Unterschiede
Hier werden die Unterschiede zwischen zwei Versionen angezeigt.
Nächste Überarbeitung | Vorhergehende Überarbeitung | ||
centos:mail_c6:horde_2 [09.02.2013 12:02. ] – angelegt django | centos:mail_c6:horde_2 [20.04.2018 10:40. ] (aktuell) – Externe Bearbeitung 127.0.0.1 | ||
---|---|---|---|
Zeile 1: | Zeile 1: | ||
+ | ====== Basiskonfiguration von horde ====== | ||
+ | Nach der erfolgreichen [[centos: | ||
+ | ===== Apache vHost ===== | ||
+ | ==== vHost Definition ==== | ||
+ | Für unsere Webapplikation richten wir uns nun einen geeigneten vHost ein. Da wir später S/MIME und PGP nutzen wollen, richten wir uns einen **SSL-Name Based Virtual Host** ein. Im Konfigurationsverzeichnis unseres [[centos: | ||
+ | # vim / | ||
+ | |||
+ | <file apache / | ||
+ | # horde.nausch.org - Horde Groupware | ||
+ | # | ||
+ | < | ||
+ | ServerAdmin webmaster@nausch.org | ||
+ | ServerName horde.nausch.org | ||
+ | ServerPath / | ||
+ | |||
+ | # SSL-stuff | ||
+ | SSLEngine on | ||
+ | SSLProtocol -ALL +SSLv3 +TLSv1 | ||
+ | SSLCipherSuite ALL: | ||
+ | SSLCertificateFile / | ||
+ | SSLCertificateKeyFile / | ||
+ | SSLCertificateChainFile / | ||
+ | |||
+ | AddType application/ | ||
+ | |||
+ | # ActivSync aliases | ||
+ | Alias / | ||
+ | Alias / | ||
+ | |||
+ | DocumentRoot "/ | ||
+ | < | ||
+ | Options Indexes FollowSymLinks | ||
+ | AllowOverride None | ||
+ | |||
+ | # Exclude file from password protection | ||
+ | SetEnvIf Request_URI " | ||
+ | SetEnvIf Request_URI " | ||
+ | SetEnvIf Request_URI " | ||
+ | SetEnvIf Request_URI " | ||
+ | |||
+ | # Access-stuff | ||
+ | Order allow,deny | ||
+ | Allow from all | ||
+ | |||
+ | # Set exclude all files with env=allow | ||
+ | Allow from env=allow | ||
+ | Satisfy any | ||
+ | |||
+ | # ActiveSync | ||
+ | RewriteEngine On | ||
+ | RewriteRule ^/ | ||
+ | RewriteRule .* - [E=HTTP_MS_ASPROTOCOLVERSION: | ||
+ | RewriteRule .* - [E=HTTP_X_MS_POLICYKEY: | ||
+ | RewriteRule .* - [E=HTTP_AUTHORIZATION: | ||
+ | |||
+ | # If horde dies while trying to handle large email file attachments, | ||
+ | # hitting PHP's memory limit. Raise that limit here, but use caution | ||
+ | # Set to your preference - memory_limit should be at least 32M and be greater than the | ||
+ | # value set for post_max_size | ||
+ | # php_value memory_limit 32M | ||
+ | # php_value post_max_size 20M | ||
+ | # php_value upload_max_filesize 10M | ||
+ | |||
+ | # horde.org' | ||
+ | php_admin_flag safe_mode off | ||
+ | php_admin_flag magic_quotes_runtime off | ||
+ | php_flag session.use_trans_sid off | ||
+ | php_flag session.auto_start off | ||
+ | php_admin_flag file_uploads on | ||
+ | # Optional - required for weather block in Horde to function | ||
+ | php_admin_flag allow_url_fopen on | ||
+ | </ | ||
+ | |||
+ | # Deny access to files that are not served directly by the webserver | ||
+ | < | ||
+ | Order deny,allow | ||
+ | Deny from all | ||
+ | </ | ||
+ | |||
+ | # Deny access to the test.php files except from localhost | ||
+ | < | ||
+ | Order deny,allow | ||
+ | Deny from all | ||
