Difference between revisions of "Standard Installation"
(2 intermediate revisions by the same user not shown) | |||
Line 2: | Line 2: | ||
== Language Selection == | == Language Selection == | ||
− | English is the default | + | Choose the language to be used for the installation process. English is selected as the default language. Change it only, if you are not very comfortable with English. |
[[File:Language Selection.png|center|top|Language Selection.png|link=]] | [[File:Language Selection.png|center|top|Language Selection.png|link=]] | ||
Line 8: | Line 8: | ||
== Country Selection == | == Country Selection == | ||
− | Select your country | + | Select your country location which will used to set your time zone. This selection is related to ensure correct time settings of the system. Choose 'other' only if your location is not listed. |
[[File:Country selection.png|center|Country selection.png|link=]] | [[File:Country selection.png|center|Country selection.png|link=]] | ||
Line 20: | Line 20: | ||
== Network interface selection == | == Network interface selection == | ||
− | All network interfaces detected in your system are displayed. Select the '''interface that has Internet connectivity' | + | All network interfaces detected in your system are displayed. Select the primary network '''interface ''''''that has Internet connectivity'''. |
[[File:Ethernet.png|center|Ethernet.png|link=]] | [[File:Ethernet.png|center|Ethernet.png|link=]] | ||
Line 26: | Line 26: | ||
== <br/> Assign IP address to the primary interface == | == <br/> Assign IP address to the primary interface == | ||
− | [[File:IP address.PNG|border|center|link=]] | + | [[File:IP address.PNG|border|center|IP address.PNG|link=]] |
== <br/> Setting up the Netmask == | == <br/> Setting up the Netmask == | ||
+ | |||
+ | Enter the netmask to determine which machines are local to your network. | ||
[[File:10.png|center|10.png|link=]] | [[File:10.png|center|10.png|link=]] | ||
Line 37: | Line 39: | ||
[[File:Gateway.png|center|Gateway.png|link=]] | [[File:Gateway.png|center|Gateway.png|link=]] | ||
− | |||
− | |||
− | |||
− | |||
| | ||
Line 54: | Line 52: | ||
[[File:Dns setup.png|center|Dns setup.png|link=]] | [[File:Dns setup.png|center|Dns setup.png|link=]] | ||
− | <u>'''Note:'''</u>If you want <span class="mw-headline" id="Integrate_a_Linux_Host_with_a_Windows_AD_for_Kerberos_SSO_authentication">to Integrate a Linux Host with a Windows AD for Kerberos SSO authentication in future you must have to specify '''Name Server Addresses as your Active Directory Server.'''</span> | + | <u>'''Note:'''</u>''' '''If you want <span class="mw-headline" id="Integrate_a_Linux_Host_with_a_Windows_AD_for_Kerberos_SSO_authentication">to Integrate a Linux Host with a Windows AD for Kerberos SSO authentication in future you must have to specify '''Name Server Addresses as your Active Directory Server.'''</span> |
− | <span class="mw-headline">If you miss to specify</span><span class="mw-headline" id="Integrate_a_Linux_Host_with_a_Windows_AD_for_Kerberos_SSO_authentication">Name Server Addresses as your Active Directory Server , '''you have another option to change the '''Name Server Addresses as your Active Directory Server.</span> | + | <span class="mw-headline">If you miss to specify </span><span class="mw-headline" id="Integrate_a_Linux_Host_with_a_Windows_AD_for_Kerberos_SSO_authentication">Name Server Addresses as your Active Directory Server, '''you have another option to change the '''Name Server Addresses as your Active Directory Server.</span> |
*<span class="mw-headline">When </span>you will be entering successfully into the SafeSquid SWG which is last step of Standard Installation edit the file path using below command on console | *<span class="mw-headline">When </span>you will be entering successfully into the SafeSquid SWG which is last step of Standard Installation edit the file path using below command on console | ||
− | ''' vim /etc/network/interfaces''' | + | <code>''' vim /etc/network/interfaces'''</code> |
− | {| | + | {| border="1" cellpadding="1" cellspacing="1" width="500" |
|- | |- | ||
| | | | ||
Line 75: | Line 73: | ||
|} | |} | ||
