education department linux assignment teacher: bun phoumen ... · then test apache installation by...

Center for Information Systems Training – PO box 51

St. 371, PhumTropeangChhuk (BoreySorla)

SangkatTekThla, Khan RusseyKeo, Phnom Penh

[email protected] - (+855 23)99 8383

Prepared by Vannath KANN 26/02/11 of 44

Education Department

Linux Assignment

Teacher: Bun Phoumen

Student’s Name: KANN Vannath

Promotion: SNA 2011C_032

Topic: Configure a Web Application Server




[email protected] - (+855 23)99 8383


Tables of Content

I / Install Apache----------------------------------------------------------------------------------------------------- 3

II / Configure a Virtual Host -------------------------------------------------------------------------------------- 4

1 / In Directory /etc/apache2/vhost.d ---------------------------------------------------------------------------------- 4

A) Edit the file “information.conf” ------------------------------------------------------------------------------------------------- 4

B) Edit the file “marketing.conf” --------------------------------------------------------------------------------------------------- 6

C) Edit the file “accounting.conf” -------------------------------------------------------------------------------------------------- 8

2 / In Directory /srv/www/ ------------------------------------------------------------------------------------------------ 9

3 / In Directory /etc/apache2 -------------------------------------------------------------------------------------------- 10

4 / In Directory /etc/-------------------------------------------------------------------------------------------------------- 11

5 /Configure DNS Server for each Virtual hosts --------------------------------------------------------------------- 12

6 / Test Virtual host from Client ----------------------------------------------------------------------------------------- 13

III / Configure User Authentication --------------------------------------------------------------------------- 15

1 / Configure Virtual host “marketing.vannath.com.kh” for Authentication ------------------------------- 15

1 / Configure Virtual host “accounting.vannath.com.kh” for Authentication ------------------------------ 18

IV / Configure SSL ------------------------------------------------------------------------------------------------- 21

1 / Create file “random” --------------------------------------------------------------------------------------------------- 21

2 / Generate a Server Key ------------------------------------------------------------------------------------------------- 21

3 / Sign the Key to be the Certificate ----------------------------------------------------------------------------------- 22

3 / Copy “key” and “crt “files to /etc/apache2/ in directory ss.key and ssl.crt----------------------------- 23

A) Change file “key” and “crt” permission ------------------------------------------------------------------------------------- 23

4 / In Directory /etc/ apache2/vhost.d -------------------------------------------------------------------------------- 23

5 / Edit the file “/etc/sysconfig/apache2” ---------------------------------------------------------------------------- 24

6 / Access “accounting.vananth.com.kh” from client (HTTPS Port 443) -------------------------------------- 25

A) On Internet Explorer ------------------------------------------------------------------------------------------------------------- 25

B) On Firefox --------------------------------------------------------------------------------------------------------------------------- 28

V / Configure for Access both Port 80 and 443 to “accounting.vannath.com.kh” ---------------- 30

VI / Redirect HTTP access to HTTPS access ------------------------------------------------------------------ 33

VII/ Install PHP ----------------------------------------------------------------------------------------------------- 37

1 / Install ----------------------------------------------------------------------------------------------------------------------- 37




[email protected] - (+855 23)99 8383


2 / Test PHP installation --------------------------------------------------------------------------------------------------- 38

A) Configure virtual host for test PHP installation --------------------------------------------------------------------------- 38

B) Configure CNAME DNS Server for PHP virtual host---------------------------------------------------------------------- 40

A) Problem ----------------------------------------------------------------------------------------------------------------------------- 41

VIII / Install MYSQL ----------------------------------------------------------------------------------------------- 43

I / Install Apache � Install the following packages

❑apache2 ❑apache2-example-pages ❑apache2-prefork

� And restart apache service with command=># rcapache2 restart

� Then test apache installation by using default Browser on SLES text mode is w3m

� We see as the following if the installation is successful




[email protected] - (+855 23)99 8383


II / Configure a Virtual Host � We will create three virtual hosts in domain “vannath.com.kh” the=> first is

“accounting.vannath.com” =>second is “information.vannath.com.kh” and=> third is

“marketing.vannath.com.kh”.

� For “marketing.vannath.com.kh” we configure the user authentication for just only the

authorize users only that can access to the website

� For “accounting.vannath.com.kh” we configure the user authentication and also SSL (port

443) encryption to a virtual host and we can also access by port 80.

