-
Notifications
You must be signed in to change notification settings - Fork 9
/
INSTALL.Platforms
188 lines (126 loc) · 6.13 KB
/
INSTALL.Platforms
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
===============================================================
University of Cambridge Web Authentication System (UcamWebAuth)
Platform-specific Installation Notes
===============================================================
1. Debian/Ubuntu
2. MacOS
3. Red Hat, Fedora
4. SuSE Linux
5. Windows
Please send corrections and additions to this documents to
raven-support@ucs.cam.ac.uk
1. Debian/Ubuntu
================
In versions below Ubuntu 14.04 "trusty" and Debian 8 "jessie", only
Apache 2.2 is available. From those releases onwards, only Apache 2.4
is available. Installing the appropriate .deb file (see INSTALL for
more details on how to obtain/build an appropriate .deb for your
system) will install the module correctly; you can enable it with the
command "a2enmod ucam_webauth". It will still require configuration to
meet your needs, however.
apxs is installed as /usr/bin/apxs2
Apache runs with a ServerRoot of /etc/apache2/
The module should be installed into
/usr/lib/apache2/modules/. According to Debian/Ubuntu conventions, it
should be loaded from a file in /etc/apache2/mods-available called
ucam_webauth.load containing:
LoadModule ucam_webauth_module /usr/lib/apache2/modules/mod_ucam_webauth.so
Initial configuration directives (probably including AACookieKey)
should appear in a file in the same directory called
ucam_webauth.conf. If this file contains a Cookie Key it should only
be readable by root. Modules are enabled by symlinking to their .load
and .conf files from the /etc/apache2/mods-enabled directory - the
utility a2enmod should be used to create the symlinks.
The authn_core module must be loaded for ucam_webauth to work.
Alternatively, the module could be loaded with a LoadModule line in
apache2.conf, or in a *.conf file in /etc/apache2/conf.d/, or otherwise in
a file included into apache2.conf:
LoadModule ucam_webauth_module /usr/lib/apache2/modules/mod_ucam_webauth.so
The keys will by default be searched for in
/etc/apache2/conf/webauth_keys/
Apache logs are stored in /var/log/apache2/
2. MacOS (10.5 to 10.10 ONLY)
=============================
Only Apache 2 is available.
The recommended process is to download the installer package relevant
to your version of MacOS. For versions 10.6 (Snow Leopard) through
10.9 (Mavericks), this will be called
mod_ucam_webauth_<ver>_10.6-10.9.dmg, and for version 10.10
(Yosemite), this will be called mod_ucam_webauth_<ver>_10.10.dmg.
Apple removed the OpenSSL library from MacOS 10.11 (El Capitan)
onward. Since the Apache authentication module depends on OpenSSL for
some of its function this means that the module can't easily be used
with the supplied copy of Apache from 10.11 onward.
See also
https://wiki.csx.cam.ac.uk/raven/Installing_the_Apache_authentication_module_under_MacOS_X
for more details.
3. Red Hat, Fedora
==================
Only Apache 2 is available
apxs is installed as /usr/sbin/apxs
Apache runs with a ServerRoot of /etc/httpd/
The module should be installed into /usr/lib/httpd/modules/,
(a.k.a. /etc/httpd/modules/ via a symlink). It should be loaded with a
LoadModule line in httpd.conf, or in a *.conf file in
/etc/httpd/conf.d/, or otherwise in a file included into httpd.conf:
LoadModule ucam_webauth_module modules/mod_ucam_webauth.so
The keys will by default be searched for in
/etc/httpd/conf/webauth_keys/
Apache logs are stored in /var/log/httpd/
4. SuSE Linux
=============
Apache 2
--------
Apache 2 is provided by the apache2 package. This provides Apache 2.0
in SLES 9 and SuSE Linux 10.0; it provides Apache 2.2 in SLES 10, SuSE
Linux 10.1 and OpenSuSE 10.2.
apxs is installed as /usr/sbin/apxs2. Alternate versions
(apxs2-prefork, apxs2-worker, etc) are available for building modules
customised for particular MPMs (see
/usr/share/doc/packages/apache2/README.SUSE)
Apache runs with a ServerRoot of /srv/www/
The module should installed into /usr/lib/apache2/ (/usr/lib64/apache2/
on 64-bit systems). It should be loaded by adding 'ucam_webauth' to
the list of modules assigned to the APACHE_MODULES key in
/etc/sysconfig/apache2 (the utility a2enmod can be used to manipulate
this list). For older versions of SuSE it will be necessary to run
SuSEconfig --module apache2
to bring this change into operation, later versions do this
automatically when Apache is restarted. Either way, all the modules in
/usr/lib/apache2/ will be symlinked from /usr/lib/apache2-prefork/,
/usr/lib/apache2-worker, etc, depending in which Apache MPM is in use.
Alternatively, the module could be loaded with a LoadModule line in
httpd.conf, or in a *.conf file in /etc/apache/conf.d/, or otherwise in
a file included into httpd.conf:
LoadModule ucam_webauth_module /usr/lib/apache2/mod_ucam_webauth.so
or
LoadModule ucam_webauth_module /usr/lib64/apache2/mod_ucam_webauth.so
The keys will by default be searched for in
/srv/www/conf/webauth_keys/
It might be better to use the AAKeyDir directive to relocate this to
something like /etc/apache2/webauth_keys/. The SuSE RPMs will by
default create /etc/apache2/webauth_keys/ and make
/srv/www/conf/webauth_keys a symlink to it.
Apache logs are stored in /var/log/httpd/
5. Windows
==========
All versions
------------
See README.WIN32. Binary builds of the module are available - the
correct binary module must be used to match the version of Apache in
use (2.4).
By default, the Apache project binary installer installs into one of
the following. This is the default ServerRoot:
C:\Program Files\Apache Software Foundation\Apache2.4\
The module should be installed into the modules\ directory within the
apache directory. The 'Visual C++ Redistributable for Visual
Studio 2012' supplied in the file vcredist_x86.exe or vcredist_x64.exe
(for 32-bit or 64-bit versions of Windows) must be installed if not
already present.
The module should be loaded with a LoadModule line in httpd.conf or
otherwise in a file included into httpd.conf:
LoadModule ucam_webauth_module modules/mod_ucam_webauth.so
The keys will by default be searched for in conf\webauth_keys\ within
the installation directory.
Apache logs are stored in the logs\ directory within the installation
directory.