101 54 108 112 120 123 54 7 99 9438413 9438414 9438415 9438416 9438417 9438418 9438419 9438420 9438421 9438422 9438423 9438424 9438425 9438426 9438427 9438428 9438429 9438430 9438431 9438432 9438433 9438434 9438435 9438436 9438437 9438438 9438439 15 16 17 18 20 21 22 47 49 109 43 2006-10-29 22:01:14.287 2009-03-03 08:15:47.427 102 103 104 105 106 107 109 110 111 113 116 117 118 119 121 122 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 166 167 168 914 9371964 9371979 9371982 9371983 2163009 54 54 7 2195773 2230174 2230175 2230176 5 2007-12-04 19:42:16.417 2007-12-04 19:56:42.800 2163010 2163011 2163012 2163013 2162880 54 54 7 2195646 2229652 2229653 5 2007-11-08 09:09:30.093 2007-11-08 09:35:11.317 2162881 2162882 2162883 2162884 2326533 2326534 879 54 3114617 5374627 9372190 54 7 876 15303158 15303159 15303160 15303161 15303162 15303163 15303164 15303165 3277229 3277237 3277239 3277240 3604597 3604689 27 2007-02-14 09:13:11.383 2010-11-10 17:46:45.393 880 881 882 883 3637612 5374631 5374633 5374635 5374639 5374641 5374643 5374645 5374647 5374649 5374674 5374675 5374745 5374748 7372858 7372861 7372866 7372869 8355877 8355879 15204498 15204499 3637619 3114628 54 3114628 7 3670374 30312352 30312353 30312354 30312355 30312356 3604598 3604599 3604600 3604602 3604608 10321976 29982736 29982737 31 2008-04-24 11:04:08.070 2017-08-17 09:40:20.767 3637621 3637622 3637624 3637625 3637627 3637628 3637630 3637632 3637634 3637636 3637637 3637638 3637640 3637641 3637642 3637644 3637666 3637667 3637688 3637690 5374521 5374623 5374624 17858828 30244930 30244931 30244933 30244935 30244936 30244937 5439522 10518531 10518535 54 101 879 589826 2162880 2163009 3114628 9372367 7 52 15696768 15696769 15696770 15696771 15696772 15696773 15696774 15696775 15696776 15696777 15696778 15696779 15696780 15696781 15696782 15696783 15696784 15696785 15696786 15696787 15696788 15696789 15696790 15696791 15696792 15696793 15696794 15696795 15696796 15696797 15696798 15696799 15696800 15696801 15696802 15696803 15696804 15696805 15696806 15696807 15696808 12 13 14 19 102 103 120 145 146 161 1343553 1343554 3277232 3277238 3277246 3277247 3277251 3277252 3277253 3604489 3604596 4849754 10322009 67 2006-10-18 14:39:02.073 2010-12-17 07:24:41.187 55 99 100 299 300 301 367 710 810 811 812 813 829 830 831 832 833 877 878 589825 1835070 1835071 2162879 2162994 2163008 3113963 3114643 3114645 3114646 3114648 3114650 3114651 3114652 3114653 3114672 3114673 3114674 3114675 3114676 3637277 3637278 3637279 3637280 3637281 3637282 3637319 3637320 3637324 3637831 5374692 6259419 6259423 6259425 6259426 6259428 6586381 8355846 8355847 9797760 9798642 9798663 10354898 10354941 10912143 15630527 15630530 3309689 11042879 11042880 6455309 7 53 28639678 180 181 182 183 184 185 186 187 188 189 190 191 192 193 4882508 4882509 4882510 4882511 4882512 4882513 19300615 2006-10-18 14:39:02.070 2016-04-25 10:21:24.987 global 5374627 879 54 879 7 5407359 5506969 4 2008-06-26 11:12:27.833 2008-06-26 11:18:12.500 5374628 5374629 5374634 131084 2]]> 5374494 3114617 54 879 3114617 7 5407229 7438639 21 2008-06-25 16:14:09.337 2008-11-09 13:32:57.603 5374496 5374497 5374500 5374501 5374502 5374503 5374504 5374506 5374507 5374509 5374510 5374511 5374513 5374514 5374516 5374518 7372856 7372860 7372864 7372868 5439518 5439519 5439520 5439521 9372190 879 54 879 7 9404930 9439606 9439607 4 2009-03-10 13:31:33.497 2009-03-12 14:52:14.480 9372191 9372232 9372234 9502822 9502823 9502824 9502825 9502827 9502828 9502829 9502830 9502831 9502832 9502833 9502834 9502835 9502836 9502837 9502838 9502839 9502840 9502841 9502842 9502843 9502844 9502845 9502846 9502847 9502851 9502852 9502853 9502854 9502855 9502856 9502857 9502858 9502859 9502860 9502861 9502862 9502863 9502864 9502865 9502866 9502867 9502868 9502869 9502870 9502871 9502872 9502873 9502874 9502875 9502876 9502877 9502878 9502879 9502880 9502881 9502882 9502883 9502884 9502885 9502886 9502887 9502888 9502891 9502900 9502906 9502908 9502909 9502920 32804 CLT false custom ]]> 32803 theme.key ]]> 5374530 3114628 54 3114628 7 5407264 5506779 5506780 8 2008-06-25 17:17:48.610 2008-06-25 17:23:41.857 5374531 5374532 5374533 5374535 5374536 5374537 5374538 7766046 7 7798810 1 2008-11-12 11:03:25.970 2008-11-12 11:03:25.970 7766044 7 7798809 1 2008-11-12 11:03:00.200 2008-11-12 11:03:00.200 28639678 28639680 7 28672444 1 2016-04-25 08:49:51.353 2016-04-25 10:23:15.867 28639680 28639678 28639678 7 28672446 1 2016-04-25 10:06:35.437 2016-04-25 10:06:35.437 9372367 54 54 7 9405099 27133541 27133542 27133543 27133544 27133545 27133546 27133547 27133548 27133549 27133550 27133551 27133552 27133553 27133554 27133555 27133556 27133557 27133558 27133559 27133560 27133561 27133562 27133563 27133564 27133565 27133566 27133567 27133568 27133569 27133570 27133571 27133572 27133573 27133574 27133575 27133576 27133577 27133578 27133579 27133580 27133581 27133582 27133583 27133584 27133585 27133586 27133587 27133588 27133589 27133590 27133591 27133592 27133593 27133594 27133595 27133596 27133597 27133598 27133599 27133600 27133601 27133602 27133603 27133604 27133605 27133606 27133607 27133608 27133609 27133610 27133611 27133612 27133613 27133614 27133615 27133616 27133617 27133618 27133619 27133620 27133621 27133622 27133623 27133624 27133625 27133626 27133627 27133628 27133629 27133630 27133631 27133632 27133633 27133634 27133635 27133636 27133637 27133638 27133639 27133640 27133641 27133642 27133643 27133644 27133645 27133646 27133647 27133648 27133649 27133650 27133651 27133652 27133653 27133654 27133655 27133656 27133657 27133658 27133659 27133660 27133661 27133662 9306167 9961498 72 2009-03-25 14:42:40.200 2015-01-14 16:09:55.980 9372369 9372370 9372371 9372372 9372374 9372375 9372377 9372378 9372379 9372381 9372383 9372385 9372426 9372433 9372434 9372437 9797652 9797731 9797733 9797774 9797777 9798305 9798473 9798621 9798691 10354690 10355015 10356117 10356486 10912058 10912125 10912128 10912130 10912257 10912259 10912351 11239426 11239937 11239958 11239963 11239964 11240073 11240233 11240369 11240407 11240409 11796689 11796784 13336578 13926703 13926705 13926708 15204472 15630874 15630876 15631447 15631449 15990807 16777380 17236062 18252553 19038610 19038858 19040355 19041213 19041591 20086963 20087064 20087102 26247251 27066624 10059782 3114634 3114628 54 3114628 7 3180099 19140239 19140240 19140241 19140242 19140243 19140244 19140245 19140246 19140247 3277244 3277245 3277248 3604488 3604603 3604604 3604631 25264138 59 2008-04-10 14:29:08.800 2012-05-17 15:16:27.653 3114636 3114637 3114640 3114655 3114657 3114658 3114659 3114661 3114662 3114663 3114665 3114667 3114668 3114669 3114670 3637285 3637663 3637664 5374452 5374454 5374455 5374457 5374459 5832738 5832749 5832750 5832751 5832752 5832754 5832756 5832758 5832759 5832761 5832762 5832763 5832765 5832766 5832768 5832769 5832771 5832772 5832773 5832775 5832776 5832778 5832780 7372873 8913403 8913405 11240439 11240440 13664385 13664386 13664387 15204400 15630813 15630815 16777385 19038917 3309690 3309691 5439512 5439513 5767186 8519686 19169455 19169456 19169457 10518532 589826 54 54 7 622594 2229540 2229541 2229542 2229543 2229544 2229545 2229546 2229547 2229548 2229549 2229550 2229551 2229552 2229553 2229554 1343557 1933315 76 2007-03-19 09:11:40.007 2007-11-03 07:34:52.007 589827 589835 589836 589837 589838 589846 589847 589848 589849 589850 589851 589852 589853 589854 589855 589856 589857 589858 589859 589860 589861 589862 589863 589864 589865 589866 589867 589868 589869 589870 589879 589880 589881 589882 589883 589884 589885 589886 589887 589888 589889 589890 589891 589892 589893 589894 589895 589896 589897 589898 589899 589900 589902 1179964 1179965 1179966 1179967 1835019 1835021 1835022 1835023 1835024 1835025 1835026 1835027 1835028 1835029 1835030 1835031 1835032 1835033 1835034 1835035 2162850 2162851 557060 2031623 2326530 2326532 557061 557062 557063 2326531 3114628 54 3114634 3637619 3637693 3637696 5374530 5374547 54 7 3180093 15303140 15303141 15303142 15303143 15303144 15303145 15303146 15303147 15303148 15303149 3277241 3277242 3277243 3277249 3277250 3604487 3604490 3604601 3604606 3604607 3604615 3604616 3604618 3604620 88 2008-04-10 14:23:20.953 2010-11-10 17:44:07.697 3114630 3114631 3114641 3114679 3114680 3114681 3114682 3114685 3114686 3114693 3114695 3114697 3114699 3114701 3114703 3114706 3114708 3114710 3114711 3114713 3114714 3114716 3114718 3114720 3114721 3114722 3114724 3114726 3114727 3114729 3114731 3637267 3637269 3637271 3637273 3637275 3637615 3637616 3637617 3637646 3637648 3637650 3637651 3637652 3637653 3637655 3637657 3637658 3637665 3637691 3637713 5374194 5374196 5374448 5374450 5374539 5374540 5374542 5374544 5374549 5374550 5374552 5374553 5374554 5374555 5374556 5374557 5374606 5374607 5374609 5374611 5374613 5374616 5374617 5374618 5374619 5374620 5374622 5374626 5374746 5374747 8355872 8355873 8355874 8355875 13140029 15204497 123 101 54 101 7 121 111 1 2006-10-30 13:55:21.130 2006-10-30 13:55:21.130 5374547 3114628 54 3114628 7 5407280 5506893 5506894 5506895 5506896 5506897 35 2008-06-26 10:01:33.087 2008-06-26 10:47:09.890 5374559 5374560 5374561 5374562 5374564 5374565 5374567 5374569 5374570 5374571 5374573 5374575 5374576 5374578 5374579 5374580 5374582 5374583 5374585 5374586 5374588 5374589 5374590 5374591 5374592 5374593 5374594 5374595 5374597 5374598 5374599 5374601 5374602 5374604 3114617 879 5374494 54 879 7 3180083 19140204 19140205 19140206 3277233 3277234 3277235 3277236 3604614 93 2008-04-10 14:06:28.173 2012-05-17 15:05:29.547 3114619 3114620 3114621 3114623 3114624 3114625 3114639 3637682 5374462 5374463 5374465 5374466 5374469 5374470 5374471 5374473 5374475 5374477 5374478 5374636 5374637 5832781 5832783 5832784 6258959 6258961 6258962 6258963 6258964 6258966 6258968 6258970 6258972 6258973 6258975 6258976 6258978 6258979 6258981 6258983 6258984 6258985 6258986 6258987 6258988 6258989 6258990 6258991 6258992 7372822 7372824 7372826 7372827 7372828 7372829 7372830 7372831 7372832 7372834 7372835 7372837 7372839 7372840 7372842 7372843 7372844 7372845 7372846 7372848 7372849 7372850 7372851 7372852 7372853 7372854 7372855 7372859 7372863 7372867 7372871 11240435 11240437 11796712 13664381 13664382 13664383 13664384 14516267 18252083 18252084 19038908 19038909 19038910 19169452 19169453 19169454 112 101 54 101 7 110 2 2006-10-30 10:04:06.227 2006-10-30 11:03:48.683 114 108 101 54 101 7 106 2 2006-10-30 09:45:10.867 2006-10-30 11:20:31.250 115 3637696 3114628 54 3114628 7 3670449 3604619 3604622 2 2008-04-24 15:59:29.000 2008-04-24 15:59:40.107 3637698 120 101 54 101 7 118 248 2 2006-10-30 13:24:18.657 2006-10-30 15:20:45.230 124 3637693 3114628 54 3114628 7 3670447 5506729 5506730 3604617 3604621 3604623 3604624 23 2008-04-24 15:58:48.933 2008-06-25 17:01:53.147 3637700 3637702 3637703 3637705 3637707 3637709 3637711 3637715 3637716 3637717 3637719 3637720 3637721 3637722 3637724 3637725 3637727 3637728 5374172 5374175 5374182 5374525 5439523 15696803 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 5374585 5407317 19 2008-06-26 10:01:33.087 2008-06-26 10:27:25.007 5374547 15696802 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 5374586 5407318 20 2008-06-26 10:01:33.087 2008-06-26 10:32:41.117 5374547 15696801 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 5374583 5407315 18 2008-06-26 10:01:33.087 2008-06-26 10:27:01.727 5374547 15696800 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 15696799 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 15696798 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 5374582 5407314 17 2008-06-26 10:01:33.087 2008-06-26 10:25:08.727 5374547 15696797 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 5374579 5407311 15 2008-06-26 10:01:33.087 2008-06-26 10:24:29.700 5374547 15696796 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 5374580 5407312 16 2008-06-26 10:01:33.087 2008-06-26 10:24:46.830 5374547 15696795 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 15696794 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 5374578 5407310 14 2008-06-26 10:01:33.087 2008-06-26 10:23:20.060 5374547 15696793 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 5374575 5407307 12 2008-06-26 10:01:33.087 2008-06-26 10:20:21.017 5374547 11240369 11273107 44 2009-03-25 14:42:40.200 2010-03-03 15:11:58.963 9372367 15696792 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 5374576 5407308 13 2008-06-26 10:01:33.087 2008-06-26 10:22:59.777 5374547 15696791 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 5374573 5407305 11 2008-06-26 10:01:33.087 2008-06-26 10:19:21.980 5374547 15696790 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 15696789 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 5374571 5407303 10 2008-06-26 10:01:33.087 2008-06-26 10:18:57.383 5374547 15696788 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 4849754 2 54 2008-06-05 10:06:15.113 2008-06-09 09:16:15.107 5374602 5407334 33 2008-06-26 10:01:33.087 2008-06-26 10:45:36.450 5374547 5374601 5407333 32 2008-06-26 10:01:33.087 2008-06-26 10:44:49.170 5374547 5374599 5407331 31 2008-06-26 10:01:33.087 2008-06-26 10:44:26.590 5374547 5374598 5407330 30 2008-06-26 10:01:33.087 2008-06-26 10:44:06.413 5374547 5374597 5407329 29 2008-06-26 10:01:33.087 2008-06-26 10:38:23.497 5374547 5374595 5407327 28 2008-06-26 10:01:33.087 2008-06-26 10:38:06.507 5374547 5374594 5407326 27 2008-06-26 10:01:33.087 2008-06-26 10:37:28.697 5374547 5374593 5407325 26 2008-06-26 10:01:33.087 2008-06-26 10:37:07.407 5374547 15696808 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 5374592 5407324 25 2008-06-26 10:01:33.087 2008-06-26 10:36:35.660 5374547 5374591 5407323 24 2008-06-26 10:01:33.087 2008-06-26 10:35:58.567 5374547 15696806 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 5374590 5407322 23 2008-06-26 10:01:33.087 2008-06-26 10:35:35.600 5374547 15696807 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 5374589 5407321 22 2008-06-26 10:01:33.087 2008-06-26 10:34:53.377 5374547 15696804 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 5374588 5407320 21 2008-06-26 10:01:33.087 2008-06-26 10:33:03.673 5374547 15696805 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 15696769 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 11240409 11273146 46 2009-03-25 14:42:40.200 2010-03-10 13:08:04.347 9372367 15696768 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 5374616 5407348 73 2008-04-10 14:23:20.953 2008-06-26 10:53:35.667 3114628 15696771 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 5374617 5407349 74 2008-04-10 14:23:20.953 2008-06-26 10:58:26.187 3114628 11240407 11273144 45 2009-03-25 14:42:40.200 2010-03-10 11:12:09.387 9372367 15696770 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 5374618 5407350 75 2008-04-10 14:23:20.953 2008-06-26 10:58:51.050 3114628 5374611 5407343 71 2008-04-10 14:23:20.953 2008-06-26 10:50:56.017 3114628 5374613 5407345 72 2008-04-10 14:23:20.953 2008-06-26 10:51:48.707 3114628 5374607 5407339 69 2008-04-10 14:23:20.953 2008-06-26 10:48:54.807 3114628 5374609 5407341 70 2008-04-10 14:23:20.953 2008-06-26 10:49:18.517 3114628 5374604 5407336 34 2008-06-26 10:01:33.087 2008-06-26 10:45:53.710 5374547 5374606 5407338 68 2008-04-10 14:23:20.953 2008-06-26 10:04:08.197 3114628 15696784 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 5374631 5407363 6 2007-02-14 09:13:11.383 2008-04-24 10:54:13.177 879 15696785 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 15696786 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 5374634 5407366 3 2008-06-26 11:12:27.833 2008-06-26 11:13:30.967 5374627 5374633 5407365 7 2007-02-14 09:13:11.383 2008-06-26 11:15:24.030 879 15696787 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 53 7 51 4 2006-10-18 14:39:02.070 2016-04-25 10:21:24.987 3114614 3114615 28639681 8290316 13828100 15696780 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 5374628 5407360 1 2008-06-26 11:12:27.833 2008-06-26 11:12:27.833 5374627 15696781 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 15696782 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 15696783 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 5374629 5407361 2 2008-06-26 11:12:27.833 2008-06-26 11:13:07.090 5374627 5832738 5865502 24 2008-04-10 14:29:08.800 2008-06-25 13:55:15.033 3114634 5374624 5407356 23 2008-04-24 11:04:08.070 2008-06-26 11:02:13.973 3637619 15696776 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 5374623 5407355 22 2008-04-24 11:04:08.070 2008-06-25 16:57:27.920 3637619 15696777 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 15696778 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 5374626 5407358 79 2008-04-10 14:23:20.953 2008-06-26 11:01:27.963 3114628 15696779 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 15696772 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 5374620 5407352 77 2008-04-10 14:23:20.953 2008-06-26 10:59:32.030 3114628 15696773 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 5374619 5407351 76 2008-04-10 14:23:20.953 2008-06-26 10:59:17.000 3114628 15696774 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 5374622 5407354 78 2008-04-10 14:23:20.953 2008-06-26 11:00:19.957 3114628 15696775 54 2010-12-17 07:24:41.217 2010-12-17 07:24:41.217 5374645 5407377 12 2007-02-14 09:13:11.383 2008-06-26 11:23:20.503 879 5832756 5865520 30 2008-04-10 14:29:08.800 2008-07-16 13:38:07.377 3114634 5374643 5407375 11 2007-02-14 09:13:11.383 2008-06-26 11:22:39.517 879 5832758 5865522 31 2008-04-10 14:29:08.800 2008-07-16 13:39:38.230 3114634 5374649 5407381 14 2007-02-14 09:13:11.383 2008-06-26 11:26:40.530 879 5832759 5865523 31 2008-04-10 14:29:08.800 2008-07-16 13:39:38.230 3114634 5374647 5407379 13 2007-02-14 09:13:11.383 2008-06-26 11:25:25.747 879 5832761 5865525 32 2008-04-10 14:29:08.800 2008-07-16 13:40:48.847 3114634 5832762 5865526 33 2008-04-10 14:29:08.800 2008-07-16 13:41:25.193 3114634 5374637 5407369 21 2008-04-10 14:06:28.173 2008-06-26 11:18:54.787 3114617 5374635 5407367 8 2007-02-14 09:13:11.383 2008-06-26 11:17:40.820 879 5832749 5865513 25 2008-04-10 14:29:08.800 2008-07-16 11:27:42.863 3114634 5374636 5407368 20 2008-04-10 14:06:28.173 2008-06-25 15:23:06.537 3114617 5832750 5865514 26 2008-04-10 14:29:08.800 2008-07-16 13:31:21.920 3114634 5374641 5407373 10 2007-02-14 09:13:11.383 2008-06-26 11:20:04.370 879 5832751 5865515 27 2008-04-10 14:29:08.800 2008-07-16 13:33:52.707 3114634 5832752 5865516 28 2008-04-10 14:29:08.800 2008-07-16 13:34:25.323 3114634 5374639 5407371 9 2007-02-14 09:13:11.383 2008-06-26 11:18:32.857 879 5832754 5865518 29 2008-04-10 14:29:08.800 2008-07-16 13:35:20.300 3114634 5832772 5865536 40 2008-04-10 14:29:08.800 2008-07-16 13:46:08.220 3114634 5832771 5865535 39 2008-04-10 14:29:08.800 2008-07-16 13:44:54.113 3114634 5832773 5865537 41 2008-04-10 14:29:08.800 2008-07-16 13:46:35.167 3114634 5832776 5865540 43 2008-04-10 14:29:08.800 2008-07-16 13:56:09.637 3114634 5832775 5865539 42 2008-04-10 14:29:08.800 2008-07-16 13:46:59.173 3114634 5832778 5865542 44 2008-04-10 14:29:08.800 2008-07-16 13:56:39.127 3114634 10912125 10944885 31 2009-03-25 14:42:40.200 2009-11-11 11:25:27.873 9372367 5832763 5865527 34 2008-04-10 14:29:08.800 2008-07-16 13:41:42.600 3114634 5832766 5865530 36 2008-04-10 14:29:08.800 2008-07-16 13:43:36.153 3114634 5832765 5865529 35 2008-04-10 14:29:08.800 2008-07-16 13:42:14.840 3114634 5832768 5865532 37 2008-04-10 14:29:08.800 2008-07-16 13:43:50.777 3114634 10912130 10944890 33 2009-03-25 14:42:40.200 2009-11-25 09:57:28.977 9372367 10912128 10944888 32 2009-03-25 14:42:40.200 2009-11-25 09:17:17.227 9372367 5832769 5865533 38 2008-04-10 14:29:08.800 2008-07-16 13:44:34.227 3114634 5374675 5407407 16 2007-02-14 09:13:11.383 2008-06-26 12:57:07.343 879 5832781 5865545 22 2008-04-10 14:06:28.173 2008-06-26 11:19:13.247 3114617 5832780 5865544 45 2008-04-10 14:29:08.800 2008-07-16 13:57:27.673 3114634 10912143 10944903 64 2006-10-18 14:39:02.073 2009-06-11 08:59:52.810 54 5832783 5865547 23 2008-04-10 14:06:28.173 2008-07-16 14:14:18.647 3114617 5832784 5865548 24 2008-04-10 14:06:28.173 2008-07-16 14:15:15.090 3114617 5374674 5407406 15 2007-02-14 09:13:11.383 2008-06-26 11:28:52.957 879 3309689 54 2008-04-10 15:13:52.743 2008-04-10 15:13:52.743 181284 1 5374692 5407423 50 2006-10-18 14:39:02.073 2008-05-05 09:59:49.710 54 6586381 6619149 56 2006-10-18 14:39:02.073 2008-10-21 10:28:25.650 54 3309691 3114634 2008-04-10 15:32:52.733 2008-04-10 15:32:52.733 2036408 1 3309690 3114634 2008-04-10 15:32:19.687 2008-04-10 15:33:11.840 4134926 1 5374450 5407186 55 2008-04-10 14:23:20.953 2008-06-25 13:23:25.443 3114628 3637653 3670408 45 2008-04-10 14:23:20.953 2008-04-24 11:38:16.070 3114628 5374448 5407184 54 2008-04-10 14:23:20.953 2008-06-17 16:56:52.713 3114628 3637651 3670406 43 2008-04-10 14:23:20.953 2008-04-24 11:37:47.510 3114628 3637652 3670407 44 2008-04-10 14:23:20.953 2008-04-24 11:38:01.177 3114628 3637657 3670412 47 2008-04-10 14:23:20.953 2008-04-24 11:39:58.017 3114628 3637658 3670413 48 2008-04-10 14:23:20.953 2008-04-24 11:41:10.493 3114628 11796784 11829541 48 2009-03-25 14:42:40.200 2010-04-07 13:08:40.360 9372367 3637655 3670410 46 2008-04-10 14:23:20.953 2008-04-24 11:38:50.423 3114628 3637646 3670401 40 2008-04-10 14:23:20.953 2008-04-24 11:01:37.717 3114628 10912058 10944817 30 2009-03-25 14:42:40.200 2009-10-14 10:46:23.973 9372367 5374457 5407193 22 2008-04-10 14:29:08.800 2008-06-25 13:50:06.740 3114634 3637644 3670399 16 2008-04-24 11:04:08.070 2008-04-24 11:26:28.453 3637619 5374455 5407191 21 2008-04-10 14:29:08.800 2008-06-25 13:49:16.207 3114634 5374454 5407190 20 2008-04-10 14:29:08.800 2008-06-25 13:31:23.480 3114634 3637650 3670405 42 2008-04-10 14:23:20.953 2008-04-24 11:36:26.897 3114628 5374452 5407188 19 2008-04-10 14:29:08.800 2008-04-24 11:47:49.040 3114634 3637648 3670403 41 2008-04-10 14:23:20.953 2008-04-24 11:32:24.910 3114628 5374465 5407201 11 2008-04-10 14:06:28.173 2008-06-25 15:12:15.657 3114617 5374466 5407202 12 2008-04-10 14:06:28.173 2008-06-25 15:15:00.703 3114617 5374463 5407199 10 2008-04-10 14:06:28.173 2008-06-25 15:11:56.050 3114617 3637667 3670422 18 2008-04-24 11:04:08.070 2008-04-24 11:49:45.563 3637619 5374462 5407198 9 2008-04-10 14:06:28.173 2008-04-24 15:49:40.890 3114617 5374459 5407195 23 2008-04-10 14:29:08.800 2008-06-25 13:54:18.057 3114634 5374473 5407209 16 2008-04-10 14:06:28.173 2008-06-25 15:18:58.743 3114617 5374471 5407207 15 2008-04-10 14:06:28.173 2008-06-25 15:18:41.387 3114617 5374469 5407205 13 2008-04-10 14:06:28.173 2008-06-25 15:15:15.067 3114617 3637666 3670421 17 2008-04-24 11:04:08.070 2008-04-24 11:30:51.377 3637619 5374470 5407206 14 2008-04-10 14:06:28.173 2008-06-25 15:18:15.593 3114617 3637665 3670420 49 2008-04-10 14:23:20.953 2008-04-24 11:41:50.600 3114628 3637664 3670419 18 2008-04-10 14:29:08.800 2008-04-24 11:47:49.027 3114634 3637663 3670418 17 2008-04-10 14:29:08.800 2008-04-14 16:09:12.100 3114634 7372840 7405608 63 2008-04-10 14:06:28.173 2008-11-09 13:21:10.920 3114617 7372839 7405607 62 2008-04-10 14:06:28.173 2008-11-09 13:19:38.223 3114617 7372842 7405610 64 2008-04-10 14:06:28.173 2008-11-09 13:21:28.363 3114617 3637621 3670376 1 2008-04-24 11:04:08.070 2008-04-24 11:04:08.070 3637619 3637622 3670377 2 2008-04-24 11:04:08.070 2008-04-24 11:08:36.903 3637619 7372835 7405603 60 2008-04-10 14:06:28.173 2008-11-09 13:18:00.667 3114617 5374475 5407211 17 2008-04-10 14:06:28.173 2008-06-25 15:20:22.473 3114617 3637624 3670379 3 2008-04-24 11:04:08.070 2008-04-24 11:08:48.437 3637619 5374478 5407214 19 2008-04-10 14:06:28.173 2008-06-25 15:22:06.853 3114617 3637625 3670380 4 2008-04-24 11:04:08.070 2008-04-24 11:15:00.263 3637619 7372837 7405605 61 2008-04-10 14:06:28.173 2008-11-09 13:18:25.827 3114617 5374477 5407213 18 2008-04-10 14:06:28.173 2008-06-25 15:21:11.167 3114617 7372832 7405600 58 2008-04-10 14:06:28.173 2008-11-09 13:15:53.247 3114617 7372831 7405599 57 2008-04-10 14:06:28.173 2008-11-09 13:15:42.977 3114617 3637612 3670367 5 2007-02-14 09:13:11.383 2007-02-14 09:20:59.930 879 7372834 7405602 59 2008-04-10 14:06:28.173 2008-11-09 13:16:23.650 3114617 7372828 7405596 54 2008-04-10 14:06:28.173 2008-11-09 13:14:19.523 3114617 3637615 3670370 37 2008-04-10 14:23:20.953 2008-04-14 14:52:38.717 3114628 7372827 7405595 53 2008-04-10 14:06:28.173 2008-11-09 13:13:31.167 3114617 3637616 3670371 38 2008-04-10 14:23:20.953 2008-04-24 11:00:52.967 3114628 7372830 7405598 56 2008-04-10 14:06:28.173 2008-11-09 13:15:10.750 3114617 3637617 3670372 39 2008-04-10 14:23:20.953 2008-04-24 11:01:20.933 3114628 7372829 7405597 55 2008-04-10 14:06:28.173 2008-11-09 13:14:50.593 3114617 3637636 3670391 10 2008-04-24 11:04:08.070 2008-04-24 11:21:26.893 3637619 5374496 5407231 1 2008-06-25 16:14:09.337 2008-06-25 16:14:09.337 5374494 7372824 7405592 51 2008-04-10 14:06:28.173 2008-11-09 13:08:46.837 3114617 19038610 19071374 62 2009-03-25 14:42:40.200 2011-11-02 09:29:51.667 9372367 3637638 3670393 12 2008-04-24 11:04:08.070 2008-04-24 11:22:28.363 3637619 5374497 5407232 2 2008-06-25 16:14:09.337 2008-06-25 16:19:37.547 5374494 3637637 3670392 11 2008-04-24 11:04:08.070 2008-04-24 11:22:12.437 3637619 7372826 7405594 52 2008-04-10 14:06:28.173 2008-11-09 13:10:50.863 3114617 3637640 3670395 13 2008-04-24 11:04:08.070 2008-04-24 11:22:49.237 3637619 3637642 3670397 15 2008-04-24 11:04:08.070 2008-04-24 11:25:54.163 3637619 3637641 3670396 14 2008-04-24 11:04:08.070 2008-04-24 11:25:16.583 3637619 7372822 7405590 50 2008-04-10 14:06:28.173 2008-08-22 10:19:42.017 3114617 3637628 3670383 6 2008-04-24 11:04:08.070 2008-04-24 11:16:12.307 3637619 5374503 5407238 6 2008-06-25 16:14:09.337 2008-06-25 16:23:19.470 5374494 3637627 3670382 5 2008-04-24 11:04:08.070 2008-04-24 11:15:21.813 3637619 5374504 5407239 7 2008-06-25 16:14:09.337 2008-06-25 16:29:38.940 5374494 3637630 3670385 7 2008-04-24 11:04:08.070 2008-04-24 11:16:30.647 3637619 5374506 5407241 8 2008-06-25 16:14:09.337 2008-06-25 16:30:10.350 5374494 3637632 3670387 8 2008-04-24 11:04:08.070 2008-04-24 11:17:07.693 3637619 5374500 5407235 3 2008-06-25 16:14:09.337 2008-06-25 16:19:58.297 5374494 3637634 3670389 9 2008-04-24 11:04:08.070 2008-04-24 11:18:14.587 3637619 5374501 5407236 4 2008-06-25 16:14:09.337 2008-06-25 16:21:56.940 5374494 5374502 5407237 5 2008-06-25 16:14:09.337 2008-06-25 16:22:28.930 5374494 5374510 5407245 11 2008-06-25 16:14:09.337 2008-06-25 16:34:15.793 5374494 3637721 3670474 13 2008-04-24 15:58:48.933 2008-04-24 16:24:23.027 3637693 7372869 7405637 22 2007-02-14 09:13:11.383 2008-11-09 13:32:34.167 879 22 4 101 2006-11-02 11:19:15.073 2006-11-09 10:10:15.027 5374509 5407244 10 2008-06-25 16:14:09.337 2008-06-25 16:31:28.487 5374494 3637722 3670475 14 2008-04-24 15:58:48.933 2008-04-24 16:24:41.810 3637693 7372868 7405636 20 2008-06-25 16:14:09.337 2008-11-09 13:32:34.143 5374494 3637719 3670472 11 2008-04-24 15:58:48.933 2008-04-24 16:23:11.360 3637693 5374507 5407242 9 2008-06-25 16:14:09.337 2008-06-25 16:30:58.303 5374494 7372867 7405635 79 2008-04-10 14:06:28.173 2008-11-09 13:32:17.030 3114617 3637720 3670473 12 2008-04-24 15:58:48.933 2008-04-24 16:24:04.740 3637693 19 1 54 2006-10-30 22:52:15.030 2006-10-30 22:52:15.030 5374514 5407249 14 2008-06-25 16:14:09.337 2008-06-25 16:39:25.737 5374494 3637717 3670470 10 2008-04-24 15:58:48.933 2008-04-24 16:22:49.410 3637693 7372873 7405641 46 2008-04-10 14:29:08.800 2008-07-16 14:13:11.983 3114634 18 1 101 2006-10-30 22:52:15.027 2006-10-30 22:52:15.027 5374513 5407248 13 2008-06-25 16:14:09.337 2008-06-25 16:34:53.310 5374494 21 1 101 2006-11-01 06:09:15.070 2006-11-01 06:09:15.070 3637715 3670468 8 2008-04-24 15:58:48.933 2008-04-24 16:18:30.730 3637693 20 1 101 2006-10-30 22:52:15.033 2006-10-30 22:52:15.033 5374511 5407246 12 2008-06-25 16:14:09.337 2008-06-25 16:34:41.067 5374494 7372871 7405639 80 2008-04-10 14:06:28.173 2008-11-09 13:32:34.197 3114617 3637716 3670469 9 2008-04-24 15:58:48.933 2008-04-24 16:22:36.943 3637693 15 1 101 2006-10-29 22:01:15.040 2006-10-29 22:01:15.040 5374518 5407253 16 2008-06-25 16:14:09.337 2008-06-25 16:42:33.403 5374494 3637713 3670466 51 2008-04-10 14:23:20.953 2008-04-24 15:57:16.463 3114628 7372861 7405629 20 2007-02-14 09:13:11.383 2008-11-09 13:32:00.370 879 14 2 54 2006-10-29 09:21:15.037 2006-10-29 21:37:15.037 17 4 101 2006-10-30 22:10:15.020 2006-11-01 06:10:15.027 5374516 5407251 15 2008-06-25 16:14:09.337 2008-06-25 16:41:10.797 5374494 7372860 7405628 18 2008-06-25 16:14:09.337 2008-11-09 13:32:00.293 5374494 3637711 3670464 7 2008-04-24 15:58:48.933 2008-04-24 16:17:50.577 3637693 16 3 101 2006-10-30 22:09:15.097 2006-10-30 23:09:15.033 7372859 7405627 77 2008-04-10 14:06:28.173 2008-11-09 13:30:32.917 3114617 7372866 7405634 21 2007-02-14 09:13:11.383 2008-11-09 13:32:16.983 879 3637709 3670462 6 2008-04-24 15:58:48.933 2008-04-24 16:14:43.470 3637693 5374521 5407256 21 2008-04-24 11:04:08.070 2008-04-24 15:55:26.637 3637619 13 1 54 2006-10-29 06:33:15.067 2006-10-29 06:33:15.067 7372864 7405632 19 2008-06-25 16:14:09.337 2008-11-09 13:32:16.967 5374494 3637707 3670460 5 2008-04-24 15:58:48.933 2008-04-24 16:14:05.913 3637693 12 3 54 2006-10-29 06:33:15.047 2006-10-30 23:09:15.033 7372863 7405631 78 2008-04-10 14:06:28.173 2008-11-09 13:32:00.403 3114617 7372853 7405621 74 2008-04-10 14:06:28.173 2008-11-09 13:29:39.437 3114617 5374525 5407260 22 2008-04-24 15:58:48.933 2008-06-17 16:49:06.923 3637693 7372854 7405622 75 2008-04-10 14:06:28.173 2008-11-09 13:29:58.373 3114617 7372851 7405619 72 2008-04-10 14:06:28.173 2008-11-09 13:28:12.910 3114617 7372852 7405620 73 2008-04-10 14:06:28.173 2008-11-09 13:28:44.687 3114617 7372858 7405626 19 2007-02-14 09:13:11.383 2008-07-10 16:23:09.750 879 7372855 7405623 76 2008-04-10 14:06:28.173 2008-11-09 13:30:13.547 3114617 7372856 7405624 17 2008-06-25 16:14:09.337 2008-06-25 16:47:08.393 5374494 5374533 5407267 3 2008-06-25 17:17:48.610 2008-06-25 17:20:45.920 5374530 7372845 7405613 67 2008-04-10 14:06:28.173 2008-11-09 13:24:25.130 3114617 7372846 7405614 68 2008-04-10 14:06:28.173 2008-11-09 13:24:42.100 3114617 5374531 5407265 1 2008-06-25 17:17:48.610 2008-06-25 17:17:48.610 5374530 7372843 7405611 65 2008-04-10 14:06:28.173 2008-11-09 13:23:27.813 3114617 3637728 3670481 18 2008-04-24 15:58:48.933 2008-04-24 16:26:57.823 3637693 5374532 5407266 2 2008-06-25 17:17:48.610 2008-06-25 17:20:29.237 5374530 7372844 7405612 66 2008-04-10 14:06:28.173 2008-11-09 13:24:00.700 3114617 3637727 3670480 17 2008-04-24 15:58:48.933 2008-04-24 16:26:10.283 3637693 5374537 5407271 6 2008-06-25 17:17:48.610 2008-06-25 17:22:33.557 5374530 7372849 7405617 70 2008-04-10 14:06:28.173 2008-11-09 13:27:05.013 3114617 5374538 5407272 7 2008-06-25 17:17:48.610 2008-06-25 17:23:03.553 5374530 7372850 7405618 71 2008-04-10 14:06:28.173 2008-11-09 13:27:52.377 3114617 3637725 3670478 16 2008-04-24 15:58:48.933 2008-04-24 16:25:57.833 3637693 5374535 5407269 4 2008-06-25 17:17:48.610 2008-06-25 17:21:20.367 5374530 3637724 3670477 15 2008-04-24 15:58:48.933 2008-04-24 16:25:06.217 3637693 5374536 5407270 5 2008-06-25 17:17:48.610 2008-06-25 17:22:20.947 5374530 7372848 7405616 69 2008-04-10 14:06:28.173 2008-11-09 13:25:25.870 3114617 5374540 5407274 57 2008-04-10 14:23:20.953 2008-06-25 17:25:48.993 3114628 3637688 3670443 19 2008-04-24 11:04:08.070 2008-04-24 11:50:20.207 3637619 5374539 5407273 56 2008-04-10 14:23:20.953 2008-06-25 13:25:59.980 3114628 5374542 5407276 58 2008-04-10 14:23:20.953 2008-06-25 17:26:21.773 3114628 3637690 3670445 20 2008-04-24 11:04:08.070 2008-04-24 15:54:21.407 3637619 5374544 5407278 59 2008-04-10 14:23:20.953 2008-06-25 17:27:50.807 3114628 5374550 5407282 61 2008-04-10 14:23:20.953 2008-06-26 10:01:59.477 3114628 5374549 5407281 60 2008-04-10 14:23:20.953 2008-06-26 09:57:01.617 3114628 3637682 3670437 8 2008-04-10 14:06:28.173 2008-04-10 14:35:48.150 3114617 5374552 5407284 62 2008-04-10 14:23:20.953 2008-06-26 10:02:21.807 3114628 5374554 5407286 64 2008-04-10 14:23:20.953 2008-06-26 10:03:12.227 3114628 10356486 10389198 29 2009-03-25 14:42:40.200 2009-09-09 14:21:50.340 9372367 5374553 5407285 63 2008-04-10 14:23:20.953 2008-06-26 10:03:00.437 3114628 5374555 5407287 65 2008-04-10 14:23:20.953 2008-06-26 10:03:29.690 3114628 5374556 5407288 66 2008-04-10 14:23:20.953 2008-06-26 10:03:42.930 3114628 3637703 3670456 3 2008-04-24 15:58:48.933 2008-04-24 16:12:02.520 3637693 5374557 5407289 67 2008-04-10 14:23:20.953 2008-06-26 10:03:56.257 3114628 3637705 3670458 4 2008-04-24 15:58:48.933 2008-04-24 16:12:28.623 3637693 5374559 5407291 1 2008-06-26 10:01:33.087 2008-06-26 10:01:33.087 5374547 3637700 3670453 1 2008-04-24 15:58:48.933 2008-04-24 15:58:48.933 3637693 5374560 5407292 2 2008-06-26 10:01:33.087 2008-06-26 10:09:02.350 5374547 5374561 5407293 3 2008-06-26 10:01:33.087 2008-06-26 10:10:02.577 5374547 3637702 3670455 2 2008-04-24 15:58:48.933 2008-04-24 16:04:35.663 3637693 5374562 5407294 4 2008-06-26 10:01:33.087 2008-06-26 10:10:11.690 5374547 25264138 5 3114634 2014-02-18 12:20:15.030 2017-02-13 14:52:15.033 5374564 5407296 5 2008-06-26 10:01:33.087 2008-06-26 10:10:33.507 5374547 5374565 5407297 6 2008-06-26 10:01:33.087 2008-06-26 10:11:20.583 5374547 3637698 3670451 1 2008-04-24 15:59:29.000 2008-04-24 15:59:29.000 3637696 2195773 {code}]]> 2163009 5374567 5407299 7 2008-06-26 10:01:33.087 2008-06-26 10:11:59.700 5374547 11240233 11272973 43 2009-03-25 14:42:40.200 2010-02-24 10:17:33.270 9372367 3637691 3670446 50 2008-04-10 14:23:20.953 2008-04-24 11:48:59.420 3114628 5374569 5407301 8 2008-06-26 10:01:33.087 2008-06-26 10:17:27.707 5374547 5374570 5407302 9 2008-06-26 10:01:33.087 2008-06-26 10:18:24.227 5374547 3637275 3670040 36 2008-04-10 14:23:20.953 2008-04-14 14:51:50.523 3114628 3637277 3670042 40 2006-10-18 14:39:02.073 2008-04-10 15:53:24.547 54 3637278 3670043 41 2006-10-18 14:39:02.073 2008-04-14 14:54:45.173 54 3180099 3114634 3637279 3670044 42 2006-10-18 14:39:02.073 2008-04-14 14:55:20.213 54 18252084 18284848 89 2008-04-10 14:06:28.173 2010-08-30 13:36:01.560 3114617 3637280 3670045 43 2006-10-18 14:39:02.073 2008-04-14 14:55:36.607 54 18252083 18284847 89 2008-04-10 14:06:28.173 2010-08-30 13:36:01.560 3114617 3637281 3670046 44 2006-10-18 14:39:02.073 2008-04-14 14:55:56.810 54 3637282 3670047 45 2006-10-18 14:39:02.073 2008-04-14 14:56:29.407 54 3637285 3670050 16 2008-04-10 14:29:08.800 2008-04-10 15:46:46.433 3114634 5439519 5374494 2008-06-25 16:14:57.637 2008-06-25 16:14:57.637 158580 1 5439518 5374494 2008-06-25 16:14:37.487 2008-06-25 16:14:37.487 134204 1 5439521 5374494 2008-06-25 16:29:14.917 2008-06-25 16:29:14.917 68551 1 5439520 5374494 2008-06-25 16:28:53.853 2008-06-25 16:28:53.853 49927 1 5439523 3637693 2008-06-25 16:58:53.380 2008-06-25 16:58:53.380 3704939 1 5439522 3637619 2008-06-25 16:57:00.980 2008-06-25 16:57:00.980 42496 1 3637267 3670032 32 2008-04-10 14:23:20.953 2008-04-10 16:33:19.997 3114628 3637269 3670034 33 2008-04-10 14:23:20.953 2008-04-14 14:44:41.270 3114628 3637271 3670036 34 2008-04-10 14:23:20.953 2008-04-14 14:46:58.573 3114628 3637273 3670038 35 2008-04-10 14:23:20.953 2008-04-14 14:51:02.570 3114628 9502840 9372190 2009-03-10 13:32:50.660 2009-03-10 17:11:31.510 6858 17 9502822 9502841 9372190 2009-03-10 13:32:50.660 2009-03-10 17:11:41.957 6858 18 9502822 9502838 9372190 2009-03-10 13:32:50.660 2009-03-10 14:21:38.490 6080 15 9502822 9502839 9372190 2009-03-10 13:32:50.660 2009-03-10 16:16:06.787 6858 16 9502822 9502844 9372190 2009-03-10 13:32:50.660 2009-03-10 17:13:22.183 6858 21 9502822 3604689 1 879 2008-05-15 15:04:15.037 2008-05-15 15:04:15.037 9502845 9372190 2009-03-10 13:32:50.660 2009-03-10 17:13:50.357 6506 22 9502822 11796712 11829469 83 2008-04-10 14:06:28.173 2010-03-16 18:45:39.593 3114617 9502842 9372190 2009-03-10 13:32:50.660 2009-03-10 17:12:57.427 6858 19 9502822 9502843 9372190 2009-03-10 13:32:50.660 2009-03-10 17:13:19.780 6858 20 9502822 5439512 3114634 2008-06-25 13:28:07.847 2008-06-25 13:28:07.847 3704939 1 9502832 9372190 2009-03-10 13:32:50.660 2009-03-10 14:08:22.640 3003 9 9502822 5439513 3114634 2008-06-25 13:48:18.117 2008-06-25 13:48:18.117 42496 1 9502833 9372190 2009-03-10 13:32:50.660 