− | *Edit your'''dns-nameservers 192.168.221.1''' as <span class="mw-headline" id="Integrate_a_Linux_Host_with_a_Windows_AD_for_Kerberos_SSO_authentication">your IP address of </span><span class="mw-headline">'''Active Directory Server''' and '''restart networking service''' using below command.</span> | + | *Edit your '''dns-nameservers 192.168.221.1''' as <span class="mw-headline" id="Integrate_a_Linux_Host_with_a_Windows_AD_for_Kerberos_SSO_authentication">your IP address of </span><span class="mw-headline">'''Active Directory Server''' and '''restart networking service''' using below command.</span> |
− | '''/etc/init.d/networking restart''' | + | <code>'''/etc/init.d/networking restart'''</code> |
− | {| | + | {| border="0" cellpadding="1" cellspacing="1" style="width: 100%" |
|- | |- | ||
| [[File:Setup DNSSlide1.PNG|border|center|Setup DNSSlide1.PNG|link=]] | | [[File:Setup DNSSlide1.PNG|border|center|Setup DNSSlide1.PNG|link=]] | ||
Line 88: | Line 86: | ||
== Hostname of Your Server == | == Hostname of Your Server == | ||
− | Integration with your Active Directory Service, requires proper assignment of the ''Fully Qualified Domain Name''.<br/> It is therefore strongly recommend to carefully select the the desired hostname for your secure web gateway. The default host name is SWG. You can give '''any hostname''' as per your choice '''other than safesquid'''. | + | Integration with your Active Directory Service, requires proper assignment of the ''Fully Qualified Domain Name''.<br/> It is therefore strongly recommend to carefully select the the desired hostname for your secure web gateway. The default host name is SWG. You can give '''any hostname''' as per your choice '''other than safesquid'''.<br/> [[File:Slide1.PNG|border|center|Slide1.PNG|link=]] |
== Domain name Setting == | == Domain name Setting == | ||
− | The domain name setting is also | + | The domain name setting is also important parameter, if you plan to integrate it with your active directory. Domain name is used for finding and identifying computers on the Internet. |
[[File:Domain name.png|center|Domain name.png|link=]] | [[File:Domain name.png|center|Domain name.png|link=]] | ||
Line 106: | Line 104: | ||
'''<u>Note</u> : '''If you want <span class="mw-headline" id="Integrate_a_Linux_Host_with_a_Windows_AD_for_Kerberos_SSO_authentication">to Integrate a Linux Host with a Windows AD for Kerberos SSO authentication in future it is advisable to specify </span>Time Synchronisation Server as your IP address of Active Directory server space pool.net.org (There should be a single space in between AD IP address and pool.ntp.org ) 192.168.221.1 pool.ntp.org | '''<u>Note</u> : '''If you want <span class="mw-headline" id="Integrate_a_Linux_Host_with_a_Windows_AD_for_Kerberos_SSO_authentication">to Integrate a Linux Host with a Windows AD for Kerberos SSO authentication in future it is advisable to specify </span>Time Synchronisation Server as your IP address of Active Directory server space pool.net.org (There should be a single space in between AD IP address and pool.ntp.org ) 192.168.221.1 pool.ntp.org | ||
− | {| | + | {| border="0" cellpadding="1" cellspacing="1" style="width: 100%" |
|- | |- | ||
| [[File:Dns and time synchSlide1 (2).PNG|border|center|Dns and time synchSlide1 (2).PNG|link=]] | | [[File:Dns and time synchSlide1 (2).PNG|border|center|Dns and time synchSlide1 (2).PNG|link=]] | ||
Line 115: | Line 113: | ||
== Choose a mirror of the Ubuntu archive == | == Choose a mirror of the Ubuntu archive == | ||
− | Select the country | + | Select the country to find a mirror of the ubuntu archive that is close to you on the network to download required packages. |
[[File:Choose a mirror of the ubuntu archive.png|center|Choose a mirror of the ubuntu archive.png|link=]] | [[File:Choose a mirror of the ubuntu archive.png|center|Choose a mirror of the ubuntu archive.png|link=]] | ||
Line 125: | Line 123: | ||
== HTTP proxy Setup == | == HTTP proxy Setup == | ||
− | + | Leave this field blank. | |
[[File:Http proxy.png|center|Http proxy.png|link=]] | [[File:Http proxy.png|center|Http proxy.png|link=]] | ||
Line 133: | Line 131: | ||
== Loading Additional components == | == Loading Additional components == | ||
− | + | All the required hardware and additional components details will be loaded automatically. | |
