Fedora Core 5 Linux Installation Notes
Web Server:
- The Apache web server is available for Fedora Core 5. If you have not already done so go to "Applications" > "Add/Remove Software", enter your root password, then under "Servers" tick the check box for "Web Server", click "Optional Packages" and tick all the check boxes, click "Close", click "Apply" and "Continue". Go to "System" > "Administration" > "Security Level and Firewall". Provide your root password, click "ok" and on the "Firewall Options" tab make sure the check boxes next to "WWW (HTTP)" and "Secure WWW (HTTPS) are ticked. On the "SELinux" tab click the arrow on the left of "Modify SELinux Policy" and under (expanded) "HTTPD Service" make sure all the checkboxes are ticked except "Disable SELinux protection for httpd daemon" and "Disable SELinux protection for http suexec". (Please see http://fedora.redhat.com/docs/selinux-faq-fc5/ for important SELinux considerations.) Click "ok". Reboot your machine to enable the new SELinux settings.
- Subscribe to a service such as https://www.dyndns.org/ or http://www.easydns.com/ to register a new domain name (such as your-name.org) and to have their DNS service map your computer's IP address to your new registered domain name. (The command "ifconfig" at the root prompt will output your IP address.) If you have a "dynamic" (changeable) IP address you can use their dynamic DNS service.
- If you are using a router you may have to forward ports 80, 8080, and 443 in order for your web server to work through your router's firewall. See http://www.portforward.com/routers.htm for instructions.
- Open the terminal. Type: Hit enter. Type your root password. Hit enter. Type "ifconfig". Hit enter. This will output the IP address of your machine (the numbers after "inet addr:") or if you are behind a router or gateway go to http://checkip.dyndns.org/ or http://myipaddress.com/ to determine the IP address that the outside world sees for your machine and use that as your IP address in the following.
su -
- Type: Hit enter.
gedit /etc/hosts
- In gedit edit your /etc/hosts file to include a line containing your IP address, your domain name, and your short domain name (the characters before the dot). Be sure to include a carriage return after this line. When you are finished your hosts file should look something like this: Be sure there is a blank line at the end of the file. Click on the "save" icon in gedit and exit gedit.
# Do not remove the following line, or various programs
# that require network functionality will fail.
127.0.0.1 localhost.localdomain localhost
67.172.236.37 stantonfinley.org stantonfinley
- Type: Hit enter.
gedit /etc/sysconfig/network
- In gedit edit your /etc/sysconfig/network file and replace "localhost.localdomain" with your domain name. When you are finished your network file should look something like this: Click on the "save" icon in gedit and exit gedit.
NETWORKING=yes
HOSTNAME=stantonfinley.org
- Type: Hit enter. Go to "File" > "Save As...", type "httpd.conf.original" in the "Save As..." box and click "Save". This creates a backup of your httpd.conf file.
gedit /etc/httpd/conf/httpd.conf
- Type: Hit enter. (You are about to edit your Apache web server configuration file. Please see http://httpd.apache.org/docs/2.0/ for important information about what the configuration lines we are about to edit do.)
gedit /etc/httpd/conf/httpd.conf
- In gedit scroll down to the "ServerAdmin" section and enter your email address instead of "root@localhost".
Scroll down to the "#ServerName" section and uncomment it (take out the "#"). Then enter the registered DNS name of your web site ("whatever.com") or your server's IP address instead of "www.example.com". (If you don't know your IP address type "ifconfig" at the root prompt.)
Scroll down and change "UseCanonicalName Off" to "UseCanonicalName On".
Scroll down to the "Options" line and change "Options Indexes FollowSymLinks" to "Options Indexes Includes FollowSymLinks SymLinksifOwnerMatch ExecCGI MultiViews".
Change "AllowOverride None" to "AllowOverride Options FileInfo AuthConfig Limit" in case you want to use .htaccess files in any of your web subdirectories.
Change "DirectoryIndex index.html index.html.var" to "DirectoryIndex index.html index.html.var index.shtml index.cgi index.php index.phtml index.php3 index.htm home.html welcome.html".