2009-03-10 14:11:41.553 3003 10 9502822 9502830 9372190 2009-03-10 13:32:50.660 2009-03-10 14:03:47.000 2172 7 9502822 9502831 9372190 2009-03-10 13:32:50.660 2009-03-10 14:08:14.417 3003 8 9502822 9502836 9372190 2009-03-10 13:32:50.660 2009-03-10 14:19:26.913 5725 13 9502822 9502837 9372190 2009-03-10 13:32:50.660 2009-03-10 14:20:57.703 6078 14 9502822 9502834 9372190 2009-03-10 13:32:50.660 2009-03-10 14:12:38.260 3003 11 9502822 9502835 9372190 2009-03-10 13:32:50.660 2009-03-10 14:15:10.000 4053 12 9502822 9502825 9372190 2009-03-10 13:32:50.660 2009-03-10 13:36:22.743 1097 3 9502822 9502824 9372190 2009-03-10 13:32:50.660 2009-03-10 13:34:18.680 825 2 9502822 9502823 9372190 2009-03-10 13:32:50.660 2009-03-10 13:32:50.660 133 1 9502822 9502822 9372190 2009-03-10 13:32:50.660 2009-03-12 14:54:01.800 24989 69 9502829 9372190 2009-03-10 13:32:50.660 2009-03-10 14:02:42.937 1899 6 9502822 9502828 9372190 2009-03-10 13:32:50.660 2009-03-10 14:02:21.790 1906 5 9502822 9961498 1 9372367 2009-05-06 15:28:15.020 2009-05-06 15:28:15.020 9502827 9372190 2009-03-10 13:32:50.660 2009-03-10 13:36:37.097 1097 4 9502822 11796689 11829448 47 2009-03-25 14:42:40.200 2010-03-10 15:58:23.897 9372367 11240073 11272820 42 2009-03-25 14:42:40.200 2010-02-17 15:47:11.220 9372367 1933315 16 589826 2007-09-07 09:07:15.037 2007-09-07 16:20:15.013 1343557 8 589826 2007-08-08 11:02:15.137 2007-11-14 10:36:15.080 13336578 13369346 49 2009-03-25 14:42:40.200 2010-04-14 12:01:27.187 9372367 1343554 2 54 2007-08-03 14:10:15.027 2007-10-24 17:23:15.043 3637324 3670087 48 2006-10-18 14:39:02.073 2008-04-14 17:16:19.577 54 1343553 10 54 2007-08-03 14:09:15.043 2008-04-14 14:40:15.040 2195646 2162880 3637319 3670084 46 2006-10-18 14:39:02.073 2008-04-14 14:56:49.257 54 3637320 3670085 47 2006-10-18 14:39:02.073 2008-04-14 17:15:57.107 54 30312355 3637619 2017-08-17 09:40:20.787 2017-08-17 09:40:20.787 30312354 3637619 2017-08-17 09:40:20.787 2017-08-17 09:40:20.787 30312353 3637619 2017-08-17 09:40:20.787 2017-08-17 09:40:20.787 30312352 3637619 2017-08-17 09:40:20.787 2017-08-17 09:40:20.787 30312356 3637619 2017-08-17 09:40:20.787 2017-08-17 09:40:20.787 3180083 3114617 3180093 3114628 9502920 9372190 2009-03-10 13:32:50.660 2009-03-12 14:09:10.063 23705 68 9502822 15631449 15664200 57 2009-03-25 14:42:40.200 2011-02-09 19:05:05.897 9372367 5374747 5407477 81 2008-04-10 14:23:20.953 2008-07-10 10:36:44.097 3114628 5374748 5407478 18 2007-02-14 09:13:11.383 2008-07-10 10:34:05.670 879 15631447 15664198 56 2009-03-25 14:42:40.200 2011-01-11 10:31:32.757 9372367 13926708 13959470 52 2009-03-25 14:42:40.200 2010-08-04 13:13:40.377 9372367 5374746 5407476 80 2008-04-10 14:23:20.953 2008-06-26 11:04:20.057 3114628 5374745 5407475 17 2007-02-14 09:13:11.383 2008-06-26 12:59:04.087 879 13926705 13959467 51 2009-03-25 14:42:40.200 2010-08-04 13:10:55.043 9372367 13926703 13959465 50 2009-03-25 14:42:40.200 2010-06-08 13:51:26.613 9372367 3604598 1 3637619 2008-04-24 11:04:15.013 2008-04-24 11:04:15.013 9502867 9372190 2009-03-10 13:32:50.660 2009-03-11 15:54:16.040 9101 41 9502822 3604599 21 3637619 2008-04-24 11:09:15.020 2008-04-24 15:56:15.017 9502866 9372190 2009-03-10 13:32:50.660 2009-03-11 15:53:34.090 9102 40 9502822 3604600 7 3637619 2008-04-24 11:32:15.027 2008-04-24 16:17:15.023 9502869 9372190 2009-03-10 13:32:50.660 2009-03-11 15:55:32.430 9101 43 9502822 3604601 7 3114628 2008-04-24 11:33:15.023 2008-04-28 14:37:15.110 9502868 9372190 2009-03-10 13:32:50.660 2009-03-11 15:55:08.593 9102 42 9502822 9502863 9372190 2009-03-10 13:32:50.660 2009-03-11 15:52:16.173 9093 37 9502822 9502862 9372190 2009-03-10 13:32:50.660 2009-03-11 15:51:22.483 8885 36 9502822 11239937 11272686 38 2009-03-25 14:42:40.200 2010-01-13 10:26:30.380 9372367 3604596 2 54 2008-04-24 10:32:15.070 2008-04-24 10:32:15.070 9439606 9372190 2009-03-12 14:52:14.493 2009-03-12 14:52:14.493 9502865 9372190 2009-03-10 13:32:50.660 2009-03-11 15:53:06.880 9102 39 9502822 3604597 1 879 2008-04-24 10:54:15.023 2008-04-24 10:54:15.023 9439607 9372190 2009-03-12 14:52:14.493 2009-03-12 14:52:14.493 9502864 9372190 2009-03-10 13:32:50.660 2009-03-11 15:52:40.073 9093 38 9502822 9502875 9372190 2009-03-10 13:32:50.660 2009-03-11 16:14:49.667 11553 49 9502822 9502874 9372190 2009-03-10 13:32:50.660 2009-03-11 16:09:39.067 11115 48 9502822 9502877 9372190 2009-03-10 13:32:50.660 2009-03-11 16:18:48.303 14092 51 9502822 9502876 9372190 2009-03-10 13:32:50.660 2009-03-11 16:17:50.367 14120 50 9502822 9502871 9372190 2009-03-10 13:32:50.660 2009-03-11 15:59:19.790 8917 45 9502822 9502870 9372190 2009-03-10 13:32:50.660 2009-03-11 15:57:04.373 9124 44 9502822 9502873 9372190 2009-03-10 13:32:50.660 2009-03-11 16:08:06.587 10141 47 9502822 9502872 9372190 2009-03-10 13:32:50.660 2009-03-11 16:02:05.707 9279 46 9502822 7438639 5374494 2008-11-09 13:32:57.613 2008-11-09 13:32:57.613 9502851 9372190 2009-03-10 13:32:50.660 2009-03-10 17:17:34.750 6858 25 9502822 9502852 9372190 2009-03-10 13:32:50.660 2009-03-11 13:47:00.787 177 26 9502822 9502853 9372190 2009-03-10 13:32:50.660 2009-03-11 15:39:17.790 4111 27 9502822 9502846 9372190 2009-03-10 13:32:50.660 2009-03-10 17:13:53.690 6506 23 9502822 9502847 9372190 2009-03-10 13:32:50.660 2009-03-10 17:17:31.127 6858 24 9502822 9502858 9372190 2009-03-10 13:32:50.660 2009-03-11 15:43:48.217 6034 32 9502822 9502859 9372190 2009-03-10 13:32:50.660 2009-03-11 15:45:52.467 6249 33 9502822 9502860 9372190 2009-03-10 13:32:50.660 2009-03-11 15:47:28.397 6249 34 9502822 9502861 9372190 2009-03-10 13:32:50.660 2009-03-11 15:47:45.657 6249 35 9502822 9502854 9372190 2009-03-10 13:32:50.660 2009-03-11 15:39:41.577 4115 28 9502822 9502855 9372190 2009-03-10 13:32:50.660 2009-03-11 15:40:38.470 4869 29 9502822 9502856 9372190 2009-03-10 13:32:50.660 2009-03-11 15:40:50.817 4869 30 9502822 9502857 9372190 2009-03-10 13:32:50.660 2009-03-11 15:42:24.643 5083 31 9502822 11239964 11272712 41 2009-03-25 14:42:40.200 2010-02-17 15:46:26.123 9372367 9502900 9372190 2009-03-10 13:32:50.660 2009-03-11 16:54:13.873 21976 64 9502822 11239963 11272711 40 2009-03-25 14:42:40.200 2010-02-17 11:25:12.583 9372367 19040355 19073057 64 2009-03-25 14:42:40.200 2012-05-16 11:32:34.417 9372367 3604631 2 3114634 2008-04-28 14:39:15.020 2008-05-21 16:57:15.020 3604624 5 3637693 2008-04-24 16:29:15.013 2008-05-21 16:54:15.030 9502909 9372190 2009-03-10 13:32:50.660 2009-03-12 14:08:21.987 23695 67 9502822 9502908 9372190 2009-03-10 13:32:50.660 2009-03-12 14:07:01.020 24435 66 9502822 3604622 1 3637696 2008-04-24 16:00:15.043 2008-04-24 16:00:15.043 3604623 19 3637693 2008-04-24 16:05:15.013 2008-04-24 16:28:15.033 9502906 9372190 2009-03-10 13:32:50.660 2009-03-12 11:56:48.387 25142 65 9502822 3604620 1 3114628 2008-04-24 16:00:15.027 2008-04-24 16:00:15.027 3604621 7 3637693 2008-04-24 16:00:15.033 2008-04-28 14:40:15.023 3604618 5 3114628 2008-04-24 15:59:15.030 2008-04-28 14:38:15.017 3604619 1 3637696 2008-04-24 16:00:15.023 2008-04-24 16:00:15.023 3604617 1 3637693 2008-04-24 15:59:15.017 2008-04-24 15:59:15.017 9502884 9372190 2009-03-10 13:32:50.660 2009-03-11 16:36:12.927 20408 58 9502822 3604616 1 3114628 2008-04-24 15:58:15.027 2008-04-24 15:58:15.027 9502885 9372190 2009-03-10 13:32:50.660 2009-03-11 16:38:01.750 20470 59 9502822 3604615 8 3114628 2008-04-24 15:52:15.017 2008-05-21 16:57:15.027 9502882 9372190 2009-03-10 13:32:50.660 2009-03-11 16:34:39.727 20416 56 9502822 3604614 1 3114617 2008-04-24 15:51:15.023 2008-04-24 15:51:15.023 9502883 9372190 2009-03-10 13:32:50.660 2009-03-11 16:35:31.557 20412 57 9502822 9502880 9372190 2009-03-10 13:32:50.660 2009-03-11 16:26:31.733 16537 54 9502822 9502881 9372190 2009-03-10 13:32:50.660 2009-03-11 16:33:35.920 20370 55 9502822 9502878 9372190 2009-03-10 13:32:50.660 2009-03-11 16:20:49.093 14533 52 9502822 9502879 9372190 2009-03-10 13:32:50.660 2009-03-11 16:22:19.580 14831 53 9502822 3604608 1 3637619 2008-04-24 11:50:15.020 2008-04-24 11:50:15.020 3604607 1 3114628 2008-04-24 11:48:15.023 2008-04-24 11:48:15.023 2230174 2163009 2007-12-04 19:56:42.807 2007-12-04 19:56:42.807 3604606 1 3114628 2008-04-24 11:47:15.027 2008-04-24 11:47:15.027 2230175 2163009 2007-12-04 19:56:42.807 2007-12-04 19:56:42.807 9502891 9372190 2009-03-10 13:32:50.660 2009-03-11 16:49:28.693 21927 63 9502822 11239958 11272706 39 2009-03-25 14:42:40.200 2010-02-10 09:27:55.933 9372367 2230176 2163009 2007-12-04 19:56:42.807 2007-12-04 19:56:42.807 9502888 9372190 2009-03-10 13:32:50.660 2009-03-11 16:46:22.913 21300 62 9502822 3604604 2 3114634 2008-04-24 11:45:15.023 2008-04-24 11:45:15.023 9502886 9372190 2009-03-10 13:32:50.660 2009-03-11 16:45:16.147 22641 60 9502822 3604603 7 3114634 2008-04-24 11:45:15.017 2008-05-15 15:03:15.023 3604602 13 3637619 2008-04-24 11:34:15.023 2008-05-21 16:57:15.027 9502887 9372190 2009-03-10 13:32:50.660 2009-03-11 16:46:10.710 21300 61 9502822 15204499 15237263 26 2007-02-14 09:13:11.383 2010-11-10 17:45:08.657 879 15204497 15237261 87 2008-04-10 14:23:20.953 2010-06-02 11:44:51.237 3114628 15204498 15237262 25 2007-02-14 09:13:11.383 2009-01-05 16:59:13.823 879 17236062 17268827 60 2009-03-25 14:42:40.200 2011-05-11 11:24:37.760 9372367 10355015 10387768 27 2009-03-25 14:42:40.200 2009-05-27 12:31:21.497 9372367 3113963 3179448 26 2006-10-18 14:39:02.073 2007-12-04 19:35:05.413 54 8913403 8946144 47 2008-04-10 14:29:08.800 2008-11-09 13:56:52.807 3114634 8913405 8946146 48 2008-04-10 14:29:08.800 2009-02-11 18:34:57.247 3114634 15204472 15237236 53 2009-03-25 14:42:40.200 2010-08-04 14:50:17.547 9372367 19140206 3114617 2012-05-17 15:05:29.567 2012-05-17 15:05:29.567 19140204 3114617 2012-05-17 15:05:29.563 2012-05-17 15:05:29.563 19140205 3114617 2012-05-17 15:05:29.567 2012-05-17 15:05:29.567 5506969 5374627 2008-06-26 11:18:12.510 2008-06-26 11:18:12.510 52 54 9797760 9830529 59 2006-10-18 14:39:02.073 2008-12-29 11:16:34.997 54 10354941 10387706 63 2006-10-18 14:39:02.073 2009-06-04 12:42:53.200 54 110 112 99 101 106 New Model ... and then tried to create a model but kept getting "File already exists" no matter what I did. I then looked at their online help and it says to create a new model, I have to go the the "Model Repository" and select "New Model" ... but there are no "Repositories" in the repository neighborhood. OK, so I created an new repository on my computer. Tried to connect to the new repository, but it is telling me it is not started. Went to the admin tool again and started it. Now connecting it tells me that the repository is not initialized!!!! Wow, what a user friendly tool. OK, I have been beating on this thing, but it keeps telling me it is not initialized, but I can't find a way to initialize it. I give up.]]> 108 9797774 9830543 20 2009-03-25 14:42:40.200 2009-04-15 14:18:15.410 9372367 118 120 121 123 9797777 9830546 21 2009-03-25 14:42:40.200 2009-04-22 11:33:22.960 9372367 5407359 5374627 10518535 10616836 3637619 2009-06-18 08:02:50.960 2009-06-18 08:02:50.960 10518532 10616833 3114634 2009-06-15 21:57:35.243 2009-06-15 21:57:35.243 10518531 10616833 3637619 2009-06-15 21:56:02.443 2009-06-15 21:56:02.443 6258968 6226189 31 2008-04-10 14:06:28.173 2008-08-22 10:06:22.370 3114617 6258970 6226191 32 2008-04-10 14:06:28.173 2008-08-22 10:07:14.710 3114617 6258963 6226184 28 2008-04-10 14:06:28.173 2008-08-22 10:03:14.120 3114617 6258964 6226185 29 2008-04-10 14:06:28.173 2008-08-22 10:04:14.597 3114617 6258966 6226187 30 2008-04-10 14:06:28.173 2008-08-22 10:05:14.073 3114617 6258959 6226180 25 2008-04-10 14:06:28.173 2008-07-16 14:15:31.683 3114617 6258961 6226182 26 2008-04-10 14:06:28.173 2008-08-22 09:57:37.457 3114617 6258962 6226183 27 2008-04-10 14:06:28.173 2008-08-22 10:02:46.840 3114617 9797731 9830500 18 2009-03-25 14:42:40.200 2009-04-08 13:45:11.163 9372367 9797733 9830502 19 2009-03-25 14:42:40.200 2009-04-15 14:07:33.247 9372367 6258984 6226205 41 2008-04-10 14:06:28.173 2008-08-22 10:16:33.693 3114617 6258983 6226204 40 2008-04-10 14:06:28.173 2008-08-22 10:15:52.347 3114617 6258986 6226207 43 2008-04-10 14:06:28.173 2008-08-22 10:17:09.080 3114617 6258985 6226206 42 2008-04-10 14:06:28.173 2008-08-22 10:16:49.817 3114617 6258979 6226200 38 2008-04-10 14:06:28.173 2008-08-22 10:14:35.447 3114617 6258981 6226202 39 2008-04-10 14:06:28.173 2008-08-22 10:14:48.107 3114617 6258976 6226197 36 2008-04-10 14:06:28.173 2008-08-22 10:12:58.883 3114617 6258975 6226196 35 2008-04-10 14:06:28.173 2008-08-22 10:10:56.677 3114617 6258978 6226199 37 2008-04-10 14:06:28.173 2008-08-22 10:13:34.950 3114617 6258972 6226193 33 2008-04-10 14:06:28.173 2008-08-22 10:08:34.917 3114617 6258973 6226194 34 2008-04-10 14:06:28.173 2008-08-22 10:10:16.773 3114617 5506897 5374547 2008-06-26 10:47:09.907 2008-06-26 10:47:09.907 5506896 5374547 2008-06-26 10:47:09.907 2008-06-26 10:47:09.907 5506893 5374547 2008-06-26 10:47:09.907 2008-06-26 10:47:09.907 5506895 5374547 2008-06-26 10:47:09.907 2008-06-26 10:47:09.907 5506894 5374547 2008-06-26 10:47:09.907 2008-06-26 10:47:09.907 6258989 6226210 46 2008-04-10 14:06:28.173 2008-08-22 10:18:15.243 3114617 6258990 6226211 47 2008-04-10 14:06:28.173 2008-08-22 10:18:43.753 3114617 6258987 6226208 44 2008-04-10 14:06:28.173 2008-08-22 10:17:27.060 3114617 6258988 6226209 45 2008-04-10 14:06:28.173 2008-08-22 10:17:56.717 3114617 6258991 6226212 48 2008-04-10 14:06:28.173 2008-08-22 10:19:11.933 3114617 6258992 6226213 49 2008-04-10 14:06:28.173 2008-08-22 10:19:23.640 3114617 710 707 8 2006-10-18 14:39:02.073 2006-11-27 14:45:19.497 54 5407280 5374547 19140241 3114634 2012-05-17 15:16:27.707 2012-05-17 15:16:27.707 19140240 3114634 2012-05-17 15:16:27.707 2012-05-17 15:16:27.707 19140243 3114634 2012-05-17 15:16:27.707 2012-05-17 15:16:27.707 19140242 3114634 2012-05-17 15:16:27.707 2012-05-17 15:16:27.707 19140239 3114634 2012-05-17 15:16:27.707 2012-05-17 15:16:27.707 19140246 3114634 2012-05-17 15:16:27.707 2012-05-17 15:16:27.707 5407264 5374530 19140247 3114634 2012-05-17 15:16:27.707 2012-05-17 15:16:27.707 19140244 3114634 2012-05-17 15:16:27.707 2012-05-17 15:16:27.707 15204400 15237167 54 2008-04-10 14:29:08.800 2010-06-23 10:41:01.083 3114634 19140245 3114634 2012-05-17 15:16:27.707 2012-05-17 15:16:27.707 29982736 1 3637619 2017-05-02 16:13:15.070 2017-05-02 16:13:15.070 29982737 2 3637619 2017-05-02 16:19:15.030 2022-02-24 13:48:15.063 9797652 9830420 17 2009-03-25 14:42:40.200 2009-04-01 12:18:57.003 9372367 9371982 9404731 41 2006-10-29 22:01:14.287 2009-03-02 21:52:01.893 101 9371979 9404728 40 2006-10-29 22:01:14.287 2009-03-02 15:31:33.683 101 2326534 2162880 2007-11-08 09:14:46.940 2007-11-08 09:14:46.940 76581 1 2326533 9371983 9404732 42 2006-10-29 22:01:14.287 2009-03-03 08:15:20.530 101 2326532 589826 2007-03-23 13:31:02.773 2007-11-03 07:20:08.290 18235 3 557060 2326533 2162880 2007-11-08 09:14:46.940 2007-11-08 09:17:11.993 210465 2 2326530 589826 2007-03-23 13:31:02.773 2007-09-25 12:25:23.013 18693 2 557060 2326531 589826 2007-11-03 07:33:43.000 2007-11-03 07:33:43.000 3002 1 810 807 9 2006-10-18 14:39:02.073 2007-01-26 09:57:15.480 54 7798810 7766046 7798809 7766044 9371964 9404713 39 2006-10-29 22:01:14.287 2007-02-16 10:00:18.000 101 5506729 3637693 2008-06-25 17:01:53.163 2008-06-25 17:01:53.163 5506730 3637693 2008-06-25 17:01:53.163 2008-06-25 17:01:53.163 557060 589826 2007-03-23 13:31:02.773 2007-11-05 08:54:30.913 18195 4 2229552 589826 2007-11-03 07:34:52.027 2007-11-03 07:34:52.027 832 829 16 2006-10-18 14:39:02.073 2007-02-07 15:11:57.477 54 557061 589826 2007-03-23 16:11:22.240 2007-03-23 16:11:22.240 3772 1 2229553 589826 2007-11-03 07:34:52.027 2007-11-03 07:34:52.027 831 828 15 2006-10-18 14:39:02.073 2007-02-07 15:11:34.773 54 2229554 589826 2007-11-03 07:34:52.027 2007-11-03 07:34:52.027 833 830 17 2006-10-18 14:39:02.073 2007-02-07 15:12:27.287 54 2229548 589826 2007-11-03 07:34:52.027 2007-11-03 07:34:52.027 2229549 589826 2007-11-03 07:34:52.027 2007-11-03 07:34:52.027 10354690 10387458 26 2009-03-25 14:42:40.200 2009-05-27 09:46:23.443 9372367 2229550 589826 2007-11-03 07:34:52.027 2007-11-03 07:34:52.027 830 827 14 2006-10-18 14:39:02.073 2007-02-07 15:10:49.773 54 2229551 589826 2007-11-03 07:34:52.027 2007-11-03 07:34:52.027 829 826 13 2006-10-18 14:39:02.073 2007-02-07 14:02:10.097 54 2229544 589826 2007-11-03 07:34:52.027 2007-11-03 07:34:52.027 2229545 589826 2007-11-03 07:34:52.027 2007-11-03 07:34:52.027 2229546 589826 2007-11-03 07:34:52.027 2007-11-03 07:34:52.027 2229547 589826 2007-11-03 07:34:52.027 2007-11-03 07:34:52.027 2229540 589826 2007-11-03 07:34:52.027 2007-11-03 07:34:52.027 2229541 589826 2007-11-03 07:34:52.027 2007-11-03 07:34:52.027 557062 589826 2007-04-02 14:14:44.960 2007-04-02 14:14:44.960 2288 1 2229542 589826 2007-11-03 07:34:52.027 2007-11-03 07:34:52.027 557063 589826 2007-04-02 14:46:30.477 2007-04-02 14:46:30.477 3799 1 2229543 589826 2007-11-03 07:34:52.027 2007-11-03 07:34:52.027 811 808 10 2006-10-18 14:39:02.073 2007-02-07 13:50:35.780 54 812 809 11 2006-10-18 14:39:02.073 2007-02-07 14:00:29.073 54 813 810 12 2006-10-18 14:39:02.073 2007-02-07 14:00:57.697 54 5506779 5374530 2008-06-25 17:23:41.907 2008-06-25 17:23:41.907 5506780 5374530 2008-06-25 17:23:41.907 2008-06-25 17:23:41.907 9404930 9372190 1179964 1212729 54 2007-03-19 09:11:40.007 2007-04-02 22:09:33.903 589826 1179965 1212730 55 2007-03-19 09:11:40.007 2007-08-08 15:59:57.317 589826 1179966 1212731 56 2007-03-19 09:11:40.007 2007-08-08 16:00:28.827 589826 1179967 1212732 57 2007-03-19 09:11:40.007 2007-08-08 16:01:08.367 589826 13664387 13697139 53 2008-04-10 14:29:08.800 2010-06-23 10:40:27.797 3114634 6455309 2 54 2008-10-21 10:16:55.153 2008-10-21 10:16:55.153 13664382 13697134 85 2008-04-10 14:06:28.173 2010-06-23 10:22:58.487 3114617 13664381 13697133 84 2008-04-10 14:06:28.173 2010-04-13 11:11:25.123 3114617 13664384 13697136 87 2008-04-10 14:06:28.173 2010-06-23 10:24:35.000 3114617 13664383 13697135 86 2008-04-10 14:06:28.173 2010-06-23 10:23:57.313 3114617 13664386 13697138 52 2008-04-10 14:29:08.800 2010-06-23 10:39:48.837 3114634 13664385 13697137 51 2008-04-10 14:29:08.800 2010-03-16 18:52:26.433 3114634 883 880 4 2007-02-14 09:13:11.383 2007-02-14 09:20:34.527 879 878 875 19 2006-10-18 14:39:02.073 2007-02-14 09:08:28.467 54 877 874 18 2006-10-18 14:39:02.073 2007-02-07 15:13:45.403 54 880 877 1 2007-02-14 09:13:11.383 2007-02-14 09:13:11.383 879 882 879 3 2007-02-14 09:13:11.383 2007-02-14 09:17:51.960 879 881 878 2 2007-02-14 09:13:11.383 2007-02-14 09:16:38.687 879 10354898 10387662 62 2006-10-18 14:39:02.073 2009-05-26 13:49:48.330 54 914 911 38 2006-10-29 22:01:14.287 2006-11-02 12:52:07.427 101 15630874 15663628 54 2009-03-25 14:42:40.200 2010-11-04 10:42:47.557 9372367 13140029 13172795 86 2008-04-10 14:23:20.953 2009-01-05 16:56:20.627 3114628 2229652 2162880 2007-11-08 09:35:11.327 2007-11-08 09:35:11.327 2229653 2162880 2007-11-08 09:35:11.327 2007-11-08 09:35:11.327 28672446 28639680 28672444 28639678 15630876 15663630 55 2009-03-25 14:42:40.200 2011-01-11 10:30:15.697 9372367 11240439 11273176 49 2008-04-10 14:29:08.800 2009-02-11 18:40:35.833 3114634 11240440 11273177 50 2008-04-10 14:29:08.800 2010-03-16 18:51:41.083 3114634 11240437 11273174 82 2008-04-10 14:06:28.173 2010-03-16 16:55:56.697 3114617 11240435 11273172 81 2008-04-10 14:06:28.173 2008-11-09 13:32:57.640 3114617 3670374 3637619 2162879 2195645 23 2006-10-18 14:39:02.073 2007-09-25 15:45:50.783 54 2162882 2195648 2 2007-11-08 09:09:30.093 2007-11-08 09:12:55.277 2162880 2162881 2195647 1 2007-11-08 09:09:30.093 2007-11-08 09:09:30.093 2162880 2162884 2195650 4 2007-11-08 09:09:30.093 2007-11-08 09:26:12.670 2162880 2162883 2195649 3 2007-11-08 09:09:30.093 2007-11-08 09:15:42.917 2162880 193 7 2006-10-18 14:39:02.073 2006-10-18 14:39:02.073 8355847 8388615 58 2006-10-18 14:39:02.073 2008-12-29 11:16:02.503 54 9405099 9372367 191 7 2006-10-18 14:39:02.073 2006-10-18 14:39:02.073 192 7 2006-10-18 14:39:02.073 2006-10-18 14:39:02.073 8355846 8388614 57 2006-10-18 14:39:02.073 2008-10-21 15:07:26.227 54 189 7 2006-10-18 14:39:02.073 2006-10-18 14:39:02.073 190 7 2006-10-18 14:39:02.073 2006-10-18 14:39:02.073 187 7 2006-10-18 14:39:02.073 2006-10-18 14:39:02.073 167 165 36 2006-10-29 22:01:14.287 2006-11-02 12:09:34.810 101 188 7 2006-10-18 14:39:02.073 2006-10-18 14:39:02.073 168 166 37 2006-10-29 22:01:14.287 2006-11-02 12:15:03.463 101 185 7 2006-10-18 14:39:02.073 2006-10-18 14:39:02.073 186 7 2006-10-18 14:39:02.073 2006-10-18 14:39:02.073 183 7 2006-10-18 14:39:02.073 2006-10-18 14:39:02.073 184 7 2006-10-18 14:39:02.073 2006-10-18 14:39:02.073 181 7 2006-10-18 14:39:02.073 2006-10-18 14:39:02.073 182 7 2006-10-18 14:39:02.073 2006-10-18 14:39:02.073 166 164 35 2006-10-29 22:01:14.287 2006-11-01 13:52:29.310 101 140 138 32 2006-10-29 22:01:14.287 2006-11-01 13:42:47.047 101 139 137 31 2006-10-29 22:01:14.287 2006-11-01 13:42:16.280 101 142 140 34 2006-10-29 22:01:14.287 2006-11-01 13:51:40.833 101 141 139 33 2006-10-29 22:01:14.287 2006-11-01 13:49:59.363 101 9306167 1 9372367 2009-04-01 11:31:15.070 2009-04-01 11:31:15.070 129 127 21 2006-10-29 22:01:14.287 2006-10-30 22:46:32.523 101 8355879 8388646 24 2007-02-14 09:13:11.383 2009-01-05 16:58:32.947 879 26247251 26312786 70 2009-03-25 14:42:40.200 2013-03-06 08:35:42.190 9372367 130 128 22 2006-10-29 22:01:14.287 2006-10-31 08:51:07.920 101 127 125 19 2006-10-29 22:01:14.287 2006-10-30 15:52:38.927 101 9372369 9405101 1 2009-03-25 14:42:40.200 2009-03-25 14:42:40.200 9372367 128 126 20 2006-10-29 22:01:14.287 2006-10-30 22:09:19.623 101 9372370 9405102 2 2009-03-25 14:42:40.200 2009-03-25 15:11:57.703 9372367 8355875 8388642 85 2008-04-10 14:23:20.953 2009-01-05 16:55:52.303 3114628 125 123 17 2006-10-29 22:01:14.287 2006-10-30 13:31:21.207 101 126 124 18 2006-10-29 22:01:14.287 2006-10-30 15:21:42.290 101 8355877 8388644 23 2007-02-14 09:13:11.383 2008-11-09 13:32:57.613 879 124 122 1 2006-10-30 13:24:18.657 2006-10-30 13:24:18.657 120 137 135 29 2006-10-29 22:01:14.287 2006-11-01 13:05:34.640 101 9372375 9405107 6 2009-03-25 14:42:40.200 2009-03-25 15:16:21.243 9372367 8355872 8388639 82 2008-04-10 14:23:20.953 2008-07-10 10:37:39.180 3114628 138 136 30 2006-10-29 22:01:14.287 2006-11-01 13:34:39.587 101 8355873 8388640 83 2008-04-10 14:23:20.953 2009-01-05 16:54:47.437 3114628 135 133 27 2006-10-29 22:01:14.287 2006-11-01 06:09:48.390 101 9372377 9405109 7 2009-03-25 14:42:40.200 2009-03-25 15:16:59.430 9372367 8355874 8388641 84 2008-04-10 14:23:20.953 2009-01-05 16:55:35.607 3114628 136 134 28 2006-10-29 22:01:14.287 2006-11-01 09:27:05.503 101 9372378 9405110 8 2009-03-25 14:42:40.200 2009-03-25 15:18:56.457 9372367 622594 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) {note:title=Test Machine Installation Difference} Fedora core 7 had 5.2.2 installed {note} # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 {note:title=Test Machine Installation Difference} I named the directory alfresco-2.1 {note} # I then moved the tar into the alfresco-2.0 directory {note:title=Test Machine Installation Difference} alfreso-2.1 directory {note} # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} {note:title=Test Machine Installation Difference} This was a bit different in FC7. In order to get Xvfb installed I used "Add/Remove Software" to install it. OpenOffice was already installed so I just had to find the soffice command location. The command to get Xvfb running was also a bit different. I had to create a ascii file called /etc/xvfb-auth.cfg that only had one line in it that read 'localhost'. Then the command to start Xvfb was 'Xvfb :1 -auth /etc/xvfb-auth.cfg'. Then I could start soffice the same way. I changed the start_oo.sh file to reflect those commands. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} {note:title=Test Machine Installation Difference} Did not do this {note} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data {note:title=Test Machine Installation Difference} /data/alfresco-2.1 {note} ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml {note:title=Test Machine Installation Difference} This file already existed and was no different from the sample, so I skipped this step {note} ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: {note:title=Test Machine Installation Difference} This file already existed and so copied the original to custom-repository.properties.orig and edited the existing one. {note} ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) {note:title=Test Machine Installation Difference} I changed them to work with the MS SQL Server login so they looked like: db.username=DB_Collaboration db.password=******** db.pool.initial=10 db.pool.max=100 {note} ### I commented out the two HSQL connection lines ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' {note:title=Test Machine Installation Difference} Left the MySQL lines commented out, but uncommented the SQLServer lines and changed them to db.driver=net.sourceforge.jtds.jdbc.Driver db.url=jdbc:jtds:sqlserver://solstice.shore.mbari.org/Alfresco;domain=SHORE;user=DB_Collaboration;password=****** {note} ### I also added the following lines at the end of the file to connect up to the external mail server {noformat} # # The external email server properties # mail.host=mail.shore.mbari.org mail.port=25 mail.username= mail.password= {noformat} ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties {note:title=Test Machine Installation Difference} Already existed, so backuped up to .orig and edited to comment out the HSQL and uncomment the SQLServer one. {note} ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line {note:title=Test Machine Installation Difference} The downloaded alfresco already has the MySQL driver jar in the install, but since I am using SQLServer, I downloaded the jtds driver from the internet and installed the jtds-X.X.X.jar file in the /opt/alfresco-2.1/tomcat/common/lib to make it available to alfresco. {note} # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0. I also added the following line after the line that stated 'killall soffice.bin': killall Xvfb. That ensured the Xvfb process was killed when alfresco was shutdown. {note:title=Test Machine Installation Difference} Set it to /opt/alfresco-2.1/tomcat for the test machine {note} {tip} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {tip} {note:title=Test Machine Installation Difference} For the test machine, I wasn't too worried about details, so I skipped the next 15 or so steps (picks up again at configuring for MBARI LDAP below. {note} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {tip} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {tip} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.255.255 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # OK, this is a total HACK and needed to be done due to the wonderful world of open source. In Internet Explorer with SSL turned on, you would get a dialog pop-up that stated the secure server was trying to serve non-secure content. This was due to the Alfresco Community logo being served from http://www.alfresco.com. Only IE did this and you can work around it on the client end by doing the following: ## Startup IE. ## Go to Tools->Internet Options ... ## Click on Security tab ## Click on "Trusted Sites" zone ## Click on Sites button ## Make sure check box for "Require Server verification (https:) for all sites in this zone" is unchecked 7. Type in "http://www.alfresco.com" into the "Add this website to the zone:" text field and click Add. ## Click on close ## Make sure "Trusted Sites" is still selected. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on the "Local Intranet" zone. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on OK to close Internet Options dialog. # Now there are a couple of reasons why this is bad, but the main one is that if you are trying to reach this from outside the firewall, you will have to change those settings for the Internet Zone (I think) which is bad. Plus every user will have to do this. To get around this, I had to: ## Take [this|^alfresco_community_horiz20.gif] logo image and save it to ./images/logo directory. ## This next step can either be very easy or very complicated. You can try downloading [this|^a0.jar] jar file and copying it to ./WEB-INF/lib. If when you start up Alfresco you get some exceptions that look like they are related to a class called PageTag, you will have to do it the hard way: ### Now you have to actually check out the subversion source code from Alfresco. I am assuming you know how to do that. By the way, you will need ant and java installed to do this. The SVN URL for the repository is svn://www.alfresco.org/alfresco. ### Once it is checked out find the PageTag.java file (should be in HEAD/root/projects/web-client/source/java/org/alfresco/web/ui/repo/tag directory) and edit: #### Change the line {noformat} private final static String ALF_LOGO = "http://www.alfresco.com/images/alfresco_community_horiz20.gif"; {noformat} to: {noformat} private final static String ALF_LOGO = "/alfresco/images/logo/alfresco_community_horiz20.gif"; {noformat} ### Save the file. {warning} If you run this next step on the machine where the application is installed and have a TOMCAT_HOME environment variable defined, it will try to deploy everything to your Tomcat installation. The best thing to do is build this on a separate machine. {warning} ### Open a command prompt in the HEAD/root directory and type "ant build-tomcat". After a long wait, the build will actually fail if you don't have a TOMCAT_HOME defined in your environment. ### Once the build has failed you will need to create a new jar file called a0.jar with only the PageTag.class file in it. ### Copy the a0.jar file to the ./WEB-INF/lib directory. # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {tip} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {tip} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## We wanted to be able to make sure we could have collaborator accounts that were not MBARI LDAP accounts so that we could have Alfresco users that had not permissions at all on the MBARI network. In order to do this, I used the Alfresco native user service and chained the authentication together with the MBARI LDAP. In order to do this, I copied the chaining-authentication-context.xml.sample to chaining-authentication-context.xml. I then edited the file to make the appropriate changes (I have also attached the changed config file [here|^chaining-authentication-context.xml] for downloading): ### The first change was to the first bean declaration's id from *authenticationServiceImpl* to *authenticationService*. ### In the same bean declaration, I changed the first authentication services reference from *authenticationServiceImplJAAS* to *authenticationServiceImplLDAP* ### I then changed the JAAS bean declaration to point to the ldap declaration by changing the bean id from *authenticationServiceImplJAAS* to *authenticationServiceImplLDAP* ### There are two properties in this bean and I had to change them to point to the LDAP configuration (these changes actually reference the services defined in the ldap-authentication-context.xml configuration file). #### Change the authenticationDao property's value from *authenticationDaoJAAS* to *authenticationDaoLDAP* #### Change the authenticationComponent property from *authenticationComponentImplJAAS* to *authenticationComponentImplLDAP* ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. {note:title=Test Machine Installation Difference} Did not setup SSL for the test machine {note} ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {tip} This takes a couple minutes as it has to first build the DB and all the indexes and such. {tip} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://oceana.shore.