Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Migration of unmigrated content due to installation of a new plugin

...

Note:

...

These

...

directions

...

are

...

not

...

complete,

...

and

...

may

...

contain

...

errors.

...

If

...

you

...

encounter

...

an

...

omission

...

or

...

error,

...

please

...

correct

...

this

...

document.

...

  1. Request

...

  1. Server

...

  1. Ops

...

  1. setup

...

  1. the

...

  1. standard

...

  1. system

...

  1. user

...

  1. configuration

...

  1. on

...

  1. this

...

  1. system.

...

  1. This

...

  1. will

...

  1. include

...

  1. groups

...

  1. and

...

  1. system

...

  1. users

...

  1. for

...

  1. logs,

...

  1. www,

...

  1. and

...

  1. db.

...

  1. Secure

...

  1. access

...

  1. to

...

  1. the

...

  1. AMIT

...

  1. Definative

...

  1. Software

...

  1. Library

...

  1. on

...

  1. afs.

...

  1. If

...

  1. you

...

  1. have

...

  1. afs

...

  1. mounts

...

  1. available,

...

  1. it

...

  1. is

...

  1. located

...

  1. at

...

  1. /afs/athena.mit.edu/project/amit-dsl/Public.

...

  1. If

...

  1. you

...

  1. have

...

  1. an

...

  1. athena

...

  1. account,

...

  1. you

...

  1. can

...

  1. cut

...

  1. and

...

  1. paste

...

  1. the

...

  1. following,

...

  1. replacing

...

  1. the

...

  1. 'dracus'

...

  1. username

...

  1. with

...

  1. your

...

  1. own.

...

  1. Download

...

  1. the

...

  1. following

...

  1. software

...

  1. from

...

  1. the

...

  1. ISDA

...

  1. software

...

  1. repository

...

  1. onto

...

  1. the

...

  1. system

...

  1. being

...

  1. configured:

...

  1. Code Block

...

  1. 
    mkdir -p /home/www/tmp
    cd /home/www/tmp
    scp dracus@athena.dialup.mit.edu:/afs/athena.mit.edu/project/amit-dsl/Public/Apache/httpd-2.2.4.tar.gz \
        dracus@athena.dialup.mit.edu:/afs/athena.mit.edu/project/amit-dsl/Public/PHP/php-5.2.6.tar.gz \
        dracus@athena.dialup.mit.edu:/afs/athena.mit.edu/project/amit-dsl/Public/common-init/apache_home.sh \
        dracus@athena.dialup.mit.edu:/afs/athena.mit.edu/project/amit-dsl/Public/common-init/web \
        /home/www/tmp
    

...

  1. Check that the Apache installed is greater then version 2.2.3.

...

  1. If

...

  1. it

...

  1. is

...

  1. not,

...

  1. and

...

  1. this

...

  1. is

...

  1. RHEL

...

  1. 5

...

  1. or

...

  1. greater,

...

  1. use

...

  1. YUM

...

  1. to

...

  1. install

...

  1. it.

...

  1. Code Block

...

  1. 
    yum -y install httpd-2.2.3 httpd-devel-2.2.3
    

...

  1. If the installed Apache is version 2.2.3

...

  1. or

...

  1. greater,

...

  1. link

...

  1. the

...

  1. config

...

  1. directories

...

  1. into

...

  1. place.

...

  1. Code Block

...

  1. 
    mkdir /home/www/apache-2.2.3
    ln -s /home/www/apache-2.2.3 /home/www/apache
    scp -r dracus@athena.dialup.mit.edu:/afs/athena.mit.edu/project/amit-dsl/Public/Apache/config-files/conf \
    dracus@athena.dialup.mit.edu:/afs/athena.mit.edu/project/amit-dsl/Public/Apache/config-files/logs \
    dracus@athena.dialup.mit.edu:/afs/athena.mit.edu/project/amit-dsl/Public/Apache/config-files/htdocs \
    dracus@athena.dialup.mit.edu:/afs/athena.mit.edu/project/amit-dsl/Public/Apache/config-files/icons \
    dracus@athena.dialup.mit.edu:/afs/athena.mit.edu/project/amit-dsl/Public/Apache/config-files/man\*  \
    /home/www/apache
    scp dracus@athena.dialup.mit.edu:/afs/athena.mit.edu/project/amit-dsl/Public/common-init/apache_home.sh \
    dracus@athena.dialup.mit.edu:/afs/athena.mit.edu/project/amit-dsl/Public/common-init/web \
    /home/www/tmp
    chown -R www:www /home/www
    mv /etc/httpd /etc/httpd.bak
    ln -s /home/www/apache /etc/httpd
    ln -s /usr/lib64/httpd/modules /home/www/apache/modules
    

...

