1 Copyright 2000, International Business Machines Corporation and others.
4 This software has been released under the terms of the IBM Public
5 License. For details, see the LICENSE file in the top-level source
6 directory or online at http://www.openafs.org/dl/license10.html
8 Installation instructions for Apache AFS Web Secure
9 (Version 1 for Apache version 1.2.6)
13 Ensure the following files exist:-
20 In addition to these you should know the location of the AFS library
24 The mod_afs.c file should be in the apache src directory with all the other
25 module files. weblog and weblog_starter should be in the same directory - this
26 could be any directory (preferably outside AFS - if it is in AFS then
27 system:anyuser should have the appropriate ACL on that directory).
29 Editing the following files in the apache src and conf directories:-
31 1. Configuration (or the current Configuration file)
33 EXTRA_LIBS= <whatever you had here before> libapacheafs.a libsys.a
35 NOTE - specify the full path of these libraries - libsys.a is probably
36 in /usr/afsws/lib/afs/libsys.a and you can put libapacheafs.a wherever you
39 At the end of the configuration file where the modules are add
41 Module afs_module mod_afs.o
43 Optional: if you want the server to attempt to stop completely if AFS
44 initialization fails then add -DSHUTDOWN_IF_AFS_FAILS to the EXTRA_CFLAGS line.
45 Otherwise, on startup if the initialization procedure fails, the apache
46 server will continue running but AFS authentication will always fail.
48 2. httpd.conf (or whatever configuration file the server uses on startup
51 NOTE: ensure that you provide the entire path for the ErrorLog and PidFile
52 Directives instead of attempting to have apache prepend ServerRoot.
54 See below for an explanation of arguments to these
57 SetAFSDefaultCell [cell]
58 SetAFSMountpointDir [dir]
59 SetAFSCacheExpiration [time]
60 SetAFSTokenExpiration [time]
61 SetAFSWeblogPath [path]
65 SetHandler afs-Authentication
68 <Directory full path to [dir]>
72 NOTE:- SetAFSLocation <text> should be the same as the Location <text>
73 and should be a path relative to the server-document-root
75 NOTE: loc and dir should *NOT* be the same. There should be no symbolic link,
76 file or directory in the DocumentRoot directory with the same name as the loc
79 cell: REQUIRED directive.
80 Default AFS cell name. This cell will be used unless the user
81 specifies a different cell by using the user@cellname syntax
82 when prompted for a username and password. REQUIRED OPTION.
84 dir: REQUIRED directive.
85 Path to the directory or symbolic link relative to the server document
86 root directory where the AFS cell mount points are. If you want symbolic
87 links to be followed make sure you have the
88 Options FollowSymLinks
91 time: OPTIONAL directive
92 Seconds for AFS token cache expiration (cacheExpiration is for the local
93 cache and tokenExpiration is for the AFS kernel cache manager).
96 path: REQUIRED directive.
97 The full or relative (to server binary) path for weblog binary.
99 loc: REQUIRED directive.
100 Some location relative to the server root
101 MAKE SURE THAT THERE DOESN"T ALREADY EXIST A DIRECTORY BY
102 THIS SAME NAME. This should be the same (case sensitive)
103 as the argument to the Location directive. Eg. /afs
106 Configure and make apache and start it up with the new config file.
108 NOTE: Add the following to the shutdown or stopd file to shutdown the
109 weblog_starter process BEFORE the kill -TERM for httpd.pid
111 kill -TERM `cat <path to httpd.pid>.afs`
113 Eg. if the httpd.pid file is in /local/stronghold/apache/logs/httpd.pid
114 then the stopd file should look something like this
116 kill -TERM `cat /local/stronghold/apache/logs/httpd.pid.afs`
118 kill -TERM `cat /local/stronghold/apache/logs/httpd.pid`
121 POINTERS TO APACHE AND SSL:-
123 1. Apache Home Page http://www.apache.org
124 2. Stronghold Home: http://www.c2.net International: http://www.int.c2.net
125 3. Apache-SSL Home: http://www.apache-ssl.org
126 4. SSLeay FAQ http://www.psy.uq.edu.au:8080/~ftp/Crypto/