...
Cet article se base sur les articles :
- http://www.esup-portail.org/pages/viewpage.action?pageId=98730206
- http://www.esup-portail.org/display/ESUPMU/c%29+Installation
- http://www.esup-portail.org/display/ESUPMU/Installation+uPortal+v3+sur+une+centOS
Télécharger les packages de source
...
| Bloc de code |
|---|
<VirtualHost *:80 >
<Proxy balancer://entCluster>
BalancerMember ajp://localhost:8009 min=10 max=150 route=ent1 retry=1
Order deny,allow
</Proxy>
ProxyPass /balancer-manager !
ProxyPass / balancer://entCluster/ stickysession=JSESSIONID nofailover=Off
<Location /balancer-manager>
SetHandler balancer-manager
Order allow,deny
Allow from xxx.univ-xxx.fr
</Location>
ServerName entergo-unpidf.univ-paris1.fr
ServerAlias entergo-unpidf
ErrorLog /var/log/apache2/entergo-unpidf-error.log
CustomLog /var/log/apache2/entergo-unpidf-access.log combined
# restreindre l'acces a certaines choses, notamment les web services
<Location ~ "/(EsupMonitor|private|problems|services)">
Order allow,deny
Allow from univ-paris1.fr
</Location>
# Interdit en mode non SSL
<Location /jkstatus>
Order allow,deny
</Location>
</VirtualHost>
|
...
| Bloc de code |
|---|
sudo tar xzC /usr/local/ -f /usr/local/src/apache-ant-1.7.1-bin.tar.gz
sudo ln -s apache-ant-1.7.1 /usr/local/ant
sudo ln -s ../ant/bin/ant /usr/local/bin/ant
|
...
| Bloc de code |
|---|
sudo -u esup tar xzC /usr/local/esup -f /usr/local/src/esup-uPortal-3.2.4-esup-1.0.0-RC3.tar.gz
sudo -u esup ln -s esup-uPortal-3.2.4-esup-1.0.0-RC3 /usr/local/esup/esup-package
|
...
| Bloc de code |
|---|
cd /usr/local/esup/esup-package sudo -u esup cp build.sample.properties build.properties sudo -u esup perl -pi -e 's!^java_home=\S+!java_home=/usr/lib/jvm/java-6-sun!' build.properties sudo -u esup perl -pi -e 's!^server.home=\S+!server.home=/usr/local/esup/tomcat!' build.properties sudo -u esup cp config.sample.properties config.properties sudo -u esup perl -pi -e 's!^use.embedded.maven=\S+!use.embedded.maven=true!' config.properties |
Puis configurer tomcat.* , esup.public.host , esup.ldap.* , esup.cas.* et esup.db.* dans config.properties :
...
| Bloc de code |
|---|
root_password=`sudo sed -n 's/password="\(.*\)"/\1/p' /root/.my.cnf`
dbvar() { sed -n 's![[:space:]]*!!g; s/esup.db.'$1'=//p' /usr/local/esup/esup-package/config.properties; }
username=`dbvar username`
password=`dbvar password`
database=`dbvar url | sed 's!jdbc:mysql://localhost/!!'`
echo "grant all on $database.* to $username identified by '$password';" | mysql -uroot -p"$root_password"
mysqladmin -u"$username" -p"$password" create "$database"
|
...
| Bloc de code |
|---|
sudo su - esup cd /usr/local/esup/esup-package ant user.add -Dusername=admin |
Puis accéder à http://entergo-unpidf.univ-paris1.fr/private/
Configurer https
...
| Bloc de code |
|---|
<VirtualHost *:443 >
<Proxy balancer://entCluster>
BalancerMember ajp://localhost:8009 min=10 max=150 route=ent1 retry=1
Order deny,allow
</Proxy>
ProxyPass /balancer-manager !
ProxyPass / balancer://entCluster/ stickysession=JSESSIONID nofailover=Off
<Location /balancer-manager>
SetHandler balancer-manager
Order allow,deny
Allow from xxx.univ-xxx.fr
</Location>
ServerName entergo-unpidf.univ-paris1.fr
ServerAlias entergo-unpidf
ErrorLog /var/log/apache2/entergo-unpidf-ssl-error.log
CustomLog /var/log/apache2/entergo-unpidf-ssl-access.log combined
SSLEngine on
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP
SSLCertificateFile /usr/local/etc/ssl/certs/entergo-unpidf.univ-paris1.fr.crt
SSLCertificateKeyFile /usr/local/etc/ssl/private/entergo-unpidf.univ-paris1.fr.key
SSLCertificateChainFile /usr/local/etc/ssl/certs/cachain.crt
# restreindre l'acces a certaines choses, notamment les web services
<Location ~ "/(EsupMonitor|private|problems|services)">
Order allow,deny
Allow from univ-paris1.fr
</Location>
# Interdit en mode non SSL
<Location /jkstatus>
Order allow,deny
</Location>
</VirtualHost>
|
...