DSpace

no comment

Editor: NaveedHashmi <naveed.hashmi@...>
Page: DspaceOnStandardPorts
Date: 2005/02/11 08:03:45

Change Log:

------------------------------------------------------------------------------
  Run Apache HTTPD and Tomcat together, using mod_webapp, mod_jk or mod_jk2 as a connector.  Tricky to set up, but secure.
+ 
+ 
+ === Method 3 - use Apache to redirect requests to Tomcat on port 8080 ===
+ For RedHat LINUX server:-
+ 
+ In /etc/httpd/conf/httpd.conf:
+ 
+ 1. Ensure the following are listed under "# Dynamic Shared Object (DSO) Support", this is a list showing all modules loaded by Apache 
+ LoadModule proxy_module modules/mod_proxy.so
+ LoadModule proxy_http_module modules/mod_proxy_http.so
+ 
+ 2. Add the following after the <Location> context:
+ (Note: our dspace url: http://rose.bris.ac.uk)
+ 
+ ProxyPass / http://rose.bris.ac.uk:8080/
+ ProxyPassReverse / http://rose.bris.ac.uk:8080/
+ 
+ 3. Ensure Server Name is also set:
+ 
+ ServerName rose.bris.ac.uk 
+ 
+ 4. Restart Apache:
+ /usr/sbin/apachectl stop
+ /usr/sbin/apachectl start

[Dspace-devel] [wiki] Updated: DspaceOnStandardPorts From: <naveed.hashmi@br...> - 2005-02-11 14:24 no comment Editor: NaveedHashmi <naveed.hashmi@...> Page: DspaceOnStandardPorts Date: 2005/02/11 09:23:30 Change Log: ------------------------------------------------------------------------------ - 2. Add the following after the <Location> context: + 2. Add the following lines after the <Location> context: (Note: our dspace url: http://rose.bris.ac.uk) + {{{ + ProxyPass / http://rose.bris.ac.uk:8080/ + }}} - ProxyPass / http://rose.bris.ac.uk:8080/ ProxyPassReverse / http://rose.bris.ac.uk:8080/ 3. Ensure Server Name is also set:

[Dspace-devel] [wiki] Updated: DspaceOnStandardPorts From: <naveed.hashmi@br...> - 2005-02-11 14:25 no comment Editor: NaveedHashmi <naveed.hashmi@...> Page: DspaceOnStandardPorts Date: 2005/02/11 09:24:24 Change Log: ------------------------------------------------------------------------------ + {{{ ProxyPassReverse / http://rose.bris.ac.uk:8080/ + }}} 3. Ensure Server Name is also set: - + {{{ ServerName rose.bris.ac.uk - + }}} 4. Restart Apache: /usr/sbin/apachectl stop /usr/sbin/apachectl start

[Dspace-devel] [wiki] Updated: DspaceOnStandardPorts From: <naveed.hashmi@br...> - 2005-02-11 14:26 no comment Editor: NaveedHashmi <naveed.hashmi@...> Page: DspaceOnStandardPorts Date: 2005/02/11 09:26:03 Change Log: ------------------------------------------------------------------------------ - 1. Ensure the following are listed under "# Dynamic Shared Object (DSO) Support", this is a list showing all modules loaded by Apache + 1. Ensure the following modules are listed under "# Dynamic Shared Object (DSO) Support", this is a list showing all modules loaded by Apache: LoadModule proxy_module modules/mod_proxy.so LoadModule proxy_http_module modules/mod_proxy_http.so

[Dspace-devel] [wiki] Updated: DspaceOnStandardPorts From: <naveed.hashmi@br...> - 2005-02-11 14:27 no comment Editor: NaveedHashmi <naveed.hashmi@...> Page: DspaceOnStandardPorts Date: 2005/02/11 09:27:06 Change Log: ------------------------------------------------------------------------------ 2. Add the following lines after the <Location> context: - (Note: our dspace url: http://rose.bris.ac.uk) + (Note: our dspace url is: http://rose.bris.ac.uk) {{{ ProxyPass / http://rose.bris.ac.uk:8080/ }}}

