{"id":2923,"date":"2024-03-02T04:47:07","date_gmt":"2024-03-02T01:47:07","guid":{"rendered":"https:\/\/dataera.com.tr\/blog\/2024\/03\/02\/lider-ahenk-kurulumu-ve-yonetimi\/"},"modified":"2025-05-06T03:38:22","modified_gmt":"2025-05-06T00:38:22","slug":"lider-ahenk-installation-and-management","status":"publish","type":"post","link":"https:\/\/dataera.com.tr\/en\/lider-ahenk-installation-and-management\/","title":{"rendered":"Lider Ahenk Installation and Management"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
Components of Lider Ahenk.Database Server (MariaDB)
LDAP (slapd)
XMPP (Ejabberd)
File Server
APACHE KARAF (Lider)The packages required for the installation of Lider Ahenk are available in the \u201crepo.liderahenk.org\u201d repository. To define the repository on your system, in the terminal (console);<\/div>
sudo wget http:\/\/repo.liderahenk.org\/liderahenk-archive-keyring.asc \nsudo apt-key add liderahenk-archive-keyring.asc \nrm liderahenk-archive-keyring.asc<\/pre>
With these commands, the \u201cliderahenk-archive-keyring.asc\u201d key file should be downloaded and installed on the system. Then;<\/div>
sudo add-apt-repository 'deb [arch=amd64] http:\/\/repo.liderahenk.org stable main'<\/pre>
This command adds the repository address to the \u201c\/etc\/apt\/sources.list\u201d file. You can also add the following line manually using a terminal text editor (vi, nano, pico);<\/div>
deb [arch=amd64] http:\/\/repo.liderahenk.org stable main<\/pre>
You can manually define this line in the \u201c\/etc\/apt\/sources.list\u201d file. Then;<\/div>
sudo apt update<\/pre>
This command fetches the updated package list and the installations should begin.<\/div>
Database Server InstallationMariaDB is used as the database. Databases are storage areas for related information. Lider Server is the database. It is installed once.<\/p><\/div>
sudo apt install mariadb-server -y<\/pre>
During the installation process, the root password for mariadb-server appears on the screen.In this example, the root password is set as SIFRE.<\/p>
The same password is entered again and the installation proceeds by pressing enter. Once the installation is successfully completed, it means that the mariadb-server installation is finished.<\/p><\/div>
mysql -uroot -pSIFRE -e \"CREATE DATABASE liderdb DEFAULT CHARACTER SET utf8 DEFAULT COLLATE utf8_general_ci\"<\/pre>
Note: If the MariaDB server is on a different machine than the Lider server, edit the configuration file `\/etc\/mysql\/my.cnf` and comment out the `bind-address` line to allow external access:<\/div>
bind-address = 127.0.0.1<\/pre>
Or you can replace it with the IP address of the Lider server. To allow the Lider server to access the database, you must grant privileges:<\/div>
mysql -uroot -pSIFRE<\/pre>
use liderdb;<\/pre>
select password('SIFRE');<\/pre>
grant all privileges on * to root@'%' identified by 'hexadecimal_characters';<\/pre>
exit<\/pre>
sudo systemctl restart mysql.service<\/pre>
To verify that the database is working correctly:<\/div>
mysql -uroot -pSIFRE<\/pre>
show databases;<\/pre>
If you see `liderdb` in the list, the database has been created successfully.<\/div>
LDAP ServerIn this example, OpenLDAP will be used as the LDAP component. Lider Ahenk requires LDAP for user and machine management. User and machine information is stored in LDAP, and policy management is done by connecting to this LDAP from the Lider-Console (LiderAhenk interface application). It is installed once.<\/p><\/div>
sudo apt install slapd ldap-utils<\/pre>
After running the command, the package manager will list any prerequisites and wait for confirmation.
Press Enter to continue.
If unverified packages appear, type `E` and press Enter to confirm installation.During installation, you will be prompted to set an admin password. In this example, the password is set as `SIFRE`.Re-enter `SIFRE` when asked and press Enter to continue.
Once the slapd service is started, the basic OpenLDAP setup is complete.<\/div>
Now let\u2019s configure OpenLDAP to create the LDAP directory and admin user:<\/div>
sudo dpkg-reconfigure slapd<\/pre>
Select **No** to omit old configurations.Enter your domain name (e.g., `liderahenk.org`). It will generate a base DN like `dc=liderahenk,dc=org`.<\/p>
Enter your organization name (e.g., `LiderAhenk`).<\/p>
Re-enter the admin password `SIFRE`.<\/p>
Select **HDB** as the database type.<\/p>
Choose **Yes** to remove the database when slapd is purged.<\/p>
Answer **No** when asked about moving the old database.<\/p><\/div>
LDAP directory details for this example:
\u2022 LDAP domain: `liderahenk.org`
\u2022 LDAP base DN: `dc=liderahenk,dc=org`
\u2022 Admin DN: `cn=admin,dc=liderahenk,dc=org`
\u2022 Admin password: `SIFRE`<\/div>
We\u2019ll test the connection using Apache Directory Studio.
