2.2. Ubuntu Packages

There are ready made packages for Ubuntu.

A repository provides packages for Ubuntu 22.04 LTS, 24.04 LTS and 26.04 LTS.

Note

The packages privacyidea-apache2 and privacyidea-nginx assume that you want to run a privacyIDEA system. These packages deactivate all other (default) websites. Instead, you may install only the package privacyidea, which contains the privacyIDEA application without any webserver or database configuration. After this, you can integrate privacyIDEA with your existing webserver configuration.

Read about the upgrading process in Upgrading a packaged installation.

2.2.1. Installing privacyIDEA

Before installing privacyIDEA you need to add the package repository to the package manager.

2.2.1.1. Add repository

The packages are digitally signed. First you need to download the signing key:

wget https://lancelot.netknights.it/NetKnights-Release.asc

Then you can verify the fingerprint:

gpg --import --import-options show-only --with-fingerprint NetKnights-Release.asc

The output must show the key NetKnights GmbH <release@netknights.it> with this fingerprint:

pub   rsa4096 2017-05-16 [SC]
      0940 4ABB EDB3 586D EDE4  AD22 00F7 0D62 AE25 0082
uid                      NetKnights GmbH <release@netknights.it>
sub   rsa4096 2017-05-16 [E]

Other GnuPG versions arrange the output differently, but the fingerprint must be the same.

Now you can add the signing key to your system:

mv NetKnights-Release.asc /etc/apt/trusted.gpg.d/

Now you need to add the repository for your release (either jammy/22.04 LTS, noble/24.04 LTS or resolute/26.04 LTS).

You can do this by running the following command on Ubuntu 24.04:

add-apt-repository http://lancelot.netknights.it/community/noble/stable

Change the code name to the running Ubuntu version accordingly.

As an alternative you can add the repo in a dedicated file. Create a new file /etc/apt/sources.list.d/privacyidea-community.list with the following contents for Ubuntu 24.04:

deb http://lancelot.netknights.it/community/noble/stable noble main

Change the code name to the running Ubuntu version accordingly.

2.2.1.2. Installation of privacyIDEA

After having added the repositories, run:

apt update
apt install privacyidea-apache2

If you do not like the Apache2 webserver you could alternatively use the meta package privacyidea-nginx.

Both packages also install the cron jobs that clean up the database, see Cleanup Jobs.


Now you may proceed to First Steps.

2.2.2. FreeRADIUS

privacyIDEA has a perl module to “translate” RADIUS requests to the API of the privacyIDEA server. This module plugs into FreeRADIUS. The FreeRADIUS does not have to run on the same machine as privacyIDEA. To install this module run:

apt-get install privacyidea-radius

The package enables its own FreeRADIUS site privacyidea and the module perl-privacyidea. It disables all other enabled sites and the eap module, so install it on a FreeRADIUS server that serves nothing else.

The privacyidea-radius package is available for Ubuntu 22.04 LTS and 24.04 LTS.

For further details see RADIUS plugin.