[Dspace-devel] [wiki] Updated: DspaceOnStandardPorts From: <naveed.hashmi@br...> - 2005-02-11 14:29 no comment Editor: NaveedHashmi <naveed.hashmi@...> Page: DspaceOnStandardPorts Date: 2005/02/11 09:29:10 Change Log: ------------------------------------------------------------------------------ /usr/sbin/apachectl start + + In order to display the dspace home page, not the tomcat home page when accessing http://rose.bris.ac.uk, try: + 1. Create a page called HelloWorld.jsp in the directory below: + + $CATALINA_HOME/webapps/ROOT/ + + 2. Add the following lines to the HelloWorld.jsp: + + <!-- redirect to DSpace --> + <% response.sendRedirect("/dspace/"); %> + + Next. In the same directory, add the following to index.jsp just after the <body> tag:- + + <body> + <jsp:forward page="HelloWorld.jsp"/> + <!-- Header --> + + 3. Edit: ../ROOT/WEB-INF/web.xml, disable the following text: + + <!-- JSPC servlet mappings start + + <servlet> + <servlet-name>org.apache.jsp.index_jsp</servlet-name> + <servlet-class>org.apache.jsp.index_jsp</servlet-class> + </servlet> + + <servlet-mapping> + <servlet-name>org.apache.jsp.index_jsp</servlet-name> + <url-pattern>/index.jsp</url-pattern> + </servlet-mapping> + + --> + <!-- JSPC servlet mappings end --> + + 4. Re-start tomcat

[Dspace-devel] [wiki] Updated: DspaceOnStandardPorts From: <naveed.hashmi@br...> - 2005-02-11 14:30 no comment Editor: NaveedHashmi <naveed.hashmi@...> Page: DspaceOnStandardPorts Date: 2005/02/11 09:29:49 Change Log: ------------------------------------------------------------------------------ - In order to display the dspace home page, not the tomcat home page when accessing http://rose.bris.ac.uk, try: + In order to display the dspace home page, not the tomcat home page when accessing http://rose.bris.ac.uk, + try: 1. Create a page called HelloWorld.jsp in the directory below: $CATALINA_HOME/webapps/ROOT/

[Dspace-devel] [wiki] Updated: DspaceOnStandardPorts From: <naveed.hashmi@br...> - 2005-02-11 14:31 no comment Editor: NaveedHashmi <naveed.hashmi@...> Page: DspaceOnStandardPorts Date: 2005/02/11 09:30:46 Change Log: ------------------------------------------------------------------------------ - In order to display the dspace home page, not the tomcat home page when accessing http://rose.bris.ac.uk, + In order to display the dspace home page, not the tomcat home page when accessing http://rose.bris.ac.uk - try: + - 1. Create a page called HelloWorld.jsp in the directory below: + 1. Create a page called HelloWorld.jsp in the directory below: $CATALINA_HOME/webapps/ROOT/

[Dspace-devel] [wiki] Updated: DspaceOnStandardPorts From: <hmeij@we...> - 2005-02-18 14:29 no comment Editor: HenkMeij <hmeij@...> Page: DspaceOnStandardPorts Date: 2005/02/18 09:28:27 Change Log: ------------------------------------------------------------------------------ }}} + + + === Method 1b - redirecting with IP tables === + + An expanded example: edit the /etc/sysconfig/iptables file (make a backup of this file first!) + Open the standard ports 80 and 443 and the redirect ports 7780 and 7781 in this example inside the *filter block of statements followed by the redirect statements in the *nat block of statements (nat stands for network address translation) ... here is an example of that file (redhat WS3, a 2.4 linux kernel is requried, consult the excellent HOWTOS Documentation at http://www.netfilter.org) + + {{{ + # Firewall configuration written by redhat-config-securitylevel + # Manual customization of this file is not recommended. + *filter + :INPUT ACCEPT [0:0] + :FORWARD ACCEPT [0:0] + :OUTPUT ACCEPT [0:0] + :RH-Firewall-1-INPUT - [0:0] + -A INPUT -j RH-Firewall-1-INPUT + -A FORWARD -j RH-Firewall-1-INPUT + -A RH-Firewall-1-INPUT -i lo -j ACCEPT + # trust eth1 for heartbeat + -A RH-Firewall-1-INPUT -i eth1 -j ACCEPT + -A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT + -A RH-Firewall-1-INPUT -p 50 -j ACCEPT + -A RH-Firewall-1-INPUT -p 51 -j ACCEPT + -A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT + -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT + # dspace and dspacedev + -A RH-Firewall-1-INPUT -m state --state NEW -d xxx.xxx.xxx.xxx -m tcp -p tcp --dport 80 -j ACCEPT + -A RH-Firewall-1-INPUT -m state --state NEW -d xxx.xxx.xxx.xxx -m tcp -p tcp --dport 443 -j ACCEPT + -A RH-Firewall-1-INPUT -m state --state NEW -d xxx.xxx.xxx.xxx -m tcp -p tcp --dport 7780 -j ACCEPT + -A RH-Firewall-1-INPUT -m state --state NEW -d xxx.xxx.xxx.xxx -m tcp -p tcp --dport 7781 -j ACCEPT + -A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited + COMMIT + *nat + -A PREROUTING -d xxx.xxx.xxx.xxx -p tcp --dport 80 -j DNAT --to xxx.xxx.xxx.xxx:7780 + -A PREROUTING -d xxx.xxx.xxx.xxx -p tcp --dport 443 -j DNAT --to xxx.xxx.xxx.xxx:7781 + COMMIT + }}} + + Restart the network + {{{ + /etc/init.d/iptables restart + }}} + + Restart Tomcat as non-root user on port 7780/7781 (edit your conf/server.xml file for this) + {{{ + su - dspace -c "/usr/local/jakarta-tomcat-5.0.27/bin/startup.sh" + }}} + + Load the url for port 80 which will get redirect to your tomcat on port 7780 === Method 2 - use Apache HTTPD / Tomcat connector ===