Under the "AddType application/x-compress .Z" and "AddType application/x-gzip .gz .tgz" lines add the line: "AddType application/x-httpd-php .php .phps .php3 .phtml .html .htm .shtml .fds".
Uncomment the line "#AddHandler cgi-script .cgi" and add ".pl" so that it reads "AddHandler cgi-script .cgi .pl".
If you wish to enable support to serve web pages from user's home directories as well comment (add a "#" in front of) "UserDir disable" so that it reads "#UserDir disable" and uncomment "#UserDir public_html" so that it reads "UserDir public_html". Then uncomment and edit the control access stanza for user directories below it so that it looks something like this:
Click on the "save" icon in gedit to save your httpd.conf file and exit gedit. Close the terminal.
AllowOverride Options FileInfo AuthConfig Limit
Options Indexes Includes FollowSymLinks SymLinksifOwnerMatch ExecCGI MultiViews
Order allow,deny
Allow from all
Order deny,allow
Allow from all
- Open a terminal as your regular user (not root). Type: Hit enter.
mkdir public_html
- Type: Hit enter. Close the terminal.
chmod -R 755 public_html
- Open the terminal. Type: Hit enter. Type your root password. Hit enter.
su -
- Type: Hit enter.
cd /home
- Type: Hit enter.
chmod 711 your_user_name
- Type: (Use the name of the user's home directory you are working with in place of "your_user_name".) Hit enter. Close the terminal.
chcon -R -t httpd_user_content_t /home/your_user_name/public_html/
- If you have a favicon.ico copy it to /var/www/html while still logged in as root (cp favicon.ico /var/www/html).
- Go to "System" > "Administration" > "Server Settings" > "Services". Type in your root password in the dialog box that appears and click on "OK". Scroll down the list and tick the check box for "httpd". Also untick the check box for "thttpd" if it is ticked. Click on the "save" icon in the Service Configuration window and then close the window. Do this for runlevel 3 as well as for runlevel 5. Reboot your machine or issue the command "service httpd start" as root to start the Apache web server.
- Open Firefox and type your server's IP address in the URL window and hit enter. You should see the default Apache/Fedora Core test page. Type the registered DNS name of your web site ("whatever.com") in the URL window and hit enter. You should see the test page again.
- While still logged in as root copy or move your web site index.html and any other HTTP content you may have to /var/www/html and/or to /home/your_user_name/public_html. Change permissions on these files to be viewable and executable as appropriate on the web (usually "chmod 755 *"). You are now serving web pages from your Fedora Core web server. You will find your server log files in /etc/httpd/logs and you will be able to view them while logged in as root.
- The secure FTP server vsftpd is available in Fedora Core. If you have not already done so go to Applications" > "Add/Remove Software", enter your root password, then under "Servers" tick the check box for "FTP Server", click "Close", click "Apply" and "Continue". Go to "System" > "Administration" > "Security Level and Firewall". Provide your root password, click "ok" and on the "Firewall Options" tab make sure the check boxes next to "FTP" is ticked. On the "SELinux" tab click the arrow on the left of "Modify SELinux Policy" and under (expanded) "FTP" make sure all the checkboxes are ticked except "Disable SELinux protection for ftpd daemon". Click "ok". Reboot your machine to enable the new SELinux settings.
- If you are using a router you may have to forward ports 20 and 21 in order for your FTP server to work through your router's firewall. See http://www.portforward.com/routers.htm for instructions.
- Register a new domain name for your Fedora box, have it mapped to your IP address, and configure your /etc/hosts and /etc/sysconfig/network files as described in the web server section above.
- Open the terminal. Type: Hit enter.
su -
- Type: Hit enter.
gedit /etc/vsftpd/vsftpd.conf
- In gedit change "anonymous_enable=YES" to "anonymous_enable=NO".
Also add a line that reads "chroot_local_user=YES" just under the line that reads "#chroot_list_file=/etc/vsftpd/chroot_list".
