Bearbeiten von „Server/SRS1/2017“

* die [[Plone]]-Kiste
'''Lauffähig'''
noch einen [https://de.wikipedia.org/wiki/Dump Dump] ziehen vom alten Plone4 und dann übertragen

* noch portaudit installieren

== Plone ==

Plone 4.0.5 via UnifiedInstaller installieren.

 <code>
 install.sh --password=<password>  standalone
 </code>

Plone 4.0.5 to 4.1 fehlgeschlagen

* im verzeichnis von …/GenericSetup die rolemap.xml angelegt
link : [https://plone.org/documentation/kb/grant-collection-attopic-permissions-to-contributors-and-editors]

 <?xml version="1.0" encoding="UTF-8"?>
 <rolemap>
  <permissions>
    <permission name="ATContentTypes Topic: Add ATBooleanCriterion" acquire="True">
      <role name="Contributor"/>
    </permission>
    <permission name="ATContentTypes Topic: Add ATCurrentAuthorCriterion" acquire="True">
      <role name="Contributor"/>
    </permission>
    <permission name="ATContentTypes Topic: Add ATDateCriteria" acquire="True">
      <role name="Contributor"/>
    </permission>
    <permission name="ATContentTypes Topic: Add ATDateRangeCriterion" acquire="True">
      <role name="Contributor"/>
    </permission>
    <permission name="ATContentTypes Topic: Add ATListCriterion" acquire="True">
      <role name="Contributor"/>
    </permission>
    <permission name="ATContentTypes Topic: Add ATPathCriterion" acquire="True">
      <role name="Contributor"/>
    </permission>
    <permission name="ATContentTypes Topic: Add ATPortalTypeCriterion" acquire="True">
      <role name="Contributor"/>
    </permission>
    <permission name="ATContentTypes Topic: Add ATReferenceCriterion" acquire="True">
      <role name="Contributor"/>
    </permission>
    <permission name="ATContentTypes Topic: Add ATRelativePathCriterion" acquire="True">
      <role name="Contributor"/>
    </permission>
    <permission name="ATContentTypes Topic: Add ATSelectionCriterion" acquire="True">
      <role name="Contributor"/>
    </permission>
    <permission name="ATContentTypes Topic: Add ATSimpleIntCriterion" acquire="True">
      <role name="Contributor"/>
    </permission>
    <permission name="ATContentTypes Topic: Add ATSimpleStringCriterion" acquire="True">
      <role name="Contributor"/>
    </permission>
    <permission name="ATContentTypes Topic: Add ATSortCriterion" acquire="True">
      <role name="Contributor"/>
    </permission>
    <permission name="Add portal topics" acquire="True">
      <role name="Contributor"/>
    </permission>
    <permission name="Change portal topics" acquire="True">
       <role name="Editor"/>
     </permission>
  </permissions>
 </rolemap>