+ | </ | ||
+ | |||
+ | DirectoryIndex index.php | ||
+ | |||
+ | ErrorLog logs/ | ||
+ | CustomLog logs/ | ||
+ | </ | ||
+ | </ | ||
+ | |||
+ | <WRAP round important> | ||
+ | |||
+ | Solange wir unseren vHost noch nicht in der Produktionsumgebung steht und fertig konfiguriert wurde, beschränken wir den Zugriff auf den vHost noch. Hierzu tragen wir in der **Directive // | ||
+ | <code apache> | ||
+ | # Access-stuff (Zugriff nur vom Admin-Host aus!) | ||
+ | Order deny,allow | ||
+ | Deny from all | ||
+ | Allow from < | ||
+ | ... | ||
+ | </ | ||
+ | |||
+ | Nach erfolgter Konfiguration, | ||
+ | <code apache> | ||
+ | # Access-stuff (Zugriff von überall erlauben.) | ||
+ | Order allow,deny | ||
+ | Allow from all | ||
+ | ... | ||
+ | </ | ||
+ | |||
+ | </ | ||
+ | ==== Konfiguration aktivieren ==== | ||
+ | Bevor unseren Webserver starten, damit der neue vHost auch bedient werden kann, überprüfen wir die Konfiguration noch auf syntaktische Fehler. | ||
+ | # service httpd configtest | ||
+ | |||
+ | | ||
+ | |||
+ | Abschließend starten wir den Webserver einmal durch. | ||
+ | # service httpd restart | ||
+ | |||
+ | | ||
+ | | ||
+ | |||
+ | |||
+ | |||
+ | ===== mySQL Datenbank ===== | ||
+ | Ein Großteil der Benutzer-Konfigurationsdaten werden in einer [[centos: | ||
+ | |||
+ | ==== Datenbank anlegen ==== | ||
+ | Diese [[centos: | ||
+ | |||
+ | Wir melden uns also als berechtigter Datenbankuser an der mySQL-Datenbank an. | ||
+ | # mysql -h localhost -u root -p | ||
+ | < | ||
+ | Welcome to the MySQL monitor. | ||
+ | Your MySQL connection id is 1942 | ||
+ | Server version: 5.1.67 Source distribution | ||
+ | |||
+ | Copyright (c) 2000, 2012, Oracle and/or its affiliates. All rights reserved. | ||
+ | |||
+ | Oracle is a registered trademark of Oracle Corporation and/or its | ||
+ | affiliates. Other names may be trademarks of their respective | ||
+ | owners. | ||
+ | |||
+ | Type ' | ||
+ | |||
+ | mysql> | ||
+ | </ | ||
+ | |||
+ | Dort legen wir als aller erst einmal eine Datenbank mit dem Namen **horde** an. | ||
+ | | ||
+ | |||
+ | Query OK, 1 row affected (0.03 sec) | ||
+ | |||
+ | ==== Datenuserbank anlegen ==== | ||
+ | Anschließend legen wir uns einen Datenbankuser an, denen wir entsprechende Rechte an der, gerade angelegten Datenbank **horde** einräumen. Als Namen nehme wir einfach **hode_admin_user**. | ||
+ | |||
+ | | ||
+ | |||
+ | Query OK, 0 rows affected (0.00 sec) | ||
+ | |||
+ | und | ||
+ | | ||
+ | |||
+ | Query OK, 0 rows affected (0.00 sec) | ||
+ | |||
+ | ==== Nutzerberechtigungen setzen ==== | ||
+ | Dem gerade angelebtem Datenbankuser für **[[http:// | ||
+ | | ||
+ | |||
+ | Query OK, 0 rows affected (0.00 sec) | ||
+ | |||
+ | und | ||
+ | | ||
+ | |||
+ | Query OK, 0 rows affected (0.00 sec) | ||
+ | |||
+ | ==== Nutzerberechtigungen zuweisen ==== | ||
+ | Zum Ende unserer mySQL-Userkonfiguration weisen wir unserem Nutzer die Berechtigungen zu. | ||
+ | | ||
+ | |||
+ | Query OK, 0 rows affected (0.00 sec) | ||
+ | |||
+ | ==== Zugriff testen ==== | ||
