo.centrify.com/<URLtoken>/apk/rsa.5DD8742729E6E4B2.key' > /etc/apk/keys/apk@centrify-5DD8742729E6E4B2.rsa.pub
curl -1sLf 'https://cloudrepo.centrify.com/<URLtoken>/apk/config.alpine.txt?distro=alpine&codename=v3.13' >> /etc/apk/repositories
apk updateWhen configuring the repository manually, you reference the Centrify public RSA key: apk@centrify-5DD8742729E6E4B2.rsa.pub.
-
Execute the apk add command to install the Centrify packages. For example:
Copy# apk add centrifydc centrifydc-nisTo uninstall the Centrify Agent for *NIX rpm, you can use the del command to delete the Centrify Agent for *NIX package. For example:
# apk del centrifydc=5.8.0-xxx
Doc Feedback