OpenUpload安装文档.doc

OpenUpload安装文档2010-04-10 00:59这个东西，还是很值得研究。尤其整合ldap。那肯定是很不错的。结合iRedMail。/openupload/index.php?action=loginUsername:xiongpengPassword:xiongpeng这是一个类似demo，大家可以看看，感觉真的很不错，如果可以结合邮件系统。-OpenUpload installation notes-Version: 0.3Last updated: 2008-10-24INTRODUCTIONThis document describes the basic steps to install Open Upload.Be sure to also read README file.In this document there is also some documentation I suggest you to read.配置环境：linux+apache+mysql+php+phpmyadmin+openupload/bbs/cacti等。INDEX* Requirements* Quick Start* Modes and Rights* LDAP Authentication * Multisite installation* IP Blocking Feature* Templates / Logo change-REQUIREMENTSTo be able to use this software you need:- A running Web Server with PHP 5.x (version 4 wont work)- Database (MySQL / PostgreSql) (optional but raccomended)- PHP and Web server must be configured to allow the file uploadsMore specifically:by default php allows uploads of max 2Mb file size. Youll need to update the php.ini file to allow the maximum allowed size of your site, either by modifying the php.ini orallowing Apache (or the web server) to let .htaccess override the limit. (i.e. AllowOverride Options)In the www directory there is an example .htaccess file- PHP must be installed with the DATABASE backend you want to use,and GD image extensions for captcha to work.- Also the LDAP extension needs to be installed if you plan to use LDAP/AD Authentcation.-QUICK START* BIG FAT NOTE: This procedure is aimed to let you test the program functionality.Once this program is right for you read the MULTISITE INSTALLATION to avoidsecurity issues.You should make sure the files other than www are not directly accessible via WEBMore specifically this are the most important:data directory where files are storedtxtdb if a flat txt database is used* Download the source from /projects/openupload* Untar the file tar xzf .tar.gz* Copy all files to somewhere which is accessible from the web (i.e. /var/www/html/openupload) * Point your browser to where the application has been installed (i.e. http:/localhost/openupload)* Follow the setup steps.MANUAL CONFIGURATION* Copy the www/config.inc.php.example and edit it to suit your installation vi config.inc.php.example配置PHP* Make sure the web server is able to write to the data, data/tmp and templates_c directory 给775权限* Create the database ( see MODES AND RIGHTS for more information on mode and rights configuration)MYSQL: - create the db and the user create database ;grant all privileges on .* to localhost ideintified by ;- import the database schema and default config optionsmysql -u -p sql/mysql/1_schema.sqlmysql -u -p sql/mysql/2_base.sql- import the configuration mode (it is not required):mysql -u -p sql/mysql/3_mode_.sqlPGSQL:- create the user and the dbsu - postgres (or whatever is the db admin)createuser -P -S -D -R -l openupload createdb -owner=openupload openupload OpenUpload DB- import the database schema and default config optionspsql -h -W -U openupload -f sql/pgsql/1_structure.sqlpsql -h -W -U openupload -f sql/pgsql/2_base.sql- import the configuration mode (it is not required):psql -h -W -U openupload -f sql/pgsql/3_mode_.sqlFLAT FILE (TXT):- the txt is usable, but I would not suggest it unless its a really low traffic site.- make sure the rootdir for the txtdb folder is writable by your apache user - copy the default files from sql/txt/*.txt to the rootdir folder- substitute the wanted mode configuration txt/modes/acl_.txt over the acl.txt* Point your browser to http:/localhost/* Login with Username: admin Password: admin* Go to Profile and change your admin e-mail and password* Enjoy! :) -安装完成后打开主页面显示如下报错： query failed: SELECT * FROM langs WHERE active=1 ORDER BY id原因：（是没有导入数据库/var/www/html/openupload/sql/mysql）1. pour ce problme :SELECT * FROM langs WHERE active= 1 ORDER BY idLors de linstallation automatique, il y a une erreur ; la base sql ne se cre pas. Il faut donc le faire. Cest trs simple, connectez vous sur votre phpmyadmin, selection votre base, selectionner ensuite vote table, et cliquez sur importer. Ensuite, cliquez sur parcourir et allez chercher dans lodre ses fichiers :openupload-0.4.1sqlmysql1_structure.sqlopenupload-0.4.1sqlmysql2_base.sqlopenupload-0.4.1sqlmysql3_* = cest maintenant quil faut choisir le mode de votre site : private, public, restricted et service (moi jai opt pour le mode private).normalement, aprs tout a, votre site devrais tre OKpour info, loggin : admin ; mot de passe : adminSi vous avez un autre problme, sa doit a cause de votre config.inc.php qui est mal config :pour moi sa donne a :$CONFIGWWW_SERVER = ;$CONFIGWWW_ROOT = /www;$CONFIGINSTALL_ROOT = /var/www/;$CONFIGDATA_PATH = /var/www//data;解决方法：把以下三个数据库导入到openupload数据库中去。