== Ports ==

=== Apache22 ===
 
 <code>
 [X] THREADS               Enable threads support in APR
 [ ] MYSQL                 Enable MySQL support for apr-dbd
 [ ] PGSQL                 Enable PostgreSQL support for apr-dbd
 [ ] SQLITE                Enable SQLite support for apr-dbd
 [X] IPV6                  Enable IPv6 support
 [ ] BDB                   Enable BerkeleyDB dbm
 [X] AUTH_BASIC            Enable mod_auth_basic
 [X] AUTH_DIGEST           Enable mod_auth_digest
 [X] AUTHN_FILE            Enable mod_authn_file
 [ ] AUTHN_DBD             Enable mod_authn_dbd
 [X] AUTHN_DBM             Enable mod_authn_dbm
 [X] AUTHN_ANON            Enable mod_authn_anon
 [X] AUTHN_DEFAULT         Enable mod_authn_default
 [X] AUTHN_ALIAS           Enable mod_authn_alias
 [X] AUTHZ_HOST            Enable mod_authz_host
 [X] AUTHZ_GROUPFILE       Enable mod_authz_groupfile
 [X] AUTHZ_USER            Enable mod_authz_user
 [X] AUTHZ_DBM             Enable mod_authz_dbm
 [X] AUTHZ_OWNER           Enable mod_authz_owner
 [X] AUTHZ_DEFAULT         Enable mod_authz_default
 [X] CACHE                 Enable mod_cache
 [X] DISK_CACHE            Enable mod_disk_cache
 [X] FILE_CACHE            Enable mod_file_cache 
 [X] MEM_CACHE             Enable mod_mem_cache
 [X] DAV                   Enable mod_dav
 [X] DAV_FS                Enable mod_dav_fs
 [ ] BUCKETEER             Enable mod_bucketeer
 [ ] CASE_FILTER           Enable mod_case_filter
 [ ] CASE_FILTER_IN        Enable mod_case_filter_in
 [ ] EXT_FILTER            Enable mod_ext_filter
 [ ] LOG_FORENSIC          Enable mod_log_forensic
 [ ] OPTIONAL_HOOK_EXPORT  Enable mod_optional_hook_export
 [ ] OPTIONAL_HOOK_IMPORT  Enable mod_optional_hook_import
 [ ] OPTIONAL_FN_IMPORT    Enable mod_optional_fn_import
 [ ] OPTIONAL_FN_EXPORT    Enable mod_optional_fn_export
 [ ] LDAP                  Enable mod_ldap
 [ ] AUTHNZ_LDAP           Enable mod_authnz_ldap
 [X] ACTIONS               Enable mod_actions
 [X] ALIAS                 Enable mod_alias
 [X] ASIS                  Enable mod_asis
 [X] AUTOINDEX             Enable mod_autoindex
 [X] CERN_META             Enable mod_cern_meta
 [ ] CGI                   Enable mod_cgi
 [X] CHARSET_LITE          Enable mod_charset_lite
 [ ] DBD                   Enable mod_dbd
 [X] DEFLATE               Enable mod_deflate
 [X] DIR                   Enable mod_dir
 [X] DUMPIO                Enable mod_dumpio
 [X] ENV                   Enable mod_env
 [X] EXPIRES               Enable mod_expires
 [X] HEADERS               Enable mod_headers
 [X] IMAGEMAP              Enable mod_imagemap
 [X] INCLUDE               Enable mod_include
 [X] INFO                  Enable mod_info
 [X] LOG_CONFIG            Enable mod_log_config
 [X] LOGIO                 Enable mod_logio
 [X] MIME                  Enable mod_mime
 [X] MIME_MAGIC            Enable mod_mime_magic
 [X] NEGOTIATION           Enable mod_negotiation
 [X] REWRITE               Enable mod_rewrite
 [X] SETENVIF              Enable mod_setenvif
 [X] SPELING               Enable mod_speling
 [X] STATUS                Enable mod_status
 [ ] UNIQUE_ID             Enable mod_unique_id
 [ ] USERDIR               Enable mod_userdir
 [ ] USERTRACK             Enable mod_usertrack
 [X] VHOST_ALIAS           Enable mod_vhost_alias
 [X] FILTER                Enable mod_filte
 [ ] SUBSTITUTE            Enable mod_substitute
 [X] VERSION               Enable mod_version
 [X] PROXY                 Enable mod_proxy
 [X] PROXY_CONNECT         Enable mod_proxy_connect
 [X] PATCH_PROXY_CONNECT   Patch proxy_connect SSL support
 [ ] PROXY_FTP             Enable mod_proxy_ftp
 [X] PROXY_HTTP            Enable mod_proxy_http
 [ ] PROXY_AJP             Enable mod_proxy_ajp
 [X] PROXY_BALANCER        Enable mod_proxy_balancer
 [ ] PROXY_SCGI            Enable mod_proxy_scgi
 [X] SSL                   Enable mod_ssl
 [ ] SUEXEC                Enable mod_suexec
 [ ] SUEXEC_RSRCLIMIT      SuEXEC rlimits based on login class
 [X] REQTIMEOUT            Enable mod_reqtimeout
 [ ] CGID                  Enable mod_cgid
 </code>

=== apr-ipv6-devrandom-gdbm-db42 ===

 <code>
 [X] THREADS    Enable Threads in apr
 [X] IPV6       Enable IPV6 Support in apr
 [X] BDB        Enable Berkley BDB support in apr-util
 [X] GDBM       Enable GNU dbm support in apr-util
 [ ] LDAP       Enable LDAP support in apr-util
 [ ] MYSQL      Enable MySQL suport in apr-util
 [ ] NDBM       Enable NDBM support in apr-util
 [ ] PGSQL      Enable Postgresql suport in apr-util
 [ ] SQLITE     Enable SQLite3 support in apr-util
 [X] DEVRANDOM  Use /dev/random or compatible in apr
 </code>

=== gdbm ===

 <code>
 [ ] COMPAT  dbm/ndbm compatibility
 </code>

=== python27 ===

 <code>
 [X] THREADS          Enable thread support
 [ ] HUGE_STACK_SIZE  Use a larger thread stack
 [ ] SEM              Use POSIX semaphores (experimental)
 [ ] PTH              Use GNU Pth for threading/multiprocessing
 [X] UCS4             Use UCS4 for unicode support
 [X] PYMALLOC         Use python's internal malloc
 [X] IPV6             Enable IPv6 support
 [ ] FPECTL           Enable floating point exception handling
 </code>

== Konfiguration der Programme ==

=== Konfiguration Plone ===
; für Backup aktivierung
* in die buildout.cfg schreiben unter der überschrift [buildout]
 ########################################## ##
 # Parts Specification
 #--------------------
 # Specifies the components that should be included in the buildout.
 # All the basics are in the base.cfg extension; you may add your
 # own if you need them at the end of this file.
 parts =
    instance
    zopepy
    zopeskel
    unifiedinstaller
    chown
    '''backup'''
    '''repozo'''

* [backup] am Schluss hin schreiben und weitere Parameter eintragen (buildout.cfg)
 [backup]
 recipe = collective.recipe.backup
 keep = 4
 full = true
 debug = true
 gzip = true
 enable_snapshotrestore = true

; wenn die Datei repozo.py fehlte (buildout.cfg)

 [repozo]
 recipe = zc.recipe.egg
 eggs = ZODB3
 scripts = repozo

; /etc/crontab

 # Plone inkrementelles Backup
 *       23      *       *       6       root    <path/to/plone>/zinstance/bin/backup
 # Plone Fullbackup (snapshot)
 *       20      5       *       *       root    <path/to/plone>/zinstance/bin/snapshotbackup

=== Konfiguration Apache22 ===

* httpd.conf

 <code>
 ServerTokens ProductOnly
 ServerSignature Off
 </code>

* extra/httpd-vhost.conf

 <code>
 <VirtualHost *:80>
 
 # A sample VirtualHost section for using Apache as a webserver
 # instead of Zope.
 # ServerName is the url of your website.
 
 ServerName '''<domain>'''
 # ServerName 127.0.0.1
 # Add serverAlias lines for other domain names that should
 # point to this website. They will be rewritten by Apache to
 # the ServerName, so that anyone going to www.site.com
 # will be invisibly redirected to site.com in their browser.
 
 ServerAlias '''domain'''
 
 # ServerAdmin is your email address, which shows up on error
 # pages when Apache cannot connect to Zope.
 
 ServerAdmin '''adminmail'''
 
 # The ProxyPass and ProxyPassReverse lines are the magic
 # ingredients. They rewite requests to http://site.com and
 # pass the entire request through to Zope on
 # http://site.com:8080. The VirtualHostBase ensures that
 # when the page goes back to the browser, it goes out through
 # Apache, and appears to have come from http://site.com.
 
 # The line is made up from:
 
 # ProxyPass or ProxyPassReverse
 
 # / is the url at http://site.com that you wish to use to
 # point to the Zope site. You could keep http://site.com as a
 # flat HTML site in Apache, and replace / with /zope to make
 # http://site/com/zope point to your zope site.
 # http://site.com:8080 is the address that your zope is
 # running on.
 