Download from: https:\/\/directory.apache.org\/studio\/download\/download-linux.html
Open the program and create a new connection from the \u201cConnections\u201d panel.<\/div>
Enter the following:
\u2022 Connection name (optional)
\u2022 Hostname (e.g., localhost)
\u2022 Port (default LDAP port)
Click \u201cCheck network parameters\u201d to test the connection.<\/div>
Enter the admin DN and password (e.g., `SIFRE`) to test authentication.Then set the Base DN (`dc=liderahenk,dc=org`) to finalize the connection.<\/p><\/div>
Set up a configuration password for LDAP using:<\/div>
sudo su  \nslappasswd<\/pre>
Enter and confirm your new password. Copy the generated SSHA line.Paste it into:<\/p><\/div>
sudo pico \/etc\/ldap\/slapd.d\/cn=config\/olcDatabase={0}config.ldif<\/pre>
Below the `olcRootDN:` line, add:<\/p>
olcRootPW: {SSHA}your_generated_hash<\/pre>
Then restart the LDAP server:<\/p>
systemctl stop slapd.service  \nsystemctl start slapd.service<\/pre><\/div>
Now let\u2019s load the LiderAhenk LDAP schema:<\/div>
sudo wget https:\/\/raw.githubusercontent.com\/Pardus-LiderAhenk\/lider-ahenk-installer\/master\/lider-installer\/conf\/liderahenk.ldif  \nsudo cp liderahenk.ldif \/tmp<\/pre>
Load the schema into LDAP:<\/p>
ldapadd -x -f \/tmp\/liderahenk.ldif -D \"cn=admin,cn=config\" -w SIFRE<\/pre>
You can also import this file using an LDAP GUI.<\/p>
Restart the LDAP server:<\/p>
sudo systemctl restart slapd.service<\/pre>
**Note:** If LDAP is not restarted, the Lider object classes may not appear.<\/p><\/div>
Using Apache Directory Studio, create the following entries in LDAP:
\u2022 liderAhenkConfig node
\u2022 lider_console user
\u2022 Ahenkler and Users groupsRight-click on the base DN (e.g., dc=liderahenk,dc=org) and choose \u201cNew \u2192 New Entry\u201d.Click **Next** to continue.For the `liderAhenkConfig` node, select the object class `pardusLiderAhenkConfig` and click **Add**. It will appear in the \u201cSelected object classes\u201d section. Click **Next** to proceed.Set **RDN** to `cn` and enter `liderAhenkConfig`.
Then set the `liderServiceAddress` attribute to the Lider server IP in the format:
http:\/\/x.x.x.x:8181<\/pre>
**Note:** This IP must be accessible by Ahenk clients and should **not** be `localhost` or `127.0.0.1`.<\/p><\/div>
To create the `lider_console` user:
Right-click the base DN \u2192 New Entry \u2192 choose object classes:
\u2022 `pardusAccount`
\u2022 `pardusLider`
\u2022 `inetOrgPerson`
Then click **Add** to move them into \u201cSelected object classes\u201d.Set **RDN** as `cn` and enter `lider_console`.Set a password for this user and click **OK**.<\/div>
To assign privileges:
With `lider_console` selected in LDAP, right-click \u2192 New Attribute \u2192 choose `liderPrivilege`.Set value:
[TASK:dc=liderahenk,dc=org:ALL:true]<\/pre>
Add another attribute the same way with value:<\/p>
[REPORT:ALL]<\/pre>
These values grant full access (ALL) to the entire LDAP tree (dc=liderahenk,dc=org). `true` indicates the permission is active.<\/p><\/div>
To create the `Ahenkler` group:
Right-click the base DN \u2192 New Entry \u2192 select object class `organizationalUnit` \u2192 click **Next**.Set RDN as `ou` and enter `Ahenkler`.After creation, right-click `Ahenkler` \u2192 New Attribute \u2192 set attribute type as `description` \u2192 enter value:
pardusDeviceGroup<\/pre>
Repeat this step for any other Ahenk-related groups.<\/p><\/div>
To create the `Users` group:
Follow the same steps as above, but **you do not need** to add a `description` attribute for user groups.<\/div>
At this point, your LDAP directory tree should be correctly structured and ready to use.<\/div>
