Installation of Octopus Authentication Servers is done as part of a distributed deployment and/or to provide additional servers for high availability. Octopus Authentication Server installation may be required in either of the following configuration options:
For deployment to a production environment, you need to install a Management Console Server and an Authentication Server as separate servers.
In this case, install the Management Console server first. Make sure that server is up and running and before installing the Authentication Server. Once both servers are installed, configure them to function as one system.
Octopus All-in-One additional Authentication Server: To improve availability and redundancy of Octopus Authentication and to increase performance in a POC environment, Octopus Authentication enables load balancing by adding additional Authentication Servers.
Before beginning installation of the additional Authentication Server, verify that the All-in-One Server is up and running.
Follow the procedure below to install an Octopus Authentication Server.
To install an Octopus Authentication Server:
Run the Octopus Authentication Server installation package:
sudo ./octopus-####.run
To choose the Authentication Server installation option, enter 2.
When prompted, enter the port number to be used for the SSH connection between the Management Console and the Authentication Server.
Specify the setting for proxy configuration (default = no).
For network setups in which HTTPS to the internet is accessed through a proxy server, type y and enter the URL or IP address of your proxy server.
Specify the setting for firewall creation (default = yes).
To skip firewall creation, type n. It will then be necessary to ensure that the Linux firewall is configured correctly, according to the chosen configuration:
With SSL: Ports 443 and 8443 are enabled
Without SSL: Ports 80, 8008 and 8009 are enabled accordingly
Enter details for the self-signed certificate:
Organization name: Delete My Org and enter the correct name.
Server name: Enter the server name for the certificate. (The name will appear as known on the Linux server. Change it if necessary.)
Enter a name for the Authentication Server. This name will be used to identify the server within the Octopus Management Console.
After you enter a name, the setup will generate a Configuration String. This is the server's Public Key that you will copy and paste to the Management Console in the next step.
Add the Authentication Server to the Octopus Management Console:
Return to the Authentication Server SSH screen, and type the address of the Octopus Management Console. Be sure to use the complete domain name (FQDN) of the Management Console, not the IP address.
Verify that the installation completed successfully.