+ | Als nächstes überprüfen wir, ob der zuvor angelegt User/Zugang auch funktioniert. | ||
+ | # mysql -D horde -h mysql.dmz.nausch.org -u hordeuser -p | ||
+ | < | ||
+ | Reading table information for completion of table and column names | ||
+ | You can turn off this feature to get a quicker startup with -A | ||
+ | |||
+ | Welcome to the MySQL monitor. | ||
+ | Your MySQL connection id is 19824 | ||
+ | Server version: 5.1.67 Source distribution | ||
+ | |||
+ | Copyright (c) 2000, 2012, Oracle and/or its affiliates. All rights reserved. | ||
+ | |||
+ | Oracle is a registered trademark of Oracle Corporation and/or its | ||
+ | affiliates. Other names may be trademarks of their respective | ||
+ | owners. | ||
+ | |||
+ | Type ' | ||
+ | |||
+ | mysql> show tables; | ||
+ | +---------------------------+ | ||
+ | | Tables_in_horde | ||
+ | +---------------------------+ | ||
+ | | horde_datatree | ||
+ | | horde_datatree_attributes | | ||
+ | | horde_datatree_seq | ||
+ | | horde_histories | ||
+ | | horde_histories_seq | ||
+ | | horde_prefs | ||
+ | | horde_sessionhandler | ||
+ | | horde_tokens | ||
+ | | horde_users | ||
+ | | horde_vfs | ||
+ | | horde_vfs_seq | ||
+ | +---------------------------+ | ||
+ | 11 rows in set (0.00 sec) | ||
+ | |||
+ | mysql> | ||
+ | </ | ||
+ | Da der Test positiv ausgefallen ist, können wie uns wieder von unserem Datenbankserver abmelden. | ||
+ | mysql> quit | ||
+ | |||
+ | Bye | ||
+ | |||
+ | ===== vorbereitende Konfiguration ===== | ||
+ | Die Konfiguration von Horde, wie auch den nachfolgenden Module/ | ||
+ | Zunächst kopieren wir uns die Vorlagedatei, | ||
+ | # cp -a / | ||
+ | |||
+ | Dann legen wir also die besagte Backup-Datei für die Konfiguration an. | ||
+ | # touch / | ||
+ | |||
+ | Zum Schluß weisen wir noch die Datei und Besitzrechte für die Konfigurationsdatei- und dessen Verzeichnis zu. | ||
+ | # chown -R root:apache / | ||
+ | |||
+ | # chmod g+w -R / | ||
+ | |||
+ | ===== Konfiguration über die WEB-GUI ===== | ||
+ | Die eigentliche Konfigurationsarbeit erledigen wir dann über die GUI des Web-Frameworks. Dazu rufen wir unseren angelegten VHOST im Webbrowser auf. | ||
+ | $ firefox https:// | ||
+ | |||
+ | {{ : | ||
+ | |||
+ | Mit einem Klick auf das Zahnradsysmbol {{: | ||
+ | |||
+ | {{ : | ||
+ | |||
+ | Hier wählen wir den Menüpunkt **// | ||
+ | |||
+ | {{ : | ||
+ | |||
+ | Da wir den Menüpukt **// | ||
+ | Um zur Konfiguration von **Horde** zu gelangen, klicken wir nun auf den Punkt **Horde (horde)**. | ||
+ | |||
+ | {{ : | ||
+ | |||
+ | Auf den nun zur Verfügung stehenden Reitern, erfolgt die Konfiguration des Horde-Frameworks (Basis-Modul). | ||
+ | ==== General ==== | ||
+ | === General Horde Settings === | ||
+ | $conf[vhosts] | ||
+ | === PHP Settings === | ||
+ | $conf[debug_level] | ||
+ | $conf[max_exec_time] | ||
+ | $conf[compress_pages] | ||
+ | $conf[secret_key] 50fd8699-d00f-4a35-a900-7b290a00005a | ||
+ | $conf[umask] | ||
+ | $conf[testdisable] | ||
+ | $conf[tmpdir] | ||
+ | === URL Settings === | ||
+ | $conf[use_ssl] | ||
