Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Type yes for components you wish to update and/or no for the ones that you do not wish to update

The Framework update will now comence:

Code Block
languagebash
themeDJango
Stopping DualShield Service...
TimeoutStopping on stopping the service, you may need to stop the service manually before doing this upgrade.\n

If this is the case the stop the dualshield service first then repeat the process...

Code Block
languagebash
themeDJango
────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
User Data
────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────

RADIUS Administration Port: [8090]


RADIUS Authentication Port: [1812]

RADIUS Accounting Port: [1813]


Press 1 to continue, 2 to quit, 3 to redisplay
1

The next part registers the DualShield Radius server install with your DualShield Authentication Server.  For security reasons, you need to make sure agent registration is enabled on the Administration Console.  (see Enable Agent Registration)

Specify the FQDN that matches your own Authentication Server

Code Block
languagebash
themeDJango
Register RADIUS Server Agent with the Authentication Server. Please login to the Management Console and enable the Agent Auto Registration feature before proceeding to the next step. The registration process might take a while after pressing the Next button.
Registration URL:[https://dualshield.your-corporate-domain.com:8071]?:
https://ubuntu.la.deepnetid.com:8071

Specify how you would like the Radius server agent name to appear on the Administration Console or just hit return to leave as default

Code Block
languagebash
themeDJango
Agent Name:        [ubuntu24-RADIUS]:?
DualShield-RADIUS

Check the IP of the machine you are installing Rdius Server onto and press Return

Code Block
languagebash
themeDJango
CSRPanel.machineiplist192.168.103.140[192.168.103.140]?:


Press 1 to continue, 2 to quit, 3 to redisplay
1

Installation will begin:

Code Block
languagebash
themeDJango
────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
Installation
────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────

====================
Installation started
Framework: 5.1.4-deepnet-e6577 (IzPack)
Platform: ubuntu_linux,version=6.8.0-52-generic,arch=x64,symbolicName=null,javaVersion=1.8.0_432
[ Starting to unpack ]
[ Processing package: DualShield Radius Server (1/1) ]
Cleaning up the target folder ...
[ Unpacking finished ]
Installation finished

────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
Perform External Processes
────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────

[ Starting processing ]
Starting process Get Running Path (1/4)
jobGetRunPath
Starting process Installing JRE/RADIUS Service (2/4)
start to extract the jre from /tmp/selfgz44202
Starting process Parse Agent Configuration File (3/4)
Retrieve the agent certificate
Starting process Install RADIUS Service(Linux) (4/4)
Finalize Radius Server Installation

────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
Installation Finished
────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────

Installation was successful
Application installed on /usr/local/dualradius
[ Console installation done ]

Check the service has started.

Code Block
languagebash
themeDJango
systemctl status dualradius

If the service is not running then use the following command to start it:

Code Block
languagebash
themeDJango
systemctl start dualradiusMySQL Service...
Upgrading MySQL to 8.4.7...
Starting MySQL Service...
Backing up the existing tomcat files...
Upgrading with new tomcat files...
org.apache.catalina.startup.VersionLoggerListener exists
org.apache.catalina.core.JreMemoryLeakPreventionListener exists
org.apache.catalina.core.ThreadLocalLeakPreventionListener exists
Backing up the existing JRE files...
Upgrading with new JRE files...
cp: cannot stat '/opt/dualshield/jre_bak_11.0.28/lib/ext/RXTXcomm.jar': No such file or directory
Importing keystore /opt/dualshield/jre_bak_11.0.28/lib/security/cacerts to /opt/dualshield/jre/lib/security/cacerts...

Warning:
The JKS keystore uses a proprietary format. It is recommended to migrate to PKCS12 which is an industry standard format using "keytool -importkeystore -srckeystore /opt/dualshield/jre/lib/security/cacerts -destkeystore /opt/dualshield/jre/lib/security/cacerts -deststoretype pkcs12".
Importing keystore /opt/dualshield/jre_bak_11.0.28/lib/security/cacerts to /opt/dualshield/jre/lib/security/cacerts...

Warning:
<deepnetownca> uses the SHA1withRSA signature algorithm which is considered a security risk. This algorithm will be disabled in a future update.
<deepnetownca> uses a 1024-bit RSA key which is considered a security risk. This key size will be disabled in a future update.
The JKS keystore uses a proprietary format. It is recommended to migrate to PKCS12 which is an industry standard format using "keytool -importkeystore -srckeystore /opt/dualshield/jre/lib/security/cacerts -destkeystore /opt/dualshield/jre/lib/security/cacerts -deststoretype pkcs12".
Updating jsvc...
Restaring DualShield Service...
Update finished