Also uncomment (remove the "#" from) the ascii_ lines so that they read "ascii_upload_enable=YES" and "ascii_download_enable=YES".
Click on the "save" icon in gedit to save your vsftpd.conf file and exit gedit. Close the terminal.
- Go to "System" > "Administration" > "Server Settings" > "Services". Type in your root password in the dialog box that appears and click on "OK". Scroll down the list and check the check box for "vsftpd". Click on the "save" icon in the Service Configuration window and then close the window. Do this for runlevel 3 as well as for runlevel 5. Reboot your machine. You should now be able to access your home user's directory with an FTP client. The host name on your client will be your registered domain name or the IP address of your Fedora Core box. The user ID will be your Fedora Core non-root user name. The password will be your Fedora Core non-root user's password. (I recommend turning off passive mode on the client to speed up transfers. If you use gftp as a client you should edit /etc/sysconfig/iptables-config on the server and add "ip_nat_ftp" into the "IPTABLES_MODULES="" directive so that it reads IPTABLES_MODULES="ip_conntrack_netbios_ns ip_conntrack_ftp ip_nat_ftp". Then reboot your machine.)
- PHP and Perl are available in Fedora Core 5 when we install the web server as described above. If you have enabled the Apache web server (see above) you can test your PHP and Perl installations by doing the following: Open the terminal. Type: Hit enter. Type your root password. Hit enter.
su -
- Type: Hit enter and gedit will open.
gedit /var/www/html/phpinfo.php
- In gedit type: Click the "save" icon in gedit and close gedit.
- While still in the root terminal type: Hit enter and gedit will open.
gedit /var/www/html/printenv.pl
- In gedit type: Be sure there is a blank line at the end of the file. Click the "save" icon in gedit and close gedit.
#!/usr/bin/perl
##
## printenv -- demo CGI program which just prints its environment
##
print "Content-type: text/plain\n\n";
foreach $var (sort(keys(%ENV))) {
$val = $ENV{$var};
$val =~ s|\n|\\n|g;
$val =~ s|"|\\"|g;
print "${var}=\"${val}\"\n";
}
- Type: Hit enter.
chmod 755 /var/www/html/printenv.pl
- Type: Hit enter.
chmod 755 /var/www/html/phpinfo.php
- Now when you open these files from your web server (http://whatever.com/phpinfo.php and http://whatever.com/printenv.pl) you will be able to prove the functionality of your PHP and Perl installations. (In order to allow cgi scripts to execute outside of the cgi-bin directory configure your httpd.conf as described in the web server section above.)
- Special note on configuring sendmail for PHP using your email provider's SMTP (simple mail transport protocol):
Your /etc/php.ini file uses sendmail as the default transport agent for sending email from PHP applications ("sendmail_path = /usr/sbin/sendmail -t -i").
If you have not already done so edit (with gedit as we have been doing) "/etc/hosts" as root (type "su -" in a terminal, hit enter, type your root password, hit enter) and add the line "your.ip.address whatever.org whatever" where "your.ip.address" is the IP address of your web server, "whatever.org" is the registered DNS name of your web site (your canonical domain name), and "whatever" is your short domain name (the characters before the dot). Separate the IP address from the domain name with a couple of tabs.
Edit "/etc/sysconfig/network" and change "localhost.localdomain" to "whatever.org" where "whatever.org" is the registered DNS name of your web site (your canonical domain name). Reboot.
Edit "/etc/mail/local-host-names" and include your domain name.
Edit "/etc/mail/sendmail.mc" and change "dnl define(`SMART_HOST',`smtp.your.provider')dnl" to "define(`SMART_HOST',`smtp.your.provider')dnl" where "smtp.your.provider" is the smtp host that you use to send mail from your email client.
Also change "DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')dnl" to "dnl DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')dnl".
Also change "dnl MASQUERADE_AS(`mydomain.com')dnl" to "MASQUERADE_AS(`your.provider.com')dnl" where "your.provider.com" is the host that you use to send mail from your email client (the characters after the "@").