+ | $conf[server][name] | ||
+ | $conf[server][port] | ||
+ | $conf[urls][token_lifetime] | ||
+ | $conf[urls][hmac_lifetime | ||
+ | $conf[urls][pretty] | ||
+ | $conf[safe_ips] | ||
+ | === Session Settings === | ||
+ | $conf[session][name] | ||
+ | $conf[session][use_only_cookies] | ||
+ | $conf[session][cache_limiter] | ||
+ | $conf[session][timeout] | ||
+ | $conf[session][max_time] | ||
+ | $conf[cookie][domain] | ||
+ | $conf[cookie][path] | ||
+ | \\ | ||
+ | ==== Database ==== | ||
+ | === Database Settings === | ||
+ | $conf[sql][phptype] | ||
+ | $conf[sql][username] | ||
+ | $conf[sql][password] | ||
+ | $conf[sql][protocol] | ||
+ | $conf[sql][hostspec] | ||
+ | $conf[sql][port] | ||
+ | $conf[sql][database] | ||
+ | $conf[sql][charset] | ||
+ | $conf[sql][ssl] | ||
+ | $conf[sql][ca] | ||
+ | $conf[sql][splitread] | ||
+ | \\ | ||
+ | ==== LDAP ==== | ||
+ | === LDAP Settings === | ||
+ | $conf[ldap][useldap] | ||
+ | \\ | ||
+ | ==== Authentication ==== | ||
+ | === Authentication Settings === | ||
+ | $conf[auth][admins] | ||
+ | $conf[auth][checkip] | ||
+ | $conf[auth][checkbrowser] | ||
+ | $conf[auth][resetpassword] | ||
+ | $conf[auth][alternate_login] | ||
+ | $conf[auth][redirect_on_logout] | ||
+ | $conf[auth][list_users] | ||
+ | $conf[auth][driver] | ||
+ | $conf[auth][params][username] | ||
+ | $conf[auth][params][password] | ||
+ | $conf[auth][params][requestuser] | ||
+ | $conf[auth][params][count_bad_logins] | ||
+ | $conf[auth][params][login_block] | ||
+ | $conf[auth][params][login_block_count | ||
+ | $conf[auth][params][login_block_time] | ||
+ | === Terms of Service Agreement === | ||
+ | $conf[tos][file] | ||
+ | \\ | ||
+ | ==== Sign Up ==== | ||
+ | === Sign Up Settings === | ||
+ | $conf[signup][allow] | ||
+ | \\ | ||
+ | ==== Logging ==== | ||
+ | === Logging Settings === | ||
+ | $conf[log][enabled] | ||
+ | $conf[log][priority] | ||
+ | $conf[log][ident] | ||
+ | $conf[log][time_format] | ||
+ | $conf[log][type] | ||
+ | $conf[log][name] | ||
+ | $conf[log][log_accesskeys] | ||
+ | \\ | ||
+ | ==== Preference System ==== | ||
+ | ===Preference System Settings === | ||
+ | $conf[prefs][maxsize] | ||
+ | $conf[prefs][driver] | ||
+ | $conf[prefs][params][driverconfig] | ||
+ | $conf[prefs][params][table] | ||
+ | \\ | ||
+ | ==== Alarm System ==== | ||
+ | === Alarm System Settings === | ||
+ | $conf[alarms][driver] | ||
+ | $conf[alarms][params][driverconfig] | ||
+ | $conf[alarms][params][table] | ||
+ | $conf[alarms][params][ttl] | ||
+ | \\ | ||
+ | ==== Groups ==== | ||
+ | === Groups Settings === | ||
+ | $conf[group][driver] | ||
+ | $conf[group][driverconfig] | ||
+ | === Group Caching === | ||
+ | //GROUP CACHING HAS NOT BEEN IMPLEMENTED FOR HORDE 5 YET// | ||
+ | \\ | ||
+ | ==== Permissions ==== | ||
+ | === Permissions Settings === | ||
+ | $conf[perms][driver] | ||
+ | $conf[perms][driverconfig] | ||
+ | \\ | ||
+ | ==== Shares ==== | ||
+ | === Allow Sharing? === | ||
+ | $conf[share][no_sharing] | ||
+ | $conf[share][auto_create] | ||
+ | $conf[share][world] | ||
