PingID Administration Guide

Installing PingID SSH binary package

Binary packages for PingID for Secure Shell (SSH) are available for the following Linux distributions: Ubuntu, Debian, CentOS, RHEL, and SUSE.

About this task

The binary packages for PingID for SSH are supported on the following Linux versions:

  • Ubuntu 14.x to 22.x

  • Debian 9.x to 12.x

  • CentOS 7.x and later

  • Red Hat Enterprise Linux (RHEL) 7.x and later

  • OpenSUSE Leap 42.3, 15.x, and SUSE Linux Enterprise (SLES) 11.0 to 15.x

Adding multi-factor authentication (MFA) to a Unix or Linux system might result in locking you out of the system. To minimize this risk, back up your system before beginning an installation, and during an installation, keep a separate open session with root permissions.

Steps

  1. Get the public key used to sign the package.

    Choose from:

    • On Ubuntu 22.x and Debian 12.x:

      curl -s https://packages.pingidentity.com/pub-key.gpg | sudo gpg --dearmor -o /etc/apt/trusted.gpg.d/pingid.gpg

    • On earlier versions of Ubuntu and Debian:

      curl -s https://packages.pingidentity.com/pub-key.gpg | sudo apt-key add -

    • On CentOS, RHEL, and SUSE:

      sudo rpm --import https://packages.pingidentity.com/pub-key.gpg

  2. Update the repository information.

    Choose from:

    • On Ubuntu:

      1. Add the PingID repository to the list of sources:

        echo "deb https://packages.pingidentity.com/repo <release code name> <release code name>" | sudo tee /etc/apt/sources.list.d/pingid.list

        For example, on Ubuntu 20.04:

        echo "deb https://packages.pingidentity.com/repo focal focal" | sudo tee /etc/apt/sources.list.d/pingid.list

      2. Update the package information from the list of sources:

        sudo apt update

    • On Debian:

      1. Add the PingID repository to the list of sources:

        echo "deb http://packages.pingidentity.com/repo <release code name> <release code name>" | sudo tee /etc/apt/sources.list.d/pingid.list

        For example, on Debian 10.x (Buster):

        echo "deb http://packages.pingidentity.com/repo buster buster" | sudo tee /etc/apt/sources.list.d/pingid.list

      2. Update the package information from the list of sources:

        sudo apt update

        If you are not sure what Debian release you have, run the following command to check:

        grep PRETTY_NAME /etc/os-release

    • On CentOS:

      Copy file https://packages.pingidentity.com/repo/CentOS/pingidentity.repo to /etc/yum.repos.d/pingidentity.repo using the following command:

      sudo curl -o /etc/yum.repos.d/pingidentity.repo https://packages.pingidentity.com/repo/CentOS/pingidentity.repo

    • On RHEL:

      Copy file https://packages.pingidentity.com/repo/RHEL/pingidentity.repo to /etc/yum.repos.d/pingidentity.repo using the following command:

      sudo curl -o /etc/yum.repos.d/pingidentity.repo https://packages.pingidentity.com/repo/RHEL/pingidentity.repo

    • On SUSE:

      1. Add the PingID repository using the following command:

        sudo zypper ar https://packages.pingidentity.com/repo/SUSE/pingidentity.repo

      2. Refresh the repository:

        sudo zypper ref pingidentity

  3. Install the PingID package.

    Choose from:

    • On Ubuntu and Debian:

      sudo apt install pingid

    • On CentOS and RHEL:

      sudo yum install pingid

    • On SUSE:

      sudo zypper in pingid

  4. Download the properties file. See Integrate PingID with SSH.

  5. Copy the properties file to /etc/pingid/pingid.properties.

  6. Test the installation:

    pingid_fc -v

    Result:

    You should see a message similar to the following:

    PingID API version 4.0 (Package version 4.0.12)
						Configuration file: /etc/pingid/pingid.conf