(Click to open topic with navigation)
Access to a Reprise License Manager (RLM) server is required when using Nitro.
The RLM Server can run multiple licenses. If your company already uses an RLM Server, you do not need to install a new one for Nitro. Skip this topic and follow the instructions in 2.6 Installing Nitro.
This topic contains instructions on how to install an RLM Server.
In this topic:
If your site is running firewall software on its hosts, you will need to configure the firewall to allow connections to the necessary ports.
These instructions assume you are using the default ports. If your configuration will use other ports, then substitute your port numbers when opening the ports.
On the RLM Server, do the following:
[root]# iptables-save > /tmp/iptables.mod root]# vi /tmp/iptables.mod # Add the following lines immediately *before* the line matching # "-A INPUT -j REJECT --reject-with icmp-host-prohibited" -A INPUT -p tcp --dport 5053:5054 -j ACCEPT [root]# iptables-restore < /tmp/iptables.mod [root]# service iptables save
[root]# firewall-cmd --add-port=5053-5054/tcp --permanent [root]# firewall-cmd --reload
[root]# vi /etc/sysconfig/SuSEfirewall2 FW_SERVICES_EXT_TCP="5053 5054" [root]# service SuSEfirewall2_setup restart
[root]# vi /etc/sysconfig/SuSEfirewall2 FW_SERVICES_EXT_TCP="5053 5054" [root]# service SuSEfirewall2 restart
[root]# iptables-save > /tmp/iptables.mod [root]# vi /tmp/iptables.mod # Add the following lines immediately *before* the line matching # "-A INPUT -j REJECT --reject-with icmp-host-prohibited" -A INPUT -p tcp --dport 5135 -j ACCEPT [root]# iptables-restore < /tmp/iptables.mod [root]# service iptables save
[root]# firewall-cmd --add-port=5135/tcp --permanent [root]# firewall-cmd --reload
[root]# vi /etc/sysconfig/SuSEfirewall2 FW_SERVICES_EXT_TCP="5135" [root]# service SuSEfirewall2_setup restart
[root]# vi /etc/sysconfig/SuSEfirewall2 FW_SERVICES_EXT_TCP="5135" [root]# service SuSEfirewall2 restart
If your configuration uses firewalls, you must also open the necessary ports before installing Nitro. See 2.5.1 Open Necessary Ports.
On the host where the RLM Server will reside, do the following:
[root]# groupadd -r rlm [root]# useradd -r -g rlm -d /opt/rlm -c "A non-root user under which to run Reprise License Manager" rlm
[root]# mkdir -p -m 0744 /opt/rlm
[root]# cd /opt/rlm
[root]# tar -xzvf /tmp/ac-rlm-<version>.tar.gz --strip-components=1
[root]# chown -R rlm:rlm /opt/rlm
The --strip-components=1 removes the "ac-rlm-<version>/" from the relative path so that they are extracted into the current directory.
If you are using a user:group other than rlm:rlm or a location other than /opt/rlm, then edit the following files to reflect those changes after copying them.
[root]# cp init.d/rlm /etc/init.d
[root]# cp systemd/rlm.service /etc/systemd/system
[root]# chkconfig --add rlm [root]# chkconfig rlm on [root]# service rlm start
[root]# systemctl start rlm.service [root]# systemctl enable rlm.service
2.5.3 Change the Default Passwords
The RLM Web interface includes two usernames (admin and user) by default. These usernames have the default password "changeme!".
If you do not change this password, RLM, and Remote Visualization, will not be secure. For tips on choosing a good password, see https://www.us-cert.gov/ncas/tips/ST04-002.
Do the following for both the user and the admin usernames: