SSH PUBLIC KEY MANAGEMENT TOOL INSTALLATION GUIDE

Overview of the SSH PKM tool was presented at CHEP'07: CHEP'07 publication [pdf, local link]

Downloadable components of the SSH PKM tool Installation checklist (enforced by rpm dependencies)
  1. Database setup scripts [tgz]
  2. Web interface (user+admin) [src.rpm]
  3. Distribution service [src.rpm]
  4. Keyservices Client Daemon [src.rpm]
  5. Keyservices Client Daemon, verified to build successfully with xmlrpc-c-1.16 [src.rpm]
  • httpd >= 2.2
  • MySQL >= 5.0
  • openssl >= 0.9.7
  • PHP >= 4.4.2
  • php-mcrypt, php-mhash, php-pear, php-xmlrpc, php-mysql
  • xmlrpc-c >= 1.06
Basic installation step by step:
  1. Install database schema, following the README(!) instructions of starkey_dbsetup.tgz
  2. Install both starkeyw and starkeyd components. In simple setup those could be installed on a shared, AFS-enabled server.
  3. Install Auth and DB pear modules: pear install Auth; pear install DB;
  4. Install Pam pecl module: pecl install pam;. You might need to install php-devel package to get pecl extension compiled.
  5. Make sure that php.ini contains the following lines: pam.servicename = "php"; and extension=pam.so
  6. Restart httpd to propagate all config changes: service httpd restart;
  7. Login to to https://servername.gov/starkeyw/ with your login/password. If it does not let you in - make sure AFS daemon is alive and cat /usr/vice/etc/ThisCell shows your cell (rhic.bnl.gov, or jinr.ru).
  8. Using administrative panel, add new controlled host and accounts for that host
  9. Install keyservices-client on controlled host, make sure that keyservices.ini file contains proper server name
  10. Watch for host update status (starkeyw admin panel), play with certificates (user panel)
    11. Done!