  1. If the current version of MySQL is below 5.0,

...

  1. or

...

  1. if

...

  1. MySQL

...

  1. is

...

  1. not

...

  1. installed,

...

  1. update

...

  1. it

...

  1. to

...

  1. a

...

  1. recent

...

  1. version.

...

    1. Download

...

    1. the

...

    1. needed

...

    1. packages

...

    1. for

...

    1. RHEL

...

    1. 4

...

    1. or

...

    1. 5.

...

      • RHEL

...

      • 5,

...

      • 32

...

      • bit

...

      • Code Block

...

      • 
        mkdir -p /home/db/tmp
        cd /home/db/tmp
        scp dracus@athena.dialup.mit.edu:/afs/athena.mit.edu/project/amit-dsl/Public/MySQL/5.0.45/rhel5/i386/* \
        dracus@athena.dialup.mit.edu:/afs/athena.mit.edu/project/amit-dsl/Public/MySQL/perl-DBI-1.52-1.rhel5.i386.rpm \
        /home/db/tmp
        

...

      • On RHEL 5,

...

      • 64

...

      • bit

...

      • systems,

...

      • we

...

      • are

...

      • able

...

      • to

...

      • use

...

      • the

...

      • OS

...

      • provided

...

      • version

...

      • of

...

      • MySQL

...

      • (5.0.45),

...

      • installed

...

      • through

...

      • yum.

...

      • Code Block

...

      • 
        yum -y install mysql-server
        

...

      • RHEL 4
        Code Block
        
        mkdir /home/db/tmp
        cd /home/db/tmp
        scp root@trogdor:/opt/software-repository-tmp/MySQL/MySQL-client-community-5.0.45-0.rhel4.i386.rpm \
        root@trogdor:/opt/software-repository-tmp/MySQL/MySQL-server-community-5.0.45-0.rhel4.i386.rpm \
        root@trogdor:/opt/software-repository-tmp/MySQL/MySQL-shared-community-5.0.45-0.rhel4.i386.rpm \
        root@trogdor:/opt/software-repository-tmp/MySQL/MySQL-shared-compat-5.0.45-0.rhel4.i386.rpm \
        root@trogdor:/opt/software-repository-tmp/MySQL/MySQL-test-community-5.0.45-0.rhel4.i386.rpm \
        root@trogdor:/opt/software-repository-tmp/MySQL/perl-DBI-1.52-1.fc6.i386.rpm \
        root@trogdor:/opt/software-repository-tmp/MySQL/my.cnf \
        /home/db/tmp
        

...

    1. Stop the MySQL server if it is running, remove the old version, and install the new one.
      • RHEL 4
        Code Block
        
        /etc/init.d/mysql stop
        rpm -ev cyrus-sasl-sql-2.1.19-5.EL4.i386
        rpm -ev dovecot-0.99.11-4.EL4.i386
        rpm -ev mysql-4.1.20-1.RHEL4.1.i386
        rpm -ev mysqlclient10-3.23.58-4.RHEL4.1.i386
        rpm -ivh MySQL-client-community-5.0.45-0.rhel4.i386.rpm
        rpm -ivh MySQL-test-community-5.0.45-0.rhel4.i386.rpm
        rpm -ivh MySQL-devel-community-5.0.45-0.rhel4.i386.rpm
        rpm -ivh MySQL-server-community-5.0.45-0.rhel4.i386.rpm
        

...

      • RHEL 5,

...

      • 32

...

      • bit

...

      • Code Block

...

      • 
        /etc/init.d/mysql stop
        rpm -ev cyrus-sasl-sql
        rpm -ev dovecot
        rpm -ev mysql
        rpm -ev mysqlclient10
        rpm -ivh perl-DBI-1.52-1.rhel5.i386.rpm
        rpm -ivh MySQL-client-community-5.0.45-0.rhel5.i386.rpm
        rpm -ivh MySQL-test-community-5.0.45-0.rhel5.i386.rpm
        rpm -ivh MySQL-devel-community-5.0.45-0.rhel5.i386.rpm
        rpm -ivh MySQL-server-community-5.0.45-0.rhel5.i386.rpm
        

...

      • On RHEL 5,

...

      • 64

...

      • bit

...

      • system,

...

      • we

...

      • have

...

      • already

...

      • installed

...

      • MySQL

...

      • using

...

      • yum.

...

  1. Stop

...

  1. the

...

  1. MySQL

...

  1. server

...

  1. and

...

