Install Mideye Server 4 on Linux (RHEL/CentOS)

Introduction

This guide helps system administrators install, upgrade, or uninstall Mideye Server version 4 on CentOS 7 or RHEL 7. Mideye Server provides MFA (multi-factor authentication) via RADIUS for VPNs, Citrix, and other enterprise applications.

Use this guide if you need to:

Perform a fresh installation of Mideye Server on Linux
Upgrade an existing Mideye Server v4 installation
Uninstall Mideye Server while preserving data

Installation

This chapter describes the procedure for a fresh installation of Mideye Server. If a previous version of Mideye Server is already installed, please see the section Upgrade below.

Prerequisites

Before executing the Mideye Server installation package you need the following:

An updated release of CentOS 7.
A clean database on MySQL dedicated to Mideye.

Root Account

In order to install Mideye Server it is necessary to execute the installation package as root.

Obtaining Installation Package

Mideye Server installation package can be downloaded from the Downloads page with username and password provided by Mideye Support. Provide your phone number when asking for credentials since the download page is protected with two-factor authentication.

In the Linux folder, you will find installation packages (rpm) for 64 bit (x86_64) operating systems.

Database

Mideye Server needs a database that be can installed locally or be hosted on an external server. Supported database servers are listed in the Pre-install checklist. Installing or upgrading Mideye Server requires a database account with rights to ALTER, CREATE and DELETE tables in the Mideye database. Detailed instructions on how to set up the database can be found in the Configuration guide.

Firewall

For required firewall openings, please refer to the Firewall section of the Pre-install checklist. It is possible to proceed with the installation steps below while waiting for firewall openings. However, one-time password delivery requires that the server-switch communication is working.

Installation Path

The Mideye Server default installation folder is different depending on the operating system architecture. In this document, all the paths referring to the Mideye Server’s installation directory relate to the MideyeServer folder.

For 64-bit Linux operating systems the default path is:

/opt/mideyeserver/

Mideye Server Installation

Copy the Mideye Server installation package to the Linux machine and open a terminal in the same folder as the installation package.

Note: If a previous version of the Mideye Server is already installed, please see the section Upgrade below.

For 64-bit platforms, execute the following command:

# sudo yum install mideyeserver-package-4.X.X.rpm

Mideye Server, as well as all required dependencies, will be installed.

To finalize the installation, the Mideye Configuration tool must be executed, see the next section.

Post-installation Configuration

Configuration Tool

When the Mideye Server has been installed, execute the following command as root:

# mideyeconfig

Note: if the command is executed from a remote machine through SSH, X-forwarding is needed (adding the -X option to the SSH command). Alternatively, connect with a remote desktop (i.e. using a VNC client/server).

The first time Mideye Configuration Tool is executed, a popup window will inform that the database needs to be configured.

Database not configured Mideye Configuration Tool error dialog indicating database connection is not properly configured

In the Database Connection tab, enter the database credentials (see section ‘Database connection’ in the configuration guide).

Database Configuration

Mideye Configuration Tool database connection tab with fields for server type, address, credentials and database name

The following dialog will be shown when a connection with the database is established:

Running install scripts on a new database

Mideye Configuration Tool dialog showing install scripts executing on blank database

The install scripts have been executed successfully

Mideye Configuration Tool success dialog confirming database connection established and scripts completed

The install scripts will create all the required tables. In order to apply changes, it is necessary to restart Mideye services.

This is done by executing the following command as root:

# /etc/init.d/mideyeserver restart

To check the status of the Mideye Server use the following command:

# /etc/init.d/mideyeserver status

Note: Other possible commands are stop and start.

BUG: Due to changes in CentOS 7 the tomcat 7 service shows an error on startup. This can be ignored since the service is started correctly. To stop and restart the mideye-webserver service you need to kill it with command: kill -9 <pid>

To get the pid of tomcat use command: ps aux |grep tomcat

Upgrade

Upgrading the Mideye Server involves two steps: Executing the installation package, followed by upgrading the database.

Backup

Before proceeding with an upgrade, take a backup of the Mideye Server file system and the Mideye database. Some files containing customized settings may need to be replaced after the update.

Mideye Server file system

To take a backup of the Mideye Server, copy or compress the whole Mideye Server installation directory. The default directory is:

/opt/mideyeserver

To copy the entire /opt/mideyeserver folder execute the following two commands:

# mkdir /opt/mideye_backup
# cp -rp /opt/mideyeserver /opt/mideye_backup

Database

To back up a database on MySQL, run the following command:

# mysqldump -u[username] -p[password] [database name] > mideye_backup.sql

where [username]/[password] are the database login credentials.

Upgrade Mideye Server

In order to upgrade Mideye Server follow the following steps:

Download the latest release of Mideye Server and execute the following command:

#yum update mideyeserver-package-4.X.X.rpm

Enter database connection parameters (see the ‘Database’ section in Pre-install checklist).
Click “Save”, then “Close”.
Restart services by executing the following command as root:
```
# /etc/init.d/mideyeserver restart
```

Note: In Configuration Tool, tab “General”, upper left, you can verify that the Mideye Server has been upgraded to the correct version.

Post-upgrade tasks

After an upgrade, some files from the pre-upgrade backup may need to be restored:

Customized log configuration (Syslog, log levels etc):

/opt/mideyeserver/webserver/conf/logging.properties

Customized SSL port for the administrative web interface:

/opt/mideyeserver/webserver/conf/server.xml

SSL certificates for the administrative web interface. Stored in the directory:

/opt/mideyeserver/webserver/conf/

Any custom certificates in:

/opt/mideyeserver/certificates

Uninstall

To uninstall Mideye Server run the following command as root:

# yum remove mideyeserver

Uninstallation keeps the database, configuration and log files intact. These can be removed manually by: # rm -rf /opt/mideyeserver

Configuration

Further configuration of the Mideye Server can be found in the Configuration guide.

Troubleshooting

This section aims to solve common issues that may arise during the installation.

can’t Connect to Database

Mideye Configuration Tool will not start if a connection to the database can’t be established. To solve the problem delete DbConnection.properties located in /opt/mideyeserver/config:

# rm /opt/mideyeserver/config/DbConnection.properties

And run Mideye Configuration Tool:

# mideyeconfig

Now you can reconfigure the database with correct settings.