From: Ere M. <ere...@he...> - 2012-11-07 13:19:33
|
Ranju, I'm afraid temporarily disabling SELinux allowed Smarty to write the compiled templates, but any template updates, cached images or such would still cause problems. I'm by no means an expert on this, but I believe you can setsebool <something> 0 to disable it. Not sure how to reset chcon, though. --Ere 7.11.2012 14.46, Ranju Upadhyay kirjoitti: > Hi Era and all, > > Thanks for this, I think Nico made similar suggestion.At the moment I > have got things working by temporiraly disabling selinux and then > re-enabling it.I have yet to test whether it talks to my ILS or not. > > Once I fire these commands how do I undo them incase they do not work as > expected ? > Afterall our flavour of Linux is Red Hat Enterprise Linux Server > release 6.3 (Santiago) not quite Fedora > I have never used chcon and setsebool before. > > > Thanks > Ranju > > > > ----- Original Message ----- > From: Ere Maijala <ere...@he...> > Date: Tuesday, November 6, 2012 3:02 pm > Subject: Re: [VuFind-General] unable to access vufind on RHEL > To: vuf...@li... > > > Hi Ranju, > > > > the Fedora installation instructions at > > http://vufind.org/wiki/installation_fedora have some bits about > > SELinux. > > I believe one thing you might need is: > > > > chcon -R unconfined_u:object_r:httpd_sys_rw_content_t:s0 > > /usr/local/vufind/web/interface/compile > > chcon -R unconfined_u:object_r:httpd_sys_rw_content_t:s0 > > /usr/local/vufind/web/interface/cache > > chcon -R unconfined_u:object_r:httpd_sys_rw_content_t:s0 > > /usr/local/vufind/web/images/covers/* > > > > Additionally depending on your needs: > > > > setsebool -P httpd_can_network_connect 1 > > setsebool -P httpd_can_sendmail 1 > > > > --Ere > > > > 6.11.2012 16.06, Ranju Upadhyay kirjoitti: > > > Hi all, > > > > > > I just applied Eoghan's suggestion and yes I can access it > > now.But is it > > > safe to disable selinux? > > > > > > Thanks > > > Ranju. > > > > > > ----- Original Message ----- > > > From: Eoghan Ó Carragáin <eog...@gm...> > > > Date: Tuesday, November 6, 2012 1:34 pm > > > Subject: Re: [VuFind-General] unable to access vufind on RHEL > > > To: "Mosior, Benjamin" <BEM...@sh...> > > > Cc: Ranju Upadhyay <Ran...@nu...>, > > > "vuf...@li..." > > > <vuf...@li...> > > > > > > > Hi, > > > > As a sanity check, maybe try temporarily disabling SELinux: > > > > > > |>echo 0 > /selinux/enforce| > > > > > > This isn't a permanent solution, but if this fixes things > > it'll give you > > > something to go on. > > > > > > > > In my RHEL 6 setup /interface/compile and > > /interface/cache are owned > > > by a local vufind user, while all sub-folders and files are > > apache:apache.> > > > > > Eoghan > > > > > > > > > > > > On 6 November 2012 13:26, Mosior, Benjamin > > <BEM...@sh...> <javascript:main.compose('new', > > 't=BEM...@sh...')>> wrote: > > > > > > >Ranju,____ > > > > > > __> __ > > > > > > >Could you send us the output of: ls –al > > > /usr/local/vufind/vufind- > > 1.3/web/interface ____ > > > > > > __> __ > > > > > > >Benjamin Mosior____ > > > > > > __> __ > > > > > > *> From:*Ranju Upadhyay > > [mailto:Ran...@nu...> > > <javascript:main.compose('new', 't=Ran...@nu...')>] > > > *> Sent:* Tuesday, November 06, 2012 > > 8:06 AM > > > *> To:* Demian Katz > > > *> Cc:* Tod Olson; Mosior, Benjamin; > > > vuf...@li... > > <javascript:main.compose('new',> > > 't=vuf...@li...')