  1. reconfigure

...

  1. my.cnf.

...

  1. The

...

  1. MySQL

...

  1. server

...

  1. startups

...

  1. as

...

  1. part

...

  1. of

...

  1. the

...

  1. rpm

...

  1. install

...

  1. process.

...

  1. Code Block

...

  1. 
    /etc/init.d/mysql stop
    mv /var/lib/mysql /home/db
    chown -R db:db /home/db ; chmod 755 /home/db
    cd /etc/
    scp dracus@athena.dialup.mit.edu:/afs/athena.mit.edu/project/amit-dsl/Public/MySQL/my.cnf . # this one seems busted; steal my.cnf from some working machine --amb
    /etc/init.d/mysql start
    

...

    • Be certain to use the my.cnf

...

    • file

...

    • from

...

    • the

...

    • ISDA

...

    • software

...

    • repository,

...

    • as

...

    • it

...

    • sets

...

    • the

...

    • database

...

    • user

...

    • to

...

    • be

...

    • 'db'

...

    • (and

...

    • not

...

    • the

...

    • default

...

    • 'mysql'),

...

    • and

...

    • put

...

    • the

...

    • home

...

    • and

...

    • data

...

    • directories

...

    • into

...

    • /home/db.

...

  1. Install

...

  1. OpenSSL

...

  1. and

...

  1. setup

...

  1. certificates.

...

    • If

...

    • the

...

    • version

...

    • of

...

    • OpenSSL

...

    • is

...

    • greater

...

    • the

...

    • 0.9.8,

...

    • skip

...

    • the

...

    • install

...

    • step.

...

    • Code Block

...

    • 
      openssl version
      

...

    • Install OpenSSL,

...

    • if

...

    • needed.

...

    • Code Block

...

    • 
      mkdir /home/www/tmp
      cd /home/www/tmp
      tar -xzvf /root/openssl-0.9.8a.tar.gz
      cd openssl-0.9.8a
      ./config --prefix=/home/www/ssl --openssldir=/home/www/ssl
      make
      make install
      

...

  1. Setup certificates
    1. Create home directories for ssl.
      Code Block
      
      mkdir /home/www/ssl
      mkdir /home/www/ssl/certs
      mkdir /home/www/ssl/private
      

...

    1. get the MIT CA cert from http://ca.mit.edu/mitClient.crt

...

    1. and save

...

    1. it

...

    1. as

...

    1. /home/www/ssl/certs/mitClient.crt

...

    1. and

...

    1. convert

...

    1. mitCA.crt

...

    1. to

...

    1. pem

...

    1. format:

...

    1. Code Block

...

    1. 
      cd /home/www/ssl/certs/
      wget http://ca.mit.edu/mitClient.crt
      openssl x509 -in mitClient.crt -inform DER -outform PEM -out mitCA.pem
      

...

    1. Alternatively,

...

    1. download

...

    1. mitCA.pem

...

    1. from

...

    1. the

...

    1. MAP

...

    1. repository.

...

    1. Code Block

...

    1. 
      scp dracus@athena.dialup.mit.edu:/afs/athena.mit.edu/project/amit-dsl/Public/common-init/mitCA.pem /home/www/ssl/certs
      

...

    1. Generate rsa key.

...

    1. This

...

    1. simply

...

    1. generates

...

    1. some

...

    1. random

...

    1. stuff:

...

    1. Code Block

...

    1. 
      ps > /tmp/foo
      ps -elf >> /tmp/foo # this is pretty bad.  /dev/random may be a better bet. --amb
      openssl genrsa -rand /tmp/foo 1024 >/home/www/ssl/private/`hostname`-key.pem
      

...

    1. Generate request for a certificate
      Code Block
      
      cd /home/www/ssl/private
      chmod 700 .
      openssl req -key `hostname`-key.pem -new > ../certs/`hostname`-req.pem
      

...

    1. send

...

    1. the

...

    1. file

...

    1. /usr/local/ssl/certs/`hostname`-req.pem

...

    1. to

...

    1. mitcert@mit.edu,

...

      • Please

...

      • be

...

      • aware,

...

      • the

...

      • organization

...

      • (O)

...

      • is

...

      • Massachusetts

...

      • Institute

...

      • of

...

      • Technology

...

      • and

...

      • the

...

      • common

...

      • name

...

      • (CN)

...

      • is

...

      • the

...

      • name

...

      • of

...

      • the

...

      • server

...

      • or

...

      • service,

...

      • including

...

      • the

...

      • domain

...

      • name

...

      • (.mit.edu).

...

      •   Also,

...

      • some

...

      • servers,

...

