How to install Adito

WebFooL · 06-02-2009, 10:51 AM

Hi,
I just installd Adito.
I havet had time to verify it in a production environment.
And i have some other thing to do..
So i will post the installation and maby some of you can verify that it works.

I did this installation on a UT 6.2
But it should work on a 6.1.

Here are the steps.

Edit

Code:

/etc/apt/sources.list

add or uncomment

Code:

deb http://security.debian.org lenny/updates main contrib non-free
deb http://ftp.debian.org/debian lenny main contrib non-free

From the terminal or thru ssh:
run

Code:

apt-get update

run

Code:

apt-get install ant

run

Code:

cd /opt/

run

Code:

wget http://superb-east.dl.sourceforge.ne...9.1-bin.tar.gz

run

Code:

tar zxvf adito*.gz

run

Code:

cd adito-0.9.1

run

Code:

ant install

Add packet filter

Code:

Name: Adito Access
Action: PASS
Destination Local
Protocol: TCP UDP
Destination Port: 28080

Now access the Adito setup with your browser http://untangleip:28080
Follow the steps.
When you are done with the setup go back to the terminal or SSH

run

Code:

"ant install-service"

then run

Code:

"ant start"

Edit your packet filter to the port you choise for the webserver.

Code:

Name: Adito Access
Action: PASS
Destination Local
Protocol: TCP UDP
Destination Port: your port choise

Now you should be able to access your adito server
Now Edit

Code:

/etc/apt/sources.list

Comment or remove:

Code:

deb http://security.debian.org lenny/updates main contrib non-free
deb http://ftp.debian.org/debian lenny main contrib non-free

run

Code:

apt-get update

Verify that it only use Untangle sources.
All done.

arndawg · 06-02-2009, 12:18 PM

Here's a windows installer for those who don't know

http://lars.werner.no/?page_id=153

dknyinva · 06-03-2009, 03:55 PM

Thanks WebFool for this tip. I already have ssl-explorer running on a laptop inside UT and I'm able to connect from the outside using port 443 by setting up port forward and firewall rule. If I decided to use Adito in UT, how can I get it to use port 443 as UT is using the same port for administration.

Thanks again

WebFooL · 06-03-2009, 11:26 PM

Hi,
Right now i am working my ass of before my vacation.

But on my vacation i will have some spare time.

If anybody have some pointers pls post here :P

dknyinva · 06-04-2009, 02:09 AM

Only way it would work is to disable internal administration which use port 443; otherwise Adito would have to use a diff. port.

WebFooL · 06-04-2009, 02:14 AM

Yes with this setup.
But i think you can make some coustom changes (moving aditos webroot to untangles webroot)
and then make them work on the same port.
But again i will do some testing later in june..

Edit:
http://sourceforge.net/forum/forum.p...orum_id=824507

WebFooL · 07-05-2009, 09:17 AM

Hi,
i have now configured my adito with apaches revers proxy.
read guide on how to configure here:
http://forums.untangle.com/tip-day/1...y-apache2.html

but your new site file should look like this:
Create the adito site file

Code:

nano /etc/apache2/sites-available/adito

In this file Enter:

Code:

<VirtualHost *:80>
  ServerName dnsname_to_server_or_ip.com
  ProxyRequests Off
  <Proxy *>
    Order deny,allow
    Allow from all
  </Proxy>
  ProxyPass /adito/i !
  ProxyPass /adito http://Untangleip:7443/
  ProxyPassReverse /adito http://Untangleip:7443/
</VirtualHost>

*my adito server runns on port 7443.(i use only http but it should work with https with the "SSLProxyEngine on" line)

Now go to:

Code:

/etc/apache2/sites-enabled

And run:

Code:

a2ensite adito

Enjoy.

philpense · 12-06-2009, 08:12 AM

Greetings:

I write as a computer novice who has recently discovered Adito. I've been to the Lars Werner website and have the download. Regrettably, I am not sure which machine the SSL VPN installer goes on. I believe it would go on the remote machine trying to connect to a home/busness network. Additionally, I am using Vista Ultimate and have a Linksys business class router connected to internet via DSL. What other guidance would be required to connect from the field. Much thanks for any informed guidance.

WebFooL · 12-06-2009, 08:39 AM

Hi Philpense,
This guide is to install Adito in a Untangle Firewall.

But you can install Lars Werners setup to do a stand alone installation.

You should install it on the remote side.. (there the resources you want remote access to is)

Install it on a server and then do a portforward to your port.(you configured the remote port during the setup)

