StuRa:Server/SRS13/2015

• für wiki

Ports

Apache22

[X] THREADS               Enable threads support in APR
[X] MYSQL                 Enable MySQL support for apr-dbd
[ ] PGSQL                 Enable PostgreSQL support for apr-dbd
[ ] SQLITE                Enable SQLite support for apr-dbd
[X] IPV6                  Enable IPv6 support
[ ] BDB                   Enable BerkeleyDB dbm
[X] AUTH_BASIC            Enable mod_auth_basic
[X] AUTH_DIGEST           Enable mod_auth_digest
[X] AUTHN_FILE            Enable mod_authn_file
[ ] AUTHN_DBD             Enable mod_authn_dbd
[X] AUTHN_DBM             Enable mod_authn_dbm
[X] AUTHN_ANON            Enable mod_authn_anon
[X] AUTHN_DEFAULT         Enable mod_authn_default
[X] AUTHN_ALIAS           Enable mod_authn_alias
[X] AUTHZ_HOST            Enable mod_authz_host
[X] AUTHZ_GROUPFILE       Enable mod_authz_groupfile
[X] AUTHZ_USER            Enable mod_authz_user
[X] AUTHZ_DBM             Enable mod_authz_dbm
[X] AUTHZ_OWNER           Enable mod_authz_owner
[X] AUTHZ_DEFAULT         Enable mod_authz_default
[X] CACHE                 Enable mod_cache
[X] DISK_CACHE            Enable mod_disk_cache
[X] FILE_CACHE            Enable mod_file_cache 
[X] MEM_CACHE             Enable mod_mem_cache
[X] DAV                   Enable mod_dav
[X] DAV_FS                Enable mod_dav_fs
[ ] BUCKETEER             Enable mod_bucketeer
[ ] CASE_FILTER           Enable mod_case_filter
[ ] CASE_FILTER_IN        Enable mod_case_filter_in
[ ] EXT_FILTER            Enable mod_ext_filter
[ ] LOG_FORENSIC          Enable mod_log_forensic
[ ] OPTIONAL_HOOK_EXPORT  Enable mod_optional_hook_export
[ ] OPTIONAL_HOOK_IMPORT  Enable mod_optional_hook_import
[ ] OPTIONAL_FN_IMPORT    Enable mod_optional_fn_import
[ ] OPTIONAL_FN_EXPORT    Enable mod_optional_fn_export
[ ] LDAP                  Enable mod_ldap
[ ] AUTHNZ_LDAP           Enable mod_authnz_ldap
[X] ACTIONS               Enable mod_actions
[X] ALIAS                 Enable mod_alias
[X] ASIS                  Enable mod_asis
[X] AUTOINDEX             Enable mod_autoindex
[X] CERN_META             Enable mod_cern_meta
[X] CGI                   Enable mod_cgi
[X] CHARSET_LITE          Enable mod_charset_lite
[ ] DBD                   Enable mod_dbd
[X] DEFLATE               Enable mod_deflate
[X] DIR                   Enable mod_dir
[X] DUMPIO                Enable mod_dumpio
[X] ENV                   Enable mod_env
[X] EXPIRES               Enable mod_expires
[X] HEADERS               Enable mod_headers
[X] IMAGEMAP              Enable mod_imagemap
[X] INCLUDE               Enable mod_include
[X] INFO                  Enable mod_info
[X] LOG_CONFIG            Enable mod_log_config
[X] LOGIO                 Enable mod_logio
[X] MIME                  Enable mod_mime
[X] MIME_MAGIC            Enable mod_mime_magic
[X] NEGOTIATION           Enable mod_negotiation
[X] REWRITE               Enable mod_rewrite
[X] SETENVIF              Enable mod_setenvif
[X] SPELING               Enable mod_speling
[X] STATUS                Enable mod_status
[ ] UNIQUE_ID             Enable mod_unique_id
[ ] USERDIR               Enable mod_userdir
[ ] USERTRACK             Enable mod_usertrack
[X] VHOST_ALIAS           Enable mod_vhost_alias
[X] FILTER                Enable mod_filte
[ ] SUBSTITUTE            Enable mod_substitute
[X] VERSION               Enable mod_version
[ ] PROXY                 Enable mod_proxy
[ ] PROXY_CONNECT         Enable mod_proxy_connect
[X] PATCH_PROXY_CONNECT   Patch proxy_connect SSL support
[ ] PROXY_FTP             Enable mod_proxy_ftp
[ ] PROXY_HTTP            Enable mod_proxy_http
[ ] PROXY_AJP             Enable mod_proxy_ajp
[ ] PROXY_BALANCER        Enable mod_proxy_balancer
[ ] PROXY_SCGI            Enable mod_proxy_scgi
[X] SSL                   Enable mod_ssl
[ ] SUEXEC                Enable mod_suexec
[ ] SUEXEC_RSRCLIMIT      SuEXEC rlimits based on login class
[X] REQTIMEOUT            Enable mod_reqtimeout
[ ] CGID                  Enable mod_cgid

