Servers
- Windows
- Linux
All servers on which you plan to install Axidian Privilege components must be located in the same domain, on the same network and access the same DNS server.
Access Server
The access server accepts remote connections from Axidian Privilege users and automatically opens remote connections to target resources on behalf of privileged accounts.
To deploy the RDS role, it is recommended to use a "clean" Windows Server in the domain:
- No group policies related to remote access are applied
- None of the RDS role components (RDCB, RDG, RDL, RDSH, RDVH, RDWA) are deployed
Deploying the Remote Desktop Services Role on a Single Server
- Start Server Manager, click Manage menu, click Add Roles and Features
- In the Installation Type step, select Remote Desktop Services installation
- In the Deployment type step, select Standard deployment
- In the Deployment scenario step, select Session-based desktop deployment
- In RD Connection Broker, RD Web Access, RD Session Host steps, select the current server
- In the Confirmation step, check Restart the destination server automatically if required, click Deploy and wait for the server to restart
All servers which you plan to install Axidian Privilege components on must use the same DNS server and must resolve each other by full DNS names, and must also be located on the same network or have network interactions with each other:
- SSH (22) — for ansible access via ssh.
- HTTPS (443), ssh-custom (default 2222), rdp (3389) — for health checks at the end of deployment.
All Linux servers on which you plan to install Axidian Privilege components must have a lowercase hostname in FQDN format and it must match the DNS name of the server.
The following components must be installed on all servers where you plan to install Axidian Privilege components:
Component | Version |
---|---|
iptables | 1.4 and higher According to Docker documentation |
python | 3.5 and higher |
openssh-server | According to Ansible documentation |
If nftables is installed on the server, then uninstall it and install iptables.