[Dspace-devel] [wiki] Updated: DspaceOnStandardPorts From: <hmeij@we...> - 2005-02-18 14:30 no comment Editor: HenkMeij <hmeij@...> Page: DspaceOnStandardPorts Date: 2005/02/18 09:29:29 Change Log: ------------------------------------------------------------------------------ An expanded example: edit the /etc/sysconfig/iptables file (make a backup of this file first!) + Open the standard ports 80 and 443 and the redirect ports 7780 and 7781 in this example inside the *filter block of statements followed by the redirect statements in the *nat block of statements (nat stands for network address translation) ... here is an example of that file (redhat WS3, a 2.4 linux kernel is requried, consult the excellent HOWTOS Documentation at http://www.netfilter.org) {{{

[Dspace-devel] [wiki] Updated: DspaceOnStandardPorts From: <hmeij@we...> - 2005-02-18 14:31 no comment Editor: HenkMeij <hmeij@...> Page: DspaceOnStandardPorts Date: 2005/02/18 09:30:17 Change Log: ------------------------------------------------------------------------------ -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT - # dspace and dspacedev + # dspace ports -A RH-Firewall-1-INPUT -m state --state NEW -d xxx.xxx.xxx.xxx -m tcp -p tcp --dport 80 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -d xxx.xxx.xxx.xxx -m tcp -p tcp --dport 443 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -d xxx.xxx.xxx.xxx -m tcp -p tcp --dport 7780 -j ACCEPT

[Dspace-devel] [wiki] Updated: DspaceOnStandardPorts From: <hmeij@we...> - 2005-02-18 14:46 no comment Editor: HenkMeij <hmeij@...> Page: DspaceOnStandardPorts Date: 2005/02/18 09:45:50 Change Log: ------------------------------------------------------------------------------ Load the url for port 80 which will get redirect to your tomcat on port 7780 + + And i'll just add this here on how to get tomcat running in ssl mode: + + - create a directory like /usr/local/jakarta-tomcat-5.0.27/conf/ssl.new + - copy or link your insitution server.key and server.crt files in this directory + - execute this command to create the keystore file, this will prompt you for a password you must supply "changeit" without the quotes + + {{{ + /usr/bin/openssl pkcs12 -export -out keystore.pkcs12 \ + -in ./server.crt \ + -inkey ./server.key + }}} + + - change the ownership to the user which runs the tomcat server + + {{{ + chown dspace:dspace keystore.pkcs12 + }}} + + - next edit your conf/server.xml file and edit the section for the 8443 connector and add these 3 lines (be sure to add them inside the block of statements that starts with <Connector port="7781" ... and ends with ... />, you may have to uncomment that entire block of statements too since by default these connector statements are wrapped inside <!-- ... --> tags) + + {{{ + keystoreFile="/usr/local/jakarta-tomcat-5.0.27/conf/ssl.new/keystore.pkcs12" + keystoreType="PKCS12" + keystorePass="changeit" + }}} + + - restart tomcat === Method 2 - use Apache HTTPD / Tomcat connector ===

[Dspace-devel] [wiki] Updated: DspaceOnStandardPorts From: <tdonohue@ui...> - 2005-10-27 15:28 no comment Editor: TimDonohue <tdonohue@...> Page: DspaceOnStandardPorts Date: 2005/10/27 11:23:07 Change Log: ------------------------------------------------------------------------------ - Run Apache HTTPD and Tomcat together, using mod_webapp, mod_jk or mod_jk2 as a connector. Tricky to set up, but secure. + Run Apache HTTPD and Tomcat together, using mod_webapp, [http://wiki.dspace.org/ModJk mod_jk] or mod_jk2 as a connector. Tricky to set up, but secure. === Method 3 - use Apache to redirect requests to Tomcat on port 8080 ===