Add these lines (near the bottom of /etc/mail/sendmail.mc but above "MAILER"): "FEATURE(`genericstable',`hash -o /etc/mail/genericstable.db')dnl" and "GENERICS_DOMAIN_FILE(`/etc/mail/generics-domains')dnl".
Edit or create if required: "/etc/mail/generics-domains". Include in "/etc/mail/generics-domains" your canonical domain name. (Be sure to add a carriage return.)
Edit or create if required: "/etc/mail/genericstable". Include in "/etc/mail/genericstable" the line:"username mailusername@your.provider.com" where "username" is your non-root Fedora user name and "mailusername@your.provider.com" is your email address that you use with your email client. (Be sure to add a carriage return.)
As root execute the command: "make -C /etc/mail". This will regenerate "/etc/mail/sendmail.cf".
As root do a "yum -y install sendmail-cf".
Reboot or start (or restart) sendmail from "System" > "Administration" > "Server Settings" > "Services".
(See http://www.linuxhomenetworking.com/linux-hn/sendmail.htm.)
- MySQL is available in Fedora Core 5. If you have not already done so go to Applications" > "Add/Remove Software", enter your root password, then under "Servers" tick the check box for "MySQL Database" and under "Optional Packages" make sure all the check boxes are ticked. Click "Close", click "Apply" and "Continue". Go to "System" > "Administration" > "Server Settings" > "Services". Type in your root password in the dialog box that appears and click on "OK". Scroll down the list and check the check box for "mysqld". Click on the "save" icon in the Service Configuration window and then close the window. Do this for runlevel 3 as well as for runlevel 5. Reboot your machine to start the MySQL service or enter the command "/sbin/service mysqld start" as root.
- Open the terminal. Type: Hit enter. Type your root password. Hit enter.
su -
- Type: Hit enter.
gedit /etc/my.cnf
- In the mysqld section of my.cnf add the line: Your my.cnf should now look something like this:
skip-innodb
Click the "save" icon in gedit and close gedit.[mysqld]
datadir=/var/lib/mysql
socket=/var/lib/mysql/mysql.sock
# Default to using old password format for compatibility with mysql 3.x
# clients (those using the mysqlclient10 compatibility package).
old_passwords=1
skip-innodb
[mysql.server]
user=mysql
basedir=/var/lib
[mysqld_safe]
err-log=/var/log/mysqld.log
pid-file=/var/run/mysqld/mysqld.pid
- While still in the root terminal type: Hit enter. You will see the mysql> query prompt.
mysql -u root
- Type: Hit enter. You will see something like this:
select user, host, password, select_priv, update_priv, delete_priv, insert_priv from mysql.user;
+------+------------------------+----------+-------------+-------------+-------------+-------------+
| user | host | password | select_priv | update_priv | delete_priv | insert_priv |
+------+------------------------+----------+-------------+-------------+-------------+-------------+
| root | localhost | | Y | Y | Y | Y |
| root | stantonfinley.org | | Y | Y | Y | Y |
| | localhost | | N | N | N | N |
| | stantonfinley.org | | N | N | N | N |
+------+------------------------+----------+-------------+-------------+-------------+-------------+
4 rows in set (0.17 sec)
mysql>
- Type: where "newpassword" is the password that you want to use for the root MySQL super user. Hit enter.
set password for 'root'@'localhost' = password ('newpassword');
- Type: where "host" is the name of your host as reported in the "host" column above and "newpassword" is the password that you want to use for the root MySQL super user. Hit enter.