      • such

...

      • as

...

      • Thalia

...

      • servers,

...

      • can

...

      • represent

...

      • an

...

      • entire

...

      • subdomain.

...

      •   These

...

      • servers

...

      • will

...

      • need

...

      • certificates

...

      • issued

...

      • with

...

      • a

...

      • wildcard

...

      • in

...

      • the

...

      • domain

...

      • name,

...

      • such

...

      • as

...

      • *.isda-thalia-1.mit.edu.

...

      • Remember,

...

      • if

...

      • the

...

      • server

...

      • is

...

      • a

...

      • Thalia

...

      • server,

...

      • if

...

      • will

...

      • need

...

      • a

...

      • wildcard

...

      • certificate

...

      • and

...

      • DNS

...

      • record

...

      • for

...

      • *.

...

      • [hostname

...

      • ],

...

      • and

...

      • if

...

      • it

...

      • is

...

      • doing

...

      • any

...

      • type

...

      • of

...

      • authentication,

...

      • it

...

      • will

...

      • need

...

      • a

...

      • joint

...

      • client/server

...

      • certificate

...

      • to

...

      • be

...

      • able

...

      • to

...

      • connect

...

      • to

...

      • the

...

      • Shibboleth

...

      • server

...

      • (and

...

      • have

...

      • end

...

      • users

...

      • connect

...

      • to

...

      • it

...

      • as

...

      • well).

...

    1. Also

...

    1. generate

...

    1. a

...

    1. self

...

    1. signed

...

    1. temporary

...

    1. certificate,

...

    1. add

...

    1. the

...

    1. x509

...

    1. and

...

    1. nodes

...

    1. options

...

    1. to

...

    1. the

...

    1. openssl

...

    1. command

...

    1. line.

...

    1. This

...

    1. will

...

    1. allow

...

    1. continuation

...

    1. of

...

    1. the

...

    1. install

...

    1. process

...

    1. while

...

    1. waiting

...

    1. for

...

    1. the

...

    1. official

...

    1. certificate

...

    1. to

...

    1. be

...

    1. generated.

...

    1. Code Block

...

    1. 
      cd /home/www/ssl/private
      openssl req -key `hostname`-key.pem -new -x509 -nodes > ../certs/`hostname`-temp-cert.pem
      

...

    1. When you receive a certificate from MIT Certificates, save it as /home/www/ssl/certs/`hostname`-cert.pem

...

      • to

...

      • look

...

      • at

...

      • a

...

      • request:

...

      • Code Block

...

      • 
        openssl req -in ./req.pem -text
        

...

      • to look at the private key:
        Code Block
        
        openssl rsa -in /home/www/ssl/private/`hostname`-key.pem -text
        

...

      • to look at the server certificate:
        Code Block
        
        openssl x509 -in /home/www/ssl/certs/`hostname`-cert.pem -text
        

...

  1. Install Apache.

...

  1. If

...

  1. you

...

  1. are

...

  1. using

...

  1. RHEL

...

  1. 5,

...

  1. skip

...

  1. this

...

  1. step.

...

  1. Code Block

...

  1. 
    cd /home/www/tmp
    tar \-xzvf /root/httpd-2.2.4.tar.gz
    cd httpd-2.2.4
    ./configure \--prefix=/home/www/apache-2.2.4 \--enable-ssl \
    \--with-ssl=/home/www/ssl \
    \--enable-modules="most mod_rewrite"  \--enable-so
    make
    make install
    ln \-s /home/www/apache-2.2.4 /home/www/apache
    

...

