Bug #4588
closedInstall parc metacat
0%
Description
installed PARC metacat on data.palmyraresearch.org. Here are the steps I took:
mkdir /var/parc
chown webuser:webuser /var/parc
sudo su - postgres
createdb parc
psql parc
CREATE USER parc WITH UNENCRYPTED PASSWORD '<password>';
(note <password> is same as esa)
cp /etc/http/conf/http.conf to http.conf.20091130
vi /etc/http/conf/http.conf and added following section (note different IP than esa):
<VirtualHost 128.111.242.17:80>
DocumentRoot /var/www/org.palmyraresearch.data/catalog/style/skins/parc
ServerName data.palmyraresearch.org
ErrorLog /var/log/httpd/error_log
CustomLog /var/log/httpd/access_log common
ScriptAlias /catalog
/cgi-bin/ "/var/www/org.palmyraresearch.data/catalog/cgi-bin/"
<Directory "/var/www/org.palmyraresearch.data/catalog/cgi-bin/">
AllowOverride None
Options ExecCGI
Order allow,deny
Allow from all
</Directory>
<Directory "/var/www/org.palmyraresearch.data/catalog/style/skins/parc">
AllowOverride none
Options Indexes FollowSymLinks
IndexOptions FancyIndexing
</Directory>
<Location "/var/www/org.palmyraresearch.data/catalog/style/skins/parc/parc.cfg">
AllowOverride None
Order allow,deny
Deny from all
</Location>
JkMount /catalog ajp13
JkMount /catalog/* ajp13
JkMount /catalog/metacat ajp13
JkUnMount /catalog/cgi-bin/* ajp13
JkMount /*.jsp ajp13
JkMount /authority ajp13
JkMount /authority/* ajp13
</VirtualHost>
mkdir /var/www/org.palmyraresearch.data
chown webuser:webuser /var/www/org.palmyraresearch.data
scp knb.war from build machine to data.palmyraresearch.org:/tmp
mv /tmp/knb.war /var/www/org.palmyraresearch.org/catalog.war
chown webuser:webuser /var/www/org.palmyraresearch.data/catalog.war
Edit /usr/local/devtools/jakarta-tomcat/conf/server.conf and added following lines:
<Host name="data.palmyraresearch.org" debug="0" appBase="/var/www/org.palmyraresearch.data"
unpackWARs="true" autoDeploy="true"
xmlValidation="false" xmlNamespaceAware="false">
<Logger className="org.apache.catalina.logger.FileLogger"
directory="/var/log/tomcat" prefix="data_parc_log." suffix=".log"
timestamp="true"/>
</Host>
/etc/init.d/http stop
/etc/init.d/tomcat stop
/etc/init.d/tomcat start
/etc/init.d/http start
chmod +x /var/www/org.palmyraresearch.data/catalog/cgi-bin/*
go to data.palmayraresearch.org/catalog and step through config utility
-- added appropriate administrators
-- set /var/parc as the root dir for all data, temp etc directories
-- configured db credentials
-- made parc skin default.
Updated by Michael Daigle about 15 years ago
Added the following section to /etc/http/conf.d/ssl.conf to enable ssl. Note that the cert was already purchased and installed by Nick.
<VirtualHost 128.111.242.17:443>
DocumentRoot /var/www/org.palmyraresearch.data/catalog/style/skins/parc
ServerName data.palmyraresearch.org
ErrorLog /var/log/httpd/error_log
CustomLog /var/log/httpd/access_log common
ScriptAlias /catalog/cgi-bin/ "/var/www/org.palmyraresearch.data/catalog/cgi-bin/"
<Directory "/var/www/org.palmyraresearch.data/catalog/cgi-bin/">
AllowOverride None
Options ExecCGI
Order allow,deny
Allow from all
</Directory>
<Directory "/var/www/org.palmyraresearch.data/catalog/style/skins/parc">
AllowOverride none
Options Indexes FollowSymLinks
IndexOptions FancyIndexing
</Directory>
<Location "/var/www/org.palmyraresearch.data/catalog/style/skins/parc/parc.cfg">
AllowOverride None
Order allow,deny
Deny from all
</Location>
- Use separate log files for the SSL virtual host; note that LogLevel
- is not inherited from httpd.conf.
ErrorLog logs/ssl_error_log
TransferLog logs/ssl_access_log
LogLevel warn
- SSL Engine Switch:
- Enable/Disable SSL for this virtual host.
SSLEngine on
JkMount /catalog ajp13
JkMount /catalog/* ajp13
JkMount /catalog/metacat ajp13
JkUnMount /catalog/cgi-bin/* ajp13
JkMount /*.jsp ajp13
JkMount /authority ajp13
JkMount /authority/* ajp13
- SSL Cipher Suite:
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP
- Server Certificate:
SSLCertificateFile /etc/httpd/conf/ssl.crt/data.palmyraresearch.org.crt
- Server Private Key:
SSLCertificateKeyFile /etc/httpd/conf/ssl.key/data_palmyraresearch_org.key
- Server Certificate Chain:
SSLCertificateChainFile /etc/httpd/conf/ssl.crt/gd_intermediate_bundle.crt
- SSL Engine Options:
<Files ~ "\.(cgi|shtml|phtml|php3?)$">
SSLOptions +StdEnvVars
</Files>
<Directory "/var/www/cgi-bin">
SSLOptions +StdEnvVars
</Directory>
- SSL Protocol Adjustments:
SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
- Per-Server Logging:
CustomLog logs/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>
Updated by Michael Daigle about 15 years ago
in metacat.properties, changed auth.moderators since these get added by the registry to doc access:
cn=parc-moderators,o=PARC,dc=ecoinformatics,dc=org
Updated by Michael Daigle about 15 years ago
requested this account be created in parc ldap by Peter Ersts.
cn=parc-moderators,o=PARC,dc=ecoinformatics,dc=org
Updated by Michael Daigle about 15 years ago
For one way replication from parc to knb, ran the following sql:
on data.palmyraresearch.org:
insert into xml_replication (server, replicate, datareplicate, hub)
values('knb.ecoinformatics.org/knb/servlet/replication',1,1,0);
on knb.ecoinformatics.org:
insert into xml_replication (server, replicate, datareplicate, hub)
values('data.palmyraresearch.org/catalog/servlet/replication',1,1,0);
Updated by Michael Daigle about 15 years ago
Correction, replication row in knb is:
insert into xml_replication (server, replicate, datareplicate, hub)
values('data.palmyraresearch.org/catalog/servlet/replication',0,0,0);