 # /VirtualHostBase/http/site.com:80 makes sure that zope
 # *thinks* it is running at http://site.com instead of at
 # http://site.com:8080. You don't have to do anything else
 # in Zope to make this work.
 
 # /yourplonesite is the location of your Plone Site within Zope.
 # If you added a Plone Site into the root of your Zope with an id
 # of 'mysite', then you just change this bit to /mysite
 
 # /VirtualHostRoot/ makes your Plone site think it is the root of the site.
 
 ProxyPass / http://127.0.0.1:8080/VirtualHostBase/http/'''<domain>''':80/Plone/VirtualHostRoot/
 ProxyPassReverse / http://127.0.0.1:8080/VirtualHostBase/http/'''<domain>''':80/Plone/VirtualHostRoot/
 
 # CacheRoot is the location on the filesystem to store files that
 # Apache caches. This directory must be created, and the user that
 # Apache runs as must have full write permissions to it.
 # It's a bad idea to create this in the /tmp directory, as the
 # directory itself will then be deleted when you reboot.
 
 CacheRoot "/var/cache/www.stura.htw-dresden.de"
 CacheEnable disk /
 
 # CacheSize determines how big this cache can get in KB. It's a
 # good idea that this number is about 30% less than the available
 # space in the CacheRoot directory. Here we choose to cache 100MB
 # of data, which is enough for a personal website, but not for
 # anything larger.
 MCacheSize 524288
 MCacheMaxObjectCount 100000
 MCacheMinObjectSize 1
 MCacheMaxObjectSize 200000
 # CacheGcInterval specifies how often (in hours) to examine the
 # cache and delete obsolete files.
 #CacheGcInterval 2
 
 # CacheLastModifiedFactor allows the estimation of an expiry date
 # for a page if it doesn't have an expiry-date specified in the
 # HTTP headers returned from Zope. This is based on (time since
 # last modification * CacheLastModifiedFactor), so that content
 # that is ten hours old would be given an expiry date of 1 hour in
 # the future.
 CacheLastModifiedFactor 0.1
 
 # CacheDefaultExpire sets a default expiry time of 0,5 hour into the
 # future for cached pages.
 CacheDefaultExpire 0.5
 
 # CacheDirLength sets the number of characters used in directory
 # names for subdirectories of CacheRoot
 CacheDirLength 3
 
 # The following definitions set expiry times for various content
 # types. In this list, each content type defined is cached for a
 # maximum period of 1 hour (3600 seconds) before it must be checked
 # again. Non-listed content types are not cached.
 
 ExpiresActive On
 expiresByType image/ief A3600
 ExpiresByType image/tiff A3600
 ExpiresByType image/bmp A3600
 ExpiresByType image/gif A3600
 ExpiresByType image/png A3600
 ExpiresByType image/jpeg A3600
 ExpiresByType image/x-cmu-raster A3600
 ExpiresByType image/x-portable-anymap A3600
 ExpiresByType image/x-portable-bitmap A3600
 ExpiresByType image/x-portable-graymap A3600
 ExpiresByType image/x-portable-pixmap A3600
 ExpiresByType image/x-rgb  A3600
 ExpiresByType image/x-xbitmap A3600
 ExpiresByType image/x-xpixmap A3600
 ExpiresByType image/x-xwindowdump A3600
 ExpiresByType text/css A3600
 ExpiresByType text/javascript A3600
 ExpiresByType application/x-javascript A3600
 ExpiresByType text/html A3600
 ExpiresByType text/xml A3600
 
 # CustomLog "/var/log/www.stura.htw-dresden.de-access_log" common
 
 </VirtualHost>
 </code>

== Links ==

* [http://www.imn.htwk-leipzig.de/~mfrank/lehre/osem_10/CBecker_Backup_Datensicherung_Vortrag.pdf PDF File für Plone4 Backup]