> > > > > > > > > > *> Subject:* Re: [VuFind-General] > > unable to access vufind on RHEL____ > > > > > > __> __ > > > > > > > Hi all, > > > > > > > > yes the Cache setting does not > > exist in 1.3 but I tried setting > > > the ownership to apache (even made the > > group writable on compile and > > > cache directories but I still get > > these errors : > > > > > > > > [Tue Nov 06 12:57:12 2012] > > [error] [client 149.157.2.121] PHP > > > Warning: mkdir(): Permission > > denied in > > > /usr/local/vufind/vufind- > > 1.3/web/sys/Interface.php on line 100 > > > > [Tue Nov 06 12:57:12 2012] > > [error] [client 149.157.2.121] PHP > > > Warning: mkdir(): Permission > > denied in > > > /usr/local/vufind/vufind- > > 1.3/web/sys/Interface.php on line 100 > > > > [Tue Nov 06 12:57:12 2012] > > [error] [client 149.157.2.121] PHP > > > Fatal error: Smarty error: > > unable to write to $compile_dir > > > '/usr/local/vufind/vufind- > > 1.3/web/interface/compile/9cd5945eb796ea57d5e34b1da9fd4c8f'.> Be > sure $compile_dir is writable by the web server user. in > > > > > /usr/share/pear/Smarty/Smarty.class.php on line 1093 > > > > > > > > Something I noticed is that > > the directory > > > 9cd5945eb796ea57d5e34b1da9fd4c8f > > actually was not present under > > > compile dir but I created it and set > > the owner and group to > > > apache:apache.And there is no such > > directory under cache either. > > > > > > > > Any more thoughts? > > > > > > > > Thanks > > > > Ranju. > > > > > > > > ----- Original Message ----- > > > > From: Demian Katz > > <dem...@vi...> > > <javascript:main.compose('new', 't=dem...@vi...')>> > > > > Date: Monday, November 5, 2012 > > 6:19 pm > > > > Subject: Re: [VuFind-General] > > unable to access vufind on RHEL > > > > To: Tod Olson > > <to...@uc... <javascript:main.compose('new', > > > 't=to...@uc...')>>, "Mosior, > > Benjamin" <BEM...@sh... > > > <javascript:main.compose('new', > > 't=BEM...@sh...')>>> > Cc: > > "vuf...@li... > > > <javascript:main.compose('new', > > > 't=vuf...@li...')>" > > > <vuf...@li... > > > <javascript:main.compose('new', > > > 't=vufind- > > ge...@li...')>>____> > > > > > …though in Ranju’s case, he is > > using VuFind 1.3, so the [Cache] > > > settings don’t exist yet (they’re > > introduced in 2.0beta). But I > > > think fixing the file ownership should > > take care of the problem.____ > > > > > > >____ > > > > > > >- Demian____ > > > > > > >____ > > > > > > > > *From:*Tod Olson > > [mailto:to...@uc...> > > <javascript:main.compose('new', 't=to...@uc...')>] > > > > > *Sent:*Monday, November 05, 2012 > > 1:15 PM > > > > > *To:*Mosior, Benjamin > > > > > *Cc:*vufind- > > ge...@li...> > > <javascript:main.compose('new',> > > 't=vuf...@li...')> > > > > > *Subject:*Re: [VuFind-General] > > unable to access vufind on RHEL____ > > > > > > > > ____ > > > > > > > > What we settled on locally is to > > have the cache directories: ____ > > > > > > > > ____ > > > > > > > > - owned by the web server____ > > > > > > > > - group owned by some group the > > developers are all in____ > > > > > > > > - and tweak the [Cache] settings > > in config.ini so the the caches > > > are group-writable____ > > > > > > > > ____ > > > > > > > > This means the web server can > > write the cache files but those of > > > us working on it can blow away the > > caches when we need to, without > > > bothering the sysadmin. (not an issue > > if you have root access to > > > your box.)