Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 3 Next »

On this page you will find instructions on how to configure a Debian 7 (Wheezy) device as a Moonshot client.

Contents

Assumptions & Prerequisites

This guide assumes you have root access to the Linux device. This is required as new software needs to be installed system-wide.

1. Configuration

First, there are a few Debian configuration options that need to be set in advance.

1.1. Add the Moonshot Repository

  1. Add the Moonshot Debian Wheezy repository to your system. To do this, run the following command (as root, or using sudo):

    $ echo "deb http://repository.project-moonshot.org/debian-moonshot wheezy main" > /etc/apt/sources.list.d/moonshot.list

  2. Install the Moonshot GPG key:

    $ wget -O - http://repository.project-moonshot.org/key.gpg | apt-key add -

  3. Update the apt cache with the new repository information:

    $ apt-get update

1.2. Moonshot GSS Mechanisms

Create a new file at /usr/etc/gss/mech (you will likely need to create the /usr/etc/gss directory) with the following content:

#
# Sample mechanism glue configuration for EAP GSS mechanism. 
#
# Any encryption type supported by Kerberos can be defined as the
# last element of the OID arc.
#
eap-aes128    1.3.6.1.5.5.15.1.1.17    mech_eap.so
eap-aes256    1.3.6.1.5.5.15.1.1.18    mech_eap.so

2. Installing the Moonshot Client libraries

We’re now ready to install the Moonshot software and its required dependencies.

  1. Install the software by running the following command:

    $ apt-get install moonshot-gss-eap moonshot-ui

3. Next steps

At this point, you now have all of the required Moonshot software on your device. Depending on what Application/Service you wish to authenticate to using Moonshot, you job may now be done, or you may need to go and install a Moonshot compatible version of the client software. Check the section on client compatibility if you are unsure.

 

 

 

  • No labels