+ | $conf[share][any_group] | ||
+ | $conf[share][hidden] | ||
+ | === Share Caching === | ||
+ | $conf[share][cache] | ||
+ | === Shares Driver === | ||
+ | $conf[share][driver] | ||
+ | \\ | ||
+ | ==== Cache System ==== | ||
+ | === Cache System Settings === | ||
+ | $conf[cache][default_lifetime] | ||
+ | $conf[cache][driver] | ||
+ | $conf[cache][params][driverconfig] | ||
+ | $conf[cache][params][table] | ||
+ | $conf[cache][compress] | ||
+ | $conf[cache][use_memorycache] | ||
+ | === CSS Caching === | ||
+ | $conf[cachecss] | ||
+ | $conf[cachecssparams][driver] | ||
+ | $conf[cachecssparams][lifetime] | ||
+ | $conf[cachecssparams][compress] | ||
+ | === Javascript Caching === | ||
+ | $conf[cachejs] | ||
+ | $conf[cachejsparams][driver] | ||
+ | $conf[cachejsparams][compress] | ||
+ | $conf[cachejsparams][lifetime] | ||
+ | === Theme Caching === | ||
+ | $conf[cachethemes] | ||
+ | $conf[cachethemesparams][check] | ||
+ | $conf[cachethemesparams][lifetime] | ||
+ | \\ | ||
+ | ==== Lock System ==== | ||
+ | === Lock System Settings === | ||
+ | $conf[lock][driver] | ||
+ | $conf[lock][params][driverconfig] | ||
+ | $conf[lock][params][table] | ||
+ | \\ | ||
+ | ==== Token System ==== | ||
+ | === Token System Settings === | ||
+ | $conf[token][timeout] | ||
+ | $conf[token][driver] | ||
+ | $conf[token][params][driverconfig] | ||
+ | $conf[token][params][table] | ||
+ | \\ | ||
+ | ==== Mailer ==== | ||
+ | === Mailer Settings === | ||
+ | $conf[mailer][type] | ||
+ | $conf[mailer][params][host] | ||
+ | $conf[mailer][params][port] | ||
+ | $conf[mailer][params][localhost] | ||
+ | $conf[mailer][params][auth] | ||
+ | $conf[mailer][params][username] | ||
+ | $conf[mailer][params][password] | ||
+ | === Format === | ||
+ | $conf[mailformat][brokenrfc2231] | ||
+ | |||
+ | ==== Virtual File Storage ==== | ||
+ | === Virtual File Storage Settings === | ||
+ | $conf[vfs][type] | ||
+ | $conf[vfs][params][driverconfig] | ||
+ | \\ | ||
+ | ==== Custom Session Handler ==== | ||
+ | === Custom Session Handler Settings === | ||
+ | $conf[sessionhandler][type] | ||
+ | $conf[sessionhandler][params][driverconfig] | ||
+ | $conf[sessionhandler][params][table] | ||
+ | $conf[sessionhandler][memcache] [ ] | ||
+ | \\ | ||
+ | ==== HTTP Proxy ==== | ||
+ | === HTTP Proxy Settings === | ||
+ | $conf[http][proxy][proxy_host] | ||
+ | $conf[http][proxy][proxy_port] | ||
+ | $conf[http][proxy][proxy_user] | ||
+ | $conf[http][proxy][proxy_pass] | ||
+ | \\ | ||
+ | ==== Spell Checker ==== | ||
+ | === Spell Checker Settings === | ||
+ | $conf[spell][driver] | ||
+ | $conf[spell][params][path] | ||
+ | \\ | ||
+ | ==== GnuPG ==== | ||
+ | === GnuPG Settings === | ||
+ | $conf[gnupg][path] | ||
+ | $conf[gnupg][keyserver] | ||
+ | $conf[gnupg][timeout] | ||
+ | \\ | ||
+ | ==== OpenSSL ==== | ||
+ | $conf[openssl][cafile] | ||
+ | $conf[openssl][path] | ||
+ | \\ | ||
+ | ==== Themes ==== | ||
+ | === Theme Settings === | ||
+ | $conf[nobase64_img] | ||
+ | \\ | ||
+ | ==== Image Manipulation ==== | ||