06-02-2009, 10:51 AM	#1 (permalink)
WebFooL Join Date: Jan 2009 Location: Sweden (Eskilstuna) URLs submitted: 57 Posts: 2,933	How to install Adito Hi, I just installd Adito. I havet had time to verify it in a production environment. And i have some other thing to do.. So i will post the installation and maby some of you can verify that it works. I did this installation on a UT 6.2 But it should work on a 6.1. Here are the steps. Edit Code: /etc/apt/sources.list add or uncomment Code: deb http://security.debian.org lenny/updates main contrib non-free deb http://ftp.debian.org/debian lenny main contrib non-free From the terminal or thru ssh: run Code: apt-get update run Code: apt-get install ant run Code: cd /opt/ run Code: wget http://superb-east.dl.sourceforge.ne...9.1-bin.tar.gz run Code: tar zxvf adito.gz run Code: cd adito-0.9.1 run Code: ant install Add packet filter Code: Name: Adito Access Action: PASS Destination Local Protocol: TCP UDP Destination Port: 28080 Now access the Adito setup with your browser http://untangleip:28080 Follow the steps. When you are done with the setup go back to the terminal or SSH run Code: "ant install-service" then run Code: "ant start" Edit your packet filter to the port you choise for the webserver. Code: Name: Adito Access Action: PASS Destination Local Protocol: TCP UDP Destination Port: your port choise Now you should be able to access your adito server Now Edit Code: /etc/apt/sources.list Comment or remove: Code: deb http://security.debian.org lenny/updates main contrib non-free deb http://ftp.debian.org/debian lenny main contrib non-free run Code: apt-get update Verify that it only use Untangle sources. All done. __________________ "Of all the things I've lost, I miss my mind the most" Untangle Reseller (Sweden) WebFooL@fakenews.se http://fakenews.se/ Need space to Upload content for you forum post? Last edited by WebFooL; 06-02-2009 at 11:45 AM..*

06-03-2009, 11:26 PM	#4 (permalink)
WebFooL Join Date: Jan 2009 Location: Sweden (Eskilstuna) URLs submitted: 57 Posts: 2,933	Hi, Right now i am working my ass of before my vacation. But on my vacation i will have some spare time. If anybody have some pointers pls post here :P __________________ "Of all the things I've lost, I miss my mind the most" Untangle Reseller (Sweden) WebFooL@fakenews.se http://fakenews.se/ Need space to Upload content for you forum post?

06-04-2009, 02:14 AM	#6 (permalink)
WebFooL Join Date: Jan 2009 Location: Sweden (Eskilstuna) URLs submitted: 57 Posts: 2,933	Yes with this setup. But i think you can make some coustom changes (moving aditos webroot to untangles webroot) and then make them work on the same port. But again i will do some testing later in june.. Edit: http://sourceforge.net/forum/forum.p...orum_id=824507 __________________ "Of all the things I've lost, I miss my mind the most" Untangle Reseller (Sweden) WebFooL@fakenews.se http://fakenews.se/ Need space to Upload content for you forum post? Last edited by WebFooL; 06-04-2009 at 11:31 AM..

07-05-2009, 09:17 AM	#7 (permalink)
WebFooL Join Date: Jan 2009 Location: Sweden (Eskilstuna) URLs submitted: 57 Posts: 2,933	Hi, i have now configured my adito with apaches revers proxy. read guide on how to configure here: http://forums.untangle.com/tip-day/1...y-apache2.html but your new site file should look like this: Create the adito site file Code: nano /etc/apache2/sites-available/adito In this file Enter: Code: <VirtualHost :80> ServerName dnsname_to_server_or_ip.com ProxyRequests Off <Proxy > Order deny,allow Allow from all </Proxy> ProxyPass /adito/i ! ProxyPass /adito http://Untangleip:7443/ ProxyPassReverse /adito http://Untangleip:7443/ </VirtualHost> my adito server runns on port 7443.(i use only http but it should work with https with the "SSLProxyEngine on" line) Now go to: Code: /etc/apache2/sites-enabled And run: Code: a2ensite adito Enjoy. __________________ "Of all the things I've lost, I miss my mind the most" Untangle Reseller (Sweden) WebFooL@fakenews.se http://fakenews.se/ Need space to Upload content for you forum post? Last edited by WebFooL; 07-05-2009 at 12:02 PM..*

12-06-2009, 08:39 AM	#9 (permalink)
WebFooL Join Date: Jan 2009 Location: Sweden (Eskilstuna) URLs submitted: 57 Posts: 2,933	Hi Philpense, This guide is to install Adito in a Untangle Firewall. But you can install Lars Werners setup to do a stand alone installation. You should install it on the remote side.. (there the resources you want remote access to is) Install it on a server and then do a portforward to your port.(you configured the remote port during the setup) __________________ "Of all the things I've lost, I miss my mind the most" Untangle Reseller (Sweden) WebFooL@fakenews.se http://fakenews.se/ Need space to Upload content for you forum post?

06-02-2009, 12:18 PM	#2 (permalink)
arndawg Master Untangler Join Date: Oct 2008 Posts: 119	Here's a windows installer for those who don't know http://lars.werner.no/?page_id=153

06-03-2009, 03:55 PM	#3 (permalink)
dknyinva Master Untangler Join Date: Sep 2008 URLs submitted: 1 Posts: 308	Thanks WebFool for this tip. I already have ssl-explorer running on a laptop inside UT and I'm able to connect from the outside using port 443 by setting up port forward and firewall rule. If I decided to use Adito in UT, how can I get it to use port 443 as UT is using the same port for administration. Thanks again

06-04-2009, 02:09 AM	#5 (permalink)
dknyinva Master Untangler Join Date: Sep 2008 URLs submitted: 1 Posts: 308	Only way it would work is to disable internal administration which use port 443; otherwise Adito would have to use a diff. port.

12-06-2009, 08:12 AM	#8 (permalink)
philpense Newbie Join Date: Dec 2009 Posts: 1	Greetings: I write as a computer novice who has recently discovered Adito. I've been to the Lars Werner website and have the download. Regrettably, I am not sure which machine the SSL VPN installer goes on. I believe it would go on the remote machine trying to connect to a home/busness network. Additionally, I am using Vista Ultimate and have a Linksys business class router connected to internet via DSL. What other guidance would be required to connect from the field. Much thanks for any informed guidance.