openupload-0.4.1sqlmysql1_structure.sqlopenupload-0.4.1sqlmysql2_base.sqlopenupload-0.4.1sqlmysql3_*导入成功后如截图在访问openupload32/openupload登陆：上传上传文件：上传成功：下载：问题汇总：一 下载后的文件名是乱麻，发送的邮件也是乱麻，邮件标题等都是乱麻。把Translation module:改为NULL就可以了。现在邮件和下载文件都是正常了。原因：TRANSLATIONS: Right now the program is only translated to Italian (sorry I only know Italian and Engligh) Translating isnt that hard (at least the default template) I have implemented 2 tranlsation modules, but I probably plan to have a tool which converts from one to the other. Right now you can choose to translate with a php array, or use gettext tools (like poedit), to translate the app to your language. Its divided in 2 parts. 1 is for the application, and 1 is for the template. They are located in locale/* for the application and templates/default/locale for the 2nd. Once your translation is ready please send it to me or the ML.二要使用域名访问（修改PHP文件vi /var/www/html/openupload/www/config.inc.php）三上传下载大小限制（修改PHP文件vi /var/www/html/openupload/www/config.inc.php）$CONFIGmax_upload_size = 10000; 配置用户最大使用磁盘容量$CONFIGid_max_length = 10; 配置用户同时上传文件的个数（修改PHP文件vi /etc/php.ini）（修改PHP文件vi /var/www/html/openupload/www/.htaccess）重启httpd服务生效。原因：Drupals limits on upload file size are determined by your servers PHP settings (as well as Drupal specified settings that can be set at Admin Site Configuration File Upload). The default values for PHP will restrict you to a maximum 2 MB upload file size. On the settings page for the upload module, Drupal calculates and displays the maximum file size that you can set based upon two PHP settings: post_max_size and upload_max_filesize. Since post_max_size is the limit for all the content of your post, many people choose post_max_size to be a multiple of upload_max_filesize to allow multiple files to be uploaded, but this is not essential. The upload module limits the size of a single attachment to be less than either post_max_size, or upload_max_filesize, whichever is smaller. The default PHP values are 2 MB for upload_max_filesize, and 8 MB for post_max_size.Depending on your host, changing these two PHP variables can be done in a number of places with the most likely being php.ini or .htaccess (depending on your hosting situation).For example, to increase the limit on uploaded files to 10 MB: Add the below to the relevant php.ini file (recommended, if you have access). Note that for some hosts this is a system-wide setting. However, for hosts running PHP as a CGI script with suexec (for example) you may be able to put these directives in a php.ini file in your Drupal root directory. o upload_max_filesize = 10M o post_max_size = 10M Add the below to your .htaccess file in your Drupal root directory. o php_value upload_max_filesize 10M o php_value post_max_size 10M The PHP documentation states that the memory_limit setting also affects file uploading. Generally speaking, memory_limit should be larger than post_max_size. If this is an issue, see the page on how to Increase memory available to PHP (3 methods)Drupal also allows/enforces its own size limits, independently of what PHP allows. These are found in Drupal 6 at Administer Site configuration File uploads ( /admin/settings/uploads ). The Drupal settings cannot be larger than those permitted by PHP, but may be smaller if you havent updated them, so remember to check there also, after updating the php.ini.四：对LOG做一个修改：（/var/www/html/openupload/www/templates/default/img）以下是对产品的内部功能的一些介绍。MODES AND RIGHTSApplication can be configured to achive different behavier depending on group rights.It comes with a set of predefined rights so that it enables/disables features.Mainly I think this are the most usefull modes one should require, but you are free to adapt them after installation.* PublicThe site is completely public. No need for the user to login or register. It can upload and download as it wishes. Still plugin limitations may apply.* ServiceThe site is public for not registered users, but registered ones get more functionality (i.e. less limitations, they can password protect the file, can send e-mails, etc).* RestrictedThe users to be able to upload need to register/loginThe download is still public.* PrivateThe users must login to upload and they are not able to register (the Admin adds the users).The download is still available.I think this is the best solution for a company or user which wants internal users to uploadfiles, but i.e. customers to download them freely.IMHO this is the best configuration in conjunction with LDAP/AD Authentication.