[[!meta title="Live DVD Images"]]

A Moonshot technology preview is made available as a Debian live system.

The image will work either when booted on real PC hardware or in a virtualization environment. Explicit support should be provided for Virtualbox and for Vmware video and mouse support.

The image may not be appropriate for deployment on an open network;
in particular, it runs a number of services including SSH, RADIUS and
a web server.

##Current Version

November 2012:

* Get the [Image](http://psec.s3.amazonaws.com/moonshot-images/2014.01.17.iso)
* Please review the following [notes](https://www.jiscmail.ac.uk/cgi-bin/webadmin?A2=MOONSHOT-COMMUNITY;98c2ceea.1201)
* The [source](http://psec.s3.amazonaws.com/moonshot-images/2014.01.17.source/source.debian.tar) to the Debian software used on the DVD is available. For getting Moonshot source please refer to our [git](http://www.project-moonshot.org/gitweb/) repository for a better experience.


# Includes

* A configured freeradius server
    * Generates SAML assertions on authentication
    * Exposes user name for legacy GSS applications
* Debian packages of key Moonshot components:
    * Core Moonshot mechanism
    * Development version of Shibboleth libraries with enhanced GSS-API support
    * Libradsec library
    * Moonshot support for Firefox and Apache
    * Moonshot support for OpenSSH

# Testing Moonshot

There is a RADIUS account steve@local with password testing. This account is authorized to log into an SSH user called moonshot. to test:

    sudo useradd -m moonshot
    ssh moonshot@localhost

This works in part because there is a file in the user home directory ~/.gss_eap_id that includes the username and password. In the future, credentials will be controlled by a Moonshot user interface.

Another test involves the GSS sample application from MIT Kerberos:

[[!inline raw=yes pagenames=testing/gss-sample ]]

It is also possible to test with the web server.
Under /var/www create a directory. Include a .htaccess file with the following contents:

    AuthType GSSAPI
    Require valid-user

If you go to http://localhost/directory_name, using the Iceweasel web browser included in the image, you will see this page. Unfortunately, Iceweasel is not the default browser; you will need to start it from the menus before entering this URI.