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Make sure startup/shutdown script in /etc/init.d is working correctly # I.S. then setup backup regime to do incremental backups nightly and full backups weekly # TODO: Verify I know where the MySQL files are and that we can restore them correctly. Also turn on binary logs and use a test machine to learn (and document here) how to restore from backup. {warning:title=IMPORTANT} For some strange reason, the Alfresco stack would seem to crash after 20-30 days of operation with some very cryptic errors. I found some entries in the forums about changing the ulimit value in linux. So I issued a 'ulimit -n 4096' and then restart Alfresco. I haven't seen that problem since. {warning}]]> 589826 133 131 25 2006-10-29 22:01:14.287 2006-10-31 14:14:37.377 101 9372371 9405103 3 2009-03-25 14:42:40.200 2009-03-25 15:13:07.927 9372367 134 132 26 2006-10-29 22:01:14.287 2006-10-31 14:15:43.217 101 9372372 9405104 4 2009-03-25 14:42:40.200 2009-03-25 15:14:20.507 9372367 131 129 23 2006-10-29 22:01:14.287 2006-10-31 09:13:30.480 101 132 130 24 2006-10-29 22:01:14.287 2006-10-31 10:36:25.647 101 9372374 9405106 5 2009-03-25 14:42:40.200 2009-03-25 15:15:07.747 9372367 114 112 1 2006-10-30 10:04:06.227 2006-10-30 10:04:06.227 112 113 111 10 2006-10-29 22:01:14.287 2006-10-30 10:00:52.383 101 9372383 9405115 11 2009-03-25 14:42:40.200 2009-03-25 15:22:09.933 9372367 111 109 9 2006-10-29 22:01:14.287 2006-10-30 10:00:33.993 101 9372385 9405117 12 2009-03-25 14:42:40.200 2009-03-25 15:24:02.767 9372367 2162850 2195616 74 2007-03-19 09:11:40.007 2007-09-07 21:11:37.697 589826 110 108 8 2006-10-29 22:01:14.287 2006-10-30 09:54:17.273 101 109 107 7 2006-10-29 22:01:14.287 2006-10-30 09:43:16.017 101 9372379 9405111 9 2009-03-25 14:42:40.200 2009-03-25 15:19:57.487 9372367 107 105 6 2006-10-29 22:01:14.287 2006-10-30 09:42:56.797 101 9372381 9405113 10 2009-03-25 14:42:40.200 2009-03-25 15:20:55.110 9372367 122 120 16 2006-10-29 22:01:14.287 2006-10-30 13:30:21.233 101 121 119 15 2006-10-29 22:01:14.287 2006-10-30 12:03:42.503 101 2162851 2195617 75 2007-03-19 09:11:40.007 2007-11-03 07:32:56.593 589826 119 117 14 2006-10-29 22:01:14.287 2006-10-30 11:58:57.243 101 118 116 13 2006-10-29 22:01:14.287 2006-10-30 11:34:23.797 101 117 115 12 2006-10-29 22:01:14.287 2006-10-30 11:33:51.880 101 116 114 11 2006-10-29 22:01:14.287 2006-10-30 10:58:37.787 101 115 113 1 2006-10-30 09:45:10.867 2006-10-30 09:45:10.867 108 3114724 3180189 27 2008-04-10 14:23:20.953 2008-04-10 16:25:54.483 3114628 100 98 3 2006-10-18 14:39:02.073 2006-10-29 09:20:16.870 54 99 97 2 2006-10-18 14:39:02.073 2006-10-18 14:47:32.913 54 3114726 3180191 28 2008-04-10 14:23:20.953 2008-04-10 16:26:51.077 3114628 102 100 1 2006-10-29 22:01:14.287 2006-10-29 22:01:14.287 101 104 102 3 2006-10-29 22:01:14.287 2006-10-30 09:24:59.843 101 3114727 3180192 29 2008-04-10 14:23:20.953 2008-04-10 16:28:00.453 3114628 103 101 2 2006-10-29 22:01:14.287 2006-10-30 09:11:22.567 101 106 104 5 2006-10-29 22:01:14.287 2006-10-30 09:41:22.707 101 3114729 3180194 30 2008-04-10 14:23:20.953 2008-04-10 16:28:27.280 3114628 105 103 4 2006-10-29 22:01:14.287 2006-10-30 09:28:03.057 101 3114716 3180181 22 2008-04-10 14:23:20.953 2008-04-10 16:20:49.350 3114628 3114718 3180183 23 2008-04-10 14:23:20.953 2008-04-10 16:22:25.310 3114628 3114720 3180185 24 2008-04-10 14:23:20.953 2008-04-10 16:23:43.487 3114628 3114722 3180187 26 2008-04-10 14:23:20.953 2008-04-10 16:25:27.283 3114628 3114721 3180186 25 2008-04-10 14:23:20.953 2008-04-10 16:24:53.813 3114628 3114708 3180173 17 2008-04-10 14:23:20.953 2008-04-10 16:17:43.483 3114628 9798305 9831058 22 2009-03-25 14:42:40.200 2009-04-22 11:49:00.970 9372367 3114710 3180175 18 2008-04-10 14:23:20.953 2008-04-10 16:18:20.357 3114628 3114711 3180176 19 2008-04-10 14:23:20.953 2008-04-10 16:19:03.963 3114628 3114713 3180178 20 2008-04-10 14:23:20.953 2008-04-10 16:19:20.037 3114628 3114714 3180179 21 2008-04-10 14:23:20.953 2008-04-10 16:20:29.000 3114628 3114699 3180164 13 2008-04-10 14:23:20.953 2008-04-10 16:10:53.383 3114628 3114701 3180166 14 2008-04-10 14:23:20.953 2008-04-10 16:14:53.997 3114628 3114703 3180168 15 2008-04-10 14:23:20.953 2008-04-10 16:15:36.910 3114628 3114706 3180171 16 2008-04-10 14:23:20.953 2008-04-10 16:16:50.753 3114628 3114693 3180158 10 2008-04-10 14:23:20.953 2008-04-10 16:04:02.513 3114628 3114697 3180162 12 2008-04-10 14:23:20.953 2008-04-10 16:10:06.920 3114628 3114695 3180160 11 2008-04-10 14:23:20.953 2008-04-10 16:09:04.317 3114628 3114686 3180151 9 2008-04-10 14:23:20.953 2008-04-10 16:03:37.483 3114628 3114685 3180150 8 2008-04-10 14:23:20.953 2008-04-10 16:01:43.593 3114628 3114675 3180140 38 2006-10-18 14:39:02.073 2008-04-10 15:51:58.697 54 3114676 3180141 39 2006-10-18 14:39:02.073 2008-04-10 15:53:04.767 54 3114681 3180146 6 2008-04-10 14:23:20.953 2008-04-10 16:01:10.217 3114628 3114682 3180147 7 2008-04-10 14:23:20.953 2008-04-10 16:01:23.433 3114628 3114679 3180144 4 2008-04-10 14:23:20.953 2008-04-10 14:43:13.847 3114628 55 53 1 2006-10-18 14:39:02.073 2006-10-18 14:39:02.073 54 3114680 3180145 5 2008-04-10 14:23:20.953 2008-04-10 16:00:35.370 3114628 3114669 3180134 14 2008-04-10 14:29:08.800 2008-04-10 15:45:49.663 3114634 3114670 3180135 15 2008-04-10 14:29:08.800 2008-04-10 15:46:21.197 3114634 3114667 3180132 12 2008-04-10 14:29:08.800 2008-04-10 15:43:27.293 3114634 3114668 3180133 13 2008-04-10 14:29:08.800 2008-04-10 15:45:12.350 3114634 3114673 3180138 36 2006-10-18 14:39:02.073 2008-04-10 15:51:20.610 54 9372191 9404931 1 2009-03-10 13:31:33.497 2009-03-10 13:31:33.497 9372190 3114674 3180139 37 2006-10-18 14:39:02.073 2008-04-10 15:51:35.827 54 3114672 3180137 35 2006-10-18 14:39:02.073 2008-04-10 15:19:55.497 54 3114663 3180128 10 2008-04-10 14:29:08.800 2008-04-10 15:40:31.717 3114634 3114665 3180130 11 2008-04-10 14:29:08.800 2008-04-10 15:41:04.753 3114634 3114659 3180124 7 2008-04-10 14:29:08.800 2008-04-10 15:26:21.793 3114634 3114662 3180127 9 2008-04-10 14:29:08.800 2008-04-10 15:40:20.917 3114634 3114661 3180126 8 2008-04-10 14:29:08.800 2008-04-10 15:33:11.800 3114634 3114655 3180120 4 2008-04-10 14:29:08.800 2008-04-10 14:42:36.847 3114634 3114658 3180123 6 2008-04-10 14:29:08.800 2008-04-10 15:25:02.490 3114634 3114657 3180122 5 2008-04-10 14:29:08.800 2008-04-10 15:22:21.787 3114634 3114652 3180117 33 2006-10-18 14:39:02.073 2008-04-10 15:18:52.193 54 3114651 3180116 32 2006-10-18 14:39:02.073 2008-04-10 15:18:27.257 54 3114653 3180118 34 2006-10-18 14:39:02.073 2008-04-10 15:19:27.877 54 3670449 3637696 9372234 9404971 3 2009-03-10 13:31:33.497 2009-03-12 14:50:55.807 9372190 3114648 3180113 30 2006-10-18 14:39:02.073 2008-04-10 15:15:53.793 54 3670447 3637693 9372232 9404969 2 2009-03-10 13:31:33.497 2009-03-10 13:32:50.677 9372190 3114650 3180115 31 2006-10-18 14:39:02.073 2008-04-10 15:16:28.157 54 3114643 3180108 27 2006-10-18 14:39:02.073 2008-03-17 13:02:39.277 54 3114645 3180110 28 2006-10-18 14:39:02.073 2008-04-10 14:46:32.780 54 3114646 3180111 29 2006-10-18 14:39:02.073 2008-04-10 15:14:56.207 54 3114639 3180104 7 2008-04-10 14:06:28.173 2008-04-10 14:13:30.103 3114617 3114640 3180105 3 2008-04-10 14:29:08.800 2008-04-10 14:33:06.717 3114634 3114641 3180106 3 2008-04-10 14:23:20.953 2008-04-10 14:25:07.373 3114628 3114636 3180101 1 2008-04-10 14:29:08.800 2008-04-10 14:29:08.800 3114634 3114637 3180102 2 2008-04-10 14:29:08.800 2008-04-10 14:32:44.383 3114634 3114631 3180096 2 2008-04-10 14:23:20.953 2008-04-10 14:24:50.017 3114628 3114630 3180095 1 2008-04-10 14:23:20.953 2008-04-10 14:23:20.953 3114628 3114625 3180091 6 2008-04-10 14:06:28.173 2008-04-10 14:13:20.537 3114617 3114624 3180090 5 2008-04-10 14:06:28.173 2008-04-10 14:12:55.763 3114617 3114623 3180089 4 2008-04-10 14:06:28.173 2008-04-10 14:12:16.137 3114617 10059782 2392072 9372367 2009-05-20 12:07:24.617 2009-05-20 12:07:24.617 3114621 3180087 3 2008-04-10 14:06:28.173 2008-04-10 14:11:42.370 3114617 3114620 3180086 2 2008-04-10 14:06:28.173 2008-04-10 14:11:18.650 3114617 3114619 3180085 1 2008-04-10 14:06:28.173 2008-04-10 14:06:28.173 3114617 15630813 15663570 55 2008-04-10 14:29:08.800 2010-10-18 15:04:49.477 3114634 15630815 15663572 56 2008-04-10 14:29:08.800 2011-01-05 16:50:24.863 3114634 876 879 2031623 589826 2007-03-23 13:31:02.773 2007-03-23 13:31:02.773 18712 1 557060 15990807 16023574 58 2009-03-25 14:42:40.200 2011-02-09 19:11:12.220 9372367 19041591 19074273 66 2009-03-25 14:42:40.200 2012-11-14 14:57:45.157 9372367 9438429 101 2009-03-03 08:15:47.443 2009-03-03 08:15:47.443 9438428 101 2009-03-03 08:15:47.443 2009-03-03 08:15:47.443 9438431 101 2009-03-03 08:15:47.443 2009-03-03 08:15:47.443 9438430 101 2009-03-03 08:15:47.443 2009-03-03 08:15:47.443 9438433 101 2009-03-03 08:15:47.443 2009-03-03 08:15:47.443 9438432 101 2009-03-03 08:15:47.443 2009-03-03 08:15:47.443 9438435 101 2009-03-03 08:15:47.443 2009-03-03 08:15:47.443 9438434 101 2009-03-03 08:15:47.443 2009-03-03 08:15:47.443 9438421 101 2009-03-03 08:15:47.443 2009-03-03 08:15:47.443 9438420 101 2009-03-03 08:15:47.443 2009-03-03 08:15:47.443 9438423 101 2009-03-03 08:15:47.443 2009-03-03 08:15:47.443 9438422 101 2009-03-03 08:15:47.443 2009-03-03 08:15:47.443 9438425 101 2009-03-03 08:15:47.443 2009-03-03 08:15:47.443 9438424 101 2009-03-03 08:15:47.443 2009-03-03 08:15:47.443 9438427 101 2009-03-03 08:15:47.443 2009-03-03 08:15:47.443 9438426 101 2009-03-03 08:15:47.443 2009-03-03 08:15:47.443 15303165 879 2010-11-10 17:46:45.413 2010-11-10 17:46:45.413 15303164 879 2010-11-10 17:46:45.413 2010-11-10 17:46:45.413 9438436 101 2009-03-03 08:15:47.443 2009-03-03 08:15:47.443 9438437 101 2009-03-03 08:15:47.443 2009-03-03 08:15:47.443 15303159 879 2010-11-10 17:46:45.413 2010-11-10 17:46:45.413 9438438 101 2009-03-03 08:15:47.443 2009-03-03 08:15:47.443 15303158 879 2010-11-10 17:46:45.413 2010-11-10 17:46:45.413 9438439 101 2009-03-03 08:15:47.443 2009-03-03 08:15:47.443 15303161 879 2010-11-10 17:46:45.413 2010-11-10 17:46:45.413 15303160 879 2010-11-10 17:46:45.413 2010-11-10 17:46:45.413 15303163 879 2010-11-10 17:46:45.413 2010-11-10 17:46:45.413 15303162 879 2010-11-10 17:46:45.413 2010-11-10 17:46:45.413 367 365 7 2006-10-18 14:39:02.073 2006-11-17 11:27:47.870 54 3114731 3180196 31 2008-04-10 14:23:20.953 2008-04-10 16:31:03.803 3114628 9798473 9831224 23 2009-03-25 14:42:40.200 2009-05-07 09:24:09.600 9372367 19300615 7 2012-06-18 17:32:24.670 2012-06-18 17:32:24.670 9438414 101 2009-03-03 08:15:47.443 2009-03-03 08:15:47.443 9438415 101 2009-03-03 08:15:47.443 2009-03-03 08:15:47.443 9438413 101 2009-03-03 08:15:47.443 2009-03-03 08:15:47.443 5407229 5374494 9438418 101 2009-03-03 08:15:47.443 2009-03-03 08:15:47.443 9438419 101 2009-03-03 08:15:47.443 2009-03-03 08:15:47.443 9438416 101 2009-03-03 08:15:47.443 2009-03-03 08:15:47.443 9438417 101 2009-03-03 08:15:47.443 2009-03-03 08:15:47.443 16777385 16810147 57 2008-04-10 14:29:08.800 2011-01-05 17:08:09.383 3114634 16777380 16810142 59 2009-03-25 14:42:40.200 2011-02-16 11:06:59.523 9372367 2163013 2195777 4 2007-12-04 19:42:16.417 2007-12-04 19:48:53.650 2163009 2163011 2195775 2 2007-12-04 19:42:16.417 2007-12-04 19:46:37.263 2163009 9372426 9405158 13 2009-03-25 14:42:40.200 2009-03-25 15:26:00.343 9372367 2163012 2195776 3 2007-12-04 19:42:16.417 2007-12-04 19:47:32.337 2163009 2163010 2195774 1 2007-12-04 19:42:16.417 2007-12-04 19:42:16.417 2163009 2163008 2195772 25 2006-10-18 14:39:02.073 2007-12-03 13:11:02.077 54 6259428 6226630 55 2006-10-18 14:39:02.073 2008-10-21 10:17:50.140 54 2162994 2195758 24 2006-10-18 14:39:02.073 2007-11-08 08:43:56.440 54 6259425 6226627 53 2006-10-18 14:39:02.073 2008-10-21 10:12:34.250 54 6259426 6226628 54 2006-10-18 14:39:02.073 2008-10-21 10:16:37.640 54 6259423 6226625 52 2006-10-18 14:39:02.073 2008-10-21 09:55:08.040 54 6259419 6226620 51 2006-10-18 14:39:02.073 2008-07-01 15:14:52.530 54 299 297 4 2006-10-18 14:39:02.073 2006-10-29 21:36:50.837 54 300 298 5 2006-10-18 14:39:02.073 2006-11-17 10:30:17.803 54 301 299 6 2006-10-18 14:39:02.073 2006-11-17 10:41:39.357 54 180 7 2006-10-18 14:39:02.073 2006-10-18 14:39:02.073 9372437 9405168 16 2009-03-25 14:42:40.200 2009-04-01 12:10:19.177 9372367 9372434 9405166 15 2009-03-25 14:42:40.200 2009-04-01 12:08:06.920 9372367 9372433 9405165 14 2009-03-25 14:42:40.200 2009-04-01 11:34:26.877 9372367 9798621 9831363 24 2009-03-25 14:42:40.200 2009-05-13 12:44:10.103 9372367 15630527 15663290 65 2006-10-18 14:39:02.073 2009-11-29 08:08:47.390 54 15630530 15663293 66 2006-10-18 14:39:02.073 2010-12-17 07:24:07.080 54 3604487 1 3114628 2008-04-14 14:41:15.020 2008-04-14 14:41:15.020 3604488 1 3114634 2008-04-14 14:53:15.027 2008-04-14 14:53:15.027 3604489 7 54 2008-04-14 14:54:15.017 2008-04-24 10:58:15.030 9798642 9831382 60 2006-10-18 14:39:02.073 2009-04-20 14:17:25.643 54 9798663 9831402 61 2006-10-18 14:39:02.073 2009-05-21 11:27:14.637 54 3604490 1 3114628 2008-04-14 16:08:15.017 2008-04-14 16:08:15.017 30244930 30277698 25 2008-04-24 11:04:08.070 2011-07-11 15:36:43.590 3637619 30244935 30277703 28 2008-04-24 11:04:08.070 2017-08-17 09:29:48.447 3637619 30244936 30277704 29 2008-04-24 11:04:08.070 2017-08-17 09:39:06.420 3637619 30244937 30277705 30 2008-04-24 11:04:08.070 2017-08-17 09:39:50.817 3637619 30244931 30277699 26 2008-04-24 11:04:08.070 2017-08-17 09:27:40.710 3637619 30244933 30277701 27 2008-04-24 11:04:08.070 2017-08-17 09:28:28.657 3637619 9798691 9831430 25 2009-03-25 14:42:40.200 2009-05-20 12:18:00.723 9372367 10356117 10388843 28 2009-03-25 14:42:40.200 2009-06-17 14:58:53.840 9372367 11042880 54 2009-11-29 08:08:47.377 2009-11-29 08:08:47.377 133 1 11042879 11042879 54 2009-11-29 08:08:47.377 2009-11-30 07:32:42.400 629 2 14516267 14549034 88 2008-04-10 14:06:28.173 2010-06-23 10:25:02.327 3114617 10321976 1 3637619 2009-06-16 09:20:15.067 2009-06-16 09:20:15.067 8519686 3114634 2009-01-06 15:02:09.570 2009-01-06 15:02:09.570 50176 1 10322009 1 54 2009-06-29 11:48:15.083 2009-06-29 11:48:15.083 5374175 5406923 20 2008-04-24 15:58:48.933 2008-06-17 16:47:00.063 3637693 5374172 5406920 19 2008-04-24 15:58:48.933 2008-04-24 16:27:22.253 3637693 19169453 3114617 2012-05-17 14:58:03.087 2012-05-17 14:58:03.087 15020377 1 5374182 5406930 21 2008-04-24 15:58:48.933 2008-06-17 16:47:54.727 3637693 19169452 3114617 2012-05-17 14:57:25.330 2012-05-17 14:57:25.330 13284713 1 15303141 3114628 2010-11-10 17:44:07.803 2010-11-10 17:44:07.803 19169454 3114617 2012-05-17 14:58:26.530 2012-05-17 14:58:26.530 11007186 1 19169455 3114634 2012-05-17 15:10:42.073 2012-05-17 15:10:42.073 6733742 1 15303140 3114628 2010-11-10 17:44:07.803 2010-11-10 17:44:07.803 19169456 3114634 2012-05-17 15:11:08.673 2012-05-17 15:11:08.673 8247283 1 15303143 3114628 2010-11-10 17:44:07.803 2010-11-10 17:44:07.803 19169457 3114634 2012-05-17 15:11:58.700 2012-05-17 15:11:58.700 6269120 1 15303142 3114628 2010-11-10 17:44:07.803 2010-11-10 17:44:07.803 15303145 3114628 2010-11-10 17:44:07.803 2010-11-10 17:44:07.803 15303144 3114628 2010-11-10 17:44:07.803 2010-11-10 17:44:07.803 15303147 3114628 2010-11-10 17:44:07.803 2010-11-10 17:44:07.803 15303146 3114628 2010-11-10 17:44:07.803 2010-11-10 17:44:07.803 15303149 3114628 2010-11-10 17:44:07.803 2010-11-10 17:44:07.803 15303148 3114628 2010-11-10 17:44:07.803 2010-11-10 17:44:07.803 1835035 1867803 73 2007-03-19 09:11:40.007 2007-09-07 16:20:01.827 589826 20086963 20119726 67 2009-03-25 14:42:40.200 2013-01-08 15:39:39.193 9372367 1835033 1867801 71 2007-03-19 09:11:40.007 2007-09-07 16:06:46.887 589826 1835034 1867802 72 2007-03-19 09:11:40.007 2007-09-07 16:14:57.223 589826 1835031 1867799 69 2007-03-19 09:11:40.007 2007-09-07 15:50:18.273 589826 1835032 1867800 70 2007-03-19 09:11:40.007 2007-09-07 15:55:52.393 589826 1835029 1867797 67 2007-03-19 09:11:40.007 2007-09-07 15:34:40.810 589826 1835030 1867798 68 2007-03-19 09:11:40.007 2007-09-07 15:41:49.170 589826 1835027 1867795 65 2007-03-19 09:11:40.007 2007-09-07 14:30:25.850 589826 1835028 1867796 66 2007-03-19 09:11:40.007 2007-09-07 15:11:17.240 589826 1835025 1867793 63 2007-03-19 09:11:40.007 2007-09-07 10:43:50.190 589826 1835026 1867794 64 2007-03-19 09:11:40.007 2007-09-07 10:47:29.460 589826 1835023 1867791 61 2007-03-19 09:11:40.007 2007-09-07 10:41:56.987 589826 1835024 1867792 62 2007-03-19 09:11:40.007 2007-09-07 10:42:46.180 589826 1835021 1867789 59 2007-03-19 09:11:40.007 2007-09-07 09:06:33.967 589826 1835022 1867790 60 2007-03-19 09:11:40.007 2007-09-07 10:39:33.127 589826 1835019 1867787 58 2007-03-19 09:11:40.007 2007-08-08 16:01:33.337 589826 1835070 1867834 21 2006-10-18 14:39:02.073 2007-03-19 08:29:23.190 54 1835071 1867835 22 2006-10-18 14:39:02.073 2007-09-25 15:44:40.297 54 17858828 17891572 24 2008-04-24 11:04:08.070 2008-06-26 11:02:38.030 3637619 103 2 54 2006-11-16 09:30:15.023 2006-11-16 09:30:15.023 102 1 54 2006-11-16 09:30:15.020 2006-11-16 09:30:15.020 589902 622669 53 2007-03-19 09:11:40.007 2007-04-02 16:31:39.007 589826 589900 622667 52 2007-03-19 09:11:40.007 2007-04-02 14:59:55.717 589826 589899 622666 51 2007-03-19 09:11:40.007 2007-04-02 14:45:33.313 589826 120 55 54 2006-11-16 15:32:15.030 2008-04-25 00:32:15.033 109 1 101 2006-11-16 09:33:15.020 2006-11-16 09:33:15.020 111 1 123 2006-11-16 09:35:15.017 2006-11-16 09:35:15.017 589883 622650 35 2007-03-19 09:11:40.007 2007-03-29 20:39:39.953 589826 589884 622651 36 2007-03-19 09:11:40.007 2007-03-30 10:25:36.873 589826 589885 622652 37 2007-03-19 09:11:40.007 2007-03-30 16:21:25.520 589826 589886 622653 38 2007-03-19 09:11:40.007 2007-03-31 08:39:11.160 589826 589887 622654 39 2007-03-19 09:11:40.007 2007-03-31 08:50:24.600 589826 589888 622655 40 2007-03-19 09:11:40.007 2007-03-31 08:57:02.857 589826 19038917 19071679 58 2008-04-10 14:29:08.800 2011-05-12 10:15:21.207 3114634 589889 622656 41 2007-03-19 09:11:40.007 2007-03-31 10:39:49.580 589826 589890 622657 42 2007-03-19 09:11:40.007 2007-03-31 10:52:22.930 589826 589891 622658 43 2007-03-19 09:11:40.007 2007-03-31 15:20:26.343 589826 589892 622659 44 2007-03-19 09:11:40.007 2007-03-31 15:27:13.700 589826 589893 622660 45 2007-03-19 09:11:40.007 2007-03-31 15:45:05.453 589826 589894 622661 46 2007-03-19 09:11:40.007 2007-03-31 15:57:40.087 589826 589895 622662 47 2007-03-19 09:11:40.007 2007-03-31 20:41:26.287 589826 589896 622663 48 2007-03-19 09:11:40.007 2007-04-02 14:11:26.297 589826 19038908 19071670 90 2008-04-10 14:06:28.173 2011-08-10 10:56:13.013 3114617 589897 622664 49 2007-03-19 09:11:40.007 2007-04-02 14:25:14.477 589826 19038909 19071671 91 2008-04-10 14:06:28.173 2012-05-17 15:03:21.507 3114617 589898 622665 50 2007-03-19 09:11:40.007 2007-04-02 14:29:01.617 589826 19038910 19071672 92 2008-04-10 14:06:28.173 2012-05-17 15:04:14.570 3114617 589868 622635 28 2007-03-19 09:11:40.007 2007-03-23 16:16:21.123 589826 20087102 20119862 69 2009-03-25 14:42:40.200 2013-02-27 12:46:43.690 9372367 589867 622634 27 2007-03-19 09:11:40.007 2007-03-23 16:11:07.377 589826 146 27 54 2006-11-17 11:27:15.030 2008-04-14 17:27:15.060 589870 622637 30 2007-03-19 09:11:40.007 2007-03-23 16:58:40.950 589826 589869 622636 29 2007-03-19 09:11:40.007 2007-03-23 16:46:24.540 589826 10912259 10945014 35 2009-03-25 14:42:40.200 2009-12-30 14:29:47.987 9372367 11239426 11272194 37 2009-03-25 14:42:40.200 2010-01-06 11:54:20.943 9372367 10912257 10945012 34 2009-03-25 14:42:40.200 2009-11-25 10:21:01.093 9372367 589880 622647 32 2007-03-19 09:11:40.007 2007-03-29 15:26:54.327 589826 145 2 54 2006-11-17 10:31:15.017 2006-11-17 10:42:15.017 589879 622646 31 2007-03-19 09:11:40.007 2007-03-23 20:45:49.267 589826 589882 622649 34 2007-03-19 09:11:40.007 2007-03-29 15:36:01.897 589826 589881 622648 33 2007-03-19 09:11:40.007 2007-03-29 15:34:41.253 589826 589857 622624 17 2007-03-19 09:11:40.007 2007-03-23 15:01:47.133 589826 589858 622625 18 2007-03-19 09:11:40.007 2007-03-23 15:12:47.003 589826 589855 622622 15 2007-03-19 09:11:40.007 2007-03-23 13:41:04.653 589826 589856 622623 16 2007-03-19 09:11:40.007 2007-03-23 14:08:16.667 589826 589853 622620 13 2007-03-19 09:11:40.007 2007-03-23 13:34:17.910 589826 589854 622621 14 2007-03-19 09:11:40.007 2007-03-23 13:36:58.737 589826 589851 622618 11 2007-03-19 09:11:40.007 2007-03-23 13:30:15.683 589826 589852 622619 12 2007-03-19 09:11:40.007 2007-03-23 13:32:19.780 589826 20087064 20119825 68 2009-03-25 14:42:40.200 2013-02-20 12:34:33.017 9372367 589865 622632 25 2007-03-19 09:11:40.007 2007-03-23 15:49:03.800 589826 589866 622633 26 2007-03-19 09:11:40.007 2007-03-23 15:52:54.823 589826 589863 622630 23 2007-03-19 09:11:40.007 2007-03-23 15:43:19.370 589826 589864 622631 24 2007-03-19 09:11:40.007 2007-03-23 15:47:47.577 589826 589861 622628 21 2007-03-19 09:11:40.007 2007-03-23 15:20:28.703 589826 589862 622629 22 2007-03-19 09:11:40.007 2007-03-23 15:39:53.963 589826 589859 622626 19 2007-03-19 09:11:40.007 2007-03-23 15:13:51.697 589826 589860 622627 20 2007-03-19 09:11:40.007 2007-03-23 15:15:54.647 589826 589838 622606 5 2007-03-19 09:11:40.007 2007-03-19 11:13:47.773 589826 589837 622605 4 2007-03-19 09:11:40.007 2007-03-19 11:07:50.810 589826 589836 622604 3 2007-03-19 09:11:40.007 2007-03-19 10:49:12.330 589826 589835 622603 2 2007-03-19 09:11:40.007 2007-03-19 09:28:47.687 589826 589850 622617 10 2007-03-19 09:11:40.007 2007-03-23 10:22:01.023 589826 47 15 101 2006-11-09 09:45:15.037 2008-01-24 08:36:15.047 589849 622616 9 2007-03-19 09:11:40.007 2007-03-23 09:30:44.497 589826 589848 622615 8 2007-03-19 09:11:40.007 2007-03-23 09:29:02.923 589826 49 1 101 2006-11-09 16:01:15.030 2006-11-09 16:01:15.030 589847 622614 7 2007-03-19 09:11:40.007 2007-03-23 09:04:39.530 589826 589846 622613 6 2007-03-19 09:11:40.007 2007-03-19 11:26:29.923 589826 10912351 10945098 36 2009-03-25 14:42:40.200 2009-12-30 14:31:05.797 9372367 5374196 5406943 53 2008-04-10 14:23:20.953 2008-06-17 16:55:50.843 3114628 589825 622593 20 2006-10-18 14:39:02.073 2007-02-14 09:09:42.577 54 19038858 19071620 63 2009-03-25 14:42:40.200 2012-04-18 13:58:02.860 9372367 589827 622595 1 2007-03-19 09:11:40.007 2007-03-19 09:11:40.007 589826 5374194 5406941 52 2008-04-10 14:23:20.953 2008-04-24 16:20:18.793 3114628 27133545 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 27066624 27099387 71 2009-03-25 14:42:40.200 2014-06-04 12:48:27.077 9372367 27133544 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 27133547 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 27133546 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 27133541 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 27133543 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 27133542 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 27133553 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 27133552 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 27133555 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 27133554 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 27133549 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 27133548 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 27133551 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 27133550 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 27133567 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 3277251 6 54 2008-04-10 14:44:15.017 2008-04-24 11:37:15.030 27133566 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 3277250 3 3114628 2008-04-10 14:43:15.030 2008-04-10 15:50:15.030 27133565 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 3277253 1 54 2008-04-10 15:15:15.020 2008-04-10 15:15:15.020 27133564 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 3277252 2 54 2008-04-10 15:14:15.030 2008-04-10 15:14:15.030 27133571 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 27133570 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 27133569 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 27133568 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 27133559 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 3277243 2 3114628 2008-04-10 14:26:15.030 2008-04-24 15:52:15.023 27133558 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 3277242 52 3114628 2008-04-10 14:25:15.027 2008-04-24 16:21:15.027 3277245 17 3114634 2008-04-10 14:33:15.030 2008-04-14 16:10:15.027 27133557 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 3277244 1 3114634 2008-04-10 14:29:15.027 2008-04-10 14:29:15.027 27133556 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 27133563 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 3277247 2 54 2008-04-10 14:42:15.017 2008-04-24 15:50:15.037 19041213 19073904 65 2009-03-25 14:42:40.200 2012-08-01 13:05:51.560 9372367 27133562 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 3277246 2 54 2008-04-10 14:34:15.020 2008-04-10 14:35:15.033 27133561 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 3277249 31 3114628 2008-04-10 14:42:15.023 2008-04-25 00:32:15.097 3277248 16 3114634 2008-04-10 14:42:15.017 2008-04-24 11:36:15.017 27133560 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 27133582 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133583 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133580 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133581 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133586 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133587 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133584 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 3637831 3670581 49 2006-10-18 14:39:02.073 2008-04-14 17:26:33.630 54 27133585 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133574 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 27133575 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 27133572 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 27133573 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 5767186 3114634 2008-07-16 13:33:18.120 2008-07-16 13:33:18.120 1559281 1 27133578 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 27133579 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 27133576 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 27133577 9372367 2015-01-14 16:09:56.040 2015-01-14 16:09:56.040 248 1 120 2007-01-29 16:24:15.020 2007-01-29 16:24:15.020 27133597 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133596 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133599 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133598 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133601 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133600 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133603 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133602 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133589 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133588 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 18252553 18285304 61 2009-03-25 14:42:40.200 2011-06-01 11:50:32.077 9372367 27133591 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133590 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133593 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133592 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133595 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133594 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133612 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 3277236 8 3114617 2008-04-10 14:12:15.030 2008-04-24 15:50:15.020 27133613 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 3277237 1 879 2008-04-10 14:14:15.020 2008-04-10 14:14:15.020 27133614 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 3277234 4 3114617 2008-04-10 14:07:15.023 2008-04-24 15:50:15.037 27133615 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 3277235 2 3114617 2008-04-10 14:07:15.027 2008-04-10 14:07:15.027 27133616 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 3277240 1 879 2008-04-10 14:22:15.027 2008-04-10 14:22:15.027 27133617 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 3277241 1 3114628 2008-04-10 14:24:15.027 2008-04-10 14:24:15.027 27133618 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 3277238 1 54 2008-04-10 14:22:15.020 2008-04-10 14:22:15.020 27133619 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 3277239 1 879 2008-04-10 14:22:15.023 2008-04-10 14:22:15.023 27133604 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133605 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 3277229 18 879 2008-04-10 13:14:15.123 2008-04-24 15:50:15.053 27133606 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133607 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133608 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 3277232 6 54 2008-04-10 14:05:15.063 2008-04-24 10:59:15.020 27133609 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 3277233 1 3114617 2008-04-10 14:07:15.020 2008-04-10 14:07:15.020 27133610 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133611 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133635 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133634 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133633 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133632 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 161 8 54 2006-11-20 09:08:15.027 2008-04-24 12:36:15.017 27133631 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133630 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133629 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133628 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133627 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133626 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133625 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133624 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133623 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133622 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133621 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133620 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133650 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133651 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133648 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133649 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133646 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133647 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133644 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133645 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133642 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133643 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133640 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133641 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133638 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133639 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133636 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133637 9372367 2015-01-14 16:09:56.043 2015-01-14 16:09:56.043 27133661 9372367 2015-01-14 16:09:56.047 2015-01-14 16:09:56.047 27133660 9372367 2015-01-14 16:09:56.047 2015-01-14 16:09:56.047 27133662 9372367 2015-01-14 16:09:56.047 2015-01-14 16:09:56.047 4882508 7 2008-06-03 12:48:09.770 2008-06-03 12:48:09.770 27133657 9372367 2015-01-14 16:09:56.047 2015-01-14 16:09:56.047 4882509 7 2008-06-03 12:48:21.707 2008-06-03 12:48:21.707 27133656 9372367 2015-01-14 16:09:56.047 2015-01-14 16:09:56.047 4882510 7 2008-06-03 12:48:21.707 2008-06-03 12:48:21.707 27133659 9372367 2015-01-14 16:09:56.047 2015-01-14 16:09:56.047 4882511 7 2008-06-03 12:48:21.707 2008-06-03 12:48:21.707 27133658 9372367 2015-01-14 16:09:56.047 2015-01-14 16:09:56.047 4882512 7 2008-06-03 12:48:21.707 2008-06-03 12:48:21.707 27133653 9372367 2015-01-14 16:09:56.047 2015-01-14 16:09:56.047 4882513 7 2008-06-03 12:48:21.710 2008-06-03 12:48:21.710 27133652 9372367 2015-01-14 16:09:56.047 2015-01-14 16:09:56.047 27133655 9372367 2015-01-14 16:09:56.047 2015-01-14 16:09:56.047 27133654 9372367 2015-01-14 16:09:56.047 2015-01-14 16:09:56.047 13697139 13664387 13697135 13664383 13697136 13664384 13697137 13664385 13697138 13664386 13697133 13664381 13697134 13664382 9831382 9798642 9831363 9798621 9831402 9798663 30277701 30244933 30277699 30244931 30277705 30244937 30277703 30244935 30277704 30244936 9831224 9798473 2195758 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN{code}{warning} h3. Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] See [SVN at MBARI] for more details.]]> 2162994 30277698 30244930 2195777 {code}]]> 2163013 2195775 {code}]]> 2163011 2195776 {code}]]> 2163012 2195774 2163010 2195772 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN{code}{warning} h3. Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] See [SVN at MBARI] for more details.]]> 2163008 3180104 3114639 3180105 3114640 3180106 3114641 3180101 3114636 3180102 3114637 9831058 9798305 3180111 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN {code}{warning} \\ h3. Concurrent Versioning System CVS (Concurrent Versioning System) is an open source software tool used by software developers to manage code changes within their source code tree.  This source code versioning system is the predecessor of Subversion (see below) and applies stricter security access when editing MBARI project files.  Similar to Subversion, CVS enables programmers to store current and all previous records of code changes (along with those who made the changes) over the existense of the code.  Access to projects on the CVS respository at MBARI, however, also requires a pre-set individual passwords for all users in order to make changes to the code.  Without access permission, users may only view and download code - not upload it into the repository to make changes.  Access is given to users who are part of that project's group on CVS.  To gain a password or access to edit a project requires notification to the server administrator:  Karen Salamy (salamy@mbari.org). In addition to acquiring a password from the server administrator, you must also install a CVS software client.  There are multiple CVS clients for most major operating systems including WinCVS (Windows), MacCVS (Macs), and gcvs (Linux).  The CVS repository may also be accessed using the command line with the following syntax . The most common CVS client at MBARI isAdditional information on these clients can be found at [http://cvsgui.sourceforge.net/. ]; Detailed documentation on using CVS can be found at [http://ximbiot.com/cvs/manual/]. h3.    h3. Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] See [SVN at MBARI] for more details. h3. Java Security Certificate If you intend to distribute java applications via Java Web Start, you will need to _sign_ your jar files. Details about how to do this can be found at [Java Signing at MBARI]]]> 3114646 3180113 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN {code}{warning} \\ \\ h3. Concurrent Versioning System CVS (Concurrent Versioning System) is an open source software tool used by software developers to manage code changes within their source code tree.  This source code versioning system is the predecessor of Subversion (see below) and applies stricter security access when editing MBARI project files.  Similar to Subversion, CVS enables programmers to store current and all previous records of code changes (along with those who made the changes) over the existense of the code.  Access to projects on the CVS respository at MBARI, however, also requires a pre-set individual passwords for all users in order to make changes to the code.  Without access permission, users may only view and download code - not upload it into the repository to make changes.  Access is given to users who are part of that project's group on CVS.  To gain a password or access to edit a project requires notification to the server administrator:  Karen Salamy (salamy@mbari.org). In addition to acquiring a password from the server administrator, you must also install a CVS software client.  There are multiple CVS clients for most major operating systems including WinCVS (Windows), MacCVS (Macs), and gcvs (Linux).  The CVS repository may also be accessed using the command line with the following syntax [CVS command Line Reference|^CVS-commandline-reference.pdf]. The most common CVS client at MBARI is WinCVS (version 1.2) Additional information on these clients can be found at [http://cvsgui.sourceforge.net/. ]; Detailed documentation on using CVS can be found at [http://ximbiot.com/cvs/manual/]. h3.    h3. Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] See [SVN at MBARI] for more details. h3. Java Security Certificate If you intend to distribute java applications via Java Web Start, you will need to _sign_ your jar files. Details about how to do this can be found at [Java Signing at MBARI]]]> 3114648 3180108 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN{code}{warning} h3. Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] See [SVN at MBARI] for more details. h3. Java Security Certificate If you intend to distribute java applications via Java Web Start, you will need to _sign_ your jar files. Details about how to do this can be found at [Java Signing at MBARI] ]]> 3114643 3180110 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN {code}{warning} h3. Concurrent Versioning System h3.   h3.    h3. Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] See [SVN at MBARI] for more details. h3. Java Security Certificate If you intend to distribute java applications via Java Web Start, you will need to _sign_ your jar files. Details about how to do this can be found at [Java Signing at MBARI]]]> 3114645 3180120 3114655 3180122 3114657 3180116 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN {code}{warning} \\ \\ \\ \\ h3. Concurrent Versioning System CVS (Concurrent Versioning System) is an open source software tool used by software developers to manage code changes within their source code tree.  This source code versioning system is the predecessor of Subversion (see below) and applies stricter security access when editing MBARI project files.  Similar to Subversion, CVS enables programmers to store current and all previous records of code changes (along with those who made the changes) over the existense of the code.  Access to projects on the CVS respository at MBARI, however, also requires a pre-set individual passwords for all users in order to make changes to the code.  Without access permission, users may only view and download code - not upload it into the repository to make changes.  Access is given to users who are part of that project's group on CVS.  To gain a password or access to edit a project requires notification to the server administrator:  Karen Salamy (salamy@mbari.org). In addition to acquiring a password from the server administrator, you must also install a CVS software client.  There are multiple CVS clients for most major operating systems including WinCVS (Windows), MacCVS (Macs), and gcvs (Linux).  The CVS repository may also be accessed using the command line with the following syntax [CVS command Line Reference|^CVS-commandline-reference.pdf]. The most common CVS client at MBARI is WinCVS (version 1.2) which is a stable Windows version release. Additional information on these clients can be found at [http://cvsgui.sourceforge.net/. ]; Detailed documentation on using CVS can be found at [http://ximbiot.com/cvs/manual/]. See [CVS at MBARI|CLT:CVS at MBARI] for more details. h3.  Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] See [SVN at MBARI] for more details. h3. Java Security Certificate If you intend to distribute java applications via Java Web Start, you will need to _sign_ your jar files. Details about how to do this can be found at [Java Signing at MBARI]]]> 3114651 3180115 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN {code}{warning} \\ \\ \\ h3. Concurrent Versioning System CVS (Concurrent Versioning System) is an open source software tool used by software developers to manage code changes within their source code tree.  This source code versioning system is the predecessor of Subversion (see below) and applies stricter security access when editing MBARI project files.  Similar to Subversion, CVS enables programmers to store current and all previous records of code changes (along with those who made the changes) over the existense of the code.  Access to projects on the CVS respository at MBARI, however, also requires a pre-set individual passwords for all users in order to make changes to the code.  Without access permission, users may only view and download code - not upload it into the repository to make changes.  Access is given to users who are part of that project's group on CVS.  