...
Cet article se base sur les articles :
- http://www.esup-portail.org/pages/viewpage.action?pageId=98730206
- http://www.esup-portail.org/display/ESUPMU/c%29+Installation
- http://www.esup-portail.org/display/ESUPMU/Installation+uPortal+v3+sur+une+centOS
Télécharger les packages de source
...
| Bloc de code |
|---|
mkdir -p /usr/local/src cd /usr/local/src sudo wget http://apache.multidist.com/tomcat/tomcat-6/v6.0.3233/bin/apache-tomcat-6.0.3233.tar.gz sudo wget http://archive.apache.org/dist/ant/binaries/apache-ant-1.7.1-bin.tar.gz sudo wget https://sourcesup.cru.fr/frs/download.php/3562/esup-uPortal-3.2.4-esup-1.0.0-RC3.tar.gz echo '928a960268adf610a7d6fe5c4fcd0b20 *apache-tomcat-6.0.32.tar.gz' | md5sum -c - echo 'cc5777c57c4e8269be5f3d1dc515301c *apache-ant-1.7.1-bin.tar.gz' | md5sum -c - echo '17366476588f4bcaa3cc331232fc01b0 *esup-uPortal-3.2.4-esup-1.0.0-RC3.tar.gz' | md5sum -c - |
...
| Bloc de code |
|---|
<VirtualHost *:80 >
<Proxy balancer://entCluster>
BalancerMember ajp://localhost:8009 min=10 max=150 route=ent1 retry=1
Order deny,allow
</Proxy>
ProxyPass /balancer-manager !
ProxyPass / balancer://entCluster/ stickysession=JSESSIONID nofailover=Off
<Location /balancer-manager>
SetHandler balancer-manager
Order allow,deny
Allow from xxx.univ-xxx.fr
</Location>
ServerName entergo-unpidf.univ-paris1.fr
ServerAlias entergo-unpidf
ErrorLog /var/log/apache2/entergo-unpidf-error.log
CustomLog /var/log/apache2/entergo-unpidf-access.log combined
# restreindre l'acces a certaines choses, notamment les web services
<Location ~ "/(EsupMonitor|private|problems|services|monitor)">
Order allow,deny
Allow from univ-paris1.fr
</Location>
# Interdit en mode non SSL
<Location /jkstatus>
Order allow,deny
</Location>
</VirtualHost>
|
...
| Bloc de code |
|---|
sudo tar xzC /usr/local/ -f /usr/local/src/apache-ant-1.7.1-bin.tar.gz
sudo ln -s apache-ant-1.7.1 /usr/local/ant
sudo ln -s ../ant/bin/ant /usr/local/bin/ant
|
...
| Bloc de code |
|---|
sudo -u esup tar xzC /usr/local/esup -f /usr/local/src/esup-uPortal-3.2.4-esup-1.0.0-RC3.tar.gz
sudo -u esup ln -s esup-uPortal-3.2.4-esup-1.0.0-RC3 /usr/local/esup/esup-package
|
...
| Bloc de code |
|---|
cd /usr/local/esup/esup-package sudo -u esup cp build.sample.properties build.properties sudo -u esup perl -pi -e 's!^java_home=\S+!java_home=/usr/lib/jvm/java-6-sun!' build.properties sudo -u esup perl -pi -e 's!^server.home=\S+!server.home=/usr/local/esup/tomcat!' build.properties sudo -u esup cp config.sample.properties config.properties sudo -u esup perl -pi -e 's!^use.embedded.maven=\S+!use.embedded.maven=true!' config.properties |
Puis configurer tomcat.* , esup.public.host , esup.ldap.* , esup.cas.* et esup.db.* dans config.properties :
| Bloc de code |
|---|
# pour "ant _tomcat.init" :
tomcat.update=true
tomcat.reloadable=true
tomcat.port.shutdown=8005
tomcat.port.http=8080
tomcat.port.jk=8009
...
esup.public.host=entergo-unpidf.univ-paris1.fr
...
esup.ldap.url=ldap://ldap-test.univ-paris1.fr
esup.ldap.baseDN=dc=univ-xxx,dc=fr
esup.ldap.bindDN=cn=xxx,ou=xxx,dc=univ-xxx,dc=fr
esup.ldap.bindPasswd=xxx
...
esup.cas.host=cas.univ-xxx.fr
esup.cas.uri=/cas
...
esup.db.username=xxx
esup.db.password=xxx
...
esup.db.type=mysql
esup.db.url=jdbc:mysql://localhost/uportal
esup.db.className=com.mysql.jdbc.Driver
|
...
| Bloc de code |
|---|
sudo -u esup sh -c 'cd /usr/local/esup/esup-package ; ant _tomcat.init -Dtomcat.update=true -Dtomcat.reloadable=false'
|
(nb: il faut appeler la tache _tomcat.init car elle n'est pas effectuée quand on n'utilise pas le embbeded tomcat)
...
| Bloc de code |
|---|
root_password=`sudo sed -n 's/password="\(.*\)"/\1/p' /root/.my.cnf`
dbvar() { sed -n 's![[:space:]]*!!g; s/esup.db.'$1'=//p' /usr/local/esup/esup-package/config.properties; }
username=`dbvar username`
password=`dbvar password`
database=`dbvar url | sed 's!jdbc:mysql://localhost/!!'`
echo "grant all on $database.* to $username identified by '$password';" | mysql -uroot -p"$root_password"
mysqladmin -u"$username" -p"$password" create "$database"
|
...
| Bloc de code |
|---|
sudo su - esup cd /usr/local/esup/esup-package ant user.add -Dusername=admin |
Puis accéder à http://entergo-unpidf.univ-paris1.fr/private/
Configurer https
...
| Bloc de code |
|---|
<VirtualHost *:443 >
<Proxy balancer://entCluster>
BalancerMember ajp://localhost:8009 min=10 max=150 route=ent1 retry=1
Order deny,allow
</Proxy>
ProxyPass /balancer-manager !
ProxyPass / balancer://entCluster/ stickysession=JSESSIONID nofailover=Off
<Location /balancer-manager>
SetHandler balancer-manager
Order allow,deny
Allow from xxx.univ-xxx.fr
</Location>
ServerName entergo-unpidf.univ-paris1.fr
ServerAlias entergo-unpidf
ErrorLog /var/log/apache2/entergo-unpidf-ssl-error.log
CustomLog /var/log/apache2/entergo-unpidf-ssl-access.log combined
SSLEngine on
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP
SSLCertificateFile /usr/local/etc/ssl/certs/entergo-unpidf.univ-paris1.fr.crt
SSLCertificateKeyFile /usr/local/etc/ssl/private/entergo-unpidf.univ-paris1.fr.key
SSLCertificateChainFile /usr/local/etc/ssl/certs/cachain.crt
# restreindre l'acces a certaines choses, notamment les web services
<Location ~ "/(EsupMonitor|private|problems|services)">
Order allow,deny
Allow from univ-paris1.fr
</Location>
# Interdit en mode non SSL
<Location /jkstatus>
Order allow,deny
</Location>
</VirtualHost>
|
...