1 / In Directory /etc/apache2/vhost.d

� Copy the virtual host template file to “accounting.conf”,”information.conf” and

“marketing.conf” by entering the following:

� And now we can see now the three virtual hosts configuration files

A) Edit the file “information.conf”

� Open file “information.conf” with text editor




[email protected] - (+855 23)99 8383


� Edit as the following:




[email protected] - (+855 23)99 8383


B) Edit the file “marketing.conf”

� Open file “marketing.conf” with text editor





[email protected] - (+855 23)99 8383





[email protected] - (+855 23)99 8383


C) Edit the file “accounting.conf”

� Open file “accounting.conf” with text editor

� And edit as the following :




[email protected] - (+855 23)99 8383


2 / In Directory /srv/www/

� Make three directory name it “accounting”, ”information” and “marketing”

� Now we can see there are three more directory in /srv/www/




[email protected] - (+855 23)99 8383


� In each directory create the “index.html” file =>for example in accounting directory

3 / In Directory /etc/apache2

� Go to /etc/apache2 by => # cd /etc/apache2

� Edit the file “listen.conf”




[email protected] - (+855 23)99 8383


� Edit the file ”httpd.conf”

� Make sure this line has no “#” in front

4 / In Directory /etc/

� Edit the file name “hosts”





[email protected] - (+855 23)99 8383


� Finally don’t forgot restart apache service with command # rcapache2 restart

� Now apache service status is “running”

5 /Configure DNS Server for each Virtual hosts

� Edit DNS zone file in /var/lin/name/master/vannath.com.kh.zone

� Add “IN CNAME” as the following:

� Test our DNS Server




[email protected] - (+855 23)99 8383


6 / Test Virtual host from Client

� Test to make sure that client can access to DNS server correctly

� Test the connection with command “ping ”




[email protected] - (+855 23)99 8383


� Open browser and type the each virtual host name

� Test “information.vannath.com.kh”

� Test “maketing.vannath.com.kh”




[email protected] - (+855 23)99 8383


� Test “accounting.vannath.com.kh”

III / Configure User Authentication

1 / Configure Virtual host “marketing.vannath.com.kh” for Authentication

� Create the file “htpasswd” and add the user “Vannath” to it by entering the following:

� Create one more user name “ratha” in to file htpasswd (this file name can change to

whatever we want)




[email protected] - (+855 23)99 8383


� Edit the virtual host file name ”marketing.conf”

� Find the following directory directive:

<Directory “/srv/www/marketing/”>

� And add the following:

o AuthType Basic o AuthName “Marketing Intranet” o AuthUserFile /etc/apache2/htpasswd o Require user vannath ratha

� Lists specific users space delimited from the password file allowed to access the directory

for example “Require user vananth ratha” so between” vannath” and “ratha” user “space”

� Or user “Require valid-user” for any user in the password file name “httpasswd”

� Option “Allow from” we can change “all” to specific IP Address for example “Allow from

192.168.10.0/24”




[email protected] - (+855 23)99 8383


� Or something else as bellow:

� Restart apache service #rcapache2 restart




[email protected] - (+855 23)99 8383


� Test access to “marketing.vannath.com.kh” from client

� And then we can access

1 / Configure Virtual host “accounting.vannath.com.kh” for Authentication

� Edit the virtual host file name “accounting.conf”




[email protected] - (+855 23)99 8383


� Fdf

� We can verify the syntax of the configuration files by using the following command

� Restart apache service

� Test access to “accounting.vannath.com.kh” from client




[email protected] - (+855 23)99 8383


� And then we access to “accounting.vannath.com.kh”

� If you use wrong user you will not access to this website




[email protected] - (+855 23)99 8383


IV / Configure SSL

1 / Create file “random”

� create the file random by entering the following:

� Press some keys on the keyboard to generate random eventswhich help to create

the file.

� Stop the process after about 15 seconds by pressing Ctrl+C .

� We can see the content the random file by enter the following

� Here is the content we cannot read it.

2 / Generate a Server Key

� After we create the “random” now we use this file the generate the server.key

� To generate a server key name it as “accounting.key” by entering the following:

� When prompted for a pass phrase, enter “vannath.kann” (twice).




[email protected] - (+855 23)99 8383


3 / Sign the Key to be the Certificate

� After we create the accounting .key now we use this file to create the certificate file

� To sign the key entering the following

� When prompted for a pass phrase, enter vannath.kann; then enter the following

information: Option Value Country Name KH State or Province Name PP Locality Name PP Organization Name Vannath.com Organizational Unit Name Accounting Common Name accounting.vannath.com.kh Email Address [email protected]




[email protected] - (+855 23)99 8383


3 / Copy “key” and “crt “files to /etc/apache2/ in directory ss.key and ssl.crt

� Now copy file “key” and “crt” that we just created to directory /ect/apache2/

� Accounting.key to /etc/apache2/ssl.key

� Accounting.crt to /ect/apache2/ssl.crt

A) Change file “key” and “crt” permission

� Adjust the file system permissions on the files that we just copy it ot by entering the

following commands:

4 / In Directory /etc/ apache2/vhost.d

� Open file “accounting.conf” with the text editor and change the following lines

� <VirtualHost accounting.vannath.com.kh:80> to

� <VirtualHost accounting.vannath.com.kh:443>

And




[email protected] - (+855 23)99 8383


� ServerName accounting.vannath.com.kh to

� ServerName accounting.vannath.com.kh:443 � Add the following lines after the ServerName directive

� SSLEngine on � SSLCipherSuite

ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv 2:+EXP:+eNULL � SSLCertificateFile /etc/apache2/ssl.crt/accounting.crt � SSLCertificateKeyFile /etc/apache2/ssl.key/accounting.key

5 / Edit the file “/etc/sysconfig/apache2”

� Open the file /etc/sysconfig/apache2 in a text editor,

� and change the following lines

� APACHE_SERVER_FLAGS=”SSL” � APACHE_START_TIMEOUT=”10”

� From the terminal window, check the syntax of the configuration file

� Restart Apache When prompted for the pass phrase, enter vannath.kann




[email protected] - (+855 23)99 8383


6 / Access “accounting.vananth.com.kh” from client (HTTPS Port 443)

A) On Internet Explorer

� We will the confirm message about the view the page over the secure connection.