  1. Install additional packages to support PHP, and build it.
    Code Block
    
    cd /home/www/tmp
    scp dracus@athena.dialup.mit.edu:/afs/athena.mit.edu/project/amit-dsl/Public/PHP/php-5.2.6.tar.gz .
    yum -y remove php php-common php-cli php-ldap
    yum -y install libxml2-devel
    yum -y install openssl-devel
    yum -y install ncurses-devel
    yum -y install e2fsprogs-devel
    yum -y install krb5-devel
    yum -y install libidn-devel
    yum -y install bzip2-devel
    yum -y install curl-devel
    yum -y install libpng-devel
    yum -y install gmp-devel
    yum -y install libxslt-devel libxslt-python
    yum -y install openldap-devel
    yum -y install httpd-devel
    yum -y install mysql-devel
    tar -xzvf php-5.2.6.tar.gz
    cd php-5.2.6
    ./configure --enable-shared --with-mysql=shared --with-kerberos=/usr/kerberos \
     --with-jpeg-dir --with-libdir=lib64 --prefix=/home/www/php-5.2.6 --with-apxs2 \
    --enable-fastcgi --with-openssl --with-mysql-sock=/home/db/mysql/mysql.sock \
    --with-mysqli=shared --enable-sockets --enable-soap=shared \
    --with-openssl-dir=/home/www/ssl --with-pear=/usr/share/pear \
    --enable-bcmath=shared --with-bz2=shared --enable-calendar=shared \
    --with-curl=shared --enable-dba=shared --enable-exif=shared --enable-ftp=shared \
    --with-gd=shared --with-gmp=shared --without-iconv --with-ldap=shared \
    --enable-mbstring=shared --with-ncurses --enable-pcntl --with-pcre-dir \
    --with-pdo_mysql=shared --with-pdo_sqlite=shared --enable-posix \
    --enable-reflection --enable-session --enable-shmop --enable-simplexml \
    --enable-sockets --enable-spl --enable-sysvmsg --enable-sysvsem --enable-sysvshm \
    --enable-tokenizer --disable-wddx --enable-xml=shared --enable-xmlreader=shared \
    --enable-xmlwriter=shared --with-xsl --enable-zip --enable-filter --enable-hash \
    --enable-json --enable-dom --enable-pdo=shared --with-sqlite=shared --enable-libxml
    make
    make test
    make install
    cd /usr/local
    ln -s php-5.2.6 php
    scp dracus@athena.dialup.mit.edu:/afs/athena.mit.edu/project/amit-dsl/Public/PHP/php.ini /usr/local/php/lib
    scp dracus@athena.dialup.mit.edu:/afs/athena.mit.edu/project/amit-dsl/Public/PHP/phpinfo.php /home/www/apache/html
    chown -R www:www /home/www
    

...

  1. Configure PHP
    Code Block
  2. Configure Apache
    1. edit /home/www/apache/conf/httpd.conf

...

    1. (

...

    1. N.B.:

...

    1. May

...

    1. not

...

    1. be

...

    1. necessary

...

    1. after

...

    1. above

...

    1. configuration

...

    1. steps,

...

    1. but

...

    1. do

...

    1. check..

...

    1. )
      • edit the following directives:
        Code Block
        
        ServerRoot "/home/www/apache"          # change to apache home directory
        User www                               # change from daemon
        Group www                              # change from daemon
        Include conf/extra/httpd-vhosts.conf   # Uncomment
        Include conf/extra/httpd-ssl.conf      # Uncomment
        

...

      • add to /home/www/apache/conf/httpd.conf,

...

      • and

...

      • the

...

      • bottom

...

      • of

...

      • the

...

      • other

...

      • includes:

...

      • Code Block

...

      • 
        # PHP module includes
        
        LoadModule php5_module modules/libphp5.so
        AddHandler php5-script .php
        AddType text/html .php
        DirectoryIndex index.php
        \#AddType application/x-httpd-php-source .phps
        

...

    1. edit /home/www/apache/conf/extra/httpd-vhosts.conf

...

    1. to

...

    1. have

...

    1. ONLY

...

    1. one

...

    1. of

...

    1. the

...

    1. following

...

    1. VirtualHost

...

    1. blocks:

...

    1. Code Block

...

    1. 
      <VirtualHost *:80>
      RewriteEngine On
      
      RewriteRule ^/(.*) https://hostname.mit.edu/$1 [L,R]
      
      </VirtualHost>
      

...

    1. To prevent some web pages from being redirected to https, add an escape clause between "RewriteEngine On" and the RewriteRule:
      Code Block
      
      RewriteCond %
      {REQUEST_URI}
      \!/WarehouseService
      

...

    1. edit /home/www/apache/conf/extra/httpd-ssl.conf

...

    1. and

...

    1. alter

...

    1. the

...

    1. following

...

    1. directives:

...

    1. Code Block

...

    1. 
      # points to directory for static html files
      DocumentRoot "/home/www/apache/htdocs"
      # the servername of the server
      ServerName gybe.mit.edu:443
      # the admins of this server
      ServerAdmin map-support@mit.edu
      # error log file
      ErrorLog /home/www/apache/logs/error_log
      # access log file
      TransferLog /home/www/apache/logs/access_log
      # public server certificate
      SSLCertificateFile /usr/local/ssl/certs/gybe.mit.edu.pem
      # private server certificate
      SSLCertificateKeyFile /usr/local/ssl/private/https-key.pem
      \#certificate path
      SSLCACertificatePath /usr/local/ssl/certs
      # certificate authority key
      SSLCACertificateFile /usr/local/ssl/certs/mitCA.pem
      
      SSLVerifyClient require
      SSLVerifyDepth 10
      

...