____ > > > > > > > > ____ > > > > > > > > -Tod____ > > > > > > > > ____ > > > > > > > > On Nov 5, 2012, at 10:57 AM, > > "Mosior, Benjamin" > > > <BEM...@sh...>____ > > > > > > > > wrote:____ > > > > > > > > > > > > > ____ > > > > > > > > Ranju,____ > > > > > > > > ____ > > > > > > > > According to the documentation > > > > > (http://vufind.org/wiki/vufind_on_linux), “The > > > vufind/web/interface/cache, > > vufind/web/interface/compile and > > > vufind/web/images/covers directories > > and subdirectories will also > > > need to be owned by the web server > > user.”____> > > > > > ____ > > > > > > > > Running “chown -R apache > > > /usr/local/vufind/vufind- > > 1.3/web/interface/cache> > > /usr/local/vufind/vufind-1.3/web/interface/compile > > > /usr/local/vufind/vufind- > > 1.3/web/images/covers” to change the > > > ownership to “apache” should do the > > trick.____> > > > > > ____ > > > > > > > > Be sure to read through the > > documentation in the link above, as > > > that will help guide you as you make > > progress.____> > > > > > ____ > > > > > > > > Hope that helps,____ > > > > > > > > Benjamin Mosior____ > > > > > > > > Keystone Library Network____ > > > > > > > > ____ > > > > > > > > *From:*Ranju Upadhyay > > [mailto:Ran...@nu...> > > <javascript:main.compose('new', 't=Ran...@nu...')>] > > > > > *Sent:*Monday, November 05, 2012 > > 11:42 AM > > > > > *To:*Mosior, Benjamin > > > > > *Cc:*vufind- > > ge...@li...> > > > > *Subject:*Re: RE: [VuFind-General] unable to access vufind on > > > RHEL____ > > > > > > > > ____ > > > > > > > > Hi all, > > > > > > > > > > quite possibly the issue is to do > > with permission. > > > > > > > > > > In my httpd.conf I have httpd run > > by user and group apache (RHEL > > > including apache,php,java was > > installed by our CS and I installed > > > vufind as root) . > > > > > > > > > > when I look at the apache error > > log I see > > > > > > > > > > [Mon Nov 05 15:37:11 2012] [error] > > [client 149.157.61.84] > > > Directory index forbidden by Options > > directive: /var/www/html/ > > > > > [Mon Nov 05 16:21:27 2012] [error] > > [client ::1] PHP Warning: > > > mkdir(): Permission denied in > > > /usr/local/vufind/vufind- > > 1.3/web/sys/Interface.php on line 100 > > > > > [Mon Nov 05 16:21:27 2012] [error] > > [client ::1] PHP Warning: > > > mkdir(): Permission denied in > > > /usr/local/vufind/vufind- > > 1.3/web/sys/Interface.php on line 100 > > > > > [Mon Nov 05 16:21:27 2012] [error] > > [client ::1] PHP Fatal error: > > > Smarty error: unable to write to > > $compile_dir> '/usr/local/vufind/vufind- > > 1.3/web/interface/compile/9cd5945eb796ea57d5e34b1da9fd4c8f'.> Be > sure $compile_dir is writable by the web server user. in > > > > > /usr/share/pear/Smarty/Smarty.class.php on line 1093 > > > > > [Mon Nov 05 16:21:59 2012] [error] > > [client 149.157.61.84] PHP > > > Warning: mkdir(): Permission > > denied in > > > /usr/local/vufind/vufind- > > 1.3/web/sys/Interface.php on line 100 > > > > > [Mon Nov 05 16:21:59 2012] [error] > > [client 149.157.61.84] PHP > > > Warning: mkdir(): Permission > > denied in > > > /usr/local/vufind/vufind- > > 1.3/web/sys/Interface.php on line 100 > > > > > [Mon Nov 05 16:22:00 2012] [error] > > [client 149.157.61.84] PHP > > > Fatal error: Smarty error: > > unable to write to $compile_dir > > > '/usr/local/vufind/vufind- > > 1.3/web/interface/compile/9cd5945eb796ea57d5e34b1da9fd4c8f'.