Other Nevis software
If you are not using the nevisAppliance, you have to install all Nevis software packages manually. You may download the package files from AdNovum's Customer Zone.
Software packages you may have to install:
- adnglassfish
- adnjboss
- adnooprint and oooserver
- neviscred
- neviskeybox
- nevisproxy
- nevislogrend
- nevisauth
- nevisidmcl
- nevisidm
- nevisidmdb
- nevisportal
- nevisdp
- neivswf
- neivsmeta
- neviscitrixgw
Software packages are either installed using the "Red Hat Package Manager" (using the command rpm -i <file name> on RHEL or SUSE Linux systems or by the Solaris "pkgadd" command on Solaris 10/11 [either sparc or ix86] servers). See the chapter Operating system software requirements.
Users and groups
The user concept suggests that the administrator (nvbuser) is the owner of configuration files, while all members (primary group) of the Nevis group (nvbgroup) are able to read the configuration and log files. Each process should only be able to read the configuration files but write its logs.
We distinguish between four process users:
- nvpuser: Used for the processes communicating with untrusted networks (Internet), e.g., nevisProxy.
- nvauser: Used to start processes which are used for internal communication only, such as nevisAuth, nevisIDM, and others.
- nvbuser: Administrative user processes, e.g., nevisAdmin.
- nvcuser: Credential services, e.g., nevisCred pass phrase vault.
Make sure that the necessary users and groups exist.
nvbuser:x:30000:30000:nevisBox:/home/nvbuser:/bin/bash
nvcuser:x:30001:30000:nevisCred:/tmp:/bin/false
nvpuser:x:30002:30000:nevisProxy:/tmp:/bin/false
nvauser:x:30003:30000:nevisAuth
and other:/tmp:/bin/false
nvbgroup:!:30000:
User ID substitution
You may use sudo to allow individual users to execute the command of each Nevis component. We recommend to register all "nevis*" commands to your /etc/sudoers file. Table 7 shows an example allowing all users who are member of the Unix group "nvbgroup" to execute the nevisproxy and nevisauth commands.
%nvbgroup ALL=(ALL) NOPASSWD:/usr/bin/nevisproxy
%nvbgroup ALL=(ALL) NOPASSWD:/usr/bin/nevisauth
Operating system software requirements
You may either use the nevisAppliance to host Nevis components or install your own Linux or Solaris server. The following chapters show you which packages usually have to be installed on a minimal OS installation to install and use the Nevis packages.
Red Hat Enterprise Linux 6
You should make sure to have the following packages installed on your server:
| Package name | Description |
|---|---|
| glibc-common | Common binaries and locale data for glibc |
| glibc | The GNU libc libraries (64 and 32bit version) |
| compat-libstdc++-33 | Compatibility standard C++ libraries (64 and 32bit version) |
| file | A utility for determining file types |
| zlib | The zlib compression and decompression library (64 and 32bit version) |
| pam | An extensible library which provides authentication for applications |
| sudo | Allows restricted root access for specified users |
| zip | A file compression and packaging utility compatible with PKZIP |
| unzip | A utility for unpacking zip files |
| libX11 | Core X11 protocol client library |
| libXext | X.Org X11 libXet runtime library |
| libXrender | X.Org X11 libXrender runtime library |
| libXtst | X.Org X11 libXtst runtime library |
Red Hat Enterprise Linux 7
You should make sure to have the following packages installed on your server:
| Package name | Description |
|---|---|
| libgcc | GCC version 4.8 shared support library (64 and 32bit version) |
| glibc | The GNU libc libraries (64 and 32bit version) |
| compat-libstdc++-33 | Compatibility standard C++ libraries (64 and 32bit version) |
| file | A utility for determining file types |
| zlib | The zlib compression and decompression library (64 and 32bit version) |
| sudo | Allows restricted root access for specified users |
| zip | A file compression and packaging utility compatible with PKZIP |
| unzip | A utility for unpacking zip files |
| perl | The Perl 5 language interpreter |
| perl-Data-Dumper.x86_64 | Stringify perl data structures, suitable for printing and eval |
SUSE Enterprise Linux 11
You should make sure to have the following packages installed on your server:
| Package name | Description |
|---|---|
| glibc | The GNU libc libraries (64 and 32bit version) |
| libstdc++-33 | Compatibility standard C++ libraries (64 and 32bit version) |
| file | A utility for determining file types |
| zlib | The zlib compression and decompression library (64 and 32bit version) |
| pam | An extensible library which provides authentication for applications |
| sudo | Allows restricted root access for specified users |
| zip | A file compression and packaging utility compatible with PKZIP |
| unzip | A utility for unpacking zip files |
| libX11-6 | Core X11 protocol client library |
SUSE Enterprise Linux 12
Installing the "Base System" and "Minimal System (Appliances)" packages already installs almost all necessary libraries and tools. You should use the "64bit only" package for nevisCred (neviscred-2.0..-1.x86_64-linux.rpm) to avoid the necessity to install the compatibility standard C++ libraries which would otherwise be required.
| Package name | Description |
|---|---|
| libstdc+6libstdc+6-32bit | The standard C++ shared library (64 and 32bit version) |
Solaris 11
You should make sure to have the following packages installed on your server:
| Package name | Description |
|---|---|
| SUNWlibC | Sun Workshop Compilers Bundled libC |
| SUNWlibms | Math & Microtasking Libraries (Usr) |
| SUNWbcp | SunOS 4.x Binary Compatibility |
| SUNWcry | Crypt Utilities |
| SUNWcsl | Core Solaris (Shared Libs) |
| SUNWcslr | Core Solaris Libraries (Root) |
| SUNWcsr | Core Solaris (Root) |
| SUNWlibmsr | Math & Microtasking Libraries (Root) |
| SUNWuiu8 | Iconv modules for UTF-8 Locale |
nevisIDM printing
The printing facility of nevisIDM (using adnooprint/oooserver) requires some packages in addition:
- freetype
- cups
- cups-pdf
- ghostscript
- ghostscript-fonts