� Now let click on “View Certificate”




[email protected] - (+855 23)99 8383


� We see who issued this and for who




[email protected] - (+855 23)99 8383


� Some information about the Issuer

� After we accept the certificate we prom for authentication because this website we

configure both Authentication and SSL.




[email protected] - (+855 23)99 8383


� And then we can access

B) On Firefox

� Access to “accounting.vannath.com.kh” with https:// for secure connection SSL (port :443)




[email protected] - (+855 23)99 8383


� Fdfd




[email protected] - (+855 23)99 8383


� Right now we are prom for authentication to access “accounting.vannath.com.kh”

� Now we can access to “accounting.vananth.com.kh”

V / Configure for Access both Port 80 and 443 to

“accounting.vannath.com.kh” � After we configure “accounting.vannath.com.kh” to access via port 443 we cannot access via

port 80 any more

� For client can also access both port 80 and 433 to “accounting.vannath.com.kh.” we have to

create one more virtual host for “accounting.vannath.com.kh”

� Now create that by copy from “accounting.conf” to “accounting80.conf”




[email protected] - (+855 23)99 8383


� Now we have one more virtual host configuration file for “accounting.vananth.com.kh” edit

this file as the following:

� Edit as the here is :

� Try to access from 80 (hhtp://)




[email protected] - (+855 23)99 8383


� Now let access from 443 (https://)




[email protected] - (+855 23)99 8383


VI / Redirect HTTP access to HTTPS access � To do this we need to create to virtual host one is configure with SSL which is the secure

Web Server that use “https” and the other one is just simple virtual host with “http” access.

� I create two virtual hosts now that “accounting.conf” is secure virtual host with SSL and

“accounting80.conf” is simple virtual host.

� See it content




[email protected] - (+855 23)99 8383


� Go to see the content of virtual that is now secure

� Just remember that the “DocumentRoot” path is not the same




[email protected] - (+855 23)99 8383


� Go directory “/srv/www” and create two directories which “accounting” is for our Web

Application and “accounting80” just put file “index.php” that content PHP code to redirect.




[email protected] - (+855 23)99 8383


� Go to see the content of PHP code for redirect

� Here is the PHP code to redirect from http://accounting.vannath.com.kh access to

https://accounting.vannath.com.kh access

� We can use this simple PHP script to redirect a user from the page they entered to a

different web page as we want

� We can see as the following we access with “http” but need confirm to certificate




[email protected] - (+855 23)99 8383


� Congratulations!!!! After we confirm to the certificate we have access to our web pages with

“https” connection.

VII/ Install PHP

1 / Install

� Fdf




[email protected] - (+855 23)99 8383


� And restart “apache” service

2 / Test PHP installation

A) Configure virtual host for test PHP installation

� Go to directory “/etc/apache2/vhosts.d” and then copy one of our virtual host file to new

PHP virtual host as the following:

� Now we have one more virtual host file name “php.conf” go to edit that file

� Edit as the following




[email protected] - (+855 23)99 8383





[email protected] - (+855 23)99 8383


� Go to directory “/srv/www” and create a directory name “php” and create one file name

“index.php” in here

� And edit the file as the following

� Restart apache service

B) Configure CNAME DNS Server for PHP virtual host

� Go the following directory and edit DNS zone file

� Edit the “CNAME” alias




[email protected] - (+855 23)99 8383


� Test our DNS Server

� On client open web browser and type “php.vannath.com.kh”

A) Problem

� In directory “/etc/www/php” we have create one file name “index.php” if we create this file

with the other name different we see as the following:

� To test rename this file to “php_info.php”




[email protected] - (+855 23)99 8383


� Access “php.vannath.com.kh” again we will see as here

� To continue click “php_info.php” link and now we can see as below:




[email protected] - (+855 23)99 8383


VIII / Install MYSQL � Install the following packages

� Restart “mysql” service

� When you restart “mysql” at the first time “mysq “ will structure its database so you not see

some as above

� To test ”mysql” installation access to “php.vannath.com.kh” and type “Ctrl+F” for find and

Then try to find mysql on that web page by type “mysql”

� Click “Find Next” until you find as the following:




[email protected] - (+855 23)99 8383


The End

education department linux assignment teacher: bun phoumen ... · then test apache installation by...

Documents