> Be > sure $compile_dir is writable by the web server user. in > > > > > /usr/share/pear/Smarty/Smarty.class.php on line 1093 > > > > > [Mon Nov 05 16:23:16 2012] [error] > > [client 149.157.2.121] PHP > > > Warning: mkdir(): Permission > > denied in > > > /usr/local/vufind/vufind- > > 1.3/web/sys/Interface.php on line 100 > > > > > [Mon Nov 05 16:23:16 2012] [error] > > [client 149.157.2.121] PHP > > > Warning: mkdir(): Permission > > denied in > > > /usr/local/vufind/vufind- > > 1.3/web/sys/Interface.php on line 100 > > > > > [Mon Nov 05 16:23:16 2012] [error] > > [client 149.157.2.121] PHP > > > Fatal error: Smarty error: > > unable to write to $compile_dir > > > '/usr/local/vufind/vufind- > > 1.3/web/interface/compile/9cd5945eb796ea57d5e34b1da9fd4c8f'.> Be > sure $compile_dir is writable by the web server user. in > > > > > /usr/share/pear/Smarty/Smarty.class.php on line 1093 > > > > > [Mon Nov 05 16:26:20 2012] [error] > > [client 149.157.2.121] PHP > > > Warning: mkdir(): Permission > > denied in > > > /usr/local/vufind/vufind- > > 1.3/web/sys/Interface.php on line 100 > > > > > [Mon Nov 05 16:26:20 2012] [error] > > [client 149.157.2.121] PHP > > > Warning: mkdir(): Permission > > denied in > > > /usr/local/vufind/vufind- > > 1.3/web/sys/Interface.php on line 100 > > > > > [Mon Nov 05 16:26:20 2012] [error] > > [client 149.157.2.121] PHP > > > Fatal error: Smarty error: > > unable to write to $compile_dir > > > '/usr/local/vufind/vufind- > > 1.3/web/interface/compile/9cd5945eb796ea57d5e34b1da9fd4c8f'.> Be > sure $compile_dir is writable by the web server user. in > > > > > /usr/share/pear/Smarty/Smarty.class.php on line 1093 > > > > > [Mon Nov 05 16:28:03 2012] [error] > > [client ::1] Directory index > > > forbidden by Options directive: > > /var/www/html/> > > [Mon Nov 05 16:28:07 > > 2012] [error] [client ::1] PHP Warning: > > > mkdir(): Permission denied in > > > /usr/local/vufind/vufind- > > 1.3/web/sys/Interface.php on line 100 > > > > > [Mon Nov 05 16:28:07 2012] [error] > > [client ::1] PHP Warning: > > > mkdir(): Permission denied in > > > /usr/local/vufind/vufind- > > 1.3/web/sys/Interface.php on line 100 > > > > > [Mon Nov 05 16:28:07 2012] [error] > > [client ::1] PHP Fatal error: > > > Smarty error: unable to write to > > $compile_dir> '/usr/local/vufind/vufind- > > 1.3/web/interface/compile/9cd5945eb796ea57d5e34b1da9fd4c8f'.> Be > sure $compile_dir is writable by the web server user. in > > > > > /usr/share/pear/Smarty/Smarty.class.php on line 1093 > > > > > [Mon Nov 05 16:28:18 2012] [error] > > [client 149.157.2.121] PHP > > > Warning: mkdir(): Permission > > denied in > > > /usr/local/vufind/vufind- > > 1.3/web/sys/Interface.php on line 100 > > > > > [Mon Nov 05 16:28:18 2012] [error] > > [client 149.157.2.121] PHP > > > Warning: mkdir(): Permission > > denied in > > > /usr/local/vufind/vufind- > > 1.3/web/sys/Interface.php on line 100 > > > > > [Mon Nov 05 16:28:18 2012] [error] > > [client 149.157.2.121] PHP > > > Fatal error: Smarty error: > > unable to write to $compile_dir > > > '/usr/local/vufind/vufind- > > 1.3/web/interface/compile/9cd5945eb796ea57d5e34b1da9fd4c8f'.> Be > sure $compile_dir is writable by the web server user. in > > > > > /usr/share/pear/Smarty/Smarty.class.php on line 1093 > > > > > > > > > > now I am wondering what would be > > the right course for me to do! > > > Should I modify the user and group to > > root in the httpd.conf file as > > > everything else is owned and run by > > root or should I simply try > > > changing the ownership of > > compile directory and the directory > > > underneath it to apache:apache ? > > > > > > > > > > Thanks > > > > > Ranju. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > ----- Original Message ----- > > > > > From: "Mosior, Benjamin" > > <BEM...@sh...>> > > Date: > > Monday, November 5, 2012 4:11 pm > > > > > Subject: RE: [VuFind-General] > > unable to access vufind on RHEL > > > > > To: Ranju Upadhyay > > <Ran...@nu...>,> "vufind- > > ge...@li..."> > > <vuf...@li...>____ > > > > > > > > >Ranju,____ > > > > > > > > >____ > > > > > > > > >A few quick things to check:____ > > > > > > > > 1.Is Apache running? (run: service > > httpd status)____ > > > > > > > > 2.Is anything useful showing up in > > the Apache error logs? > > > (usually: /var/log/httpd/error_log)____ > > > > > > > > >____ > > > > > > > > >Let us know what you find.____ > > > > > > > > >____ > > > > > > > > >Benjamin Mosior____ > > > > > > > > >Keystone Library Network____ > > > > > > > > >____ > > > > > > > > >*From:*Ranju Upadhyay > > [mailto:Ran...@nu...]> > > > > >*Sent:*Monday, November 05, 2012 10:36 AM > > > > > >*To:*vufind- > > ge...@li...> > > > > >*Subject:*[VuFind-General] unable to access vufind on RHEL____ > > > > > > > > >____ > > > > > > > > >Hi all, > > > > > > > > > > > >Recently installed vufind1.3 on > > RHEL 6.3.Everything went fine > > > during installation.I then made > > changes to config.ini etc . But now > > > when I try to access vuifnd which > > should be at > > > > > > > > > > > >http://xvufind.nuim.ie/vufind/, > > the page is blank! > > > > > > > > > > > >Insterestingly enough I can > > access solr > > > athttp://xvufind.nuim.ie:8080/solr/ > > > > > > > > > > > >when I do ./vufind.sh start I get > > something like: > > > > > > > > > > > >./vufind.sh start > > > > > >Found > > > JAVA=/usr/lib/jvm/java-1.6.0-openjdk- > > 1.6.0.0.x86_64/jre/bin/java in > > > JAVA_HOME=/ > > > > > >Starting VuFind ... > > > > > >/usr/lib/jvm/java-1.6.0-openjdk- > > 1.6.0.0.x86_64/jre/bin/java> -server - > > Xms1024m -Xmx1024m -XX:+UseParallelGC -XX:NewRatio=5 > > > - > > Dsolr.solr.home=/usr/local/vufind/vufind-1.3/solr > > > -Djetty.logs=/usr/local/vufind/vufind- > > 1.3/solr/jetty/logs> - > > Djetty.home=/usr/local/vufind/vufind-1.3/solr/jetty -jar > > > /usr/local/vufind/vufind- > > 1.3/solr/jetty/start.jar> > > /usr/local/vufind/vufind-1.3/solr/jetty/etc/jetty.xml > > > > > >nohup: appending output to `nohup.out' > > > > > >VuFind running pid=3495 > > > > > > > > > > > >everything was installed as root > > and hence I start vufind as > > > root as well. > > > > > > > > > > > >I modified the .bash_profile at > > roots home dir i.e. /root as > > > follows: > > > > > > > > > > > > > >VUFIND_HOME=/usr/local/vufind/vufind-1.3 > > > > > >JAVA_HOME=/usr/lib/jvm/java-1.6.0- > > openjdk-1.6.0.0.x86_64/jre > > > > > > > >PATH=$PATH:$HOME/bin:$VUFIND_HOME:$JAVA_HOME> > > > > > > > > >export PATH > > > > > > > > > > > >have even rebooted the server but > > no luck! > > > > > > > > > > > >Any suggestions? > > > > > > > > > > > >Thanks > > > > > >Ranju Upadhyay > > > > > >National Library of Ireland > > Maynooth.