      • Set the allow and deny line for "<Directory />"

...

      • section

...

      • from

...

      • "Deny

...

      • from

...

      • all"

...

      • to

...

      • "Allow

...

      • from

...

      • all"

...

      • if

...

      • you

...

      • are

...

      • testing

...

      • the

...

      • SSL

...

      • configuration.

...

    1. add

...

    1. the

...

    1. following

...

    1. after

...

    1. the

...

    1. '<Directory

...

    1. "/home/www/apache/cgi-bin">'

...

    1. block

...

    1. in

...

    1. /home/www/apache/conf/extras/httpd-ssl.conf

...

    1. Code Block

...

    1. 
      SSLOptions +StdEnvVars +ExportCertData
      

...

  1. Setup the home and init scripts, and link them into runlevels
    Code Block
    
    cp /home/www/tmp/web /etc/init.d
    cp /home/www/tmp/apache_home.sh /etc/profile.d/
    

...

    1. edit the variables in the top section of the web file to use the directories and binaries correct for this system
    2. be certain to check if apache is using a httpdctl or apachectl starter program, usually contained in /home/www/apache/bin,

...

    1. and

...

    1. set

...

    1. the

...

    1. apachectl

...

    1. variable

...

    1. accordingly

...

    1. set

...

    1. web

...

    1. to

...

    1. be

...

    1. executable

...

    1. Code Block

...

    1. 
      chmod a+rx,a-w /etc/init.d/web /etc/profile.d/apache_home.sh
      

...

    1. link startweb and stopweb to the web program, from wherever it is located, and link start scripts in /etc/init.d

...

    1. :

...

    1. (this

...

    1. should

...

    1. be

...

    1. turned

...

    1. into

...

    1. a

...

    1. one-line

...

    1. chkconfig

...

    1. invocation

...

    1. --amb)

...

    1. Code Block
      
      ln -s /etc/init.d/web /root/startweb
      ln -s /etc/init.d/web /root/stopweb
      ln -s /etc/init.d/web /etc/rc.d/rc1.d/K15web
      ln -s /etc/init.d/web /etc/rc.d/rc2.d/K15web
      ln -s /etc/init.d/web /etc/rc.d/rc3.d/K15web
      ln -s /etc/init.d/web /etc/rc.d/rc4.d/K15web
      ln -s /etc/init.d/web /etc/rc.d/rc5.d/K15web
      ln -s /etc/init.d/web /etc/rc.d/rc6.d/K15web
      ln -s /etc/init.d/web /etc/rc.d/rc2.d/S15web
      ln -s /etc/init.d/web /etc/rc.d/rc3.d/S15web
      ln -s /etc/init.d/web /etc/rc.d/rc4.d/S15web
      ln -s /etc/init.d/web /etc/rc.d/rc5.d/S15web
      

...

  1. update paths in /etc/profile,

...

  1. by

...

  1. adding

...

  1. the

...

  1. following

...

  1. line

...

  1. in

...

  1. the

...

  1. path

...

  1. manipulation

...

  1. code

...

  1. block

...

  1. (you

...

  1. can

...

  1. find

...

  1. it

...

  1. by

...

  1. searching

...

  1. for

...

  1. /usr/local/sbin)

...

  1. Code Block

...

  1. 
    pathmunge /usr/local/bin
    pathmunge /usr/kerberos/bin
    

...

  1. If this is going to be a SDLS server, install Zend Platform. Otherwise, skip this step.
    1. Go to the web user temp directory, install the Zend Platform installer from Trogdor, and untar it.
      • If this is a 32 bit system, use the 32 bit installer.
        Code Block
        
        cd /home/www/tmp
        scp root@trogdor:/opt/software-repository-tmp/PHP/ZendPlatform-3.6.2-linux-glibc23-i386.tar.gz .
        tar \-xzvf ZendPlatform-3.6.2-linux-glibc23-i386.tar.gz
        cd ZendPlatform-3.6.2-linux-glibc23-i386
        

...

      • If this is a 64 bit system, use the 64 bit installer.
        Code Block
        
        cd /home/www/tmp
        scp root@trogdor:/opt/software-repository-tmp/PHP/ZendPlatform-3.6.2-linux-glibc23-x86_64.tar.gz .
        tar \-xzvf ZendPlatform-3.6.2-linux-glibc23-x86_64.tar.gz
        cd ZendPlatform-3.6.2-linux-glibc23-x86_64
        

...

    1. Check that /usr/lib

...

    1. is

...

    1. listed

...

    1. in

...