* Internal use (which I do not provide, but might be needed)This is a mode which could be used for some people, but unless needed you will need to configure the rights yourself.Mainly upload and download need a user to login.Basically the rights are checked with this priority:group / module / actiongroup / module / *group / * / * / module / action* / module / * / * / *where * stands for any value.With the LDAP authentication backend a user can be part of multiple groups.The check is done for every group the user is part of, and if none of it are matchedthe result is to deny the operation. (See LDAP AUTHENTICATION)NOTE: Be carfull with rights as you might block yourself outAlso the plugins can be enabled and disabled based on the group a user is registered.Probabaly youll need to adapt it to suit your needs.Plugins must be enabled / disabled on a group basis (this might change in the future),there is no * for the group.-LDAP AUTHENTICATIONLDAP support is maily a company feature, where you want your internal users to be able to upload files,and Customers to be able to download (without the need to login).Supported (tested) infrastructures:- Openldap (I test it against a Samba3 + Openldap structure).- Active Directory (against a windows 2003 domain)LDAP configuration can be quite triky so youll need to undersand what the configuration options are:- host : this is easy, the host to ask login requests (your LDAP / AD server)- type : in case of Active Directory put AD as value- user : this is the user used to do LDAP/AD queries. Id suggest to create a readonly user.- password : the readonly user password- domain : only for Active Directory, specifies the AD domain (i.e. yourdomain.local), its used for user authentication. (like Useryourdomain.local)- basedn : this is the LDAP base DN- userdn : the base dn for user searches. For LDAP it is also used for user authentication values (i.e. uid=User,ou=Users,dc=yourdomain,dc=local), its the ou=Users,dc=yourdomain,dc=local- userckass : the objectClass associated to the users (leave user for AD)- uid : the field that corresponds to the user login (could be cn, i.e. cn=admin,ou=Users,. )- userfields : the list of correspondences between LDAP/AD attributes and the user fieldsplace particular attention to the group_id match, as it needs to match the main gid for group name search.- groupdn : Group base search path. Where groups are stored (could be the same as basedn)- groupclass : The objectClass of a group (leave group for AD)- gid : this is the value to be matched between the group_id in the user fields and the group)- groupfields: this is a list of correspondence between LDAP/AD group attributes and the group fields- sgid : Mainly needed for Openldap, the user might be part of other groups. this is the lookup field for the login name to be a member of a group (not needed in AD)- sgidfields : correpondence between ldap sub group attributes and group attributes (mainly its the same as groupfields) maybe Ill remove it, if I find out its not needed.Once you have configured this part you should make sure to be able to login as administrator and change rights.Its probably a good idea to add a record with the Administrator group to be able to access anything.Id suggest to create a set of dedicated groups for the application (i.e. OpenUploadAdmin, OpenUploadUser), in your LDAP/AD configuration, and manage rights for only this groups (obviously assign to them the users you want to access the service)Also Im not really sure how it works if a user has more than 1 group with different rights (especially on plugins)If its a simple company you can use the default Domain Users and Domain Admins.Please note that if LDAP is enabled you wont be able to manage users/groups from the Administration interface (use the LDAP/AD for this)Id also suggest to assign your users an e-mail addess.-MULTISITE INSTALLATIONIn the QUICK START you find out how to test the application.For a better installation this are my suggestions:Put the program somewhere which is not WEB accessible. (i.e. /usr/share/openupload)You can then copy the www folder to the WEB server root (or subdirectory), or even better,point the web server to the www folder if its a single site configuration.Make sure the data, data/tmp and templates_c folders are writable by the web user.Change the config.inc.php / or run the setup fixing the paths accordingly to your installation.If you want a multisite be sure to have a different config.inc.php per site (and db or db prefix).Create a template folder for every site (or maybe just 1 if you plan on changing only the logo).-IP BLOCKING FEATURE (actually allow/deny)The IP blocking feature is pretty configurable, so you can allow only a set of specific networksto access the site (i.e. VPN networks).The ip can be specified with a subnet mask (i.e. /) or with a subnet mask number (i.e. /23)Then you can decide wet