To gain a password or access to edit a project requires notification to the server administrator:  Karen Salamy (salamy@mbari.org). In addition to acquiring a password from the server administrator, you must also install a CVS software client.  There are multiple CVS clients for most major operating systems including WinCVS (Windows), MacCVS (Macs), and gcvs (Linux).  The CVS repository may also be accessed using the command line with the following syntax [CVS command Line Reference|^CVS-commandline-reference.pdf]. The most common CVS client at MBARI is WinCVS (version 1.2) which is a stable release. Additional information on these clients can be found at [http://cvsgui.sourceforge.net/. ]; Detailed documentation on using CVS can be found at [http://ximbiot.com/cvs/manual/]. h3.    h3. Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] See [SVN at MBARI] for more details. h3. Java Security Certificate If you intend to distribute java applications via Java Web Start, you will need to _sign_ your jar files. Details about how to do this can be found at [Java Signing at MBARI]]]> 3114650 3180118 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN {code}{warning} \\ \\ h3. Concurrent Versioning System CVS (Concurrent Versioning System) is an open source software tool used by software developers to manage code changes within their source code tree.  This source code versioning system is the predecessor of Subversion (see below) and applies stricter security access when editing MBARI project files.  Similar to Subversion, CVS enables programmers to store current and all previous records of code changes (along with those who made the changes) over the existense of the code.  Access to projects on the CVS respository at MBARI, however, also requires a pre-set individual passwords for all users in order to make changes to the code.  Without access permission, users may only view and download code - not upload it into the repository to make changes.  Access is given to users who are part of that project's group on CVS.  To gain a password or access to edit a project requires notification to the server administrator:  Karen Salamy (salamy@mbari.org). In addition to acquiring a password from the server administrator, you must also install a CVS software client.  There are multiple CVS clients for most major operating systems including WinCVS (Windows), MacCVS (Macs), and gcvs (Linux).  The CVS repository may also be accessed using the command line with the following syntax [CVS command Line Reference|^CVS-commandline-reference.pdf]. The most common CVS client at MBARI is WinCVS (version 1.2) which is a stable Windows version release. Additional information on these clients can be found at [http://cvsgui.sourceforge.net/. ]; Detailed documentation on using CVS can be found at [http://ximbiot.com/cvs/manual/]. See [CVS at MBARI|CLT:CVS at MBARI] for more details. \\   h3.  Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] See [SVN at MBARI] for more details. h3. Java Security Certificate If you intend to distribute java applications via Java Web Start, you will need to _sign_ your jar files. Details about how to do this can be found at [Java Signing at MBARI]]]> 3114653 3180117 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN {code}{warning} \\ \\ \\ h3. Concurrent Versioning System CVS (Concurrent Versioning System) is an open source software tool used by software developers to manage code changes within their source code tree.  This source code versioning system is the predecessor of Subversion (see below) and applies stricter security access when editing MBARI project files.  Similar to Subversion, CVS enables programmers to store current and all previous records of code changes (along with those who made the changes) over the existense of the code.  Access to projects on the CVS respository at MBARI, however, also requires a pre-set individual passwords for all users in order to make changes to the code.  Without access permission, users may only view and download code - not upload it into the repository to make changes.  Access is given to users who are part of that project's group on CVS.  To gain a password or access to edit a project requires notification to the server administrator:  Karen Salamy (salamy@mbari.org). In addition to acquiring a password from the server administrator, you must also install a CVS software client.  There are multiple CVS clients for most major operating systems including WinCVS (Windows), MacCVS (Macs), and gcvs (Linux).  The CVS repository may also be accessed using the command line with the following syntax [CVS command Line Reference|^CVS-commandline-reference.pdf]. The most common CVS client at MBARI is WinCVS (version 1.2) which is a stable Windows version release. Additional information on these clients can be found at [http://cvsgui.sourceforge.net/. ]; Detailed documentation on using CVS can be found at [http://ximbiot.com/cvs/manual/]. See [CVS at MBARI|CLT:CVS at MBARI] for more details.\\ h3.  Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] See [SVN at MBARI] for more details. h3. Java Security Certificate If you intend to distribute java applications via Java Web Start, you will need to _sign_ your jar files. Details about how to do this can be found at [Java Signing at MBARI]]]> 3114652 3180128 3114663 3180127 3114662 3180130 3114665 3180124 3114659 3180123 3114658 3180126 3114661 13959465 13926703 3180137 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN {code}{warning} \\ \\ \\ h3. Concurrent Versioning System CVS (Concurrent Versioning System) is an open source software tool used by software developers to manage code changes within their source code tree.  This source code versioning system is the predecessor of Subversion (see below) and applies stricter security access when editing MBARI project files.  Similar to Subversion, CVS enables programmers to store current and all previous records of code changes (along with those who made the changes) over the existense of the code.  Access to projects on the CVS respository at MBARI, however, also requires a pre-set individual passwords for all users in order to make changes to the code.  Without access permission, users may only view and download code - not upload it into the repository to make changes.  Access is given to users who are part of that project's group on CVS.  To gain a password or access to edit a project requires notification to the server administrator:  Karen Salamy (salamy@mbari.org). In addition to acquiring a password from the server administrator, you must also install a CVS software client.  There are multiple CVS clients for most major operating systems including WinCVS (Windows), MacCVS (Macs), and gcvs (Linux).  The CVS repository may also be accessed using the command line with the following syntax [CVS command Line Reference|^CVS-commandline-reference.pdf]. The most common CVS client at MBARI is WinCVS (version 1.2) which is a stable Windows version release. Additional information on these clients can be found at [http://cvsgui.sourceforge.net/. ]; Detailed documentation on using CVS can be found at [http://ximbiot.com/cvs/manual/]. See [CVS at MBARI|CLT:CVS at MBARI] for more details. \\   h3. Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] See [SVN at MBARI] for more details. h3. Java Security Certificate If you intend to distribute java applications via Java Web Start, you will need to _sign_ your jar files. Details about how to do this can be found at [Java Signing at MBARI]]]> 3114672 3180138 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN {code}{warning} \\ \\ \\ \\ h3. Concurrent Versioning System CVS (Concurrent Versioning System) is an open source software tool used by software developers to manage code changes within their source code tree.  This source code versioning system is the predecessor of Subversion (see below) and applies stricter security access when editing MBARI project files.  Similar to Subversion, CVS enables programmers to store current and all previous records of code changes (along with those who made the changes) over the existense of the code.  Access to projects on the CVS respository at MBARI, however, also requires a pre-set individual passwords for all users in order to make changes to the code.  Without access permission, users may only view and download code - not upload it into the repository to make changes.  Access is given to users who are part of that project's group on CVS.  To gain a password or access to edit a project requires notification to the server administrator:  Karen Salamy (salamy@mbari.org). In addition to acquiring a password from the server administrator, you must also install a CVS software client.  There are multiple CVS clients for most major operating systems including WinCVS (Windows), MacCVS (Macs), and gcvs (Linux).  The CVS repository may also be accessed using the command line with the following syntax [CVS command Line Reference|^CVS-commandline-reference.pdf]. The most common CVS client at MBARI is WinCVS (version 1.2) which is a stable Windows version release. Additional information on these clients can be found at [http://cvsgui.sourceforge.net/. ]; Detailed documentation on using CVS can be found at [http://ximbiot.com/cvs/manual/].  The CVS repository may also simply be "viewed" from a web browser for any users who wish to look at its existing source code tree structure at http://moonjelly.shore.mbari.org/cgi-bin/cvsweb.cgi/ . See [CVS at MBARI|CLT:CVS at MBARI] for more details. \\   h3. Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] See [SVN at MBARI] for more details. h3. Java Security Certificate If you intend to distribute java applications via Java Web Start, you will need to _sign_ your jar files. Details about how to do this can be found at [Java Signing at MBARI]]]> 3114673 3180135 3114670 3180133 3114668 3180134 3114669 3180132 CVS Source Code Repository.doc -PASSWORD REQUIRED] \\  ]]> 3114667 3180145 3114680 3180146 3114681 3180144 3114679 3180141 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN {code}{warning} \\ \\ \\ \\ \\ \\ \\ h3. Concurrent Versioning System CVS (Concurrent Versioning System) is an open source software tool used by software developers to manage code changes within their source code tree.  This source code versioning system is the predecessor of Subversion (see below) and applies stricter security access when editing MBARI project files.  Similar to Subversion, CVS enables programmers to store current and all previous records of code changes (along with those who made the changes) over the existense of the code.  Access to projects on the CVS respository at MBARI, however, also requires a pre-set individual passwords for all users in order to make changes to the code.  Without access permission, users may only view and download code - not upload it into the repository to make changes.  Access is given to users who are part of that project's group on CVS.  To gain a password or access to edit a project requires notification to the server administrator:  Karen Salamy (salamy@mbari.org). In addition to acquiring a password from the server administrator, you must also install a CVS software client.  There are multiple CVS clients for most major operating systems including WinCVS (Windows), MacCVS (Macs), and gcvs (Linux).  The CVS repository may also be accessed using the command line with the following syntax [CVS command Line Reference|^CVS-commandline-reference.pdf]. The most common CVS client at MBARI is WinCVS (version 1.2) which is a stable Windows version release. Additional information on these clients can be found at [http://cvsgui.sourceforge.net/. ]; Detailed documentation on using CVS can be found at [http://ximbiot.com/cvs/manual/].  The CVS repository may also simply be "viewed" from a web browser for any users who wish to look at its existing source code tree structure at [http://moonjelly.shore.mbari.org/cgi-bin/cvsweb.cgi/]. See [CVS at MBARI|CLT:CVS at MBARI] for more details. \\   h3. Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] See [SVN at MBARI] for more details. h3. Java Security Certificate If you intend to distribute java applications via Java Web Start, you will need to _sign_ your jar files. Details about how to do this can be found at [Java Signing at MBARI]]]> 3114676 13959470 13926708 13959467 13926705 3180139 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN {code}{warning} \\ \\ \\ \\ \\ h3. Concurrent Versioning System CVS (Concurrent Versioning System) is an open source software tool used by software developers to manage code changes within their source code tree.  This source code versioning system is the predecessor of Subversion (see below) and applies stricter security access when editing MBARI project files.  Similar to Subversion, CVS enables programmers to store current and all previous records of code changes (along with those who made the changes) over the existense of the code.  Access to projects on the CVS respository at MBARI, however, also requires a pre-set individual passwords for all users in order to make changes to the code.  Without access permission, users may only view and download code - not upload it into the repository to make changes.  Access is given to users who are part of that project's group on CVS.  To gain a password or access to edit a project requires notification to the server administrator:  Karen Salamy (salamy@mbari.org). In addition to acquiring a password from the server administrator, you must also install a CVS software client.  There are multiple CVS clients for most major operating systems including WinCVS (Windows), MacCVS (Macs), and gcvs (Linux).  The CVS repository may also be accessed using the command line with the following syntax [CVS command Line Reference|^CVS-commandline-reference.pdf]. The most common CVS client at MBARI is WinCVS (version 1.2) which is a stable Windows version release. Additional information on these clients can be found at [http://cvsgui.sourceforge.net/. ]; Detailed documentation on using CVS can be found at [http://ximbiot.com/cvs/manual/].  The CVS repository may also simply be "viewed" from a web browser for any users who wish to look at its existing source code tree structure at [http://moonjelly.shore.mbari.org/cgi-bin/cvsweb.cgi/]. See [CVS at MBARI|CLT:CVS at MBARI] for more details. \\   h3. Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] See [SVN at MBARI] for more details. h3. Java Security Certificate If you intend to distribute java applications via Java Web Start, you will need to _sign_ your jar files. Details about how to do this can be found at [Java Signing at MBARI]]]> 3114674 3180140 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN {code}{warning} \\ \\ \\ \\ \\ \\ h3. Concurrent Versioning System CVS (Concurrent Versioning System) is an open source software tool used by software developers to manage code changes within their source code tree.  This source code versioning system is the predecessor of Subversion (see below) and applies stricter security access when editing MBARI project files.  Similar to Subversion, CVS enables programmers to store current and all previous records of code changes (along with those who made the changes) over the existense of the code.  Access to projects on the CVS respository at MBARI, however, also requires a pre-set individual passwords for all users in order to make changes to the code.  Without access permission, users may only view and download code - not upload it into the repository to make changes.  Access is given to users who are part of that project's group on CVS.  To gain a password or access to edit a project requires notification to the server administrator:  Karen Salamy (salamy@mbari.org). In addition to acquiring a password from the server administrator, you must also install a CVS software client.  There are multiple CVS clients for most major operating systems including WinCVS (Windows), MacCVS (Macs), and gcvs (Linux).  The CVS repository may also be accessed using the command line with the following syntax [CVS command Line Reference|^CVS-commandline-reference.pdf]. The most common CVS client at MBARI is WinCVS (version 1.2) which is a stable Windows version release. Additional information on these clients can be found at [http://cvsgui.sourceforge.net/. ]; Detailed documentation on using CVS can be found at [http://ximbiot.com/cvs/manual/].  The CVS repository may also simply be "viewed" from a web browser for any users who wish to look at its existing source code tree structure at [http://moonjelly.shore.mbari.org/cgi-bin/cvsweb.cgi/]. See [CVS at MBARI|CLT:CVS at MBARI] for more details. \\   h3. Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] See [SVN at MBARI] for more details. h3. Java Security Certificate If you intend to distribute java applications via Java Web Start, you will need to _sign_ your jar files. Details about how to do this can be found at [Java Signing at MBARI]]]> 3114675 10616836 2009-06-18 08:02:50.960 2009-06-18 08:02:50.960 3180151 3114686 3180150 3114685 10616833 2009-06-15 18:36:11.810 2009-08-03 09:14:02.967 3180147 3114682 3180162 3114697 3180160 3114695 3180158 3114693 19073904 19041213 2195617 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) {note:title=Test Machine Installation Difference} Fedora core 7 had 5.2.2 installed {note} # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 {note:title=Test Machine Installation Difference} I named the directory alfresco-2.1 {note} # I then moved the tar into the alfresco-2.0 directory {note:title=Test Machine Installation Difference} alfreso-2.1 directory {note} # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} {note:title=Test Machine Installation Difference} This was a bit different in FC7. In order to get Xvfb installed I used "Add/Remove Software" to install it. OpenOffice was already installed so I just had to find the soffice command location. The command to get Xvfb running was also a bit different. I had to create a ascii file called /etc/xvfb-auth.cfg that only had one line in it that read 'localhost'. Then the command to start Xvfb was 'Xvfb :1 -auth /etc/xvfb-auth.cfg'. Then I could start soffice the same way. I changed the start_oo.sh file to reflect those commands. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} {note:title=Test Machine Installation Difference} Did not do this {note} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data {note:title=Test Machine Installation Difference} /data/alfresco-2.1 {note} ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml {note:title=Test Machine Installation Difference} This file already existed and was no different from the sample, so I skipped this step {note} ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: {note:title=Test Machine Installation Difference} This file already existed and so copied the original to custom-repository.properties.orig and edited the existing one. {note} ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) {note:title=Test Machine Installation Difference} I changed them to work with the MS SQL Server login so they looked like: db.username=DB_Collaboration db.password=******** db.pool.initial=10 db.pool.max=100 {note} ### I commented out the two HSQL connection lines ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' {note:title=Test Machine Installation Difference} Left the MySQL lines commented out, but uncommented the SQLServer lines and changed them to db.driver=net.sourceforge.jtds.jdbc.Driver db.url=jdbc:jtds:sqlserver://solstice.shore.mbari.org/Alfresco;domain=SHORE;user=DB_Collaboration;password=****** {note} ### I also added the following lines at the end of the file to connect up to the external mail server {noformat} # # The external email server properties # mail.host=mail.shore.mbari.org mail.port=25 mail.username= mail.password= {noformat} ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties {note:title=Test Machine Installation Difference} Already existed, so backuped up to .orig and edited to comment out the HSQL and uncomment the SQLServer one. {note} ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line {note:title=Test Machine Installation Difference} The downloaded alfresco already has the MySQL driver jar in the install, but since I am using SQLServer, I downloaded the jtds driver from the internet and installed the jtds-X.X.X.jar file in the /opt/alfresco-2.1/tomcat/common/lib to make it available to alfresco. {note} # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0. I also added the following line after the line that stated 'killall soffice.bin': killall Xvfb. That ensured the Xvfb process was killed when alfresco was shutdown. {note:title=Test Machine Installation Difference} Set it to /opt/alfresco-2.1/tomcat for the test machine {note} {tip} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {tip} {note:title=Test Machine Installation Difference} For the test machine, I wasn't too worried about details, so I skipped the next 15 or so steps (picks up again at configuring for MBARI LDAP below. {note} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {tip} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {tip} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.255.255 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # OK, this is a total HACK and needed to be done due to the wonderful world of open source. In Internet Explorer with SSL turned on, you would get a dialog pop-up that stated the secure server was trying to serve non-secure content. This was due to the Alfresco Community logo being served from http://www.alfresco.com. Only IE did this and you can work around it on the client end by doing the following: ## Startup IE. ## Go to Tools->Internet Options ... ## Click on Security tab ## Click on "Trusted Sites" zone ## Click on Sites button ## Make sure check box for "Require Server verification (https:) for all sites in this zone" is unchecked 7. Type in "http://www.alfresco.com" into the "Add this website to the zone:" text field and click Add. ## Click on close ## Make sure "Trusted Sites" is still selected. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on the "Local Intranet" zone. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on OK to close Internet Options dialog. # Now there are a couple of reasons why this is bad, but the main one is that if you are trying to reach this from outside the firewall, you will have to change those settings for the Internet Zone (I think) which is bad. Plus every user will have to do this. To get around this, I had to: ## Take [this|^alfresco_community_horiz20.gif] logo image and save it to ./images/logo directory. ## This next step can either be very easy or very complicated. You can try downloading [this|^a0.jar] jar file and copying it to ./WEB-INF/lib. If when you start up Alfresco you get some exceptions that look like they are related to a class called PageTag, you will have to do it the hard way: ### Now you have to actually check out the subversion source code from Alfresco. I am assuming you know how to do that. By the way, you will need ant and java installed to do this. The SVN URL for the repository is svn://www.alfresco.org/alfresco. ### Once it is checked out find the PageTag.java file (should be in HEAD/root/projects/web-client/source/java/org/alfresco/web/ui/repo/tag directory) and edit: #### Change the line {noformat} private final static String ALF_LOGO = "http://www.alfresco.com/images/alfresco_community_horiz20.gif"; {noformat} to: {noformat} private final static String ALF_LOGO = "/alfresco/images/logo/alfresco_community_horiz20.gif"; {noformat} ### Save the file. {warning} If you run this next step on the machine where the application is installed and have a TOMCAT_HOME environment variable defined, it will try to deploy everything to your Tomcat installation. The best thing to do is build this on a separate machine. {warning} ### Open a command prompt in the HEAD/root directory and type "ant build-tomcat". After a long wait, the build will actually fail if you don't have a TOMCAT_HOME defined in your environment. ### Once the build has failed you will need to create a new jar file called a0.jar with only the PageTag.class file in it. ### Copy the a0.jar file to the ./WEB-INF/lib directory. # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {tip} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {tip} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## We wanted to be able to make sure we could have collaborator accounts that were not MBARI LDAP accounts so that we could have Alfresco users that had not permissions at all on the MBARI network. In order to do this, I used the Alfresco native user service and chained the authentication together with the MBARI LDAP. In order to do this, I copied the chaining-authentication-context.xml.sample to chaining-authentication-context.xml. I then edited the file to make the appropriate changes (I have also attached the changed config file here for downloading): ### The first change was to the first bean declaration's id from *authenticationServiceImpl* to *authenticationService*. ### In the same bean declaration, I changed the first authentication services reference from *authenticationServiceImplJAAS* to *authenticationServiceImplLDAP* ### I then changed the JAAS bean declaration to point to the ldap declaration by changing the bean id from *authenticationServiceImplJAAS* to *authenticationServiceImplLDAP* ### There are two properties in this bean and I had to change them to point to the LDAP configuration (these changes actually reference the services defined in the ldap-authentication-context.xml configuration file). #### Change the authenticationDao property's value from *authenticationDaoJAAS* to *authenticationDaoLDAP* #### Change the authenticationComponent property from *authenticationComponentImplJAAS* to *authenticationComponentImplLDAP* ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. {note:title=Test Machine Installation Difference} Did not setup SSL for the test machine {note} ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {tip} This takes a couple minutes as it has to first build the DB and all the indexes and such. {tip} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://oceana.shore.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Make sure startup/shutdown script in /etc/init.d is working correctly # I.S. then setup backup regime to do incremental backups nightly and full backups weekly # TODO: Verify I know where the MySQL files are and that we can restore them correctly. Also turn on binary logs and use a test machine to learn (and document here) how to restore from backup. {warning:title=IMPORTANT} For some strange reason, the Alfresco stack would seem to crash after 20-30 days of operation with some very cryptic errors. I found some entries in the forums about changing the ulimit value in linux. So I issued a 'ulimit -n 4096' and then restart Alfresco. I haven't seen that problem since. {warning}]]> 2162851 2195616 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) {note:title=Test Machine Installation Difference} Fedora core 7 had 5.2.2 installed {note} # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 {note:title=Test Machine Installation Difference} I named the directory alfresco-2.1 {note} # I then moved the tar into the alfresco-2.0 directory {note:title=Test Machine Installation Difference} alfreso-2.1 directory {note} # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} {note:title=Test Machine Installation Difference} This was a bit different in FC7. In order to get Xvfb installed I used "Add/Remove Software" to install it. OpenOffice was already installed so I just had to find the soffice command location. The command to get Xvfb running was also a bit different. I had to create a ascii file called /etc/xvfb-auth.cfg that only had one line in it that read 'localhost'. Then the command to start Xvfb was 'Xvfb :1 -auth /etc/xvfb-auth.cfg'. Then I could start soffice the same way. I changed the start_oo.sh file to reflect those commands. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} {note:title=Test Machine Installation Difference} Did not do this {note} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data {note:title=Test Machine Installation Difference} /data/alfresco-2.1 {note} ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml {note:title=Test Machine Installation Difference} This file already existed and was no different from the sample, so I skipped this step {note} ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: {note:title=Test Machine Installation Difference} This file already existed and so copied the original to custom-repository.properties.orig and edited the existing one. {note} ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) {note:title=Test Machine Installation Difference} I changed them to work with the MS SQL Server login so they looked like: db.username=DB_Collaboration db.password=******** db.pool.initial=10 db.pool.max=100 {note} ### I commented out the two HSQL connection lines ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' {note:title=Test Machine Installation Difference} Left the MySQL lines commented out, but uncommented the SQLServer lines and changed them to db.driver=net.sourceforge.jtds.jdbc.Driver db.url=jdbc:jtds:sqlserver://solstice.shore.mbari.org/Alfresco;domain=SHORE;user=DB_Collaboration;password=****** {note} ### I also added the following lines at the end of the file to connect up to the external mail server {noformat} # # The external email server properties # mail.host=mail.shore.mbari.org mail.port=25 mail.username= mail.password= {noformat} ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties {note:title=Test Machine Installation Difference} Already existed, so backuped up to .orig and edited to comment out the HSQL and uncomment the SQLServer one. {note} ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line {note:title=Test Machine Installation Difference} The downloaded alfresco already has the MySQL driver jar in the install, but since I am using SQLServer, I downloaded the jtds driver from the internet and installed the jtds-X.X.X.jar file in the /opt/alfresco-2.1/tomcat/common/lib to make it available to alfresco. {note} # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0. I also added the following line after the line that stated 'killall soffice.bin': killall Xvfb. That ensured the Xvfb process was killed when alfresco was shutdown. {note:title=Test Machine Installation Difference} Set it to /opt/alfresco-2.1/tomcat for the test machine {note} {tip} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {tip} {note:title=Test Machine Installation Difference} For the test machine, I wasn't too worried about details, so I skipped the next 15 or so steps (picks up again at configuring for MBARI LDAP below. {note} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {tip} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {tip} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.255.255 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # OK, this is a total HACK and needed to be done due to the wonderful world of open source. In Internet Explorer with SSL turned on, you would get a dialog pop-up that stated the secure server was trying to serve non-secure content. This was due to the Alfresco Community logo being served from http://www.alfresco.com. Only IE did this and you can work around it on the client end by doing the following: ## Startup IE. ## Go to Tools->Internet Options ... ## Click on Security tab ## Click on "Trusted Sites" zone ## Click on Sites button ## Make sure check box for "Require Server verification (https:) for all sites in this zone" is unchecked 7. Type in "http://www.alfresco.com" into the "Add this website to the zone:" text field and click Add. ## Click on close ## Make sure "Trusted Sites" is still selected. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on the "Local Intranet" zone. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on OK to close Internet Options dialog. # Now there are a couple of reasons why this is bad, but the main one is that if you are trying to reach this from outside the firewall, you will have to change those settings for the Internet Zone (I think) which is bad. Plus every user will have to do this. To get around this, I had to: ## Take [this|^alfresco_community_horiz20.gif] logo image and save it to ./images/logo directory. ## This next step can either be very easy or very complicated. You can try downloading [this|^a0.jar] jar file and copying it to ./WEB-INF/lib. If when you start up Alfresco you get some exceptions that look like they are related to a class called PageTag, you will have to do it the hard way: ### Now you have to actually check out the subversion source code from Alfresco. I am assuming you know how to do that. By the way, you will need ant and java installed to do this. The SVN URL for the repository is svn://www.alfresco.org/alfresco. ### Once it is checked out find the PageTag.java file (should be in HEAD/root/projects/web-client/source/java/org/alfresco/web/ui/repo/tag directory) and edit: #### Change the line {noformat} private final static String ALF_LOGO = "http://www.alfresco.com/images/alfresco_community_horiz20.gif"; {noformat} to: {noformat} private final static String ALF_LOGO = "/alfresco/images/logo/alfresco_community_horiz20.gif"; {noformat} ### Save the file. {warning} If you run this next step on the machine where the application is installed and have a TOMCAT_HOME environment variable defined, it will try to deploy everything to your Tomcat installation. The best thing to do is build this on a separate machine. {warning} ### Open a command prompt in the HEAD/root directory and type "ant build-tomcat". After a long wait, the build will actually fail if you don't have a TOMCAT_HOME defined in your environment. ### Once the build has failed you will need to create a new jar file called a0.jar with only the PageTag.class file in it. ### Copy the a0.jar file to the ./WEB-INF/lib directory. # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {tip} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {tip} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. {note:title=Test Machine Installation Difference} Did not setup SSL for the test machine {note} ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {tip} This takes a couple minutes as it has to first build the DB and all the indexes and such. {tip} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://oceana.shore.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Make sure startup/shutdown script in /etc/init.d is working correctly # I.S. then setup backup regime to do incremental backups nightly and full backups weekly # TODO: Verify I know where the MySQL files are and that we can restore them correctly. Also turn on binary logs and use a test machine to learn (and document here) how to restore from backup. {warning:title=IMPORTANT} For some strange reason, the Alfresco stack would seem to crash after 20-30 days of operation with some very cryptic errors. I found some entries in the forums about changing the ulimit value in linux. So I issued a 'ulimit -n 4096' and then restart Alfresco. I haven't seen that problem since. {warning}]]> 2162850 19071679 19038917 19071672 19038910 19071671 19038909 19071670 19038908 2195648 2162882 2195647 2162881 2195650 2162884 2195649 2162883 1212729 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 # I then moved the tar into the alfresco-2.0 directory # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### I also added the following lines at the end of the file to connect up to the external mail server {noformat} # # The external email server properties # mail.host=mail.shore.mbari.org mail.port=25 mail.username= mail.password= {noformat} ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0 {note} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {note} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.255.255 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # OK, this is a total HACK and needed to be done due to the wonderful world of open source. In Internet Explorer with SSL turned on, you would get a dialog pop-up that stated the secure server was trying to serve non-secure content. This was due to the Alfresco Community logo being served from http://www.alfresco.com. Only IE did this and you can work around it on the client end by doing the following: ## Startup IE. ## Go to Tools->Internet Options ... ## Click on Security tab ## Click on "Trusted Sites" zone ## Click on Sites button ## Make sure check box for "Require Server verification (https:) for all sites in this zone" is unchecked 7. Type in "http://www.alfresco.com" into the "Add this website to the zone:" text field and click Add. ## Click on close ## Make sure "Trusted Sites" is still selected. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on the "Local Intranet" zone. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on OK to close Internet Options dialog. # Now there are a couple of reasons why this is bad, but the main one is that if you are trying to reach this from outside the firewall, you will have to change those settings for the Internet Zone (I think) which is bad. Plus every user will have to do this. To get around this, I had to: ## Take [this|^alfresco_community_horiz20.gif] logo image and save it to ./images/logo directory. ## This next step can either be very easy or very complicated. You can try downloading [this|^a0.jar] jar file and copying it to ./WEB-INF/lib. If when you start up Alfresco you get some exceptions that look like they are related to a class called PageTag, you will have to do it the hard way: ### Now you have to actually check out the subversion source code from Alfresco. I am assuming you know how to do that. By the way, you will need ant and java installed to do this. The SVN URL for the repository is svn://www.alfresco.org/alfresco. ### Once it is checked out find the PageTag.java file (should be in HEAD/root/projects/web-client/source/java/org/alfresco/web/ui/repo/tag directory) and edit: #### Change the line {noformat} private final static String ALF_LOGO = "http://www.alfresco.com/images/alfresco_community_horiz20.gif"; {noformat} to: {noformat} private final static String ALF_LOGO = "/alfresco/images/logo/alfresco_community_horiz20.gif"; {noformat} ### Save the file. {warning} If you run this next step on the machine where the application is installed and have a TOMCAT_HOME environment variable defined, it will try to deploy everything to your Tomcat installation. The best thing to do is build this on a separate machine. {warning} ### Open a command prompt in the HEAD/root directory and type "ant build-tomcat". After a long wait, the build will actually fail if you don't have a TOMCAT_HOME defined in your environment. ### Once the build has failed you will need to create a new jar file called a0.jar with only the PageTag.class file in it. ### Copy the a0.jar file to the ./WEB-INF/lib directory. # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://oceana.shore.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Make sure startup/shutdown script in /etc/init.d is working correctly # I.S. then setup backup regime to do incremental backups nightly and full backups weekly # TODO: Verify I know where the MySQL files are and that we can restore them correctly. Also turn on binary logs and use a test machine to learn (and document here) how to restore from backup.]]> 1179964 1212730 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 # I then moved the tar into the alfresco-2.0 directory # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### I also added the following lines at the end of the file to connect up to the external mail server {noformat} # # The external email server properties # mail.host=mail.shore.mbari.org mail.port=25 mail.username= mail.password= {noformat} ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0 {note} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {note} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.255.255 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # OK, this is a total HACK and needed to be done due to the wonderful world of open source. In Internet Explorer with SSL turned on, you would get a dialog pop-up that stated the secure server was trying to serve non-secure content. This was due to the Alfresco Community logo being served from http://www.alfresco.com. Only IE did this and you can work around it on the client end by doing the following: ## Startup IE. ## Go to Tools->Internet Options ... ## Click on Security tab ## Click on "Trusted Sites" zone ## Click on Sites button ## Make sure check box for "Require Server verification (https:) for all sites in this zone" is unchecked 7. Type in "http://www.alfresco.com" into the "Add this website to the zone:" text field and click Add. ## Click on close ## Make sure "Trusted Sites" is still selected. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on the "Local Intranet" zone. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on OK to close Internet Options dialog. # Now there are a couple of reasons why this is bad, but the main one is that if you are trying to reach this from outside the firewall, you will have to change those settings for the Internet Zone (I think) which is bad. Plus every user will have to do this. To get around this, I had to: ## Take [this|^alfresco_community_horiz20.gif] logo image and save it to ./images/logo directory. ## This next step can either be very easy or very complicated. You can try downloading [this|^a0.jar] jar file and copying it to ./WEB-INF/lib. If when you start up Alfresco you get some exceptions that look like they are related to a class called PageTag, you will have to do it the hard way: ### Now you have to actually check out the subversion source code from Alfresco. I am assuming you know how to do that. By the way, you will need ant and java installed to do this. The SVN URL for the repository is svn://www.alfresco.org/alfresco. ### Once it is checked out find the PageTag.java file (should be in HEAD/root/projects/web-client/source/java/org/alfresco/web/ui/repo/tag directory) and edit: #### Change the line {noformat} private final static String ALF_LOGO = "http://www.alfresco.com/images/alfresco_community_horiz20.gif"; {noformat} to: {noformat} private final static String ALF_LOGO = "/alfresco/images/logo/alfresco_community_horiz20.gif"; {noformat} ### Save the file. {warning} If you run this next step on the machine where the application is installed and have a TOMCAT_HOME environment variable defined, it will try to deploy everything to your Tomcat installation. The best thing to do is build this on a separate machine. {warning} ### Open a command prompt in the HEAD/root directory and type "ant build-tomcat". After a long wait, the build will actually fail if you don't have a TOMCAT_HOME defined in your environment. ### Once the build has failed you will need to create a new jar file called a0.jar with only the PageTag.class file in it. ### Copy the a0.jar file to the ./WEB-INF/lib directory. # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://oceana.shore.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Make sure startup/shutdown script in /etc/init.d is working correctly # I.S. then setup backup regime to do incremental backups nightly and full backups weekly # TODO: Verify I know where the MySQL files are and that we can restore them correctly. Also turn on binary logs and use a test machine to learn (and document here) how to restore from backup. {note|title=IMPORTANT} For some strange reason, the Alfresco stack would seem to crash after 20-30 days of operation with some very cryptic errors. I found some entries in the forums about changing the ulimit value in linux. So I issued a 'ulimit -n 4096' and then restart Alfresco. I haven't seen that problem since. {note}]]> 1179965 2195645 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN{code}{warning} h3. Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] See [SVN at MBARI] for more details.]]> 2162879 1212731 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 # I then moved the tar into the alfresco-2.0 directory # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### I also added the following lines at the end of the file to connect up to the external mail server {noformat} # # The external email server properties # mail.host=mail.shore.mbari.org mail.port=25 mail.username= mail.password= {noformat} ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0 {note} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {note} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.255.255 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # OK, this is a total HACK and needed to be done due to the wonderful world of open source. In Internet Explorer with SSL turned on, you would get a dialog pop-up that stated the secure server was trying to serve non-secure content. This was due to the Alfresco Community logo being served from http://www.alfresco.com. Only IE did this and you can work around it on the client end by doing the following: ## Startup IE. ## Go to Tools->Internet Options ... ## Click on Security tab ## Click on "Trusted Sites" zone ## Click on Sites button ## Make sure check box for "Require Server verification (https:) for all sites in this zone" is unchecked 7. Type in "http://www.alfresco.com" into the "Add this website to the zone:" text field and click Add. ## Click on close ## Make sure "Trusted Sites" is still selected. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on the "Local Intranet" zone. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on OK to close Internet Options dialog. # Now there are a couple of reasons why this is bad, but the main one is that if you are trying to reach this from outside the firewall, you will have to change those settings for the Internet Zone (I think) which is bad. Plus every user will have to do this. To get around this, I had to: ## Take [this|^alfresco_community_horiz20.gif] logo image and save it to ./images/logo directory. ## This next step can either be very easy or very complicated. You can try downloading [this|^a0.jar] jar file and copying it to ./WEB-INF/lib. If when you start up Alfresco you get some exceptions that look like they are related to a class called PageTag, you will have to do it the hard way: ### Now you have to actually check out the subversion source code from Alfresco. I am assuming you know how to do that. By the way, you will need ant and java installed to do this. The SVN URL for the repository is svn://www.alfresco.org/alfresco. ### Once it is checked out find the PageTag.java file (should be in HEAD/root/projects/web-client/source/java/org/alfresco/web/ui/repo/tag directory) and edit: #### Change the line {noformat} private final static String ALF_LOGO = "http://www.alfresco.com/images/alfresco_community_horiz20.gif"; {noformat} to: {noformat} private final static String ALF_LOGO = "/alfresco/images/logo/alfresco_community_horiz20.gif"; {noformat} ### Save the file. {warning} If you run this next step on the machine where the application is installed and have a TOMCAT_HOME environment variable defined, it will try to deploy everything to your Tomcat installation. The best thing to do is build this on a separate machine. {warning} ### Open a command prompt in the HEAD/root directory and type "ant build-tomcat". After a long wait, the build will actually fail if you don't have a TOMCAT_HOME defined in your environment. ### Once the build has failed you will need to create a new jar file called a0.jar with only the PageTag.class file in it. ### Copy the a0.jar file to the ./WEB-INF/lib directory. # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://oceana.shore.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Make sure startup/shutdown script in /etc/init.d is working correctly # I.S. then setup backup regime to do incremental backups nightly and full backups weekly # TODO: Verify I know where the MySQL files are and that we can restore them correctly. Also turn on binary logs and use a test machine to learn (and document here) how to restore from backup. {warning} For some strange reason, the Alfresco stack would seem to crash after 20-30 days of operation with some very cryptic errors. I found some entries in the forums about changing the ulimit value in linux. So I issued a 'ulimit -n 4096' and then restart Alfresco. I haven't seen that problem since. {note}]]> 1179966 1212732 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 # I then moved the tar into the alfresco-2.0 directory # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### I also added the following lines at the end of the file to connect up to the external mail server {noformat} # # The external email server properties # mail.host=mail.shore.mbari.org mail.port=25 mail.username= mail.password= {noformat} ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0 {note} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {note} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.255.255 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # OK, this is a total HACK and needed to be done due to the wonderful world of open source. In Internet Explorer with SSL turned on, you would get a dialog pop-up that stated the secure server was trying to serve non-secure content. This was due to the Alfresco Community logo being served from http://www.alfresco.com. Only IE did this and you can work around it on the client end by doing the following: ## Startup IE. ## Go to Tools->Internet Options ... ## Click on Security tab ## Click on "Trusted Sites" zone ## Click on Sites button ## Make sure check box for "Require Server verification (https:) for all sites in this zone" is unchecked 7. Type in "http://www.alfresco.com" into the "Add this website to the zone:" text field and click Add. ## Click on close ## Make sure "Trusted Sites" is still selected. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on the "Local Intranet" zone. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on OK to close Internet Options dialog. # Now there are a couple of reasons why this is bad, but the main one is that if you are trying to reach this from outside the firewall, you will have to change those settings for the Internet Zone (I think) which is bad. Plus every user will have to do this. To get around this, I had to: ## Take [this|^alfresco_community_horiz20.gif] logo image and save it to ./images/logo directory. ## This next step can either be very easy or very complicated. You can try downloading [this|^a0.jar] jar file and copying it to ./WEB-INF/lib. If when you start up Alfresco you get some exceptions that look like they are related to a class called PageTag, you will have to do it the hard way: ### Now you have to actually check out the subversion source code from Alfresco. I am assuming you know how to do that. By the way, you will need ant and java installed to do this. The SVN URL for the repository is svn://www.alfresco.org/alfresco. ### Once it is checked out find the PageTag.java file (should be in HEAD/root/projects/web-client/source/java/org/alfresco/web/ui/repo/tag directory) and edit: #### Change the line {noformat} private final static String ALF_LOGO = "http://www.alfresco.com/images/alfresco_community_horiz20.gif"; {noformat} to: {noformat} private final static String ALF_LOGO = "/alfresco/images/logo/alfresco_community_horiz20.gif"; {noformat} ### Save the file. {warning} If you run this next step on the machine where the application is installed and have a TOMCAT_HOME environment variable defined, it will try to deploy everything to your Tomcat installation. The best thing to do is build this on a separate machine. {warning} ### Open a command prompt in the HEAD/root directory and type "ant build-tomcat". After a long wait, the build will actually fail if you don't have a TOMCAT_HOME defined in your environment. ### Once the build has failed you will need to create a new jar file called a0.jar with only the PageTag.class file in it. ### Copy the a0.jar file to the ./WEB-INF/lib directory. # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://oceana.shore.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Make sure startup/shutdown script in /etc/init.d is working correctly # I.S. then setup backup regime to do incremental backups nightly and full backups weekly # TODO: Verify I know where the MySQL files are and that we can restore them correctly. Also turn on binary logs and use a test machine to learn (and document here) how to restore from backup. {warning} For some strange reason, the Alfresco stack would seem to crash after 20-30 days of operation with some very cryptic errors. I found some entries in the forums about changing the ulimit value in linux. So I issued a 'ulimit -n 4096' and then restart Alfresco. I haven't seen that problem since. {warning}]]> 1179967 3180086 3114620 3180085 3114619 3180090 3114624 3180089 3114623 3180087 3114621 3180091 3114625 19071620 19038858 3180096 3114631 3180095 3114630 18284848 18252084 18284847 18252083 3180171 3114706 3180173 3114708 3180176 3114711 3180175 3114710 3180178 3114713 3180164 3114699 3180166 3114701 3180168 3114703 3180187 3114722 3180189 3114724 3180191 3114726 3180192 3114727 3180194 3114729 3180179 3114714 3180181 3114716 3180183 3114718 3180185 3114720 3180186 3114721 10945098 10912351 3180196 3114731 13172795 13140029 5407478 5374748 5407477 5374747 5407476 5374746 5407475 5374745 11829541 11796784 13828100 13795329 53 2010-06-14 21:54:16.217 2010-06-14 21:54:16.217 5865548 5832784 5865547 5832783 5865545 5832781 5865544 5832780 5865542 5832778 5865540 5832776 5865539 5832775 11273174 11240437 11273172 11240435 51 53 11273177 11240440 11273176 11240439 53 55 5865516 5832752 5865515 5832751 5865518 5832754 5865520 5832756 5865522 5832758 5865514 5832750 5865513 5832749 5407423 5374692 5865532 5832768 5865533 5832769 5865535 5832771 97 99 5865536 5832772 98 100 5865537 5832773 11273144 11240407 5865523 5832759 5407406 5374674 11273146 11240409 5865525 5832761 5865526 5832762 5865527 5832763 5865529 5832765 5407407 5374675 5865530 5832766 108 110 5407379 5374647 107 109 5407381 5374649 109 111 112 114 111 113 114 116 113 115 100 102 102 104 101 103 104 106 103 105 105 107 5407363 5374631 123 125 5865502 5832738 124 126 5407365 5374633 125 127 5407366 5374634 126 128 5407367 5374635 127 129 5407368 5374636 128 130 5407369 5374637 129 131 130 132 5407371 5374639 115 117 116 118 5407373 5374641 117 119 5407375 5374643 119 121 120 122 5407377 5374645 11273107 11240369 122 124 5407361 5374629 137 139 138 140 135 137 5407360 5374628 136 138 133 135 5407358 5374626 134 136 5407355 5374623 131 133 5407356 5374624 132 134 8388641 8355874 5407354 5374622 8388642 8355875 5407351 5374619 8388639 8355872 5407352 5374620 8388640 8355873 5407349 5374617 5407350 5374618 139 141 5407348 5374616 140 142 5407345 5374613 5407343 5374611 8388615 8355847 8388614 8355846 5407341 5374609 5407339 5374607 5407338 5374606 5407336 5374604 5407334 5374602 5407333 5374601 5407331 5374599 5407327 5374595 5407329 5374597 5407330 5374598 5407323 5374591 5407324 5374592 164 166 5407325 5374593 165 167 5407326 5374594 166 168 15663290 15630527 5407320 5374588 5407321 5374589 15663293 15630530 5407322 5374590 14549034 14516267 5407315 5374583 5407317 5374585 5407318 5374586 5407312 5374580 5407311 5374579 5407314 5374582 19074273 19041591 5407308 5374576 8388644 8355877 5407307 5374575 5407310 5374578 8388646 8355879 5407303 5374571 5407305 5374573 5407299 5374567 5407302 5374570 5407301 5374569 5407293 5374561 5407294 5374562 5407291 5374559 5407292 5374560 5407297 5374565 5407296 5374564 5407285 5374553 5407286 5374554 5407284 5374552 5407289 5374557 5407287 5374555 5407288 5374556 5407278 5374544 5407276 5374542 5407282 5374550 5407281 5374549 5407270 5374536 5407269 5374535 5407267 5374533 5407274 5374540 5407273 5374539 5407272 5374538 5407271 5374537 5407260 5374525 17268827 17236062 5407265 5374531 5407266 5374532 5407251 5374516 5407253 5374518 5407256 5374521 11272973 11240233 5407244 5374509 5407246 5374511 5407245 5374510 5407248 5374513 5407249 5374514 5407236 5374501 5407235 5374500 5407238 5374503 5407237 5374502 5407239 5374504 5407242 5374507 5407241 5374506 299 301 298 300 297 299 3670581 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN {code}{warning} \\ \\ h3. Concurrent Versioning System CVS (Concurrent Versioning System) is an open source software tool used by software developers to manage code changes within their source code tree.  This source code versioning system is the predecessor of Subversion (see below) and applies stricter security access when editing MBARI project files.  Similar to Subversion, CVS enables programmers to store current and all previous records of code changes (along with those who made the changes) over the existense of the code.  Access to projects on the CVS respository at MBARI, however, also requires a pre-set individual passwords for all users in order to make changes to the code.  Without access permission, users may only view and download code - not upload it into the repository to make changes.  Access is given to users who are part of that project's group on CVS.  To gain a password or access to edit a project requires notification to the server administrator:  Karen Salamy (salamy@mbari.org). In addition to acquiring a password from the server administrator, you must also install a CVS software client.  There are multiple CVS clients for most major operating systems including WinCVS (Windows), MacCVS (Macs), and gcvs (Linux).  The CVS repository may also be accessed using the command line with the following syntax [CVS command Line Reference|^CVS-commandline-reference.pdf]. The most common CVS client at MBARI is WinCVS (version 1.2) which is a stable Windows version release. Additional information on these clients can be found at [http://cvsgui.sourceforge.net/. ]; Detailed documentation on using CVS can be found at [http://ximbiot.com/cvs/manual/].  The MBARI CVS repository may also simply be "viewed" from a web browser for any users who wish to look at its existing source code tree structure at [http://moonjelly.shore.mbari.org/cgi-bin/cvsweb.cgi/]. See [CVS at MBARI|CLT:CVS at MBARI] for more details. \\   h3. Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] The MBARI SVN repository may also simply be "viewed" from a web browser for any users who wish to look at its existing source code tree structure at [http://kahuna.shore.mbari.org/viewvc/?root=svn]. See [SVN at MBARI] for more details. \\   h3. Java Security Certificate If you intend to distribute java applications via Java Web Start, you will need to _sign_ your jar files. Details about how to do this can be found at [Java Signing at MBARI]]]> 3637831 365 367 10388843 10356117 11272820 11240073 6226211 6258990 6226212 6258991 6226213 6258992 6226197 6258976 6226196 6258975 6226202 6258981 9404732 9371983 9404731 9371982 6226200 6258979 6226199 6258978 6226206 6258985 9404728 9371979 6226205 6258984 9831430 9798691 6226204 6258983 6226210 6258989 6226209 6258988 6226208 6258987 6226207 6258986 6226182 6258961 6226180 6258959 6226185 6258964 6226183 6258962 6226184 6258963 6226189 6258968 6226187 6258966 9404713 9371964 6226193 6258972 6226194 6258973 6226191 6258970 15663570 15630813 15663572 15630815 11829469 11796712 11829448 11796689 11272712 {color:black}Coral Reef Environmental Observatory Network  http://www.coralreefeon.org/  {color} # Cron: not an acronym. Cron is the name of program that enables UNIX users to execute commands or scripts (groups of commands) automatically at a specified time/date. [http://www.unixgeeks.org/security/newbie/unix/cron-1.html] # CTD: Conductivity, Temperature, and Depth [http://www.whoi.edu/instruments/viewInstrument.do?id=1003] # CUAHSI: Consortium of Universities for the Advancement of Hydrologic Science, Inc. - [http://www.cuahsi.org/] # CVS: Concurrent Versions System; maintains control of history of code/documents # DataNet solicitation: NSF 07-601, Sustainable Digital Data Preservation and Access Network Partners (DataNet). # DC: Dublin Core vocabulary # DEM: Digital Elevation Model # D-ESP:  Deep ESP; the sphere and all it's accouterments # DI: De-ionized, often used with water # DMO: Division of Marine Operations # DMZ: Demilitarized zone. Computers placed into their own subnetwork (sometimes protected by a back-end firewall) in direct connection with the internet, protected by a front-end firewall. [http://en.wikipedia.org/wiki/Demilitarized_zone_(computing]) # Doc Ricketts: ROV, replacing Tiburon, carried by R/V Western Flyer. # DOEST: Day of Engineering, Science and Technology # Dribbling: not an acronym. The act of bouncing the ball continuously # DSL:  Digital Subscriber Line;  used to describe a type of modem # DStoNetCDF: SSDS post-processing service # DVL: Doppler Velocity Log # DWSM:  Deep Water Sampling Module # EE: Electrical Engineering # eGY: the Electronic Geophysical Year [http://www.egy.org/] # EITS: Eye-in-the Sea - deepwater video observatory for unobtrusive monitoring. [http://www.mbari.org/mars/general/eits.html] # EOM: Electro-Optical-Mechanical # EPIC: Embedded Platform for Industrial Computing # ERA: Earned Run Average # ESB: Enterprise Service Bus # ESIP Federation: Federation of Earth Science Information Partners # ESONET: European Seafloor Observatory Network [http://www.oceanlab.abdn.ac.uk/research/esonet.php] # ESP: Environmental Sample Processor - Chris Scholin et al. [http://www.mbari.org/muse/platforms/ESP.htm] ## Darlene was the 1st generation ESP ## GiGi The first 'second generation' ESP instrument ## NEO 'Nasa-Earth-Observatory'; The second 'second generation' ESP instrument ## Mack The third 'second generation' ESP instrument ## Bruce Another 'second generation' ESP instrument ## MOE A second gen. instrument with the MFB connected ## Betty  \-another one ## Gordon  \-another one (Betty & Gordon named after the founders of the Moore Foundation, who funded the builds) # Et al.: and others # FC5: Fedora Core 5 # FDR: Final Design Review # Ferret: plotting/analysis software package # FOCE: Free Ocean CO2 Enrichment # FPGA: Field Programmable Gate Array # FSM: Finite State Machine # FVGR: Free Vehicle Grab Respirometer # GAL: Gene Array Layout which is the file generated when printing a microarray for the ESP instrument. It tells you what and where things were printed on the filter paper. # GEOSS: Global Earth Observation System of Systems [http://www.epa.gov/geoss/] # GRID Computing: Grid computing (or the use of a computational grid) is the application of several computers to a single problem at the same time - usually to a scientific or technical problem that requires a great number of computer processing cycles or access to large amounts of data. [http://en.wikipedia.org/wiki/Grid_computing] # GUI: Graphical User Interface # GWT: Google Web Toolkit - [http://code.google.com/webtoolkit/] # Hexakosioihexekontahexaphobia: not an acronym. Fear of the number six-hundred sixty-six. # HOBI: Harbor Branch Oceanographic Institution # HOTS: Hawaii Ocean Time-Series program # HPP:  High-Pressure pump # ICD: Interface Control Diagram; block diagram of all system components and their interfaces # IDE: Integrated Development Environment # iLab: Professor Laurent Itti's biologically inspired computational modeling group at the University of Southern California. They maintain the iLab Neuromorphic Vision C+\+ Toolkit that we use in AVED for visual event detection. # International metadata summit: This summit is formally titled the IODE/JCOMM Forum on Oceanographic Data Management and Exchange Standards. It is a weeklong meeting of a small group (17) of leaders in international oceanographic data and metadata systems, yet is intended to initiate international agreements on metadata standards. See [http://www.iode.org/index.php?option=com_content&task=view&id=74] for details. # IO: Implementing Organization [http://www.orionprogram.org/PDFs/OOI_CG_RFP_16Mar07.pdf] # IOC: Intergovernmental Oceanographic Commission, [http://ioc.unesco.org/iocweb/index.php] # IODE: International Oceanographic Data Exchange, [http://www.iode.org] # IODP: Integrated Ocean Drilling Program [http://www.iodp.org] # IOOS: Integrated and Sustained Ocean Observing System [http://www.ocean.us] # ISUS:  In Situ Ultraviolet Spectrophotometer # JCOMM: Joint WMO-IOC Technical Commission on Oceanography and Marine Meteorology, [http://ioc.unesco.org/iocweb/index.php] # JEE: Java Enterprise Edition (formerly known as J2EE) # JIRA: A bug tracking, issue tracking, and project management application [http://www.atlassian.com/software/jira/] # JOI: Joint Oceanographic Institutions [http://www.joiscience.org/joi] # KML: Keyhole Markup Language - A file format used to display geographic data in an Earth browser, such as Google Earth # LED: Light-emitting diode # LDEO: Lamont-Doherty Earth Observatory, Columbia University # LLNL: Lawrence Livermore National Laboratories # LRAUV: Long Range AUV (Autonomous Underwater Vehicle) # LST: Langrangian sediment trap # MATE: Marine Advanced Technology Education Center at Monterey Peninsula College (MPC) # MARS: Monterey Accelerated Research System - Monterey Cabled Observatory System # Maven: software project management and comprehension tool. [http://maven.apache.org/] # MBA: Monterey Bay Aquarium # MEITS: Moored Eye-in-the Sea - deepwater video observatory for unobtrusive monitoring to be deployed on MARS # Meta-T: Water Temperature metadata pilot project, which is being developed under the umbrella of the Joint WMO-IOC Technical Commission for Oceanography and Marine Meteorology (JCOMM). ([http://marinemetadata.org/meta-t] ) # MFB: Micro-Fluidics Block--added instrumentation to the ESP # MMI: Marine Metadata Initiative [http://marinemetadata.org/] # MMI ORR: MMI Ontology Registry and Repository [http://mmisw.org/orr/] # MOBB: Monterey Ocean Bottom Broadband project # Modbus: a serial [communications protocol|http://en.wikipedia.org/wiki/Communications_protocol] [http://en.wikipedia.org/wiki/Modbus] # MOOS: Monterey Ocean Observing System [http://www.mbari.org/moos] # MRG: Red Hat Enterprise MRG is a next-generation IT infrastructure incorporating Messaging, Realtime, and Grid functionality. It offers increased performance, reliability, interoperability, and faster computing for enterprise customers. [http://www.redhat.com/mrg/ ]; # MSE: MOOS Science Experiment # MTS: Marine Technology Society # MUCE: Monterey Upper Canyon Experiment # Mule: not an acronym. Open source ESB. [http://mule.codehaus.org/display/MULE/Home] # MV: Medium Voltage (converter); located in node power supply of MARS # NAB: National Association of Broadcasters # Nagios: software to monitor all types of computer and network services. [http://www.nagios.org/] # Navproc: navigation processor # NCBO: The National Center for Biomedical Ontology # NCSA: National Center for Supercomputing Applications (at UIUC) # nctoolbox: nctoolbox is a Matlab toolbox that provides read-only access to common data model datasets. (See [http://code.google.com/p/nctoolbox/]) # NDBC: National Data Buoy Center # netCDF: file format used for MBARI processed data (stands for Network Common Data Form) [http://www.unidata.ucar.edu/software/netcdf/conventions.html] # NSF: National Science Foundation # NMI: NSF Middleware initiative # NOAA: National Oceanic and Atmospheric Administration. [http://www.noaa.gov] # NORIA: Network for Ocean Research, Interaction and Application. The OOI CI IO. # NTR: Nothing To Report # OA: Obstacle Avoidance # OBIS: Ocean Biogeographic Information System # OceanSITES: A worldwide system of long-term, deepwater reference stations measuring dozens of variables and monitoring the full depth of the ocean from air-sea interactions down to 5,000 meters. [http://www.oceansites.org/] # ODI:  Ocean Design Inc.; makers of incredibly expensive underwater connectors # ODV: Ocean Data View [http://www.oceansites.org/] # OGC: Open Geospatial Consortium, Inc.