____> > > > > > ____ > > > > > > > > > > > --------------------------------------- > > --------------------------------------- > > > > > LogMeIn Central: Instant, > > anywhere, Remote PC access and management. > > > > > Stay in control, update software, > > and manage PCs from one command > > > center > > > > > Diagnose problems and improve > > visibility into emerging IT issues > > > > > Automate, monitor and manage. Do > > more in less time with Central > > > > > > > > > > > http://p.sf.net/sfu/logmein12331_d2d_______________________________________________> > > > VuFind-General mailing list > > > > > VuF...@li... > > > <javascript:main.compose('new', > > > 't=VuF...@li...')> > > > > > > > https://lists.sourceforge.net/lists/listinfo/vufind-general____ > > > > > > > > ____ > > > > > > > > ----------------------------- > > ------------------------------------ > > > > > ------------- > > > > > LogMeIn Central: Instant, > > anywhere, Remote PC access and > > > management. > > > > > Stay in control, update > > software, and manage PCs from one > > > > > command center > > > > > Diagnose problems and > > improve visibility into emerging IT issues > > > > > Automate, monitor and > > manage. Do more in less time with Central > > > > > > > http://p.sf.net/sfu/logmein12331_d2d>> > > _______________________________________________> > > > VuFind-General mailing list > > > > > VuFind- > > Ge...@li...> > > <javascript:main.compose('new',> > > 't=VuF...@li...')> > > > > > > > https://lists.sourceforge.net/lists/listinfo/vufind-general ____ > > > > > > > > > > > > > > --------------------------------------- > > --------------------------------------- > > > > LogMeIn Central: Instant, > > anywhere, Remote PC access and management. > > > > Stay in control, update > > software, and manage PCs from one command > > > center > > > > Diagnose problems and improve > > visibility into emerging IT issues > > > > Automate, monitor and manage. > > Do more in less time with Central > > > > http://p.sf.net/sfu/logmein12331_d2d > > > > > > _______________________________________________> > > VuFind-General mailing list > > > > VuF...@li... > > > <javascript:main.compose('new', > > > 't=VuF...@li...')> > > > > > > https://lists.sourceforge.net/lists/listinfo/vufind-general > > > > > > > > > > > > > > > > > > > > --------------------------------------------------------------- > > --------------- > > > LogMeIn Central: Instant, anywhere, Remote PC access and management. > > > Stay in control, update software, and manage PCs from one > > command center > > > Diagnose problems and improve visibility into emerging IT issues > > > Automate, monitor and manage. Do more in less time with Central > > > http://p.sf.net/sfu/logmein12331_d2d > > > > > > > > > > > > _______________________________________________ > > > VuFind-General mailing list > > > VuF...@li... > > > https://lists.sourceforge.net/lists/listinfo/vufind-general > > > > > > > > > -- > > Ere Maijala (Mr.) > > The National Library of Finland > > > > ----------------------------------------------------------------- > > ------------- > > LogMeIn Central: Instant, anywhere, Remote PC access and management. > > Stay in control, update software, and manage PCs from one > > command center > > Diagnose problems and improve visibility into emerging IT issues > > Automate, monitor and manage. Do more in less time with Central > > http://p.sf.net/sfu/logmein12331_d2d > > _______________________________________________ > > VuFind-General mailing list > > VuF...@li... > > https://lists.sourceforge.net/lists/listinfo/vufind-general -- Ere Maijala (Mr.) The National Library of Finland |