[[File:Load additional components.png|center|Load additional components.png|link=]] | [[File:Load additional components.png|center|Load additional components.png|link=]] | ||
− | <span style="font-size:medium">Note:</span> | + | '''<span style="font-size:medium">Note: </span>'''If you face any error while installing SafeSquid Appliance Builder (SAB-ISO), you will get debugging logs information by pressing <code>ALT+F4</code>. To return back to previous screen press <code>ALT+F1</code>. |
− | |||
− | If you face any error while installing SafeSquid Appliance Builder (SAB-ISO), you | ||
== Configure the Clock == | == Configure the Clock == | ||
− | Using Yes or No you can configure the clock.You need to scroll down and search your continent and time zone | + | Using Yes or No you can configure the clock.You need to scroll down and search your continent and nearby locations time zone. |
[[File:Clock.png|center|Clock.png|link=]] | [[File:Clock.png|center|Clock.png|link=]] | ||
Line 149: | Line 145: | ||
== Setting Up partitions == | == Setting Up partitions == | ||
− | + | Installation will proceed with partitioning process required for SafeSquid automatically. | |
[[File:Setting partition.png|center|Setting partition.png|link=]] | [[File:Setting partition.png|center|Setting partition.png|link=]] | ||
Line 155: | Line 151: | ||
== Installation of base system == | == Installation of base system == | ||
− | + | Installation will automatically install the base system. You have to wait for some time to finish the process completely. | |
[[File:Installation of base system .png|center|Installation of base system .png|link=]] | [[File:Installation of base system .png|center|Installation of base system .png|link=]] | ||
Line 161: | Line 157: | ||
== Configuring the apt == | == Configuring the apt == | ||
− | + | Installation will proceed with configuring apt packages one after the other in this part. | |
[[File:Configuring the apt.png|center|Configuring the apt.png|link=]] | [[File:Configuring the apt.png|center|Configuring the apt.png|link=]] | ||
Line 167: | Line 163: | ||
== Select and install software == | == Select and install software == | ||
− | | + | Installation process will complete the OS installation in this part. |
[[File:Select and install software.png|center|Select and install software.png|link=]] | [[File:Select and install software.png|center|Select and install software.png|link=]] | ||
Line 175: | Line 171: | ||
== Finishing installation == | == Finishing installation == | ||
− | + | Final process of finishing the installation is the last step where preseed file will be executed. | |
[[File:Finishing installation.png|center|Finishing installation.png|link=]] | [[File:Finishing installation.png|center|Finishing installation.png|link=]] | ||
− | At | + | At the end, the system will reboots itself and goes through some system initialization. Afterward, a welcome screen will be appeared with SafeSquid(Secure Web Gateway) screen. |
− | |||
− | |||
− | If you face any error while installing SafeSquid Appliance Builder (SAB-ISO), you | + | '''<span style="font-size:medium">Note: </span>'''If you face any error while installing SafeSquid Appliance Builder (SAB-ISO), you will get debugging logs information by pressing <code>ALT+F4</code>. To return back to previous screen press <code>ALT+F1</code>. |
[[File:SafeSquid(Secure Web Gateway) screen..png|center|SafeSquid(Secure Web Gateway) screen..png|link=]] | [[File:SafeSquid(Secure Web Gateway) screen..png|center|SafeSquid(Secure Web Gateway) screen..png|link=]] | ||
Line 189: | Line 183: | ||
== Login to the Server == | == Login to the Server == | ||
− | If you observe the screen by default it will give you username along with the password.You need to enter the same username and password for first login. | + | If you observe the screen by default it will give you username along with the password. You need to enter the same username and password for first login. |
*User name: administrator | *User name: administrator | ||
Line 198: | Line 192: | ||
[[File:Resetpassword.png|center|Resetpassword.png|link=]] | [[File:Resetpassword.png|center|Resetpassword.png|link=]] | ||
− | You | + | You land into console where SafeSquid SWG will be seen as shown below after succefully login. |