apr-ipv6-devrandom-gdbm-db42

[X] THREADS    Enable Threads in apr
[X] IPV6       Enable IPV6 Support in apr
[X] BDB        Enable Berkley BDB support in apr-util
[X] GDBM       Enable GNU dbm support in apr-util
[ ] LDAP       Enable LDAP support in apr-util
[X] MYSQL      Enable MySQL suport in apr-util
[ ] NDBM       Enable NDBM support in apr-util
[ ] PGSQL      Enable Postgresql suport in apr-util
[ ] SQLITE     Enable SQLite3 support in apr-util
[X] DEVRANDOM  Use /dev/random or compatible in apr

gdbm

[ ] COMPAT  dbm/ndbm compatibility

libxslt

[ ] MEM_DEBUG  Enable memory debugging
[X] CRYPTO     Enable crypto support for exslt

MediaWiki

[ ] PGSQL    Use PostgreSQL (instead of MySQL)
[ ] LDAP     Use LDAP authentication
[ ] TEXVC    Use built-in TeX rendering
[X] APC      Use pecl-APC
[ ] EACCEL   Use eAccelerator (instead of pecl-APC)
[ ] IMAGICK  Use ImageMagick 

MySQL5.5.-client

[X] OPENSSL  Enable SSL support
[ ] FASTMTX  Replace mutexes with spinlocks

MySQL5.5.-server

[X] OPENSSL  Enable SSL support
[ ] FASTMTX  Replace mutexes with spinlocks

pecl-APC

[ ] IPC         Enable IPC shm memory support (default: mmap)
[ ] SEMAPHORES  Enable sysv IPC semaphores (default: fcntl())
[ ] SPINLOCKS   Enable spinlocks (experimental)
[ ] FILEHITS    Enable per request cache info 

PHP5.3

[X] CLI        Build CLI version
[X] CGI        Build CGI version
[ ] FPM        Build FPM version (experimental)
[X] APACHE     Build Apache module
[ ] AP2FILTER   Use Apache 2.x filter interface (experimental)
[ ] DEBUG      Enable debug
[X] SUHOSIN    Enable Suhosin protection system
[ ] MULTIBYTE  Enable zend multibyte support
[X] IPV6       Enable ipv6 support
[ ] MAILHEAD   Enable mail header patch
[ ] LINKTHR    Link thread lib (for threaded extensions)

php5-mbstring

[X] REGEX  Enable multibyte regex support

php5-mysql

[ ] MYSQLND  Use MySQL Native Driver

python27

[X] THREADS          Enable thread support
[ ] HUGE_STACK_SIZE  Use a larger thread stack
[ ] SEM              Use POSIX semaphores (experimental)
[ ] PTH              Use GNU Pth for threading/multiprocessing
[X] UCS4             Use UCS4 for unicode support
[X] PYMALLOC         Use python's internal malloc
[X] IPV6             Enable IPv6 support
[ ] FPECTL           Enable floating point exception handling

Konfiguration Programme

Apache22

• httpd.conf

...
Listen <IP>:<port>
...
LoadModule php5_module        libexec/apache22/libphp5.so
...
<IfModule php5_module>
 DirectoryIndex index.php index.html
 AddType application/x-httpd-php.php
 AddType application/x-httpd-php-source.phps
<IfModule>
...
Servername <jailname>:<port>
...
Include etc/apache22/extra/httpd-vhosts.conf
...

• extra/httpd-vhost.conf

...
NameVirtualHost <ip>:80
...
<VirtualHost <ip>:80>
   ServerAdmin webmaster@<domain>
   DocumentRoot "<directoryname>"          
   ServerName <domainname>
   ErrorLog "/var/log/<name>-error_log"
   CustomLog "/var/log/<name>-access_log" common
</VirtualHost>

Probleme

• Einige antike Clients sind nicht kompatibel zu namensbasierten virtuellen Hosts. Damit namensbasierte virtuelle Hosts funktionieren, muss der Client den HTTP-Host-Header senden. Dies ist bei HTTP/1.1 vorgeschrieben und in allen modernen HTTP/1.0-Browsern als Erweiterung implementiert. Wenn Sie Unterstützung für veraltete Clients benötigen und dennoch namensbasierte virtuelle Hosts verwenden, dann finden Sie eine mögliche Lösung dafür am Ende des Dokuments.
• Namensbasierte virtuelle Hosts können aufgrund der Natur des SSL-Protokolls nicht mit SSL-gesicherten Servern verwendet werden.
• Einige Betriebssysteme und Netzwerkanlagen setzen Techniken zum Bandbreiten-Management ein, die nicht zwischen Hosts unterscheiden können, wenn diese nicht auf verschiedenen IP-Adressen liegen.

Mediawiki

• für mehrere Mediawikis auf einen Server

cd /usr/local/www/mediawiki
mkdir orginal
chown www orginal
mv * orginal
mkdir <ein neues verzeichniss für jedes wiki>
chown www <wikiverzeichniss>
ln -s orginal/* <wikiverzeichniss>
cd <wikiverzeichniss>
rm images
mkdir images
chown www images
chmod 640 images