    1. /etc/ld.so.conf

...

    1. and

...

    1. update

...

    1. it

...

    1. if

...

    1. not.

...

    1. Code Block

...

    1. 
      echo /usr/lib/ >> /etc/ld.so.conf
      ldconfig
      

...

    1. Shutdown Apache and (temporarily)

...

    1. disable

...

    1. vhosts

...

    1. and

...

    1. ssl.

...

    1. Zend

...

    1. Platform

...

    1. will

...

    1. not

...

    1. install

...

    1. if

...

    1. they

...

    1. are

...

    1. configured.

...

    1. Code Block

...

    1. 
      /etc/init.d/web stop
      

...

      • Comment out the following lines in /home/www/apache/conf/httpd.conf:

...

      • Code Block

...

      • 
        \#Include conf/extra/httpd-vhosts.conf
        \#Include conf/extra/httpd-ssl.conf
        

...

    1. Change to the Zend installer directory and start the installer.
      Code Block
      
      cd /home/www/tmp/ZendPlatform-3.6.2-linux-glibc23-x86_64
      ./install
      

...

    1. Press enter through the opening screens, and accept their license.
    2. Pick option #4, 'Manually specify a different web server' when they ask you which web server to use.
    3. Give the path to the apachectl program.
      • If this is a OS installed version of Apache, give it the standard OS path.
        Code Block
        
        /usr/sbin/apachectl
        

...

      • If this is a custom build of Apache, give the Apache bin directory for the web user.
        Code Block
        
        /home/www/apache/bin/apachectl
        

...

    1. Select yes to autodetect the configuration directories, and confirm the startup command.
    2. Once the Zend installer detects the directories, confirm the directories listed are correct.
      • The PID file directory will need to be changed to include the full path: /home/www/apache-2.2.3/log/httpd.pid

...

      • The

...

      • URL

...

      • will

...

      • need

...

      • to

...

      • FQDN:

...

...

      • Then

...

      • press

...

      • '<Ok.>'

...

    1. Select

...

    1. 'Custom

...

    1. installation'.

...

    1. Select

...

    1. 'Cluster

...

    1. Manager/Standalone

...

    1. server'.

...

    1. Specify

...

    1. '/home/www/Zend/Platform'

...

    1. as

...

    1. the

...

    1. install

...

    1. directory.

...

    1. Specify

...

    1. 'ZendPlatform'

...

    1. as

...

    1. the

...

    1. directory

...

    1. for

...

    1. administrative

...

    1. files.

...

    1. It

...

    1. will

...

    1. be

...

    1. created

...

    1. under

...

    1. /home/www/apache/htdocs.

...

    1. Enter

...

    1. and

...

    1. confirm

...

    1. a

...

    1. password.

...

    1. Make

...

    1. it

...

    1. unique,

...

    1. secure,

...

    1. etc.

...

    1. You

...

    1. will

...

    1. need

...

    1. to

...

    1. enter

...

    1. it

...

    1. twice.

...

    1. Review

...

    1. the

...

    1. install

...

    1. preferences,

...

    1. and

...

    1. if

...

    1. they

...

    1. are

...

    1. correct,

...

    1. press

...

    1. '<Yes>'.

...

    1. Enable

...

    1. Web

...

    1. Services.

...

    1. Do

...

    1. not

...

    1. configure

...

    1. a

...

    1. Java

...

    1. bridge.

...

    1. Enable

...

    1. Session

...

    1. Clustering.

...

    1. Enable

...

    1. High

...

    1. Availability

...

    1. mode.

...

    1. Skip

...

    1. the

...

    1. domain

...

    1. name

...

    1. cookie.

...

    1. Select

...

    1. the

...

    1. IP

...

    1. address

...

    1. of

...

    1. the

...

    1. system

...

    1. being

...

    1. configured

...

    1. to

...

    1. use

...

    1. for

...

    1. session

...

    1. clustering.

...

    1. Enter

...

    1. the

...

    1. number

...

    1. of

...

    1. processors

...

    1. on

...

    1. the

...

    1. system

...

    1. (available

...

    1. in

...

    1. /proc/cpuinfo).

...

    1. This

...

    1. is

...

    1. '1'

...

    1. for

...

    1. VMs.

...

    1. Cache

...

    1. data

...

    1. to

...

    1. the

...

    1. hard

...

    1. disk.

...

    1. Accept

...

    1. the

...

    1. default

...

    1. cache

...

    1. size.

...

    1. If

...

    1. this

...

    1. is

...

    1. a

...

    1. stand

...

    1. alone

...

    1. server,

...

    1. use

...