## XMPP Server ##XMPP (Ejabberd) stands for \u201cExtensible Messaging and Presence Protocol\u201d.
Download the package via terminal:
wget https:\/\/www.process-one.net\/downloads\/ejabberd\/16.06\/ejabberd_16.06-0_amd64.deb<\/pre>
This is the component through which all Ahenk clients connect. Lider Server and Ahenks communicate via this server. It is installed once.<\/p>
Then run:<\/p>
sudo dpkg -i ejabberd_16.06-0_amd64.deb<\/pre>
to install the downloaded package.<\/p><\/div>
Download the configuration file:<\/p>
wget https:\/\/raw.githubusercontent.com\/Pardus-LiderAhenk\/lider-ahenk-installer\/master\/lider-installer\/conf\/ejabberd.yml<\/pre>
Copy it to the configuration directory:<\/p>
sudo cp ejabberd.yml \/opt\/ejabberd-16.06\/conf\/ejabberd.yml<\/pre>
> \u26a0\ufe0f Note: This configuration is for version `ejabberd 16.06`. Ensure that your installed version and the YAML file match, as structure may vary between versions.<\/p>
Open the YAML file with:<\/p>
sudo pico \/opt\/ejabberd-16.06\/conf\/ejabberd.yml<\/pre><\/div>
Make the following changes:**1. Hosts:**<\/p>
hosts:  \n# - \"localhost\"  \n- \"im.liderahenk.org\"<\/pre>
**2. LDAP Settings:**<\/p>
ldap_servers:  \n- \"localhost\"\n\nldap_rootdn: \"cn=admin,dc=liderahenk,dc=org\"  \nldap_password: \"SIFRE\"  \nldap_base: \"dc=liderahenk,dc=org\"\n<\/pre>
**3. Host Config:**<\/p>
host_config:  \n\"im.liderahenk.org\":  \n  auth_method:  \n    - internal  \n    - ldap  \n    - anonymous\n<\/pre>
> \u26a0\ufe0f Warning: `ejabberd.yml` is very sensitive. Indentation errors or extra spaces can cause failure. Modify existing lines instead of inserting new ones when possible.<\/p><\/div>
Restart the server:<\/p>
cd \/opt\/ejabberd-16.06\/bin  \nsudo .\/ejabberdctl start<\/pre>
Check its status:<\/p>
sudo .\/ejabberdctl status<\/pre>
Expected output:
\u201cThe node ejabberd@dataera.com.tr is started with status: started ejabberd 16.06 is running in that node\u201d<\/p><\/div>
Now, create required users.Navigate to bin directory:<\/p>
cd \/opt\/ejabberd-16.06\/bin<\/pre>
Create an admin user:<\/p>
.\/ejabberdctl register admin im.liderahenk.org SIFRE<\/pre>
Output:
\u201cUser admin@im.liderahenk.org successfully registered\u201d<\/p>
Create a user for Karaf:<\/p>
.\/ejabberdctl register lider_sunucu im.liderahenk.org SIFRE  \n.\/ejabberdctl restart<\/pre>
\u26a0\ufe0f Save these credentials; they\u2019ll be used in Karaf config later.<\/p><\/div>
To test Ejabberd in live mode:<\/p>
.\/ejabberdctl stop  \n.\/ejabberdctl live<\/pre>
If Ejabberd stays running without errors, the setup is successful.<\/p>
Press `CTRL+C` to exit and restart it normally:<\/p>
.\/ejabberdctl start<\/pre><\/div>
## File Server ##This server is used to store plugin files and transfer large files (e.g., over SSH) that cannot be sent via messaging.
It can be any machine accessible via SSH \u2014 ideally, the Lider Server itself.Install required packages:
sudo apt install sshpass rsync -y<\/pre><\/div>
## Lider Server ##The Lider Server is the core component of the LiderAhenk system.
All Ahenk agents are managed from here via XMPP.