set password for 'root'@'host' = password ('newpassword');
- Type: Hit enter. You will see something like this with your password hash-encrypted in the "password" column:
select user, host, password, select_priv, update_priv, delete_priv, insert_priv from mysql.user;
+------+------------------------+------------------+-------------+-------------+-------------+-------------+
| user | host | password | select_priv | update_priv | delete_priv | insert_priv |
+------+------------------------+------------------+-------------+-------------+-------------+-------------+
| root | localhost | 1e36745e3c0f99b0 | Y | Y | Y | Y |
| root | stantonfinley.org | 1e36745e3c0f99b0 | Y | Y | Y | Y |
| | localhost | | N | N | N | N |
| | stantonfinley.org | | N | N | N | N |
+------+------------------------+------------------+-------------+-------------+-------------+-------------+
4 rows in set (0.00 sec)
mysql>
- Type: Close the terminal. Reboot your machine. Open a terminal.
exit
- Type: Hit enter. Type your root password. Hit enter.
su -
- Type: Hit enter. MySQL should ask for your MySQL super user password. Type it in. Hit enter.
mysql -u root -p
- Type: You have successfully set up MySQL.
exit
- Configure and enable your web server, PHP, and MySQL as described above. Open Firefox. Go to http://www.phpmyadmin.net/ and download (save to disk) the latest stable version in bzip2 format (phpMyAdmin-2.8.1.tar.bz2). This should save the file to your home folder. If it saves the file to your desktop instead go to your desktop and drag the file into your "Home" folder. (Left mouse click on the file and drag it on top of your "Home" folder while holding the left mouse button down. Then release the mouse button.)
- Open a terminal. Type: Hit enter. Type your root password. Hit enter.
su
- Type: Hit enter.
mv *.tar.bz2 /var/www/html
- Type: Hit enter.
cd /var/www/html
- Type: Hit enter.
bzip2 -dc *.tar.bz2 | tar -xvf -
- Type: Hit enter. Type "y" and hit enter.
rm *.tar.bz2
- Type: Hit enter. Close the terminal. Open the terminal again.
mv phpMyAdmin-2.8.1 phpmyadmin
- Type: Hit enter.
su -
- Type: Hit enter and gedit will open.
gedit /var/www/html/phpmyadmin/libraries/config.default.php
- In /var/www/html/phpmyadmin/libraries/config.default.php change "$cfg['PmaAbsoluteUri'] = '';" to "$cfg['PmaAbsoluteUri'] = ' http://whatever.com/phpmyadmin/';" (where "whatever.com" is your web site).
Change "$cfg['blowfish_secret'] = ''; to "$cfg['blowfish_secret'] = 'passphrase';" where "passphrase" is some arbitrary string of characters that the blowfish algorithm will use to encrypt your password when using cookie type authentication.
Under "Server(s) configuration" change "$cfg['Servers'][$i]['auth_type'] = 'config';" to "$cfg['Servers'][$i]['auth_type'] = 'cookie';".
In gedit click on "File" > "Save as.." and in the "Name" box change the name of the file from "config.default.php" to "../config.inc.php". Then hit the "save" button and close gedit.
As root do a "yum -y install php-mbstring". Close the terminal. Reboot your machine.
Open http://whatever.com/phpmyadmin/ in Firefox (where "whatever.com" is your web site). Type "root" in the "Username:" box and your MySQL super user password in the "Password:" box. Click the "Go" button. You should see the " Welcome to phpMyAdmin" web page. Open a terminal.
- Type: Hit enter. Type your root password. Hit enter.
su -
- Type: Type in your MySQL super user password. Hit enter.
mysql -u root -p
- For MySQL versions 4.0.2 and above (FC5) type: where "pmapassword" is the password for the pma user that you select for the special "controluser" that has only the SELECT privilege on the mysql.user (all columns except "Password"), mysql.db (all columns), mysql.host (all columns) and mysql.tables_priv (all columns except "Grantor" & "Timestamp") tables. Hit enter. Hit enter.