    1. '127.0.1.*'

...

    1. for

...

    1. the

...

    1. clustering

...

    1. IP

...

    1. range.

...

    1. If

...

    1. it

...

    1. is

...

    1. part

...

    1. of

...

    1. a

...

    1. larger

...

    1. cluster,

...

    1. put

...

    1. the

...

    1. IP

...

    1. addresses

...

    1. of

...

    1. the

...

    1. other

...

    1. systems

...

    1. in

...

    1. here.

...

    1. Select

...

    1. 'Write

...

    1. Through'

...

    1. to

...

    1. store

...

    1. cached

...

    1. sessions.

...

    1. Enable

...

    1. Job

...

    1. Queues.

...

    1. Select

...

    1. the

...

    1. IP

...

    1. address

...

    1. of

...

    1. the

...

    1. system

...

    1. being

...

    1. configured

...

    1. to

...

    1. use

...

    1. for

...

    1. Job

...

    1. Queues.

...

    1. Enter

...

    1. `FQDN`:10003

...

    1. for

...

    1. the

...

    1. URL

...

    1. and

...

    1. port

...

    1. for

...

    1. Job

...

    1. Queues.

...

    1. Enter

...

    1. and

...

    1. confirm

...

    1. a

...

    1. password

...

    1. for

...

    1. Job

...

    1. Queues.

...

    1. Enter

...

    1. an

...

    1. alias

...

    1. for

...

    1. the

...

    1. Queue

...

    1. server.

...

    1. May

...

    1. only

...

    1. contain

...

    1. letters

...

    1. and

...

    1. numbers.

...

    1. Example:

...

    1. 'sdlstestqueue'

...

    1. Enter

...

    1. the

...

    1. IP

...

    1. address

...

    1. of

...

    1. the

...

    1. system

...

    1. being

...

    1. configured

...

    1. and

...

    1. the

...

    1. IP

...

    1. cluster

...

    1. range

...

    1. from

...

    1. above.

...

    1. After

...

    1. a

...

    1. couple

...

    1. of

...

    1. minutes

...

    1. of

...

    1. processing,

...

    1. you

...

    1. should

...

    1. get

...

    1. an

...

    1. installation

...

    1. report.

...

    1. If

...

    1. all

...

    1. components

...

    1. installed

...

    1. successfully,

...

    1. press

...

    1. enter

...

    1. 3

...

    1. times

...

    1. to

...

    1. get

...

    1. out

...

    1. of

...

    1. the

...

    1. installer.

...

    1. If

...

    1. not,

...

    1. get

...

    1. out

...

    1. of

...

    1. the

...

    1. installer,

...

    1. use

...

    1. the

...

    1. uninstall

...

    1. script

...

    1. in

...

    1. /home/www/Zend/Platform/bin/uninstall_Plat.sh

...

    1. to

...

    1. remove

...

    1. the

...

    1. installation,

...

    1. and

...

    1. move

...

    1. the

...

    1. php.ini

...

    1. file

...

    1. from

...

    1. /etc

...

    1. before

...

    1. making

...

    1. corrections

...

    1. and

...

    1. trying

...

    1. again.

...

    1. If

...

    1. Zend

...

    1. Platform

...

    1. has

...

    1. been

...

    1. successfully

...

    1. installed,

...

    1. reconfigure

...

    1. Apache

...

    1. to

...

    1. use

...

    1. SSL

...

    1. and

...

    1. Vhosts

...

    1. by

...

    1. uncommenting

...

    1. their

...

    1. associated

...

    1. lines

...

    1. in

...

    1. /home/www/apache/conf/httpd.conf,

...

    1. and

...

    1. bounce

...

    1. Apache

...

    1. with

...

    1. /etc/init.d/web.

...

  1. Install

...

  1. the

...

  1. PHP

...

  1. info

...

  1. file.

...

  1. Code Block

...

  1. 
    scp dracus@athena.dialup.mit.edu:/afs/athena.mit.edu/project/amit-dsl/Public/PHP/phpinfo.php /home/www/apache/htdocs/
    

...

  1. Make certain all files have appropriate ownership.
    Code Block
    
    chown -R www:www /home/www
    

...

  1. To start and stop tomcat and apache, use the initialization scripts in /etc/init.d.

...

  1. Be

...

  1. certain

...

  1. to

...

  1. leave

...

  1. them

...

  1. running

...

  1. when

...

  1. you

...

  1. are

...

  1. finished.

...

    • starting
      Code Block
      
      /etc/init.d/web start
      

...

    • stopping
      Code Block
      
      /etc/init.d/web stop
      

...