[[File:Admin1.PNG|border|center|Admin1.PNG|link=]] | [[File:Admin1.PNG|border|center|Admin1.PNG|link=]] | ||
Line 204: | Line 198: | ||
| | ||
− | <u>'''Note1:'''</u> | + | <u>'''Note1:'''</u><br/> If you are doing standard installation '''on Physical machine''' using '''USB bootable pendive [[Standard_Installation_on_physical_machine|Link]]''' |
− | |||
− | If you are doing standard installation '''on Physical machine''' using '''USB bootable pendive [[Standard_Installation_on_physical_machine|Link]]''' | ||
*[http://2017.swg.safesquid.com/wiki/Standard_Installation_on_physical_machine#Partition_disks '''Select disk to partition'''] | *[http://2017.swg.safesquid.com/wiki/Standard_Installation_on_physical_machine#Partition_disks '''Select disk to partition'''] | ||
Line 212: | Line 204: | ||
After installation has been completed with '''USB bootable pendive''' and initial login with '''administrator''' '''( sudo -i )''' | After installation has been completed with '''USB bootable pendive''' and initial login with '''administrator''' '''( sudo -i )''' | ||
− | Run grub command to install '''grub MBR''' on first disk '''/dev/sda''' | + | Run grub command to install '''grub MBR''' on first disk <code>'''/dev/sda'''</code> |
Commands: | Commands: | ||
− | {| | + | {| border="1" cellpadding="1" cellspacing="1" style="width: 500px" |
|- | |- | ||
| grub-install /dev/sda | | grub-install /dev/sda | ||
Line 235: | Line 227: | ||
First you need to find the name of the card using below command | First you need to find the name of the card using below command | ||
− | {| | + | {| border="1" cellpadding="1" cellspacing="1" style="width: 500px" |
|- | |- | ||
| root@sabproxy:~# dmesg | grep -i network | | root@sabproxy:~# dmesg | grep -i network | ||
Line 244: | Line 236: | ||
In this case we have to set two network cards eth0 and eth1 respectively: | In this case we have to set two network cards eth0 and eth1 respectively: | ||
− | {| | + | {| border="1" cellpadding="1" cellspacing="1" style="width: 500px" |
|- | |- | ||
| [ 1.165623] e1000 0000:00:03.0: eth0: Intel(R) PRO/1000 Network Connection<br/> [ 1.645478] e1000 0000:00:08.0: eth1: Intel(R) PRO/1000 Network Connection | | [ 1.165623] e1000 0000:00:03.0: eth0: Intel(R) PRO/1000 Network Connection<br/> [ 1.645478] e1000 0000:00:08.0: eth1: Intel(R) PRO/1000 Network Connection | ||
Line 251: | Line 243: | ||
<br/> Command to find network interfaces available on your system: | <br/> Command to find network interfaces available on your system: | ||
− | {| | + | {| border="1" cellpadding="1" cellspacing="1" style="width: 500px" |
|- | |- | ||
| | | | ||
Line 264: | Line 256: | ||
<u>It's time to enable eth1</u><br/> Edit the file path using below command on console | <u>It's time to enable eth1</u><br/> Edit the file path using below command on console | ||
− | '''vim /etc/network/interfaces''' | + | <code>'''vim /etc/network/interfaces'''</code> |
− | {| | + | {| border="1" cellpadding="1" cellspacing="1" style="width: 500px" |
|- | |- | ||
| | | | ||
Line 281: | Line 273: | ||
To restart network interface eth1 up | To restart network interface eth1 up | ||
− | {| | + | {| border="1" cellpadding="1" cellspacing="1" style="width: 500px" |
|- | |- | ||
| root@sabproxy:~# service network-interface restart INTERFACE=eth1 | | root@sabproxy:~# service network-interface restart INTERFACE=eth1 |
Latest revision as of 16:41, 30 November 2019
Contents
- 1 Language Selection
- 2 Country Selection
- 3 Keyboard layout Selection
- 4 Network interface selection
- 5 Assign IP address to the primary interface
- 6 Setting up the Netmask
- 7 Gateway Setting
- 8 Specify DNS
- 9 Hostname of Your Server
- 10 Domain name Setting
- 11 NTP server Configuration
- 12 Choose a mirror of the Ubuntu archive
- 13 HTTP proxy Setup
- 14 Loading Additional components
- 15 Configure the Clock
- 16 Setting Up partitions
- 17 Installation of base system
- 18 Configuring the apt
- 19 Select and install software
- 20 Finishing installation
- 21 Login to the Server
- 22 Troubleshooting
Language Selection
Choose the language to be used for the installation process. English is selected as the default language. Change it only, if you are not very comfortable with English.

