Install Comtarsia Logon Client on OpenSUSE LEAP 16.0
Table of Contents
SignOn Proxy 2012 Linux - 6.0.10.51
Logon Client 2012 Linux SmartCard - 6.0.14.1
13.10.2025
Compared to the Leap 15.X versions, Leap 16.0 has two special features that must be taken into account when installing the SignOn Solutions.
- Wayland is now the default. True X11 must be installed manually.
- OpenSSL 3.5 with a stricter security policy
What exactly needs to be done differs between an update from 15.X and a fresh installation. See below for details.
The following SignOn Solutions–specific points must be observed:
- The certificates used in the Lc->Proxy->Agent communication must use at least SHA256; SHA1 as a certificate hash algorithm is no longer supported by OpenSSL in Leap 16 by default.
- Communication between SignOn Gate components now takes place via TLS 1.2. Older SignOn Gate builds used TLS 1.0, which means communication between them is no longer compatible. This means that all systems in a group must be switched over at the same time.
- Starting from SignOn Proxy Build 10 and Logon Client Build 14, a new license key is used. You can recognize it by the file extension ending in 4 (previously 3), e.g. 54383-5385.key504.
1. Updating System from Leap 15.6
If an existing Leap 15.6 installation with Logon Client/SignOn Proxy is updated to Leap 16, only two libraries need to be reinstalled: the Boost library and WxWidgets. After that, the Comtarsia products can be updated.
To get the latest packages for this version:
zypper refresh
zypper update
Install and run the OpenSUSE Migration Tool. In the tool, select Leap 16 as the target.
zypper in opensuse-migration-tool
opensuse-migration-tool
reboot
SignOn Solutions specific: install boost library for lc+sop and wxwidgets library for lc:
zypper in libboost_regex1_86_0
zypper install libwx_baseu-suse16_0_0 libwx_baseu_net-suse16_0_0 libwx_baseu_xml-suse16_0_0 libwx_gtk2u_core-suse16_0_0 libwx_gtk2u_adv-suse16_0_0 libwx_gtk2u_html-suse16_0_0 libwx_gtk2u_qa-suse16_0_0 libwx_gtk2u_xrc-suse16_0_0 libwx_gtk2u_aui-suse16_0_0 libwx_gtk2u_richtext-suse16_0_0
1.1 Update SignOn Proxy
cd /usr/local/ComtSOP
./uninstall.sh
tar zxpvf xxx/ComtSOP-6.0.10.51.tgz
Next, copy the new license key into the folder and adjust the ComtSOP.conf accordingly. The certificates should also be checked to ensure that they use at least SHA256 as the hash algorithm.
Then register the SignOn Proxy service.
./install.sh
1.2 Update Logon Client
cd /usr/local/ComtLCUS
./uninstall.sh
tar zxpvf xxx/ComtLCUS-6.0.14.1.tar.gz
Next, copy the new license key into the folder and adjust the ComtLCUS.conf accordingly. The certificates should also be checked to ensure that they use at least SHA256 as the hash algorithm.
Running the install command sets the Logon Client as the default display manager. With init 3/5, the graphical mode is reinitialized, activating the Logon Client.
./install.sh
init 3 ; init 5
2. Fresh Installation of Leap 16.0
Install with no “graphical environment”, then run:
zypper install xorg-x11-server xorg-x11-libs libX11-6 Mesa xinit xorg-x11-fonts liberation-fonts dejavu-fonts fontconfig awesome typelib-1_0-GdkPixbuf-2_0me
Installing lightdm configures the system for an X11 display manager. This can probably also be done manually without installing LightDM.
zypper install lightdm lightdm-gtk-greeter lightdm-gtk-greeter-settings
SignOn Solutions specific (opensc and pcsc-tools optional for Smart Card tests):
zypper in libboost_regex1_86_0 pcsc-lite pcsc-ccid opensc pcsc-tools
zypper install libwx_baseu-suse16_0_0 libwx_baseu_net-suse16_0_0 libwx_baseu_xml-suse16_0_0 libwx_gtk2u_core-suse16_0_0 libwx_gtk2u_adv-suse16_0_0 libwx_gtk2u_html-suse16_0_0 libwx_gtk2u_qa-suse16_0_0 libwx_gtk2u_xrc-suse16_0_0 libwx_gtk2u_aui-suse16_0_0 libwx_gtk2u_richtext-suse16_0_0
Then set the graphical target as the default:
systemctl set-default graphical.target
2.1 Installation of SignOn Proxy
mkdir /usr/local/ComtSOP
cd /usr/local/ComtSOP
tar zxpvf xxx/ComtSOP-6.0.10.51.tgz
Next, copy the new license key into the folder and adjust the ComtSOP.conf accordingly. The certificates should also be checked to ensure that they use at least SHA256 as the hash algorithm.
Then register the SignOn Proxy service.
./install.sh
2.2 Installation of Logon Client
mkdir /usr/local/ComtLCUS
cd /usr/local/ComtLCUS
tar zxpvf xxx/ComtLCUS-6.0.14.1.tar.gz
Next, copy the new license key into the folder and adjust the ComtLCUS.conf accordingly. The certificates should also be checked to ensure that they use at least SHA256 as the hash algorithm.
Running the install command sets the Logon Client as the default display manager. With init 3/5, the graphical mode is reinitialized, activating the Logon Client.
./install.sh
init 3 ; init 5