Index: openacs-4/packages/acs-core-docs/www/xml/install-guide/openacs.xml =================================================================== RCS file: /usr/local/cvsroot/openacs-4/packages/acs-core-docs/www/xml/install-guide/openacs.xml,v diff -u -r1.31 -r1.31.14.1 --- openacs-4/packages/acs-core-docs/www/xml/install-guide/openacs.xml 17 Jul 2006 05:38:37 -0000 1.31 +++ openacs-4/packages/acs-core-docs/www/xml/install-guide/openacs.xml 23 Jun 2016 08:32:46 -0000 1.31.14.1 @@ -16,29 +16,29 @@ AOLserver needs to be started as the root user if you want to use port 80. Once it starts, though, it will drop the root privileges and - run as another user, which you must specify on the command line. It's + run as another user, which you must specify on the command line. It's important that this user has as few privileges as possible. Why? - Because if an intruder somehow breaks in through AOLserver, you don't + Because if an intruder somehow breaks in through AOLserver, you don't want her to have any ability to do damage to the rest of your server. At the same time, AOLserver needs to have write access to some files on your system in order for OpenACS to function - properly. So, we'll run AOLserver with a different user account + properly. So, we'll run AOLserver with a different user account for each different service. A service name should be a single word, letters and numbers only. If the name of your site is one word, that would be a good choice. For example "$OPENACS_SERVICE_NAME" might be the service name for the $OPENACS_SERVICE_NAME.net community. - We'll leave the password blank, which prevents login by + We'll leave the password blank, which prevents login by password, for increased security. The only way to log in will be with ssh certificates. The only people who should log in are developers for that specific instance. Add this user, and put it in the $OPENACS_SERVICE_NAME group so that it can use database and server commands associated with that group. - (If you don't know how to do this, type + (If you don't know how to do this, type man usermod. You can type groups to find out which groups a user is a part of) @@ -96,7 +96,7 @@ Get the install script from CVS. It is located within the main cvs tree, at /etc/install. Use anonymous CVS checkout to get that directory in the home directory of the - service's dedicated user. We put it there so that it is not + service's dedicated user. We put it there so that it is not overwritten when we do the main CVS checkout to the target location. [root root]# su - $OPENACS_SERVICE_NAME @@ -110,7 +110,7 @@ [$OPENACS_SERVICE_NAME $OPENACS_SERVICE_NAME]$ cd install [$OPENACS_SERVICE_NAME install]$ emacs install.tcl - Edit the installation configuration file, /home/$OPENACS_SERVICE_NAME/install/install.tcl and update the site-specific values, such as the new service's IP address and name, which will be written into the new service's config.tcl file. If your system is different from the one described in the previous sections, check the file paths as well. Set do_checkout=yes to create a new OpenACS site directly from a CVS checkout, or =no if you have a fully configured site and just want to rebuild it (drop and recreate the database and repeat the installation). If you have followed a stock installation, the default configuration will work without changes and will install an OpenACS site at 127.0.0.1:8000. + Edit the installation configuration file, /home/$OPENACS_SERVICE_NAME/install/install.tcl and update the site-specific values, such as the new service's IP address and name, which will be written into the new service's config.tcl file. If your system is different from the one described in the previous sections, check the file paths as well. Set do_checkout=yes to create a new OpenACS site directly from a CVS checkout, or =no if you have a fully configured site and just want to rebuild it (drop and recreate the database and repeat the installation). If you have followed a stock installation, the default configuration will work without changes and will install an OpenACS site at 127.0.0.1:8000. Run the install script install.sh as root: [$OPENACS_SERVICE_NAME $OPENACS_SERVICE_NAME]$ exit [root root]# sh /home/$OPENACS_SERVICE_NAME/install/install.sh @@ -172,7 +172,7 @@ Prepare Oracle for OpenACS - If you won't be using Oracle, skip to If you won't be using Oracle, skip to @@ -288,7 +288,7 @@ Create a database user for this service. Give the - user access to the tablespace and rights to connect. We'll use + user access to the tablespace and rights to connect. We'll use $OPENACS_SERVICE_NAMEpassword as our password. @@ -374,7 +374,7 @@ Depending on your distribution, you may receive email when the crontab items are executed. If you - don't want to receive email for those crontab items, + don't want to receive email for those crontab items, you can add > /dev/null 2>&1 to the end of each crontab line @@ -415,12 +415,12 @@ [$OPENACS_SERVICE_NAME etc]$ emacs config.tcl - You can continue without changing any values in the file. However, if you don't change address to match the computer's ip address, you won't be able to browse to your server from other machines. + You can continue without changing any values in the file. However, if you don't change address to match the computer's ip address, you won't be able to browse to your server from other machines. httpport - If you want your - server on a different port, enter it here. The Reference Platform port is 8000, which is suitable for development use. Port 80 is the standard http port - it's the port used by your browser when you enter http://yourserver.test. So you should use port 80 for your production site. + server on a different port, enter it here. The Reference Platform port is 8000, which is suitable for development use. Port 80 is the standard http port - it's the port used by your browser when you enter http://yourserver.test. So you should use port 80 for your production site. httpsport - This is the @@ -496,7 +496,7 @@ the command line via -u 501 -g 502. In AOLserver 4, you must also send a -b flag. Do this by editing the run file as indicated in the comments. - If you are root then killall will affect all OpenACS services on the machine, so if there's more than one you'll have to do ps -auxw | grep + If you are root then killall will affect all OpenACS services on the machine, so if there's more than one you'll have to do ps -auxw | grep nsd and selectively kill by job number. [$OPENACS_SERVICE_NAME etc]$ killall nsd nsd: no process killed @@ -518,7 +518,7 @@ - If you don't see the login page, view your error log + If you don't see the login page, view your error log (/var/lib/aolserver/$OPENACS_SERVICE_NAME/log/$OPENACS_SERVICE_NAME-error.log) to make sure the service is starting without any problems. The most common errors here are trying to start a @@ -540,7 +540,7 @@ Configure a Service with the OpenACS Installer - Now that you've got AOLserver up and running, let's install OpenACS + Now that you've got AOLserver up and running, let's install OpenACS &version;. @@ -562,7 +562,7 @@ The next page shows the results of loading the OpenACS Kernel data model - be prepared to wait a few minutes as it works. You should see a string of output messages from the database as the - datamodel is created. You'll see the line: + datamodel is created. You'll see the line: @@ -663,7 +663,7 @@ Set up database environment variables for the site user. Depending on how you installed Oracle or PostGreSQL, these settings may be necessary for working with the database while logged in as the service user. They do not - directly affect the service's run-time connection with the + directly affect the service's run-time connection with the database, because those environmental variables are set by the wrapper scripts nsd-postgres and nsd-oracle. @@ -679,7 +679,7 @@ Oracle. These environment variables are specific for a local Oracle installation communicating via IPC. If you are connecting to a remote - Oracle installation, you'll need to adjust these appropriately. Also, + Oracle installation, you'll need to adjust these appropriately. Also, make sure that the '8.1.7' matches your Oracle version. export ORACLE_BASE=/ora8/m01/app/oracle