Country Selection
Select your country location which will used to set your time zone. This selection is related to ensure correct time settings of the system. Choose 'other' only if your location is not listed.

Keyboard layout Selection
Select the keyboard layout that matches the origin of the keyboard attached to the system.

Network interface selection
All network interfaces detected in your system are displayed. Select the primary network interface 'that has Internet connectivity'.

Assign IP address to the primary interface
Setting up the Netmask
Enter the netmask to determine which machines are local to your network.

Gateway Setting
Set the IP address of your network gateway, usually your router.

Specify DNS
Specify the IP of your preferred DNS. If you have an Active Directory Service, set this to the IP address of the Directory Server (AD). This DNS is used only during the installation. The SAB sets up a caching name server that uses the Root DNS for serving your users.

Note: If you want to Integrate a Linux Host with a Windows AD for Kerberos SSO authentication in future you must have to specify Name Server Addresses as your Active Directory Server.
If you miss to specify Name Server Addresses as your Active Directory Server, you have another option to change the Name Server Addresses as your Active Directory Server.
- When you will be entering successfully into the SafeSquid SWG which is last step of Standard Installation edit the file path using below command on console
vim /etc/network/interfaces
This file describes the network interfaces available on your system The loopback network interface The primary network interface
|
- Edit your dns-nameservers 192.168.221.1 as your IP address of Active Directory Server and restart networking service using below command.
/etc/init.d/networking restart
|
Hostname of Your Server
Integration with your Active Directory Service, requires proper assignment of the Fully Qualified Domain Name.It is therefore strongly recommend to carefully select the the desired hostname for your secure web gateway. The default host name is SWG. You can give any hostname as per your choice other than safesquid.
Domain name Setting
The domain name setting is also important parameter, if you plan to integrate it with your active directory. Domain name is used for finding and identifying computers on the Internet.

NTP server Configuration
By default, ntp server has been set to pool.ntp.org . If you have your own ntp server, then you may set to that address for clock synchronization between computer systems to some time reference.

Note : If you want to Integrate a Linux Host with a Windows AD for Kerberos SSO authentication in future it is advisable to specify Time Synchronisation Server as your IP address of Active Directory server space pool.net.org (There should be a single space in between AD IP address and pool.ntp.org ) 192.168.221.1 pool.ntp.org
|
Choose a mirror of the Ubuntu archive
Select the country to find a mirror of the ubuntu archive that is close to you on the network to download required packages.


HTTP proxy Setup
Leave this field blank.

Loading Additional components
All the required hardware and additional components details will be loaded automatically.

Note: If you face any error while installing SafeSquid Appliance Builder (SAB-ISO), you will get debugging logs information by pressing ALT+F4
. To return back to previous screen press ALT+F1
.
Configure the Clock
Using Yes or No you can configure the clock.You need to scroll down and search your continent and nearby locations time zone.

Setting Up partitions
Installation will proceed with partitioning process required for SafeSquid automatically.

Installation of base system
Installation will automatically install the base system. You have to wait for some time to finish the process completely.

Configuring the apt
Installation will proceed with configuring apt packages one after the other in this part.

Select and install software
Installation process will complete the OS installation in this part.

Finishing installation
Final process of finishing the installation is the last step where preseed file will be executed.

At the end, the system will reboots itself and goes through some system initialization. Afterward, a welcome screen will be appeared with SafeSquid(Secure Web Gateway) screen.
Note: If you face any error while installing SafeSquid Appliance Builder (SAB-ISO), you will get debugging logs information by pressing ALT+F4
. To return back to previous screen press ALT+F1
.

Login to the Server
If you observe the screen by default it will give you username along with the password. You need to enter the same username and password for first login.
- User name: administrator
- Password : safesquid
You need to reset the password on the first login.

You land into console where SafeSquid SWG will be seen as shown below after succefully login.
Note1:
If you are doing standard installation on Physical machine using USB bootable pendive Link
After installation has been completed with USB bootable pendive and initial login with administrator ( sudo -i )
Run grub command to install grub MBR on first disk /dev/sda
Commands:
grub-install /dev/sda |
update-grub |
reboot |
(Remove the USB bootable pendive) |
As soon as you remove the USB bootable pendrive it should display prompt for login.
(Above commands only required to run if it is displaying the blank screen after removing USB bootable pendrive)
Note2: To set up two network cards for static addressing.
First you need to find the name of the card using below command
root@sabproxy:~# dmesg | grep -i network |
You can also search for "eth" instead of "network"
In this case we have to set two network cards eth0 and eth1 respectively:
[ 1.165623] e1000 0000:00:03.0: eth0: Intel(R) PRO/1000 Network Connection [ 1.645478] e1000 0000:00:08.0: eth1: Intel(R) PRO/1000 Network Connection |
Command to find network interfaces available on your system:
root@sabproxy:~# ifconfig lo Link encap:Local Loopback |
In above case eth0 is already configured while installation of SafeSquid Appliance Builder(SAB).
It's time to enable eth1
Edit the file path using below command on console
vim /etc/network/interfaces
This file describes the network interfaces available on your system The loopback network interface The primary network interface
|
To restart network interface eth1 up
root@sabproxy:~# service network-interface restart INTERFACE=eth1 |
Troubleshooting