+ | === Image Manipulation Settings === | ||
+ | $conf[image][driver] The PECL Imagick Library (recommended) | ||
+ | === Image Metadata Driver Settings === | ||
+ | $conf[exif][driver] | ||
+ | $conf[exif][params][exiftool] | ||
+ | \\ | ||
+ | ==== MIME Detection ==== | ||
+ | === MIME Detection Settings === | ||
+ | $conf[mime][magic_db] | ||
+ | \\ | ||
+ | ==== Country Lookup ==== | ||
+ | === Country Lookup Settings === | ||
+ | $conf[geoip][datafile] | ||
+ | \\ | ||
+ | ==== Timezone Lookup ==== | ||
+ | === Timezone Lookup Settings === | ||
+ | $conf[timezone][location] | ||
+ | \\ | ||
+ | ==== Problem Reporting ==== | ||
+ | === Problem Reporting Settings === | ||
+ | $conf[problems][tickets] | ||
+ | $conf[problems][email] | ||
+ | $conf[problems][maildomain] | ||
+ | $conf[problems][username] | ||
+ | $conf[problems][password] | ||
+ | $conf[problems][attachments] | ||
+ | \\ | ||
+ | ==== Menu ==== | ||
+ | === Menu Settings === | ||
+ | $conf[menu][links][help] | ||
+ | $conf[menu][links][prefs] | ||
+ | $conf[menu][links][problem] | ||
+ | $conf[menu][links][login] | ||
+ | $conf[menu][links][logout] | ||
+ | \\ | ||
+ | ==== Portal Blocks ==== | ||
+ | === Portal Blocks Settings === | ||
+ | $conf[portal][fixed_blocks] Horde: Metar Weather | ||
+ | === Fortune Configuration === | ||
+ | $conf[fortune][exec_path] | ||
+ | === Account Info Configuration === | ||
+ | $conf[accounts][driver] | ||
+ | \\ | ||
+ | ==== User Capabilities and Constraints ==== | ||
+ | === User Capabilities and Constraints Settings === | ||
+ | $conf[user][verify_from_addr] | ||
+ | $conf[user][select_view] | ||
+ | \\ | ||
+ | ==== API Keys ==== | ||
+ | === API Keys Settings === | ||
+ | $conf[api][googlemaps] | ||
+ | $conf[api][googlesafebrowsing] | ||
+ | $conf[api][googlesearch] | ||
+ | $conf[api][yahoomaps] | ||
+ | $conf[api][cloudmade] | ||
+ | $conf[api][bing] | ||
+ | === Facebook Integration Settings === | ||
+ | $conf[facebook][enabled] Disabled | ||
+ | === Twitter Integration Settings === | ||
+ | $conf[twitter][enabled] | ||
+ | === Url Shortening === | ||
+ | $conf[urlshortener] | ||
+ | === Weather Services === | ||
+ | $conf[weather][provider] | ||
+ | \\ | ||
+ | ==== IMAP Server ==== | ||
+ | === IMAP Server Settings === | ||
+ | $conf[imap][enabled] | ||
+ | \\ | ||
+ | ==== IMSP Server ==== | ||
+ | === IMSP Server Settings === | ||
+ | $conf[imsp][enabled] | ||
+ | \\ | ||
+ | ==== Kolab Server ==== | ||
+ | === Kolab Server Settings === | ||
+ | $conf[kolab][enabled] | ||
+ | \\ | ||
+ | ==== Memcache Server ==== | ||
+ | === Memcache Server Settings === | ||
+ | $conf[memcache][enabled] | ||
+ | \\ | ||
+ | ==== ActiveSync ==== | ||
+ | === ActiveSync Settings === | ||
+ | $conf[activesync][enabled] | ||
+ | |||
+ | Am Ende unserer Konfigurationsarbeit, | ||
+ | Die erfolgreiche Sicherung wird uns entsprechend angezeigt. | ||
+ | {{ : | ||
+ | |||
+ | |||
+ | ====== Links ====== | ||
+ | * **⇐ [[centos: | ||
+ | * **⇒ [[centos: | ||
+ | * **[[centos: | ||
+ | * **[[wiki: | ||
+ | * **[[http:// | ||
+ | |||