Steps to install IDS on Rocky Linux 9.7
Starting from a fresh VM installed via Rocky-9.7-x86_64-minimal.iso
Install the required pre-requisites Java8 and Postgres
sudo dnf install java-1.8.0-openjdk postgresql-server postgresql-contrib
Postgres setup
Post installation setup recommended by https://www.postgresql.org/download/linux/redhat/
sudo postgresql-setup --initdb
Setup MD5 auth for local connections
Edit this file: /var/lib/pgsql/data/pg_hba.conf
In the section for IPv4 local connections change the last value from peer → md5
# IPv4 local connections:
host all all 127.0.0.1/32 md5
Enable and start the postgres service
sudo systemctl enable postgresql.service
sudo systemctl start postgresql.service
Create and initialize the IDS database
sudo su -c "psql -c \"CREATE ROLE identity LOGIN PASSWORD 'identity' NOSUPERUSER INHERIT CREATEDB NOCREATEROLE NOREPLICATION;\"" postgres
sudo su -c "psql -c \"CREATE DATABASE identity WITH OWNER = identity ENCODING = 'UTF8' TEMPLATE = template0 TABLESPACE = pg_default CONNECTION LIMIT = -1;\"" postgres
sudo su -c "psql -c \"CREATE EXTENSION IF NOT EXISTS hstore;\" identity" postgres
Firewall setup
Allow port 8443 through the firewall
sudo firewall-cmd --zone=public --add-port=8443/tcp --permanent
sudo firewall-cmd --reload
IDS installation
Unzip the contents of the identity-server zip file to a folder on the machine.
We typically use: /opt/pi/identity-server
sudo mkdir -p /opt/pi/identity-server
sudo unzip identity-server-*.zip -d /opt/pi/identity-server
Go into the service bin directory and execute the installDaemon.sh command to install it as a service
cd /opt/pi/identity-server/service/bin
sudo chmod +x *.sh
sudo ./installDaemon.sh
After that you should be able to start the service via:
sudo systemctl start pi-identity-server
The service runs via https at port 8443. You should be able to access the web interface from a browser by going to:
https://<ip-address>:8443
The default credentials are
- Username: admin
- Password: password
Once you connect you should see a first run setup screen that takes you through configuring and licensing the server.
Use the provided the license key and activation token.