GRANT USAGE ON mysql.* TO 'pma'@'localhost' IDENTIFIED BY 'pmapassword';
GRANT SELECT (
Host, User, Select_priv, Insert_priv, Update_priv, Delete_priv,
Create_priv, Drop_priv, Reload_priv, Shutdown_priv, Process_priv,
File_priv, Grant_priv, References_priv, Index_priv, Alter_priv,
Show_db_priv, Super_priv, Create_tmp_table_priv, Lock_tables_priv,
Execute_priv, Repl_slave_priv, Repl_client_priv
) ON mysql.user TO 'pma'@'localhost';
GRANT SELECT ON mysql.db TO 'pma'@'localhost';
GRANT SELECT ON mysql.host TO 'pma'@'localhost';
GRANT SELECT (Host, Db, User, Table_name, Table_priv, Column_priv)
ON mysql.tables_priv TO 'pma'@'localhost';
GRANT SELECT, INSERT, UPDATE, DELETE ON phpmyadmin.* TO 'pma'@'localhost';
- For MySQL versions 4.1.2 or later (FC5) open Firefox, go to http://whatever.org/phpmyadmin/scripts/create_tables_mysql_4_1_2+.sql. (Substitute your web site's registered DNS name or IP address for "whatever.org".) Click "edit" > "select all", click "edit" > "copy", go back to the terminal and click "edit" > "paste". Hit enter. The entire query should be executed at the "mysql>" prompt. If the entire query did not execute and put you back at the "mysql>" prompt carefully examine where it stopped compared to the text in "create_tables_mysql_4_1_2+.sql" and then copy the exact characters to the end of the file that need to be finished, paste them in the terminal at the location where the query stopped and hit enter again. Alternatively you could use the key combination ctrl + shift + v to paste the entire query again, overwriting the original. After you have executed this query successfully you should also copy, paste in and execute http://whatever.org/phpmyadmin/scripts/upgrade_tables_mysql_4_1_2+.sql in the same way. (Substitute your web site's registered DNS name or IP address for "whatever.org".) When the query finishes type "exit" at the mysql> prompt.
- Type: Hit enter and gedit will open.
gedit /var/www/html/phpmyadmin/config.inc.php
- In /var/www/html/phpmyadmin/config.inc.php change "$cfg['Servers'][$i]['controluser'] = '';" to "$cfg['Servers'][$i]['controluser'] = 'pma';".
Change "$cfg['Servers'][$i]['controlpass'] = '';" to "$cfg['Servers'][$i]['controlpass'] = 'pmapassword';" where "pmapassword" is the password for the pma user that you selected earlier.
Change "$cfg['Servers'][$i]['pmadb'] = '';" to "$cfg['Servers'][$i]['pmadb'] = 'phpmyadmin';".
Change "$cfg['Servers'][$i]['bookmarktable'] = '';" to "$cfg['Servers'][$i]['bookmarktable'] = 'pma_bookmark';".
Change "$cfg['Servers'][$i]['relation'] = '';" to "$cfg['Servers'][$i]['relation'] = 'pma_relation';".
Change "$cfg['Servers'][$i]['table_info'] = '';" to "$cfg['Servers'][$i]['table_info'] = 'pma_table_info';".
Change "$cfg['Servers'][$i]['table_coords'] = '';" to "$cfg['Servers'][$i]['table_coords'] = 'pma_table_coords';".
Change "$cfg['Servers'][$i]['pdf_pages'] = '';" to "$cfg['Servers'][$i]['pdf_pages'] = 'pma_pdf_pages';".
Change "$cfg['Servers'][$i]['column_info'] = '';" to "$cfg['Servers'][$i]['column_info'] = 'pma_column_info';".
Change "$cfg['Servers'][$i]['history'] = '';" to "$cfg['Servers'][$i]['history'] = 'pma_history';".
Click on the "save" icon in gedit and close gedit. Close the terminal. Open Firefox and go to http://whatever.com/phpmyadmin/ where "whatever.com" is your web site registered DNS name or IP address. Log into phpMyAdmin as root. Click on the down arrow in the "Database:" selection dialog box in the left column. You should see the "mysql", "phpmyadmin", and "test" databases listed. You may delete ("drop") the "test" database if you wish. You have now successfully configured phpMyAdmin.
posted by microdatainc at
8:31 AM
|
3 comments