[Dspace-devel] [wiki] Updated: DspaceOnStandardPorts From: <codygreen@gm...> - 2006-04-03 20:40 no comment Editor: CodyGreen <codygreen@...> Page: DspaceOnStandardPorts Date: 2006/04/03 16:39:57 Change Log: ------------------------------------------------------------------------------ 4. Re-start tomcat + + === Method 4 - Use Tomcat's jsvc daemon === + Note: Only works for Unix like platforms. + This documentation is based on Solaris 10 using the Solaris Service Management Facility. + See http://jakarta.apache.org/commons/daemon/jsvc.html for more details + + 1. Download and install Tomcat from jakarta.apache.org + + 2. Compile jsvc + {{{ + - export JAVA_HOME=/usr/java + - cd $CATALINA_HOME/bin + - gunzip jsvc.tar.gz && tar -xvf jsvc.tar + - ./configure + - gmake + - cp jsvc .. + - cd .. + - chown tomcat:tomcat jsvc + - rm -rf jsvc-src + }}} + + 3. Setup your Service Management Facility process + + a. create the following file: /lib/svc/method/dspace + {{{ + #!/bin/sh + + . /lib/svc/share/smf_include.sh + + JAVA_HOME=/usr/java + JAVA_OPTS="-Xmx512M -Xms64M -Dfile.encoding=UTF-8" + CATALINA_HOME=<where tomcat is installed> + DAEMON_HOME=<where tomcat is installed> + TOMCAT_USER=tomcat + TMP_DIR=/var/tmp + PID_FILE=/var/run/txspace.pid + CATALINA_BASE=<where tomcat is installed> + CLASSPATH=\ + $JAVA_HOME/lib/tools.jar:\ + $CATALINA_HOME/bin/commons-daemon.jar:\ + $CATALINA_HOME/bin/bootstrap.jar + + start() + { + $DAEMON_HOME/bin/jsvc \ + -user $TOMCAT_USER \ + -home $JAVA_HOME \ + -Dcatalina.home=$CATALINA_HOME \ + -Dcatalina.base=$CATALINA_BASE \ + -Djava.io.tmpdir=$TMP_DIR \ + -wait 10 \ + -pidfile $PID_FILE \ + -outfile $CATALINA_BASE/logs/catalina.out \ + -errfile '&1' \ + -Xms256m \ + -Xms1024m \ + -cp $CLASSPATH \ + org.apache.catalina.startup.Bootstrap + } + + stop() + { + $DAEMON_HOME/bin/jsvc \ + -stop \ + -pidfile $PID_FILE \ + org.apache.catalina.startup.Bootstrap + } + + case "$1" in + 'start') + echo "Starting Tomcat" + start + ;; + + 'stop') + echo "Stopping Tomcat" + stop + ;; + + 'refresh') + echo "Restarting Tomcat" + stop + start + ;; + + *) + echo "Usage tomcat.sh start/stop/refresh" + exit 1;; + esac + + exit $SMF_EXIT_OK + }}} + + b. Create the profile: /var/svc/manifest/application/dspace.xml + {{{ + <?xml version="1.0"?> + <!DOCTYPE service_bundle SYSTEM "/usr/share/lib/xml/dtd/service_bundle.dtd.1"> + + <service_bundle type='manifest' name='dspace'> + + <service name='application/dspace' type='service' version='1'> + + <!-- Only want one instance and I want it enabled by default --> + <create_default_instance enabled='true'/> + <single_instance/> + + <!-- Can't do anything without a network layer --> + <dependency name='loopback' grouping='require_all' + restart_on='error' type='service'> + <service_fmri value='svc:/network/loopback:default'/> + </dependency> + + <dependency name='physical' grouping='require_all' + restart_on='error' type='service'> + <service_fmri value='svc:/network/physical:default'/> + </dependency> + + <exec_method type='method' name='start' + exec='/lib/svc/method/txspace start' + timeout_seconds='60' /> + + <exec_method type='method' name='stop' + exec='/lib/svc/method/txspace stop' + timeout_seconds='5' /> + + <exec_method type='method' name='refresh' + exec='/lib/svc/method/txspace refresh' + timeout_seconds='5' /> + + <stability value='Unstable' /> + + <template> + <common_name> + <loctext xml:lang='C'>DSpace</loctext> + </common_name> + <documentation> + <manpage title='dspace' manpath='/opt/apps/man' section='8' /> + <doc_link name='tomcat.apache.org' + uri='http://tomcat.apache.org' /> + </documentation> + </template> + </service> + </service_bundle> + }}} + + c. Now import the profile + {{{ + /usr/sbin/svccfg import /var/svc/mainifest/application/dspace.xml + }}} + + 4. Modify Tomcat's Connector in server.xml + {{{ + <Connector className="org.apache.catalina.connector.http.HttpConnector" + port="80" minProcessors="5" maxProcessors="75" + enableLookups="true" redirectPort="8443" + acceptCount="10" debug="0" connectionTimeout="60000" + address="192.168.0.1"/> + }}} + + 5. Enable Tomcat + {{{ + /usr/sbin/svcadm enable dspace + }}}

1 message has been excluded from this view by a project administrator.