-Scott Harrison -
--Last updated: 11/01/2000 -
--This is the current list of steps to support LON-CAPA installation. These steps have -been tested. -
You can do this by these 5 steps: -1. enter the system command, as "root", pwunconv -2. enter the system command, as "root", grpunconv -3. Set the following to be the /etc/pam.d/login file on your system -#%PAM-1.0 -auth required /lib/security/pam_securetty.so -auth required /lib/security/pam_pwdb.so shadow nullok -auth required /lib/security/pam_nologin.so -account required /lib/security/pam_pwdb.so -password required /lib/security/pam_cracklib.so -password required /lib/security/pam_pwdb.so nullok use_authtok -session required /lib/security/pam_pwdb.so -session optional /lib/security/pam_console.so -4. Set the following to be the /etc/pam.d/passwd file on your system -#%PAM-1.0 -auth required /lib/security/pam_pwdb.so shadow nullok -account required /lib/security/pam_pwdb.so -password required /lib/security/pam_cracklib.so retry=3 -password required /lib/security/pam_pwdb.so use_authtok nullok -5. Set/reset passwords. As "root" use 'passwd', and 'passwd www' -to change the important passwords. This creates crypt-processible -passwords in /etc/passwd. -- -
-In the future, LON-CAPA Installation will be distributed on a CD complete with a -customized interface. Many elements for doing this have been coded, and are in place, but -it awaits completion. -
- - + + + + + + ++You will need to check all the following things to ensure proper +installation of your LON-CAPA system. +
++Execute the following command to create a user named 'www' on your +LON-CAPA server: +
+| +/usr/sbin/useradd www + |
| Step # | Description |
|---|---|
| +1 + |
+ Is your system using shadow passwords? (Note: LON-CAPA will +work with either MD5/non-MD5 configured systems). If your +system is not using shadow passwords, then do not perform +any of the additional steps. If your system is using shadow +passwords, then you will need to perform the additional steps below. + +
+How to detect:
+ If there is output such as "root:x:0:0:root:/root:/bin/bash", +then your system is using shadow passwords and you will need to continue with +the steps below. + + |
| +2 + |
+ Retrieve the mod_auth_external source by +running the following command + ++wget http://www.wwnet.net/~janc/software/mod_auth_external-2.1.13.tar.gz + + + |
| +3 + |
+ Unpack the mod_auth_external source by +running the following command + ++tar xzvf mod_auth_external-2.1.13.tar.gz + + |
| +4 + |
+ Go to the pwauth directory by +running the following command + ++cd mod_auth_external-2.1.13/pwauth/ + + |
| +5 + |
+ Edit config.h and change SERVER_UIDS definition + +
+Determine the user id of 'www':
+ |
| +6 + |
+ Compile the pwauth executable by +running the following command + ++make + + |
| +7 + |
+ Install pwauth by doing the following + +
+cp pwauth /usr/local/sbin/
+ +Edit (creating the file) /etc/pam.d/pwauth to have the contents: + ++ auth required /lib/security/pam_pwdb.so shadow nullok + auth required /lib/security/pam_nologin.so + account required /lib/security/pam_pwdb.so ++ |
+Download the most current + +loncapa.tar.gz. +
++The UPDATE command will refresh your filesystem with all +the latest LON-CAPA software. +
+| ./UPDATE |
+The CHECKRPMS command will check the RPMs on your machine +against an FTP repository. +
+| ./CHECKRPMS |
+The following commands describe how to configure the MySQL database
+on your LON-CAPA server.
+
Note:
+
Entering the mysql shell
+
++mysql -u root -p mysql +OR +mysql -u root (depending on whether you have set a root password) ++ |
Creating the mysql 'www' user (after entering mysql shell)
+
+
+mysql> CREATE DATABASE loncapa;
+
+mysql> INSERT INTO user (Host, User, Password)
+mysql> VALUES ('localhost','www',password('WWWPASSWORD'));
+
+mysql> GRANT ALL PRIVILEGES ON *.* TO www@localhost;
+
+mysql> FLUSH PRIVILEGES;
+
+ |
SECURITY: set a password for the mysql 'root' user
+
+
+shell> mysql -u root mysql
+mysql> SET PASSWORD FOR root@localhost=PASSWORD('ROOTPASSWORD');
+
+ |
SECURITY: only allow access from localhost
+
++shell> mysql -u root -p mysql +mysql> DELETE * FROM user WHERE host<>'localhost'; ++ |
+The TEST command will check the installation software, +the perl libraries on your system, the MySQL database, and +will also automatically test the real-time operation of the +LON-CAPA Apache web server. +
+| ./TEST |
+Using the TEST command will likely +be an iterative process. +It is normal to expect that the TEST command +will recommend you perform various steps to ensure optimal +performance of your LON-CAPA server. +
+ + + +