It also communicates with the Lider-Console (GUI) via REST APIs. Installed only once.First, define the `JAVA_HOME` environment variable:Check existing Java:
update-alternatives --config java<\/pre>
If Java is not installed:<\/p>
sudo apt install openjdk-8-jre<\/pre>
Then add the following lines to the bottom of your `~\/.bashrc` file:<\/p>
export JAVA_HOME=\"\/usr\/lib\/jvm\/{your_sdk_home}\"\nPATH=\"$PATH:\/usr\/lib\/jvm\/{your_sdk_home}\/bin\"\n<\/pre>
Apply the new environment variables:<\/p>
source ~\/.bashrc<\/pre>
Test:<\/p>
echo $JAVA_HOME<\/pre><\/div>
Download and extract the Lider distribution:<\/p>
sudo wget https:\/\/github.com\/Pardus-LiderAhenk\/lider\/releases\/download\/v1.1\/lider-distro-all_1.1.tar.gz  \nsudo cp lider-distro-all_1.1.tar.gz \/opt && cd \/opt  \nsudo tar -xvf lider-distro-all_1.1.tar.gz<\/pre>
Navigate to the `bin` directory and start Karaf:<\/p>
cd \/opt\/lider-distro-1.1\/bin  \nsudo .\/karaf<\/pre>
Once inside the Karaf console, wait for modules to load. Type:<\/p>
list<\/pre>
to check module status. If any module is in \u201cfailure\u201d state, verify your setup.<\/p><\/div>
To set Karaf as a system service, run the following in the Karaf console:<\/p>
feature:install wrapper  \nwrapper:install -s AUTO_START -n KARAF -d Karaf -D \"Karaf Service\"<\/pre>
Exit Karaf:<\/p>
logout<\/pre>
Register the service with the system:<\/p>
sudo ln -s \/opt\/lider-distro-1.1\/bin\/KARAF-service \/etc\/init.d\/  \nsudo update-rc.d KARAF-service defaults\n<\/pre><\/div>
Edit the main Lider config file:<\/p>
sudo pico \/opt\/lider-distro-1.1\/etc\/tr.org.liderahenk.cfg<\/pre>
Set LDAP settings:<\/p>
ldap.server = localhost  \nldap.port = 389  \nldap.username = cn=admin,dc=liderahenk,dc=org  \nldap.password = SIFRE  \nldap.root.dn = dc=liderahenk,dc=org\n<\/pre>
Set XMPP settings:<\/p>
xmpp.host = localhost  \nxmpp.port = 5222  \nxmpp.username = lider_sunucu  \nxmpp.password = SIFRE  \nxmpp.resource = Smack  \nxmpp.service.name = im.liderahenk.org\n<\/pre>
Set LDAP Ahenk base DN:<\/p>
agent.ldap.base.dn = ou=Ahenkler,dc=liderahenk,dc=org<\/pre>
Set file server paths:<\/p>
file.server.protocol = ssh  \nfile.server.host = localhost  \nfile.server.port = 22  \nfile.server.username = lider  \nfile.server.password = PP123456  \nfile.server.plugin.path = \/home\/username\/plugins\/ahenk-{0}_{1}_amd64.deb  \nfile.server.agreement.path = \/home\/username\/sample-agreement.txt  \nfile.server.agent.file.path = \/home\/username\/agent-files\/{0}\/\n<\/pre>
Create necessary directories:<\/p>
mkdir \/home\/username\/plugins  \ntouch \/home\/username\/sample-agreement.txt  \nmkdir -p \/home\/username\/agent-files\/{0}\n<\/pre><\/div>
Edit the database configuration file:<\/p>
sudo pico \/opt\/lider-distro-1.1\/etc\/tr.org.liderahenk.datasource.cfg<\/pre>
Set DB info:<\/p>
db.server = localhost:3306  \ndb.database = liderdb  \ndb.username = root  \ndb.password = SIFRE\n<\/pre><\/div>
Start the Lider server by running:<\/p>
systemctl start KARAF-service.service<\/pre>
This completes the Lider server installation.<\/p><\/div>
To verify that the Karaf service is running, you can use:<\/p>
systemctl status KARAF-service.service<\/pre>
Or alternatively:<\/p>
ps -ef | grep karaf<\/pre>
If the service is not active, start it manually:<\/p>
\/etc\/init.d\/KARAF-service start<\/pre><\/div>
To connect to the Karaf console as a service:<\/p>
ssh -p 8101 karaf@dataera.com.tr<\/pre>
When prompted, enter the password:<\/p>
karaf<\/pre>
Inside the console, you can monitor logs with:<\/p>
log:tail<\/pre>
To check which services\/modules are running:<\/p>
list<\/pre><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"
Database and instance are concepts that make up the Oracle database server. (There can be multiple instances on the same server, each allocated its own dedicated memory.) … Read More<\/a><\/p>\n","protected":false},"author":1,"featured_media":2330,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[52],"tags":[],"class_list":["post-2923","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-genel-en"],"_links":{"self":[{"href":"https:\/\/dataera.com.tr\/en\/wp-json\/wp\/v2\/posts\/2923"}],"collection":[{"href":"https:\/\/dataera.com.tr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dataera.com.tr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dataera.com.tr\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dataera.com.tr\/en\/wp-json\/wp\/v2\/comments?post=2923"}],"version-history":[{"count":14,"href":"https:\/\/dataera.com.tr\/en\/wp-json\/wp\/v2\/posts\/2923\/revisions"}],"predecessor-version":[{"id":2944,"href":"https:\/\/dataera.com.tr\/en\/wp-json\/wp\/v2\/posts\/2923\/revisions\/2944"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dataera.com.tr\/en\/wp-json\/wp\/v2\/media\/2330"}],"wp:attachment":[{"href":"https:\/\/dataera.com.tr\/en\/wp-json\/wp\/v2\/media?parent=2923"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dataera.com.tr\/en\/wp-json\/wp\/v2\/categories?post=2923"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dataera.com.tr\/en\/wp-json\/wp\/v2\/tags?post=2923"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}