® (OGC), a non-profit, international, voluntary consensus standards organization that is leading the development of standards for geospatial and location based services. [http://www.opengeospatial.org/] # OGC Oceans IE = Open Geospatial Consortium Oceans Interoperability Experiment. It is being hosted by the OOSTethys effort - [http://www.oostethys.org/ogc-oceans-interoperability-experiment] # OGF: Open Grid Forum, an open community committed to driving the rapid evolution and adoption of applied distributed computing. [http://www.ogf.org/] # OMF: Observatory Middleware Framework. A project funded by NSF. NCSA is the prime. MBARI is a subcontractor (at about ½ of the grant). UCSD (Frank Vernon) is a non-paid participant. # OMV: Ontology Metadata Vocabulary # OMV-MMI: MMI extensions to OMV # ONR: Office of Naval Research # OOI: Ocean Observatories Initiative (NSF) [http://www.orionprogram.org/OOI/default.html] # OOR: Open Ontology Repository initiative - [http://ontolog.cim3.net/cgi-bin/wiki.pl?OpenOntologyRepository] # OOSTethtys: not an acronym. A provider-to-user data systems framework, using interoperable standards, enabling discovery and use of data. [http://www.oostethys.org/] # OPeNDAP: The Open-source Project for a Network Data Access Protocol, the protocol used to deliver data directly from the web into user's application workspaces [http://opendap.org/] # ORION: Ocean Research Interactive Observatory Networks [http://www.orionprogram.org] # PC-104: small microprocessor for embedded systems (can run Linux) [http://www.pc104.org] # PCA: Principal component analysis. [http://en.wikipedia.org/wiki/Principal_components_analysis] # PCR: Polymerase Chain Reaction, procedure to make millions of copies of DNA from a few # PDR: preliminary design review ("Hey, I thought of something. Is it a stupid idea?") # PDU: Power Distribution Unit (? not sure about this though) # pH: a measure of the [acidity|http://en.wikipedia.org/wiki/Acid] or [alkalinity|http://en.wikipedia.org/wiki/Base_%28chemistry%29] of a solution. pH is a shorthand for its mathematical approximation: in chemistry a small p is used in place of writing log10 and the H here represents [H+], the concentration of hydrogen ions. [http://en.wikipedia.org/wiki/PH] # pl-navproc: the name of a computer {noformat} Name: pl-navproc.pl.mbari.org Address: 134.89.22.11 {noformat} we think navproc was the shortened name for navigation processor; we guess, "Point Lobos Navigation Processor". # PRDK: PUCK Reference Design Kit [http://www.mbari.org/pw] # PUCK: Pluggable Underwater Connector with Knowledge [http://www.mbari.org/pw] # PUP: Precision Underwater Positioner # QNX: A Unix-like real-time operating system # RAID: Redundant Array of Independent Drives [http://en.wikipedia.org/wiki/RAID] # RBI: Runs Batted In # RC: Radio controlled (airplane) # RCO: Regional Cabled Observatory [http://orionprogram.org/PDFs/RevisedOOICND08Mar07.pdf] # RDF: W3C Resource Description Framework # ROS: Remote Ocean Systems [http://www.rosys.com/] # ROV: Remotely Operated Vehicle # RS-232 (Recommended Standard 232) is a standard for [serial|http://en.wikipedia.org/wiki/Serial_communications] binary data signals connecting between a DTE ([Data terminal equipment|http://en.wikipedia.org/wiki/Data_terminal_equipment]) and a DCE ([Data Circuit-terminating Equipment|http://en.wikipedia.org/wiki/Data_circuit-terminating_equipment]). It is commonly used in [computer serial ports|http://en.wikipedia.org/wiki/Computer]. [http://en.wikipedia.org/wiki/RS-232] # RSN: Regional Scale Node. See RCO. [http://www.ooi.washington.edu/rsn/secondary.jsp?keywords=WHATSR&title=What%20is%20RSN?] # SAP: Single Axis PUP # SDCI: Software Development for Cyberinfrastructure. A program at NSF. # SeaDataNet: Multi-national, multi-system data management project funded by the European Union, which will provide metadata, data and products as a unique virtual data centre. ([http://www.seadatanet.org/]) # SensorML: not an acronym; markup language to describe sensors and their data. [http://vast.uah.edu/SensorML/] # SIFT: Scale-invariant feature transform [http://en.wikipedia.org/wiki/Scale-invariant_feature_transform] # SIIM: Science Instrument Interface Module # SIMM: Single In-line Memory Module # SIMPA: Seafloor Imaging of Marine Protected Areas. A software tool produced under MBARI projects 900821and 901016. # SIO: Scripps Institute of Oceanography # SMD: Soil Machine Dynamics Hydrovision [http://www.smdhydrovision.com] # SMP: Symmetric Multiprocessing # SNMP: (Scripps NCSA MBARI Prototype) a proof of concept project staffed at MBARI as part of SENSORS to integrate instrument network capabilities of SIO and MBARI with a policy management framework provided by NCSA and visualization capabilities provided by Calit2-Viz within an ESB-based integration infrastructure. # SOPAC: Pacific Islands Applied Geoscience Commission [http://www.sopac.org] # SOS: Sensor Observation Service, one of the SWE (Sensor Web Enablement) standards # SPARQL - Simple Protocol and RDF Query Language # SPE:  Solid-phase extraction; method from removing DNA or RNA from a 'soup' # SPS: Sensor Planning Service, one of the SWE (Sensor Web Enablement) standards # SSDS: Shore-Side Data System [http://www.mbari.org/ssds/] [http://new-ssds.mbari.org:8080/ssds/] # SURA: The Southeastern Universities Research Association # SURF Center:  Sensors for Underwater Research of the Future # SVN: Subversion which is a source code repository. # SWE: Sensor Web Enablement set of standards (approved by OGC) # SWE Common: next-generation core for Sensor Web Enablement standards # TAMU: Texas A&M University # TDS: THREDDS Data Server, an application server used to aggregated and enhance the metadata of other OPeNDAP data sources [http://www.unidata.ucar.edu/projects/THREDDS/] # TERCOM: Terrain Contour Matching # TREX: Autonomy group mission planning/scheduling software # TVS:  Transient voltage suppressor--special type of diode that protects against over-voltage conditions # TWIC: Transportation Worker Identification Credential (TWIC™) [http://www.tsa.gov/what_we_do/layers/twic/index.shtm] # UART: universal asynchronous receiver/transmitter, a type of "asynchronous receiver/transmitter", a piece of [computer|http://en.wikipedia.org/wiki/Computer] [hardware|http://en.wikipedia.org/wiki/Hardware] that translates data between parallel and serial interfaces. [http://en.wikipedia.org/wiki/UART] # UCB: University of California-Berkeley # UCSB: University of California, Santa Barbara # UCSD: University of California, San Diego # UI: User Interface # UIUC: University of Illinois at Urbana-Champaign # UNOLS: University-National Oceanographic Laboratory System. An organization of [61 academic institutions|http://www.unols.org/info/direct.html] and National Laboratories involved in oceanographic research and joined for the purpose of coordinating oceanographic ships' schedules and research facilities. # UPS: Uninterrupted Power Supply # URI: Uniform Resource Identifier - [http://www.ietf.org/rfc/rfc2396.txt] # URN: Uniform Resource Name - [http://www.ietf.org/rfc/rfc2141.txt] # UUST: Unmanned Untethered Submersible Technology Symposium [http://www.ausi.org/uust/uust.html] # UW: University of Washington # VAAP: Video Annotation Analysis and Presentation [http://www.mbari.org/rd/projects/2010/information.htm] # VARS: Video Annotation and Reference System. [http://vars.sourceforge.net/] # VB: Variable Buoyancy # VB: Visual Basic # VCS: Vehicle Control System # VENUS: Victoria Experimental Network Under the Sea. A cabled ocean observatory. [http://www.venus.uvic.ca/] # VHDL: VHSIC (Very-High-Speed Integrated Circuit) Hardware Description Language # VINE: Vocabulary INtegration Environment # Voc2RDF: Vocabulary to RDF conversion tool # W3C: The World Wide Web Consortium. [http://www.w3.org/] # WATERS Network: WATer and Environmental Research Systems Network (WATERS Network) # WFS: Web Feature Service # WHOI: Woods Hole Oceanographic Institute # WMO: World Meteorology Organization, [http://www.wmo.ch] # WMS: Web Map Service # WNS: Wet node simulator (MARS observatory simulation environment) # XML: Extensible Markup Language [http://en.wikipedia.org/wiki/XML] # XSD - XML Schema Definition [http://en.wikipedia.org/wiki/XML_Schema]]]> 11239964 11272711 11239963 3670389 3637634 6226628 6259426 6226627 6259425 3670387 3637632 6226630 6259428 9405168 9372437 3670393 3637638 9405166 9372434 9405165 9372433 3670391 3637636 3670392 3637637 3670397 3637642 3670395 3637640 3670396 3637641 3670401 3637646 9405158 9372426 3670399 3637644 3670372 3637617 3670371 3637616 3670377 3637622 3670376 3637621 3670382 3637627 3670380 3637625 3670379 3637624 3670385 3637630 3670383 3637628 3670367 3637612 3670370 3637615 9405102 9372370 9405101 9372369 5406941 5374194 9405106 9372374 5406943 5374196 9405104 9372372 9405103 9372371 9405117 9372385 5406923 5374175 9405115 9372383 5406930 5374182 9405109 9372377 9405110 9372378 9405107 9372375 9405113 9372381 5406920 5374172 9405111 9372379 622593 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN{code}{warning} h3. Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] See [SVN at MBARI] for more details.]]> 589825 11272686 11239937 13369346 13336578 6226625 6259423 11272706 11239958 15663630 15630876 15663628 15630874 6226620 6259419 8290316 2 53 2008-12-26 21:20:23.750 2008-12-26 21:20:23.750 16810142 16777380 707 710 16810147 16777385 3670475 3637722 3670477 3637724 3670478 3637725 3670480 3637727 3670481 3637728 3670468 3637715 3670469 3637716 3670470 3637717 3670472 3637719 3670473 3637720 3670474 3637721 3670466 3637713 3114614 3180081 1 2006-10-18 14:39:02.070 2006-10-18 14:39:02.070 53 3670464 3637711 3114615 3180082 2 2006-10-18 14:39:02.070 2008-04-10 14:03:25.150 53 3670462 3637709 9404969 9372232 3670460 3637707 3670458 3637705 3670456 3637703 9404971 9372234 3670455 3637702 3670453 3637700 3670451 3637698 1867835 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN{code}{warning} h3. Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] See [SVN at MBARI] for more details.]]> 1835071 3670445 3637690 3670446 3637691 3670443 3637688 3670437 3637682 1867834 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN{code}{warning} h3. Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] See [SVN at MBARI] for more details.]]> 1835070 9404931 9372191 1867789 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 # I then moved the tar into the alfresco-2.0 directory # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### I also added the following lines at the end of the file to connect up to the external mail server {noformat} # # The external email server properties # mail.host=mail.shore.mbari.org mail.port=25 mail.username= mail.password= {noformat} ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0 {note} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {note} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.255.255 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # OK, this is a total HACK and needed to be done due to the wonderful world of open source. In Internet Explorer with SSL turned on, you would get a dialog pop-up that stated the secure server was trying to serve non-secure content. This was due to the Alfresco Community logo being served from http://www.alfresco.com. Only IE did this and you can work around it on the client end by doing the following: ## Startup IE. ## Go to Tools->Internet Options ... ## Click on Security tab ## Click on "Trusted Sites" zone ## Click on Sites button ## Make sure check box for "Require Server verification (https:) for all sites in this zone" is unchecked 7. Type in "http://www.alfresco.com" into the "Add this website to the zone:" text field and click Add. ## Click on close ## Make sure "Trusted Sites" is still selected. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on the "Local Intranet" zone. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on OK to close Internet Options dialog. # Now there are a couple of reasons why this is bad, but the main one is that if you are trying to reach this from outside the firewall, you will have to change those settings for the Internet Zone (I think) which is bad. Plus every user will have to do this. To get around this, I had to: ## Take [this|^alfresco_community_horiz20.gif] logo image and save it to ./images/logo directory. ## This next step can either be very easy or very complicated. You can try downloading [this|^a0.jar] jar file and copying it to ./WEB-INF/lib. If when you start up Alfresco you get some exceptions that look like they are related to a class called PageTag, you will have to do it the hard way: ### Now you have to actually check out the subversion source code from Alfresco. I am assuming you know how to do that. By the way, you will need ant and java installed to do this. The SVN URL for the repository is svn://www.alfresco.org/alfresco. ### Once it is checked out find the PageTag.java file (should be in HEAD/root/projects/web-client/source/java/org/alfresco/web/ui/repo/tag directory) and edit: #### Change the line {noformat} private final static String ALF_LOGO = "http://www.alfresco.com/images/alfresco_community_horiz20.gif"; {noformat} to: {noformat} private final static String ALF_LOGO = "/alfresco/images/logo/alfresco_community_horiz20.gif"; {noformat} ### Save the file. {warning} If you run this next step on the machine where the application is installed and have a TOMCAT_HOME environment variable defined, it will try to deploy everything to your Tomcat installation. The best thing to do is build this on a separate machine. {warning} ### Open a command prompt in the HEAD/root directory and type "ant build-tomcat". After a long wait, the build will actually fail if you don't have a TOMCAT_HOME defined in your environment. ### Once the build has failed you will need to create a new jar file called a0.jar with only the PageTag.class file in it. ### Copy the a0.jar file to the ./WEB-INF/lib directory. # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://oceana.shore.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Make sure startup/shutdown script in /etc/init.d is working correctly # I.S. then setup backup regime to do incremental backups nightly and full backups weekly # TODO: Verify I know where the MySQL files are and that we can restore them correctly. Also turn on binary logs and use a test machine to learn (and document here) how to restore from backup. {warning:title=IMPORTANT} For some strange reason, the Alfresco stack would seem to crash after 20-30 days of operation with some very cryptic errors. I found some entries in the forums about changing the ulimit value in linux. So I issued a 'ulimit -n 4096' and then restart Alfresco. I haven't seen that problem since. {warning}]]> 1835021 1867790 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 # I then moved the tar into the alfresco-2.0 directory # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### I also added the following lines at the end of the file to connect up to the external mail server {noformat} # # The external email server properties # mail.host=mail.shore.mbari.org mail.port=25 mail.username= mail.password= {noformat} ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0 {note} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {note} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.255.255 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # OK, this is a total HACK and needed to be done due to the wonderful world of open source. In Internet Explorer with SSL turned on, you would get a dialog pop-up that stated the secure server was trying to serve non-secure content. This was due to the Alfresco Community logo being served from http://www.alfresco.com. Only IE did this and you can work around it on the client end by doing the following: ## Startup IE. ## Go to Tools->Internet Options ... ## Click on Security tab ## Click on "Trusted Sites" zone ## Click on Sites button ## Make sure check box for "Require Server verification (https:) for all sites in this zone" is unchecked 7. Type in "http://www.alfresco.com" into the "Add this website to the zone:" text field and click Add. ## Click on close ## Make sure "Trusted Sites" is still selected. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on the "Local Intranet" zone. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on OK to close Internet Options dialog. # Now there are a couple of reasons why this is bad, but the main one is that if you are trying to reach this from outside the firewall, you will have to change those settings for the Internet Zone (I think) which is bad. Plus every user will have to do this. To get around this, I had to: ## Take [this|^alfresco_community_horiz20.gif] logo image and save it to ./images/logo directory. ## This next step can either be very easy or very complicated. You can try downloading [this|^a0.jar] jar file and copying it to ./WEB-INF/lib. If when you start up Alfresco you get some exceptions that look like they are related to a class called PageTag, you will have to do it the hard way: ### Now you have to actually check out the subversion source code from Alfresco. I am assuming you know how to do that. By the way, you will need ant and java installed to do this. The SVN URL for the repository is svn://www.alfresco.org/alfresco. ### Once it is checked out find the PageTag.java file (should be in HEAD/root/projects/web-client/source/java/org/alfresco/web/ui/repo/tag directory) and edit: #### Change the line {noformat} private final static String ALF_LOGO = "http://www.alfresco.com/images/alfresco_community_horiz20.gif"; {noformat} to: {noformat} private final static String ALF_LOGO = "/alfresco/images/logo/alfresco_community_horiz20.gif"; {noformat} ### Save the file. {warning} If you run this next step on the machine where the application is installed and have a TOMCAT_HOME environment variable defined, it will try to deploy everything to your Tomcat installation. The best thing to do is build this on a separate machine. {warning} ### Open a command prompt in the HEAD/root directory and type "ant build-tomcat". After a long wait, the build will actually fail if you don't have a TOMCAT_HOME defined in your environment. ### Once the build has failed you will need to create a new jar file called a0.jar with only the PageTag.class file in it. ### Copy the a0.jar file to the ./WEB-INF/lib directory. # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://oceana.shore.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Make sure startup/shutdown script in /etc/init.d is working correctly # I.S. then setup backup regime to do incremental backups nightly and full backups weekly # TODO: Verify I know where the MySQL files are and that we can restore them correctly. Also turn on binary logs and use a test machine to learn (and document here) how to restore from backup. {warning:title=IMPORTANT} For some strange reason, the Alfresco stack would seem to crash after 20-30 days of operation with some very cryptic errors. I found some entries in the forums about changing the ulimit value in linux. So I issued a 'ulimit -n 4096' and then restart Alfresco. I haven't seen that problem since. {warning}]]> 1835022 17891572 17858828 1867787 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 # I then moved the tar into the alfresco-2.0 directory # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### I also added the following lines at the end of the file to connect up to the external mail server {noformat} # # The external email server properties # mail.host=mail.shore.mbari.org mail.port=25 mail.username= mail.password= {noformat} ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0 {note} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {note} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.255.255 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # OK, this is a total HACK and needed to be done due to the wonderful world of open source. In Internet Explorer with SSL turned on, you would get a dialog pop-up that stated the secure server was trying to serve non-secure content. This was due to the Alfresco Community logo being served from http://www.alfresco.com. Only IE did this and you can work around it on the client end by doing the following: ## Startup IE. ## Go to Tools->Internet Options ... ## Click on Security tab ## Click on "Trusted Sites" zone ## Click on Sites button ## Make sure check box for "Require Server verification (https:) for all sites in this zone" is unchecked 7. Type in "http://www.alfresco.com" into the "Add this website to the zone:" text field and click Add. ## Click on close ## Make sure "Trusted Sites" is still selected. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on the "Local Intranet" zone. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on OK to close Internet Options dialog. # Now there are a couple of reasons why this is bad, but the main one is that if you are trying to reach this from outside the firewall, you will have to change those settings for the Internet Zone (I think) which is bad. Plus every user will have to do this. To get around this, I had to: ## Take [this|^alfresco_community_horiz20.gif] logo image and save it to ./images/logo directory. ## This next step can either be very easy or very complicated. You can try downloading [this|^a0.jar] jar file and copying it to ./WEB-INF/lib. If when you start up Alfresco you get some exceptions that look like they are related to a class called PageTag, you will have to do it the hard way: ### Now you have to actually check out the subversion source code from Alfresco. I am assuming you know how to do that. By the way, you will need ant and java installed to do this. The SVN URL for the repository is svn://www.alfresco.org/alfresco. ### Once it is checked out find the PageTag.java file (should be in HEAD/root/projects/web-client/source/java/org/alfresco/web/ui/repo/tag directory) and edit: #### Change the line {noformat} private final static String ALF_LOGO = "http://www.alfresco.com/images/alfresco_community_horiz20.gif"; {noformat} to: {noformat} private final static String ALF_LOGO = "/alfresco/images/logo/alfresco_community_horiz20.gif"; {noformat} ### Save the file. {warning} If you run this next step on the machine where the application is installed and have a TOMCAT_HOME environment variable defined, it will try to deploy everything to your Tomcat installation. The best thing to do is build this on a separate machine. {warning} ### Open a command prompt in the HEAD/root directory and type "ant build-tomcat". After a long wait, the build will actually fail if you don't have a TOMCAT_HOME defined in your environment. ### Once the build has failed you will need to create a new jar file called a0.jar with only the PageTag.class file in it. ### Copy the a0.jar file to the ./WEB-INF/lib directory. # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://oceana.shore.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Make sure startup/shutdown script in /etc/init.d is working correctly # I.S. then setup backup regime to do incremental backups nightly and full backups weekly # TODO: Verify I know where the MySQL files are and that we can restore them correctly. Also turn on binary logs and use a test machine to learn (and document here) how to restore from backup. {warning:title=IMPORTANT} For some strange reason, the Alfresco stack would seem to crash after 20-30 days of operation with some very cryptic errors. I found some entries in the forums about changing the ulimit value in linux. So I issued a 'ulimit -n 4096' and then restart Alfresco. I haven't seen that problem since. {warning}]]> 1835019 8946146 8913405 1867793 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 # I then moved the tar into the alfresco-2.0 directory # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### I also added the following lines at the end of the file to connect up to the external mail server {noformat} # # The external email server properties # mail.host=mail.shore.mbari.org mail.port=25 mail.username= mail.password= {noformat} ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0 {tip} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {tip} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {tip} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {tip} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.255.255 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # OK, this is a total HACK and needed to be done due to the wonderful world of open source. In Internet Explorer with SSL turned on, you would get a dialog pop-up that stated the secure server was trying to serve non-secure content. This was due to the Alfresco Community logo being served from http://www.alfresco.com. Only IE did this and you can work around it on the client end by doing the following: ## Startup IE. ## Go to Tools->Internet Options ... ## Click on Security tab ## Click on "Trusted Sites" zone ## Click on Sites button ## Make sure check box for "Require Server verification (https:) for all sites in this zone" is unchecked 7. Type in "http://www.alfresco.com" into the "Add this website to the zone:" text field and click Add. ## Click on close ## Make sure "Trusted Sites" is still selected. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on the "Local Intranet" zone. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on OK to close Internet Options dialog. # Now there are a couple of reasons why this is bad, but the main one is that if you are trying to reach this from outside the firewall, you will have to change those settings for the Internet Zone (I think) which is bad. Plus every user will have to do this. To get around this, I had to: ## Take [this|^alfresco_community_horiz20.gif] logo image and save it to ./images/logo directory. ## This next step can either be very easy or very complicated. You can try downloading [this|^a0.jar] jar file and copying it to ./WEB-INF/lib. If when you start up Alfresco you get some exceptions that look like they are related to a class called PageTag, you will have to do it the hard way: ### Now you have to actually check out the subversion source code from Alfresco. I am assuming you know how to do that. By the way, you will need ant and java installed to do this. The SVN URL for the repository is svn://www.alfresco.org/alfresco. ### Once it is checked out find the PageTag.java file (should be in HEAD/root/projects/web-client/source/java/org/alfresco/web/ui/repo/tag directory) and edit: #### Change the line {noformat} private final static String ALF_LOGO = "http://www.alfresco.com/images/alfresco_community_horiz20.gif"; {noformat} to: {noformat} private final static String ALF_LOGO = "/alfresco/images/logo/alfresco_community_horiz20.gif"; {noformat} ### Save the file. {warning} If you run this next step on the machine where the application is installed and have a TOMCAT_HOME environment variable defined, it will try to deploy everything to your Tomcat installation. The best thing to do is build this on a separate machine. {warning} ### Open a command prompt in the HEAD/root directory and type "ant build-tomcat". After a long wait, the build will actually fail if you don't have a TOMCAT_HOME defined in your environment. ### Once the build has failed you will need to create a new jar file called a0.jar with only the PageTag.class file in it. ### Copy the a0.jar file to the ./WEB-INF/lib directory. # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {tip} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {tip} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {tip} This takes a couple minutes as it has to first build the DB and all the indexes and such. {tip} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://oceana.shore.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Make sure startup/shutdown script in /etc/init.d is working correctly # I.S. then setup backup regime to do incremental backups nightly and full backups weekly # TODO: Verify I know where the MySQL files are and that we can restore them correctly. Also turn on binary logs and use a test machine to learn (and document here) how to restore from backup. {warning:title=IMPORTANT} For some strange reason, the Alfresco stack would seem to crash after 20-30 days of operation with some very cryptic errors. I found some entries in the forums about changing the ulimit value in linux. So I issued a 'ulimit -n 4096' and then restart Alfresco. I haven't seen that problem since. {warning}]]> 1835025 1867794 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) {note:title=Test Machine Installation Difference} Fedora core 7 had 5.2.2 installed {note} # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 {note:title=Test Machine Installation Difference} I named the directory alfresco-2.1 {note} # I then moved the tar into the alfresco-2.0 directory {note:title=Test Machine Installation Difference} alfreso-2.1 directory {note} # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### I also added the following lines at the end of the file to connect up to the external mail server {noformat} # # The external email server properties # mail.host=mail.shore.mbari.org mail.port=25 mail.username= mail.password= {noformat} ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0 {tip} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {tip} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {tip} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {tip} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.255.255 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # OK, this is a total HACK and needed to be done due to the wonderful world of open source. In Internet Explorer with SSL turned on, you would get a dialog pop-up that stated the secure server was trying to serve non-secure content. This was due to the Alfresco Community logo being served from http://www.alfresco.com. Only IE did this and you can work around it on the client end by doing the following: ## Startup IE. ## Go to Tools->Internet Options ... ## Click on Security tab ## Click on "Trusted Sites" zone ## Click on Sites button ## Make sure check box for "Require Server verification (https:) for all sites in this zone" is unchecked 7. Type in "http://www.alfresco.com" into the "Add this website to the zone:" text field and click Add. ## Click on close ## Make sure "Trusted Sites" is still selected. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on the "Local Intranet" zone. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on OK to close Internet Options dialog. # Now there are a couple of reasons why this is bad, but the main one is that if you are trying to reach this from outside the firewall, you will have to change those settings for the Internet Zone (I think) which is bad. Plus every user will have to do this. To get around this, I had to: ## Take [this|^alfresco_community_horiz20.gif] logo image and save it to ./images/logo directory. ## This next step can either be very easy or very complicated. You can try downloading [this|^a0.jar] jar file and copying it to ./WEB-INF/lib. If when you start up Alfresco you get some exceptions that look like they are related to a class called PageTag, you will have to do it the hard way: ### Now you have to actually check out the subversion source code from Alfresco. I am assuming you know how to do that. By the way, you will need ant and java installed to do this. The SVN URL for the repository is svn://www.alfresco.org/alfresco. ### Once it is checked out find the PageTag.java file (should be in HEAD/root/projects/web-client/source/java/org/alfresco/web/ui/repo/tag directory) and edit: #### Change the line {noformat} private final static String ALF_LOGO = "http://www.alfresco.com/images/alfresco_community_horiz20.gif"; {noformat} to: {noformat} private final static String ALF_LOGO = "/alfresco/images/logo/alfresco_community_horiz20.gif"; {noformat} ### Save the file. {warning} If you run this next step on the machine where the application is installed and have a TOMCAT_HOME environment variable defined, it will try to deploy everything to your Tomcat installation. The best thing to do is build this on a separate machine. {warning} ### Open a command prompt in the HEAD/root directory and type "ant build-tomcat". After a long wait, the build will actually fail if you don't have a TOMCAT_HOME defined in your environment. ### Once the build has failed you will need to create a new jar file called a0.jar with only the PageTag.class file in it. ### Copy the a0.jar file to the ./WEB-INF/lib directory. # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {tip} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {tip} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {tip} This takes a couple minutes as it has to first build the DB and all the indexes and such. {tip} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://oceana.shore.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Make sure startup/shutdown script in /etc/init.d is working correctly # I.S. then setup backup regime to do incremental backups nightly and full backups weekly # TODO: Verify I know where the MySQL files are and that we can restore them correctly. Also turn on binary logs and use a test machine to learn (and document here) how to restore from backup. {warning:title=IMPORTANT} For some strange reason, the Alfresco stack would seem to crash after 20-30 days of operation with some very cryptic errors. I found some entries in the forums about changing the ulimit value in linux. So I issued a 'ulimit -n 4096' and then restart Alfresco. I haven't seen that problem since. {warning}]]> 1835026 8946144 8913403 1867791 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 # I then moved the tar into the alfresco-2.0 directory # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### I also added the following lines at the end of the file to connect up to the external mail server {noformat} # # The external email server properties # mail.host=mail.shore.mbari.org mail.port=25 mail.username= mail.password= {noformat} ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0 {tip} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {tip} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {tip} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {tip} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.255.255 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # OK, this is a total HACK and needed to be done due to the wonderful world of open source. In Internet Explorer with SSL turned on, you would get a dialog pop-up that stated the secure server was trying to serve non-secure content. This was due to the Alfresco Community logo being served from http://www.alfresco.com. Only IE did this and you can work around it on the client end by doing the following: ## Startup IE. ## Go to Tools->Internet Options ... ## Click on Security tab ## Click on "Trusted Sites" zone ## Click on Sites button ## Make sure check box for "Require Server verification (https:) for all sites in this zone" is unchecked 7. Type in "http://www.alfresco.com" into the "Add this website to the zone:" text field and click Add. ## Click on close ## Make sure "Trusted Sites" is still selected. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on the "Local Intranet" zone. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on OK to close Internet Options dialog. # Now there are a couple of reasons why this is bad, but the main one is that if you are trying to reach this from outside the firewall, you will have to change those settings for the Internet Zone (I think) which is bad. Plus every user will have to do this. To get around this, I had to: ## Take [this|^alfresco_community_horiz20.gif] logo image and save it to ./images/logo directory. ## This next step can either be very easy or very complicated. You can try downloading [this|^a0.jar] jar file and copying it to ./WEB-INF/lib. If when you start up Alfresco you get some exceptions that look like they are related to a class called PageTag, you will have to do it the hard way: ### Now you have to actually check out the subversion source code from Alfresco. I am assuming you know how to do that. By the way, you will need ant and java installed to do this. The SVN URL for the repository is svn://www.alfresco.org/alfresco. ### Once it is checked out find the PageTag.java file (should be in HEAD/root/projects/web-client/source/java/org/alfresco/web/ui/repo/tag directory) and edit: #### Change the line {noformat} private final static String ALF_LOGO = "http://www.alfresco.com/images/alfresco_community_horiz20.gif"; {noformat} to: {noformat} private final static String ALF_LOGO = "/alfresco/images/logo/alfresco_community_horiz20.gif"; {noformat} ### Save the file. {warning} If you run this next step on the machine where the application is installed and have a TOMCAT_HOME environment variable defined, it will try to deploy everything to your Tomcat installation. The best thing to do is build this on a separate machine. {warning} ### Open a command prompt in the HEAD/root directory and type "ant build-tomcat". After a long wait, the build will actually fail if you don't have a TOMCAT_HOME defined in your environment. ### Once the build has failed you will need to create a new jar file called a0.jar with only the PageTag.class file in it. ### Copy the a0.jar file to the ./WEB-INF/lib directory. # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {tip} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {tip} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {tip} This takes a couple minutes as it has to first build the DB and all the indexes and such. {tip} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://oceana.shore.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Make sure startup/shutdown script in /etc/init.d is working correctly # I.S. then setup backup regime to do incremental backups nightly and full backups weekly # TODO: Verify I know where the MySQL files are and that we can restore them correctly. Also turn on binary logs and use a test machine to learn (and document here) how to restore from backup. {warning:title=IMPORTANT} For some strange reason, the Alfresco stack would seem to crash after 20-30 days of operation with some very cryptic errors. I found some entries in the forums about changing the ulimit value in linux. So I issued a 'ulimit -n 4096' and then restart Alfresco. I haven't seen that problem since. {warning}]]> 1835023 1867792 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 # I then moved the tar into the alfresco-2.0 directory # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### I also added the following lines at the end of the file to connect up to the external mail server {noformat} # # The external email server properties # mail.host=mail.shore.mbari.org mail.port=25 mail.username= mail.password= {noformat} ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0 {tip} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {tip} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {tip} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {tip} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.255.255 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # OK, this is a total HACK and needed to be done due to the wonderful world of open source. In Internet Explorer with SSL turned on, you would get a dialog pop-up that stated the secure server was trying to serve non-secure content. This was due to the Alfresco Community logo being served from http://www.alfresco.com. Only IE did this and you can work around it on the client end by doing the following: ## Startup IE. ## Go to Tools->Internet Options ... ## Click on Security tab ## Click on "Trusted Sites" zone ## Click on Sites button ## Make sure check box for "Require Server verification (https:) for all sites in this zone" is unchecked 7. Type in "http://www.alfresco.com" into the "Add this website to the zone:" text field and click Add. ## Click on close ## Make sure "Trusted Sites" is still selected. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on the "Local Intranet" zone. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on OK to close Internet Options dialog. # Now there are a couple of reasons why this is bad, but the main one is that if you are trying to reach this from outside the firewall, you will have to change those settings for the Internet Zone (I think) which is bad. Plus every user will have to do this. To get around this, I had to: ## Take [this|^alfresco_community_horiz20.gif] logo image and save it to ./images/logo directory. ## This next step can either be very easy or very complicated. You can try downloading [this|^a0.jar] jar file and copying it to ./WEB-INF/lib. If when you start up Alfresco you get some exceptions that look like they are related to a class called PageTag, you will have to do it the hard way: ### Now you have to actually check out the subversion source code from Alfresco. I am assuming you know how to do that. By the way, you will need ant and java installed to do this. The SVN URL for the repository is svn://www.alfresco.org/alfresco. ### Once it is checked out find the PageTag.java file (should be in HEAD/root/projects/web-client/source/java/org/alfresco/web/ui/repo/tag directory) and edit: #### Change the line {noformat} private final static String ALF_LOGO = "http://www.alfresco.com/images/alfresco_community_horiz20.gif"; {noformat} to: {noformat} private final static String ALF_LOGO = "/alfresco/images/logo/alfresco_community_horiz20.gif"; {noformat} ### Save the file. {warning} If you run this next step on the machine where the application is installed and have a TOMCAT_HOME environment variable defined, it will try to deploy everything to your Tomcat installation. The best thing to do is build this on a separate machine. {warning} ### Open a command prompt in the HEAD/root directory and type "ant build-tomcat". After a long wait, the build will actually fail if you don't have a TOMCAT_HOME defined in your environment. ### Once the build has failed you will need to create a new jar file called a0.jar with only the PageTag.class file in it. ### Copy the a0.jar file to the ./WEB-INF/lib directory. # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {tip} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {tip} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {tip} This takes a couple minutes as it has to first build the DB and all the indexes and such. {tip} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://oceana.shore.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Make sure startup/shutdown script in /etc/init.d is working correctly # I.S. then setup backup regime to do incremental backups nightly and full backups weekly # TODO: Verify I know where the MySQL files are and that we can restore them correctly. Also turn on binary logs and use a test machine to learn (and document here) how to restore from backup. {warning:title=IMPORTANT} For some strange reason, the Alfresco stack would seem to crash after 20-30 days of operation with some very cryptic errors. I found some entries in the forums about changing the ulimit value in linux. So I issued a 'ulimit -n 4096' and then restart Alfresco. I haven't seen that problem since. {warning}]]> 1835024 3670420 3637665 3670419 3637664 3670422 3637667 3670421 3637666 3670418 3637663 1867803 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) {note:title=Test Machine Installation Difference} Fedora core 7 had 5.2.2 installed {note} # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 {note:title=Test Machine Installation Difference} I named the directory alfresco-2.1 {note} # I then moved the tar into the alfresco-2.0 directory {note:title=Test Machine Installation Difference} alfreso-2.1 directory {note} # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} {note:title=Test Machine Installation Difference} This was a bit different in FC7. In order to get Xvfb installed I used "Add/Remove Software" to install it. OpenOffice was already installed so I just had to find the soffice command location. The command to get Xvfb running was also a bit different. I had to create a ascii file called /etc/xvfb-auth.cfg that only had one line in it that read 'localhost'. Then the command to start Xvfb was 'Xvfb :1 -auth /etc/xvfb-auth.cfg'. Then I could start soffice the same way. I changed the start_oo.sh file to reflect those commands. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} {note:title=Test Machine Installation Difference} Did not do this {note} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data {note:title=Test Machine Installation Difference} /data/alfresco-2.1 {note} ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml {note:title=Test Machine Installation Difference} This file already existed and was no different from the sample, so I skipped this step {note} ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: {note:title=Test Machine Installation Difference} This file already existed and so copied the original to custom-repository.properties.orig and edited the existing one. {note} ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) {note:title=Test Machine Installation Difference} I changed them to work with the MS SQL Server login so they looked like: db.username=DB_Collaboration db.password=******** db.pool.initial=10 db.pool.max=100 {note} ### Uncommented db.schema.update=true {tip:title=Comment back out} After the DB has been created (tables and such) you can comment this out to prevent DB changes in the future. {tip} ### I commented out the two HSQL connection lines ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' {note:title=Test Machine Installation Difference} Left the MySQL lines commented out, but uncommented the SQLServer lines and changed them to db.driver=net.sourceforge.jtds.jdbc.Driver db.url=jdbc:jtds:sqlserver://solstice.shore.mbari.org/Alfresco;domain=SHORE;user=DB_Collaboration;password=****** {note} ### I also added the following lines at the end of the file to connect up to the external mail server {noformat} # # The external email server properties # mail.host=mail.shore.mbari.org mail.port=25 mail.username= mail.password= {noformat} ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties {note:title=Test Machine Installation Difference} Already existed, so backuped up to .orig and edited to comment out the HSQL and uncomment the SQLServer one. {note} ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line {note:title=Test Machine Installation Difference} The downloaded alfresco already has the MySQL driver jar in the install, but since I am using SQLServer, I downloaded the jtds driver from the internet and installed the jtds-X.X.X.jar file in the /opt/alfresco-2.1/tomcat/common/lib to make it available to alfresco. {note} # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0. I also added the following line after the line that stated 'killall soffice.bin': killall Xvfb. That ensured the Xvfb process was killed when alfresco was shutdown. {note:title=Test Machine Installation Difference} Set it to /opt/alfresco-2.1/tomcat for the test machine {note} {tip} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {tip} {note:title=Test Machine Installation Difference} For the test machine, I wasn't too worried about details, so I skipped the next 15 or so steps (picks up again at configuring for MBARI LDAP below. {note} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {tip} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {tip} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.255.255 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # OK, this is a total HACK and needed to be done due to the wonderful world of open source. In Internet Explorer with SSL turned on, you would get a dialog pop-up that stated the secure server was trying to serve non-secure content. This was due to the Alfresco Community logo being served from http://www.alfresco.com. Only IE did this and you can work around it on the client end by doing the following: ## Startup IE. ## Go to Tools->Internet Options ... ## Click on Security tab ## Click on "Trusted Sites" zone ## Click on Sites button ## Make sure check box for "Require Server verification (https:) for all sites in this zone" is unchecked 7. Type in "http://www.alfresco.com" into the "Add this website to the zone:" text field and click Add. ## Click on close ## Make sure "Trusted Sites" is still selected. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on the "Local Intranet" zone. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on OK to close Internet Options dialog. # Now there are a couple of reasons why this is bad, but the main one is that if you are trying to reach this from outside the firewall, you will have to change those settings for the Internet Zone (I think) which is bad. Plus every user will have to do this. To get around this, I had to: ## Take [this|^alfresco_community_horiz20.gif] logo image and save it to ./images/logo directory. ## This next step can either be very easy or very complicated. You can try downloading [this|^a0.jar] jar file and copying it to ./WEB-INF/lib. If when you start up Alfresco you get some exceptions that look like they are related to a class called PageTag, you will have to do it the hard way: ### Now you have to actually check out the subversion source code from Alfresco. I am assuming you know how to do that. By the way, you will need ant and java installed to do this. The SVN URL for the repository is svn://www.alfresco.org/alfresco. ### Once it is checked out find the PageTag.java file (should be in HEAD/root/projects/web-client/source/java/org/alfresco/web/ui/repo/tag directory) and edit: #### Change the line {noformat} private final static String ALF_LOGO = "http://www.alfresco.com/images/alfresco_community_horiz20.gif"; {noformat} to: {noformat} private final static String ALF_LOGO = "/alfresco/images/logo/alfresco_community_horiz20.gif"; {noformat} ### Save the file. {warning} If you run this next step on the machine where the application is installed and have a TOMCAT_HOME environment variable defined, it will try to deploy everything to your Tomcat installation. The best thing to do is build this on a separate machine. {warning} ### Open a command prompt in the HEAD/root directory and type "ant build-tomcat". After a long wait, the build will actually fail if you don't have a TOMCAT_HOME defined in your environment. ### Once the build has failed you will need to create a new jar file called a0.jar with only the PageTag.class file in it. ### Copy the a0.jar file to the ./WEB-INF/lib directory. # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {tip} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {tip} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. {note:title=Test Machine Installation Difference} Did not setup SSL for the test machine {note} ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {tip} This takes a couple minutes as it has to first build the DB and all the indexes and such. {tip} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://oceana.shore.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Make sure startup/shutdown script in /etc/init.d is working correctly # I.S. then setup backup regime to do incremental backups nightly and full backups weekly # TODO: Verify I know where the MySQL files are and that we can restore them correctly. Also turn on binary logs and use a test machine to learn (and document here) how to restore from backup. {warning:title=IMPORTANT} For some strange reason, the Alfresco stack would seem to crash after 20-30 days of operation with some very cryptic errors. I found some entries in the forums about changing the ulimit value in linux. So I issued a 'ulimit -n 4096' and then restart Alfresco. I haven't seen that problem since. {warning}]]> 1835035 3670412 3637657 3670413 3637658 3670407 3637652 1867798 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) {note:title=Test Machine Installation Difference} Fedora core 7 had 5.2.2 installed {note} # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 {note:title=Test Machine Installation Difference} I named the directory alfresco-2.1 {note} # I then moved the tar into the alfresco-2.0 directory {note:title=Test Machine Installation Difference} alfreso-2.1 directory {note} # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} {note:title=Test Machine Installation Difference} This was a bit different in FC7. In order to get Xvfb installed I used "Add/Remove Software" to install it. OpenOffice was already installed so I just had to find the soffice command location. The command to get Xvfb running was also a bit different. I had to create a ascii file called /etc/xvfb-auth.cfg that only had one line in it that read 'localhost'. Then the command to start Xvfb was 'Xvfb :1 -auth /etc/xvfb-auth.cfg'. Then I could start soffice the same way. I changed the start_oo.sh file to reflect those commands. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} {note:title=Test Machine Installation Difference} Did not do this {note} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data {note:title=Test Machine Installation Difference} /data/alfresco-2.1 {note} ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml {note:title=Test Machine Installation Difference} This file already existed and was no different from the sample, so I skipped this step {note} ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: {note:title=Test Machine Installation Difference} This file already existed and so copied the original to custom-repository.properties.orig and edited the existing one. {note} ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) {note:title=Test Machine Installation Difference} I changed them to work with the MS SQL Server login so they looked like: db.username=DB_Collaboration db.password=******** db.pool.initial=10 db.pool.max=100 {note} ### Uncommented db.schema.update=true ### I commented out the two HSQL connection lines ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' {note:title=Test Machine Installation Difference} Left the MySQL lines commented out, but uncommented the SQLServer lines and changed them to db.driver=net.sourceforge.jtds.jdbc.Driver db.url=jdbc:jtds:sqlserver://solstice.shore.mbari.org/Alfresco;domain=SHORE;user=DB_Collaboration;password=****** {note} ### I also added the following lines at the end of the file to connect up to the external mail server {noformat} # # The external email server properties # mail.host=mail.shore.mbari.org mail.port=25 mail.username= mail.password= {noformat} ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties {note:title=Test Machine Installation Difference} Already existed, so backuped up to .orig and edited to comment out the HSQL and uncomment the SQLServer one. {note} ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line {note:title=Test Machine Installation Difference} The downloaded alfresco already has the MySQL driver jar in the install, but since I am using SQLServer, I downloaded the jtds driver from the internet and installed the jtds-X.X.X.jar file in the /opt/alfresco-2.1/tomcat/common/lib to make it available to alfresco. {note} # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0 {note:title=Test Machine Installation Difference} Set it to /opt/alfresco-2.1/tomcat for the test machine {note} {tip} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {tip} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {tip} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {tip} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.255.255 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # OK, this is a total HACK and needed to be done due to the wonderful world of open source. In Internet Explorer with SSL turned on, you would get a dialog pop-up that stated the secure server was trying to serve non-secure content. This was due to the Alfresco Community logo being served from http://www.alfresco.com. Only IE did this and you can work around it on the client end by doing the following: ## Startup IE. ## Go to Tools->Internet Options ... ## Click on Security tab ## Click on "Trusted Sites" zone ## Click on Sites button ## Make sure check box for "Require Server verification (https:) for all sites in this zone" is unchecked 7. Type in "http://www.alfresco.com" into the "Add this website to the zone:" text field and click Add. ## Click on close ## Make sure "Trusted Sites" is still selected. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on the "Local Intranet" zone. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on OK to close Internet Options dialog. # Now there are a couple of reasons why this is bad, but the main one is that if you are trying to reach this from outside the firewall, you will have to change those settings for the Internet Zone (I think) which is bad. Plus every user will have to do this. To get around this, I had to: ## Take [this|^alfresco_community_horiz20.gif] logo image and save it to ./images/logo directory. ## This next step can either be very easy or very complicated. You can try downloading [this|^a0.jar] jar file and copying it to ./WEB-INF/lib. If when you start up Alfresco you get some exceptions that look like they are related to a class called PageTag, you will have to do it the hard way: ### Now you have to actually check out the subversion source code from Alfresco. I am assuming you know how to do that. By the way, you will need ant and java installed to do this. The SVN URL for the repository is svn://www.alfresco.org/alfresco. ### Once it is checked out find the PageTag.java file (should be in HEAD/root/projects/web-client/source/java/org/alfresco/web/ui/repo/tag directory) and edit: #### Change the line {noformat} private final static String ALF_LOGO = "http://www.alfresco.com/images/alfresco_community_horiz20.gif"; {noformat} to: {noformat} private final static String ALF_LOGO = "/alfresco/images/logo/alfresco_community_horiz20.gif"; {noformat} ### Save the file. {warning} If you run this next step on the machine where the application is installed and have a TOMCAT_HOME environment variable defined, it will try to deploy everything to your Tomcat installation. The best thing to do is build this on a separate machine. {warning} ### Open a command prompt in the HEAD/root directory and type "ant build-tomcat". After a long wait, the build will actually fail if you don't have a TOMCAT_HOME defined in your environment. ### Once the build has failed you will need to create a new jar file called a0.jar with only the PageTag.class file in it. ### Copy the a0.jar file to the ./WEB-INF/lib directory. # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {tip} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {tip} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {tip} This takes a couple minutes as it has to first build the DB and all the indexes and such. {tip} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://oceana.shore.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Make sure startup/shutdown script in /etc/init.d is working correctly # I.S. then setup backup regime to do incremental backups nightly and full backups weekly # TODO: Verify I know where the MySQL files are and that we can restore them correctly. Also turn on binary logs and use a test machine to learn (and document here) how to restore from backup. {warning:title=IMPORTANT} For some strange reason, the Alfresco stack would seem to crash after 20-30 days of operation with some very cryptic errors. I found some entries in the forums about changing the ulimit value in linux. So I issued a 'ulimit -n 4096' and then restart Alfresco. I haven't seen that problem since. {warning}]]> 1835030 3670408 3637653 1867797 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) {note:title=Test Machine Installation Difference} Fedora core 7 had 5.2.2 installed {note} # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 {note:title=Test Machine Installation Difference} I named the directory alfresco-2.1 {note} # I then moved the tar into the alfresco-2.0 directory {note:title=Test Machine Installation Difference} alfreso-2.1 directory {note} # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} {note:title=Test Machine Installation Difference} This was a bit different in FC7. In order to get Xvfb installed I used "Add/Remove Software" to install it. OpenOffice was already installed so I just had to find the soffice command location. The command to get Xvfb running was also a bit different. I had to create a ascii file called /etc/xvfb-auth.cfg that only had one line in it that read 'localhost'. Then the command to start Xvfb was 'Xvfb :1 -auth /ect/xvfb-auth.cfg'. Then I could start soffice the same way. I changed the start_oo.sh file to reflect those commands. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} {note:title=Test Machine Installation Difference} Did not do this {note} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data {note:title=Test Machine Installation Difference} /data/alfresco-2.1 {note} ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml {note:title=Test Machine Installation Difference} This file already existed and was no different from the sample, so I skipped this step {note} ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: {note:title=Test Machine Installation Difference} This file already existed and so copied the original to custom-repository.properties.orig and edited the existing one. {note} ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) {note:title=Test Machine Installation Difference} I changed them to work with the MS SQL Server login so they looked like: db.username=DB_Collaboration db.password=******** db.pool.initial=10 db.pool.max=100 {note} ### Uncommented db.schema.update=true ### I commented out the two HSQL connection lines ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' {note:title=Test Machine Installation Difference} Left the MySQL lines commented out, but uncommented the SQLServer lines and changed them to db.driver=net.sourceforge.jtds.jdbc.Driver db.url=jdbc:jtds:sqlserver://solstice.shore.mbari.org/Alfresco;domain=SHORE;user=DB_Collaboration;password=****** {note} ### I also added the following lines at the end of the file to connect up to the external mail server {noformat} # # The external email server properties # mail.host=mail.shore.mbari.org mail.port=25 mail.username= mail.password= {noformat} ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties {note:title=Test Machine Installation Difference} Already existed, so backuped up to .orig and edited to comment out the HSQL and uncomment the SQLServer one. {note} ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0 {tip} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {tip} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {tip} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {tip} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.255.255 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # OK, this is a total HACK and needed to be done due to the wonderful world of open source. In Internet Explorer with SSL turned on, you would get a dialog pop-up that stated the secure server was trying to serve non-secure content. This was due to the Alfresco Community logo being served from http://www.alfresco.com. Only IE did this and you can work around it on the client end by doing the following: ## Startup IE. ## Go to Tools->Internet Options ... ## Click on Security tab ## Click on "Trusted Sites" zone ## Click on Sites button ## Make sure check box for "Require Server verification (https:) for all sites in this zone" is unchecked 7. Type in "http://www.alfresco.com" into the "Add this website to the zone:" text field and click Add. ## Click on close ## Make sure "Trusted Sites" is still selected. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on the "Local Intranet" zone. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on OK to close Internet Options dialog. # Now there are a couple of reasons why this is bad, but the main one is that if you are trying to reach this from outside the firewall, you will have to change those settings for the Internet Zone (I think) which is bad. Plus every user will have to do this. To get around this, I had to: ## Take [this|^alfresco_community_horiz20.gif] logo image and save it to ./images/logo directory. ## This next step can either be very easy or very complicated. You can try downloading [this|^a0.jar] jar file and copying it to ./WEB-INF/lib. If when you start up Alfresco you get some exceptions that look like they are related to a class called PageTag, you will have to do it the hard way: ### Now you have to actually check out the subversion source code from Alfresco. I am assuming you know how to do that. By the way, you will need ant and java installed to do this. The SVN URL for the repository is svn://www.alfresco.org/alfresco. ### Once it is checked out find the PageTag.java file (should be in HEAD/root/projects/web-client/source/java/org/alfresco/web/ui/repo/tag directory) and edit: #### Change the line {noformat} private final static String ALF_LOGO = "http://www.alfresco.com/images/alfresco_community_horiz20.gif"; {noformat} to: {noformat} private final static String ALF_LOGO = "/alfresco/images/logo/alfresco_community_horiz20.gif"; {noformat} ### Save the file. {warning} If you run this next step on the machine where the application is installed and have a TOMCAT_HOME environment variable defined, it will try to deploy everything to your Tomcat installation. The best thing to do is build this on a separate machine. {warning} ### Open a command prompt in the HEAD/root directory and type "ant build-tomcat". After a long wait, the build will actually fail if you don't have a TOMCAT_HOME defined in your environment. ### Once the build has failed you will need to create a new jar file called a0.jar with only the PageTag.class file in it. ### Copy the a0.jar file to the ./WEB-INF/lib directory. # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {tip} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {tip} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {tip} This takes a couple minutes as it has to first build the DB and all the indexes and such. {tip} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://oceana.shore.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Make sure startup/shutdown script in /etc/init.d is working correctly # I.S. then setup backup regime to do incremental backups nightly and full backups weekly # TODO: Verify I know where the MySQL files are and that we can restore them correctly. Also turn on binary logs and use a test machine to learn (and document here) how to restore from backup. {warning:title=IMPORTANT} For some strange reason, the Alfresco stack would seem to crash after 20-30 days of operation with some very cryptic errors. I found some entries in the forums about changing the ulimit value in linux. So I issued a 'ulimit -n 4096' and then restart Alfresco. I haven't seen that problem since. {warning}]]> 1835029 1867796 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) {note:title=Test Machine Installation Difference} Fedora core 7 had 5.2.2 installed {note} # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 {note:title=Test Machine Installation Difference} I named the directory alfresco-2.1 {note} # I then moved the tar into the alfresco-2.0 directory {note:title=Test Machine Installation Difference} alfreso-2.1 directory {note} # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} {note:title=Test Machine Installation Difference} This was a bit different in FC7. In order to get Xvfb installed I used "Add/Remove Software" to install it. OpenOffice was already installed so I just had to find the soffice command location. The command to get Xvfb running was also a bit different. I had to create a ascii file called /etc/xvfb-auth.cfg that only had one line in it that read 'localhost'. Then the command to start Xvfb was 'Xvfb :1 -auth /ect/xvfb-auth.cfg'. Then I could start soffice the same way. I changed the start_oo.sh file to reflect those commands. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### I also added the following lines at the end of the file to connect up to the external mail server {noformat} # # The external email server properties # mail.host=mail.shore.mbari.org mail.port=25 mail.username= mail.password= {noformat} ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0 {tip} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {tip} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {tip} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {tip} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.255.255 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # OK, this is a total HACK and needed to be done due to the wonderful world of open source. In Internet Explorer with SSL turned on, you would get a dialog pop-up that stated the secure server was trying to serve non-secure content. This was due to the Alfresco Community logo being served from http://www.alfresco.com. Only IE did this and you can work around it on the client end by doing the following: ## Startup IE. ## Go to Tools->Internet Options ... ## Click on Security tab ## Click on "Trusted Sites" zone ## Click on Sites button ## Make sure check box for "Require Server verification (https:) for all sites in this zone" is unchecked 7. Type in "http://www.alfresco.com" into the "Add this website to the zone:" text field and click Add. ## Click on close ## Make sure "Trusted Sites" is still selected. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on the "Local Intranet" zone. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on OK to close Internet Options dialog. # Now there are a couple of reasons why this is bad, but the main one is that if you are trying to reach this from outside the firewall, you will have to change those settings for the Internet Zone (I think) which is bad. Plus every user will have to do this. To get around this, I had to: ## Take [this|^alfresco_community_horiz20.gif] logo image and save it to ./images/logo directory. ## This next step can either be very easy or very complicated. You can try downloading [this|^a0.jar] jar file and copying it to ./WEB-INF/lib. If when you start up Alfresco you get some exceptions that look like they are related to a class called PageTag, you will have to do it the hard way: ### Now you have to actually check out the subversion source code from Alfresco. I am assuming you know how to do that. By the way, you will need ant and java installed to do this. The SVN URL for the repository is svn://www.alfresco.org/alfresco. ### Once it is checked out find the PageTag.java file (should be in HEAD/root/projects/web-client/source/java/org/alfresco/web/ui/repo/tag directory) and edit: #### Change the line {noformat} private final static String ALF_LOGO = "http://www.alfresco.com/images/alfresco_community_horiz20.gif"; {noformat} to: {noformat} private final static String ALF_LOGO = "/alfresco/images/logo/alfresco_community_horiz20.gif"; {noformat} ### Save the file. {warning} If you run this next step on the machine where the application is installed and have a TOMCAT_HOME environment variable defined, it will try to deploy everything to your Tomcat installation. The best thing to do is build this on a separate machine. {warning} ### Open a command prompt in the HEAD/root directory and type "ant build-tomcat". After a long wait, the build will actually fail if you don't have a TOMCAT_HOME defined in your environment. ### Once the build has failed you will need to create a new jar file called a0.jar with only the PageTag.class file in it. ### Copy the a0.jar file to the ./WEB-INF/lib directory. # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {tip} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {tip} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {tip} This takes a couple minutes as it has to first build the DB and all the indexes and such. {tip} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://oceana.shore.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Make sure startup/shutdown script in /etc/init.d is working correctly # I.S. then setup backup regime to do incremental backups nightly and full backups weekly # TODO: Verify I know where the MySQL files are and that we can restore them correctly. Also turn on binary logs and use a test machine to learn (and document here) how to restore from backup. {warning:title=IMPORTANT} For some strange reason, the Alfresco stack would seem to crash after 20-30 days of operation with some very cryptic errors. I found some entries in the forums about changing the ulimit value in linux. So I issued a 'ulimit -n 4096' and then restart Alfresco. I haven't seen that problem since. {warning}]]> 1835028 3670410 3637655 1867795 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) {note:title=Test Machine Installation Difference} Fedora core 7 had 5.2.2 installed {note} # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 {note:title=Test Machine Installation Difference} I named the directory alfresco-2.1 {note} # I then moved the tar into the alfresco-2.0 directory {note:title=Test Machine Installation Difference} alfreso-2.1 directory {note} # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} {note:title=Test Machine Installation Difference} This was a bit different in FC7. In order to get Xvfb installed I used "Add/Remove Software" to install it. OpenOffice was already installed so I just had to find the soffice command location. The rest of it was the same. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### I also added the following lines at the end of the file to connect up to the external mail server {noformat} # # The external email server properties # mail.host=mail.shore.mbari.org mail.port=25 mail.username= mail.password= {noformat} ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0 {tip} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {tip} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {tip} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {tip} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.255.255 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # OK, this is a total HACK and needed to be done due to the wonderful world of open source. In Internet Explorer with SSL turned on, you would get a dialog pop-up that stated the secure server was trying to serve non-secure content. This was due to the Alfresco Community logo being served from http://www.alfresco.com. Only IE did this and you can work around it on the client end by doing the following: ## Startup IE. ## Go to Tools->Internet Options ... ## Click on Security tab ## Click on "Trusted Sites" zone ## Click on Sites button ## Make sure check box for "Require Server verification (https:) for all sites in this zone" is unchecked 7. Type in "http://www.alfresco.com" into the "Add this website to the zone:" text field and click Add. ## Click on close ## Make sure "Trusted Sites" is still selected. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on the "Local Intranet" zone. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on OK to close Internet Options dialog. # Now there are a couple of reasons why this is bad, but the main one is that if you are trying to reach this from outside the firewall, you will have to change those settings for the Internet Zone (I think) which is bad. Plus every user will have to do this. To get around this, I had to: ## Take [this|^alfresco_community_horiz20.gif] logo image and save it to ./images/logo directory. ## This next step can either be very easy or very complicated. You can try downloading [this|^a0.jar] jar file and copying it to ./WEB-INF/lib. If when you start up Alfresco you get some exceptions that look like they are related to a class called PageTag, you will have to do it the hard way: ### Now you have to actually check out the subversion source code from Alfresco. I am assuming you know how to do that. By the way, you will need ant and java installed to do this. The SVN URL for the repository is svn://www.alfresco.org/alfresco. ### Once it is checked out find the PageTag.java file (should be in HEAD/root/projects/web-client/source/java/org/alfresco/web/ui/repo/tag directory) and edit: #### Change the line {noformat} private final static String ALF_LOGO = "http://www.alfresco.com/images/alfresco_community_horiz20.gif"; {noformat} to: {noformat} private final static String ALF_LOGO = "/alfresco/images/logo/alfresco_community_horiz20.gif"; {noformat} ### Save the file. {warning} If you run this next step on the machine where the application is installed and have a TOMCAT_HOME environment variable defined, it will try to deploy everything to your Tomcat installation. The best thing to do is build this on a separate machine. {warning} ### Open a command prompt in the HEAD/root directory and type "ant build-tomcat". After a long wait, the build will actually fail if you don't have a TOMCAT_HOME defined in your environment. ### Once the build has failed you will need to create a new jar file called a0.jar with only the PageTag.class file in it. ### Copy the a0.jar file to the ./WEB-INF/lib directory. # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {tip} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {tip} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {tip} This takes a couple minutes as it has to first build the DB and all the indexes and such. {tip} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://oceana.shore.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Make sure startup/shutdown script in /etc/init.d is working correctly # I.S. then setup backup regime to do incremental backups nightly and full backups weekly # TODO: Verify I know where the MySQL files are and that we can restore them correctly. Also turn on binary logs and use a test machine to learn (and document here) how to restore from backup. {warning:title=IMPORTANT} For some strange reason, the Alfresco stack would seem to crash after 20-30 days of operation with some very cryptic errors. I found some entries in the forums about changing the ulimit value in linux. So I issued a 'ulimit -n 4096' and then restart Alfresco. I haven't seen that problem since. {warning}]]> 1835027 3670403 3637648 1867802 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) {note:title=Test Machine Installation Difference} Fedora core 7 had 5.2.2 installed {note} # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 {note:title=Test Machine Installation Difference} I named the directory alfresco-2.1 {note} # I then moved the tar into the alfresco-2.0 directory {note:title=Test Machine Installation Difference} alfreso-2.1 directory {note} # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} {note:title=Test Machine Installation Difference} This was a bit different in FC7. In order to get Xvfb installed I used "Add/Remove Software" to install it. OpenOffice was already installed so I just had to find the soffice command location. The command to get Xvfb running was also a bit different. I had to create a ascii file called /etc/xvfb-auth.cfg that only had one line in it that read 'localhost'. Then the command to start Xvfb was 'Xvfb :1 -auth /etc/xvfb-auth.cfg'. Then I could start soffice the same way. I changed the start_oo.sh file to reflect those commands. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} {note:title=Test Machine Installation Difference} Did not do this {note} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data {note:title=Test Machine Installation Difference} /data/alfresco-2.1 {note} ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml {note:title=Test Machine Installation Difference} This file already existed and was no different from the sample, so I skipped this step {note} ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: {note:title=Test Machine Installation Difference} This file already existed and so copied the original to custom-repository.properties.orig and edited the existing one. {note} ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) {note:title=Test Machine Installation Difference} I changed them to work with the MS SQL Server login so they looked like: db.username=DB_Collaboration db.password=******** db.pool.initial=10 db.pool.max=100 {note} ### Uncommented db.schema.update=true ### I commented out the two HSQL connection lines ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' {note:title=Test Machine Installation Difference} Left the MySQL lines commented out, but uncommented the SQLServer lines and changed them to db.driver=net.sourceforge.jtds.jdbc.Driver db.url=jdbc:jtds:sqlserver://solstice.shore.mbari.org/Alfresco;domain=SHORE;user=DB_Collaboration;password=****** {note} ### I also added the following lines at the end of the file to connect up to the external mail server {noformat} # # The external email server properties # mail.host=mail.shore.mbari.org mail.port=25 mail.username= mail.password= {noformat} ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties {note:title=Test Machine Installation Difference} Already existed, so backuped up to .orig and edited to comment out the HSQL and uncomment the SQLServer one. {note} ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line {note:title=Test Machine Installation Difference} The downloaded alfresco already has the MySQL driver jar in the install, but since I am using SQLServer, I downloaded the jtds driver from the internet and installed the jtds-X.X.X.jar file in the /opt/alfresco-2.1/tomcat/common/lib to make it available to alfresco. {note} # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0. I also added the following line after the line that stated 'killall soffice.bin': killall Xvfb. That ensured the Xvfb process was killed when alfresco was shutdown. {note:title=Test Machine Installation Difference} Set it to /opt/alfresco-2.1/tomcat for the test machine {note} {tip} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {tip} {note:title=Test Machine Installation Difference} For the test machine, I wasn't too worried about details, so I skipped the next 15 or so steps (picks up again at configuring for MBARI LDAP below. {note} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {tip} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {tip} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.255.255 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # OK, this is a total HACK and needed to be done due to the wonderful world of open source. In Internet Explorer with SSL turned on, you would get a dialog pop-up that stated the secure server was trying to serve non-secure content. This was due to the Alfresco Community logo being served from http://www.alfresco.com. Only IE did this and you can work around it on the client end by doing the following: ## Startup IE. ## Go to Tools->Internet Options ... ## Click on Security tab ## Click on "Trusted Sites" zone ## Click on Sites button ## Make sure check box for "Require Server verification (https:) for all sites in this zone" is unchecked 7. Type in "http://www.alfresco.com" into the "Add this website to the zone:" text field and click Add. ## Click on close ## Make sure "Trusted Sites" is still selected. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on the "Local Intranet" zone. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on OK to close Internet Options dialog. # Now there are a couple of reasons why this is bad, but the main one is that if you are trying to reach this from outside the firewall, you will have to change those settings for the Internet Zone (I think) which is bad. Plus every user will have to do this. To get around this, I had to: ## Take [this|^alfresco_community_horiz20.gif] logo image and save it to ./images/logo directory. ## This next step can either be very easy or very complicated. You can try downloading [this|^a0.jar] jar file and copying it to ./WEB-INF/lib. If when you start up Alfresco you get some exceptions that look like they are related to a class called PageTag, you will have to do it the hard way: ### Now you have to actually check out the subversion source code from Alfresco. I am assuming you know how to do that. By the way, you will need ant and java installed to do this. The SVN URL for the repository is svn://www.alfresco.org/alfresco. ### Once it is checked out find the PageTag.java file (should be in HEAD/root/projects/web-client/source/java/org/alfresco/web/ui/repo/tag directory) and edit: #### Change the line {noformat} private final static String ALF_LOGO = "http://www.alfresco.com/images/alfresco_community_horiz20.gif"; {noformat} to: {noformat} private final static String ALF_LOGO = "/alfresco/images/logo/alfresco_community_horiz20.gif"; {noformat} ### Save the file. {warning} If you run this next step on the machine where the application is installed and have a TOMCAT_HOME environment variable defined, it will try to deploy everything to your Tomcat installation. The best thing to do is build this on a separate machine. {warning} ### Open a command prompt in the HEAD/root directory and type "ant build-tomcat". After a long wait, the build will actually fail if you don't have a TOMCAT_HOME defined in your environment. ### Once the build has failed you will need to create a new jar file called a0.jar with only the PageTag.class file in it. ### Copy the a0.jar file to the ./WEB-INF/lib directory. # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {tip} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {tip} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. {note:title=Test Machine Installation Difference} Did not setup SSL for the test machine {note} ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {tip} This takes a couple minutes as it has to first build the DB and all the indexes and such. {tip} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://oceana.shore.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Make sure startup/shutdown script in /etc/init.d is working correctly # I.S. then setup backup regime to do incremental backups nightly and full backups weekly # TODO: Verify I know where the MySQL files are and that we can restore them correctly. Also turn on binary logs and use a test machine to learn (and document here) how to restore from backup. {warning:title=IMPORTANT} For some strange reason, the Alfresco stack would seem to crash after 20-30 days of operation with some very cryptic errors. I found some entries in the forums about changing the ulimit value in linux. So I issued a 'ulimit -n 4096' and then restart Alfresco. I haven't seen that problem since. {warning}]]> 1835034 1867801 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) {note:title=Test Machine Installation Difference} Fedora core 7 had 5.2.2 installed {note} # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 {note:title=Test Machine Installation Difference} I named the directory alfresco-2.1 {note} # I then moved the tar into the alfresco-2.0 directory {note:title=Test Machine Installation Difference} alfreso-2.1 directory {note} # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} {note:title=Test Machine Installation Difference} This was a bit different in FC7. In order to get Xvfb installed I used "Add/Remove Software" to install it. OpenOffice was already installed so I just had to find the soffice command location. The command to get Xvfb running was also a bit different. I had to create a ascii file called /etc/xvfb-auth.cfg that only had one line in it that read 'localhost'. Then the command to start Xvfb was 'Xvfb :1 -auth /etc/xvfb-auth.cfg'. Then I could start soffice the same way. I changed the start_oo.sh file to reflect those commands. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} {note:title=Test Machine Installation Difference} Did not do this {note} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data {note:title=Test Machine Installation Difference} /data/alfresco-2.1 {note} ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml {note:title=Test Machine Installation Difference} This file already existed and was no different from the sample, so I skipped this step {note} ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: {note:title=Test Machine Installation Difference} This file already existed and so copied the original to custom-repository.properties.orig and edited the existing one. {note} ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) {note:title=Test Machine Installation Difference} I changed them to work with the MS SQL Server login so they looked like: db.username=DB_Collaboration db.password=******** db.pool.initial=10 db.pool.max=100 {note} ### Uncommented db.schema.update=true ### I commented out the two HSQL connection lines ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' {note:title=Test Machine Installation Difference} Left the MySQL lines commented out, but uncommented the SQLServer lines and changed them to db.driver=net.sourceforge.jtds.jdbc.Driver db.url=jdbc:jtds:sqlserver://solstice.shore.mbari.org/Alfresco;domain=SHORE;user=DB_Collaboration;password=****** {note} ### I also added the following lines at the end of the file to connect up to the external mail server {noformat} # # The external email server properties # mail.host=mail.shore.mbari.org mail.port=25 mail.username= mail.password= {noformat} ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties {note:title=Test Machine Installation Difference} Already existed, so backuped up to .orig and edited to comment out the HSQL and uncomment the SQLServer one. {note} ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line {note:title=Test Machine Installation Difference} The downloaded alfresco already has the MySQL driver jar in the install, but since I am using SQLServer, I downloaded the jtds driver from the internet and installed the jtds-X.X.X.jar file in the /opt/alfresco-2.1/tomcat/common/lib to make it available to alfresco. {note} # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0. I also added the following line after the line that stated 'killall soffice.bin': killall Xvfb. That ensured the Xvfb process was killed when alfresco was shutdown. {note:title=Test Machine Installation Difference} Set it to /opt/alfresco-2.1/tomcat for the test machine {note} {tip} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {tip} {note:title=Test Machine Installation Difference} For the test machine, I wasn't too worried about details, so I skipped the next 15 or so steps (picks up again at configuring for MBARI LDAP below. {note} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {tip} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {tip} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.255.255 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # OK, this is a total HACK and needed to be done due to the wonderful world of open source. In Internet Explorer with SSL turned on, you would get a dialog pop-up that stated the secure server was trying to serve non-secure content. This was due to the Alfresco Community logo being served from http://www.alfresco.com. Only IE did this and you can work around it on the client end by doing the following: ## Startup IE. ## Go to Tools->Internet Options ... ## Click on Security tab ## Click on "Trusted Sites" zone ## Click on Sites button ## Make sure check box for "Require Server verification (https:) for all sites in this zone" is unchecked 7. Type in "http://www.alfresco.com" into the "Add this website to the zone:" text field and click Add. ## Click on close ## Make sure "Trusted Sites" is still selected. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on the "Local Intranet" zone. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on OK to close Internet Options dialog. # Now there are a couple of reasons why this is bad, but the main one is that if you are trying to reach this from outside the firewall, you will have to change those settings for the Internet Zone (I think) which is bad. Plus every user will have to do this. To get around this, I had to: ## Take [this|^alfresco_community_horiz20.gif] logo image and save it to ./images/logo directory. ## This next step can either be very easy or very complicated. You can try downloading [this|^a0.jar] jar file and copying it to ./WEB-INF/lib. If when you start up Alfresco you get some exceptions that look like they are related to a class called PageTag, you will have to do it the hard way: ### Now you have to actually check out the subversion source code from Alfresco. I am assuming you know how to do that. By the way, you will need ant and java installed to do this. The SVN URL for the repository is svn://www.alfresco.org/alfresco. ### Once it is checked out find the PageTag.java file (should be in HEAD/root/projects/web-client/source/java/org/alfresco/web/ui/repo/tag directory) and edit: #### Change the line {noformat} private final static String ALF_LOGO = "http://www.alfresco.com/images/alfresco_community_horiz20.gif"; {noformat} to: {noformat} private final static String ALF_LOGO = "/alfresco/images/logo/alfresco_community_horiz20.gif"; {noformat} ### Save the file. {warning} If you run this next step on the machine where the application is installed and have a TOMCAT_HOME environment variable defined, it will try to deploy everything to your Tomcat installation. The best thing to do is build this on a separate machine. {warning} ### Open a command prompt in the HEAD/root directory and type "ant build-tomcat". After a long wait, the build will actually fail if you don't have a TOMCAT_HOME defined in your environment. ### Once the build has failed you will need to create a new jar file called a0.jar with only the PageTag.class file in it. ### Copy the a0.jar file to the ./WEB-INF/lib directory. # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {tip} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {tip} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. {note:title=Test Machine Installation Difference} Did not setup SSL for the test machine {note} ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {tip} This takes a couple minutes as it has to first build the DB and all the indexes and such. {tip} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://oceana.shore.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Make sure startup/shutdown script in /etc/init.d is working correctly # I.S. then setup backup regime to do incremental backups nightly and full backups weekly # TODO: Verify I know where the MySQL files are and that we can restore them correctly. Also turn on binary logs and use a test machine to learn (and document here) how to restore from backup. {warning:title=IMPORTANT} For some strange reason, the Alfresco stack would seem to crash after 20-30 days of operation with some very cryptic errors. I found some entries in the forums about changing the ulimit value in linux. So I issued a 'ulimit -n 4096' and then restart Alfresco. I haven't seen that problem since. {warning}]]> 1835033 3670405 3637650 1867800 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) {note:title=Test Machine Installation Difference} Fedora core 7 had 5.2.2 installed {note} # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 {note:title=Test Machine Installation Difference} I named the directory alfresco-2.1 {note} # I then moved the tar into the alfresco-2.0 directory {note:title=Test Machine Installation Difference} alfreso-2.1 directory {note} # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} {note:title=Test Machine Installation Difference} This was a bit different in FC7. In order to get Xvfb installed I used "Add/Remove Software" to install it. OpenOffice was already installed so I just had to find the soffice command location. The command to get Xvfb running was also a bit different. I had to create a ascii file called /etc/xvfb-auth.cfg that only had one line in it that read 'localhost'. Then the command to start Xvfb was 'Xvfb :1 -auth /etc/xvfb-auth.cfg'. Then I could start soffice the same way. I changed the start_oo.sh file to reflect those commands. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} {note:title=Test Machine Installation Difference} Did not do this {note} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data {note:title=Test Machine Installation Difference} /data/alfresco-2.1 {note} ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml {note:title=Test Machine Installation Difference} This file already existed and was no different from the sample, so I skipped this step {note} ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: {note:title=Test Machine Installation Difference} This file already existed and so copied the original to custom-repository.properties.orig and edited the existing one. {note} ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) {note:title=Test Machine Installation Difference} I changed them to work with the MS SQL Server login so they looked like: db.username=DB_Collaboration db.password=******** db.pool.initial=10 db.pool.max=100 {note} ### Uncommented db.schema.update=true ### I commented out the two HSQL connection lines ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' {note:title=Test Machine Installation Difference} Left the MySQL lines commented out, but uncommented the SQLServer lines and changed them to db.driver=net.sourceforge.jtds.jdbc.Driver db.url=jdbc:jtds:sqlserver://solstice.shore.mbari.org/Alfresco;domain=SHORE;user=DB_Collaboration;password=****** {note} ### I also added the following lines at the end of the file to connect up to the external mail server {noformat} # # The external email server properties # mail.host=mail.shore.mbari.org mail.port=25 mail.username= mail.password= {noformat} ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties {note:title=Test Machine Installation Difference} Already existed, so backuped up to .orig and edited to comment out the HSQL and uncomment the SQLServer one. {note} ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line {note:title=Test Machine Installation Difference} The downloaded alfresco already has the MySQL driver jar in the install, but since I am using SQLServer, I downloaded the jtds driver from the internet and installed the jtds-X.X.X.jar file in the /opt/alfresco-2.1/tomcat/common/lib to make it available to alfresco. {note} # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0 {note:title=Test Machine Installation Difference} Set it to /opt/alfresco-2.1/tomcat for the test machine {note} {tip} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {tip} {note:title=Test Machine Installation Difference} For the test machine, I wasn't too worried about details, so I skipped the next 15 or so steps (picks up again at configuring for MBARI LDAP below. {note} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {tip} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {tip} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.255.255 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # OK, this is a total HACK and needed to be done due to the wonderful world of open source. In Internet Explorer with SSL turned on, you would get a dialog pop-up that stated the secure server was trying to serve non-secure content. This was due to the Alfresco Community logo being served from http://www.alfresco.com. Only IE did this and you can work around it on the client end by doing the following: ## Startup IE. ## Go to Tools->Internet Options ... ## Click on Security tab ## Click on "Trusted Sites" zone ## Click on Sites button ## Make sure check box for "Require Server verification (https:) for all sites in this zone" is unchecked 7. Type in "http://www.alfresco.com" into the "Add this website to the zone:" text field and click Add. ## Click on close ## Make sure "Trusted Sites" is still selected. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on the "Local Intranet" zone. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on OK to close Internet Options dialog. # Now there are a couple of reasons why this is bad, but the main one is that if you are trying to reach this from outside the firewall, you will have to change those settings for the Internet Zone (I think) which is bad. Plus every user will have to do this. To get around this, I had to: ## Take [this|^alfresco_community_horiz20.gif] logo image and save it to ./images/logo directory. ## This next step can either be very easy or very complicated. You can try downloading [this|^a0.jar] jar file and copying it to ./WEB-INF/lib. If when you start up Alfresco you get some exceptions that look like they are related to a class called PageTag, you will have to do it the hard way: ### Now you have to actually check out the subversion source code from Alfresco. I am assuming you know how to do that. By the way, you will need ant and java installed to do this. The SVN URL for the repository is svn://www.alfresco.org/alfresco. ### Once it is checked out find the PageTag.java file (should be in HEAD/root/projects/web-client/source/java/org/alfresco/web/ui/repo/tag directory) and edit: #### Change the line {noformat} private final static String ALF_LOGO = "http://www.alfresco.com/images/alfresco_community_horiz20.gif"; {noformat} to: {noformat} private final static String ALF_LOGO = "/alfresco/images/logo/alfresco_community_horiz20.gif"; {noformat} ### Save the file. {warning} If you run this next step on the machine where the application is installed and have a TOMCAT_HOME environment variable defined, it will try to deploy everything to your Tomcat installation. The best thing to do is build this on a separate machine. {warning} ### Open a command prompt in the HEAD/root directory and type "ant build-tomcat". After a long wait, the build will actually fail if you don't have a TOMCAT_HOME defined in your environment. ### Once the build has failed you will need to create a new jar file called a0.jar with only the PageTag.class file in it. ### Copy the a0.jar file to the ./WEB-INF/lib directory. # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {tip} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {tip} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. {note:title=Test Machine Installation Difference} Did not setup SSL for the test machine {note} ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {tip} This takes a couple minutes as it has to first build the DB and all the indexes and such. {tip} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://oceana.shore.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Make sure startup/shutdown script in /etc/init.d is working correctly # I.S. then setup backup regime to do incremental backups nightly and full backups weekly # TODO: Verify I know where the MySQL files are and that we can restore them correctly. Also turn on binary logs and use a test machine to learn (and document here) how to restore from backup. {warning:title=IMPORTANT} For some strange reason, the Alfresco stack would seem to crash after 20-30 days of operation with some very cryptic errors. I found some entries in the forums about changing the ulimit value in linux. So I issued a 'ulimit -n 4096' and then restart Alfresco. I haven't seen that problem since. {warning}]]> 1835032 3670406 3637651 1867799 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) {note:title=Test Machine Installation Difference} Fedora core 7 had 5.2.2 installed {note} # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 {note:title=Test Machine Installation Difference} I named the directory alfresco-2.1 {note} # I then moved the tar into the alfresco-2.0 directory {note:title=Test Machine Installation Difference} alfreso-2.1 directory {note} # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} {note:title=Test Machine Installation Difference} This was a bit different in FC7. In order to get Xvfb installed I used "Add/Remove Software" to install it. OpenOffice was already installed so I just had to find the soffice command location. The command to get Xvfb running was also a bit different. I had to create a ascii file called /etc/xvfb-auth.cfg that only had one line in it that read 'localhost'. Then the command to start Xvfb was 'Xvfb :1 -auth /etc/xvfb-auth.cfg'. Then I could start soffice the same way. I changed the start_oo.sh file to reflect those commands. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} {note:title=Test Machine Installation Difference} Did not do this {note} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data {note:title=Test Machine Installation Difference} /data/alfresco-2.1 {note} ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml {note:title=Test Machine Installation Difference} This file already existed and was no different from the sample, so I skipped this step {note} ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: {note:title=Test Machine Installation Difference} This file already existed and so copied the original to custom-repository.properties.orig and edited the existing one. {note} ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) {note:title=Test Machine Installation Difference} I changed them to work with the MS SQL Server login so they looked like: db.username=DB_Collaboration db.password=******** db.pool.initial=10 db.pool.max=100 {note} ### Uncommented db.schema.update=true ### I commented out the two HSQL connection lines ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' {note:title=Test Machine Installation Difference} Left the MySQL lines commented out, but uncommented the SQLServer lines and changed them to db.driver=net.sourceforge.jtds.jdbc.Driver db.url=jdbc:jtds:sqlserver://solstice.shore.mbari.org/Alfresco;domain=SHORE;user=DB_Collaboration;password=****** {note} ### I also added the following lines at the end of the file to connect up to the external mail server {noformat} # # The external email server properties # mail.host=mail.shore.mbari.org mail.port=25 mail.username= mail.password= {noformat} ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties {note:title=Test Machine Installation Difference} Already existed, so backuped up to .orig and edited to comment out the HSQL and uncomment the SQLServer one. {note} ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line {note:title=Test Machine Installation Difference} The downloaded alfresco already has the MySQL driver jar in the install, but since I am using SQLServer, I downloaded the jtds driver from the internet and installed the jtds-X.X.X.jar file in the /opt/alfresco-2.1/tomcat/common/lib to make it available to alfresco. {note} # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0 {note:title=Test Machine Installation Difference} Set it to /opt/alfresco-2.1/tomcat for the test machine {note} {tip} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {tip} {note:title=Test Machine Installation Difference} For the test machine, I wasn't too worried about details, so I skipped the next 15 or so steps (picks up again at configuring for MBARI LDAP below. {note} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {tip} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {tip} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.255.255 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # OK, this is a total HACK and needed to be done due to the wonderful world of open source. In Internet Explorer with SSL turned on, you would get a dialog pop-up that stated the secure server was trying to serve non-secure content. This was due to the Alfresco Community logo being served from http://www.alfresco.com. Only IE did this and you can work around it on the client end by doing the following: ## Startup IE. ## Go to Tools->Internet Options ... ## Click on Security tab ## Click on "Trusted Sites" zone ## Click on Sites button ## Make sure check box for "Require Server verification (https:) for all sites in this zone" is unchecked 7. Type in "http://www.alfresco.com" into the "Add this website to the zone:" text field and click Add. ## Click on close ## Make sure "Trusted Sites" is still selected. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on the "Local Intranet" zone. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on OK to close Internet Options dialog. # Now there are a couple of reasons why this is bad, but the main one is that if you are trying to reach this from outside the firewall, you will have to change those settings for the Internet Zone (I think) which is bad. Plus every user will have to do this. To get around this, I had to: ## Take [this|^alfresco_community_horiz20.gif] logo image and save it to ./images/logo directory. ## This next step can either be very easy or very complicated. You can try downloading [this|^a0.jar] jar file and copying it to ./WEB-INF/lib. If when you start up Alfresco you get some exceptions that look like they are related to a class called PageTag, you will have to do it the hard way: ### Now you have to actually check out the subversion source code from Alfresco. I am assuming you know how to do that. By the way, you will need ant and java installed to do this. The SVN URL for the repository is svn://www.alfresco.org/alfresco. ### Once it is checked out find the PageTag.java file (should be in HEAD/root/projects/web-client/source/java/org/alfresco/web/ui/repo/tag directory) and edit: #### Change the line {noformat} private final static String ALF_LOGO = "http://www.alfresco.com/images/alfresco_community_horiz20.gif"; {noformat} to: {noformat} private final static String ALF_LOGO = "/alfresco/images/logo/alfresco_community_horiz20.gif"; {noformat} ### Save the file. {warning} If you run this next step on the machine where the application is installed and have a TOMCAT_HOME environment variable defined, it will try to deploy everything to your Tomcat installation. The best thing to do is build this on a separate machine. {warning} ### Open a command prompt in the HEAD/root directory and type "ant build-tomcat". After a long wait, the build will actually fail if you don't have a TOMCAT_HOME defined in your environment. ### Once the build has failed you will need to create a new jar file called a0.jar with only the PageTag.class file in it. ### Copy the a0.jar file to the ./WEB-INF/lib directory. # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {tip} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {tip} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {tip} This takes a couple minutes as it has to first build the DB and all the indexes and such. {tip} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://oceana.shore.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Make sure startup/shutdown script in /etc/init.d is working correctly # I.S. then setup backup regime to do incremental backups nightly and full backups weekly # TODO: Verify I know where the MySQL files are and that we can restore them correctly. Also turn on binary logs and use a test machine to learn (and document here) how to restore from backup. {warning:title=IMPORTANT} For some strange reason, the Alfresco stack would seem to crash after 20-30 days of operation with some very cryptic errors. I found some entries in the forums about changing the ulimit value in linux. So I issued a 'ulimit -n 4096' and then restart Alfresco. I haven't seen that problem since. {warning}]]> 1835031 874 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN{code}{warning}]]> 877 3179448 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN{code}{warning} h3. Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] See [SVN at MBARI] for more details. h3. Java Security Certificate If you intend to distribute java applications via Java Web Start, you will need to _sign_ your jar files. Details about how to do this can be found at [Java Signing at MBARI] ]]> 3113963 880 883 879 882 878 881 877 880 10389198 10356486 875 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN{code}{warning} h3. Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] See [SVN at MBARI] ]]> 878 3670085 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN {code}{warning} \\ \\ \\ \\ \\ h3. Concurrent Versioning System CVS (Concurrent Versioning System) is an open source software tool used by software developers to manage code changes within their source code tree.  This source code versioning system is the predecessor of Subversion (see below) and applies stricter security access when editing MBARI project files.  Similar to Subversion, CVS enables programmers to store current and all previous records of code changes (along with those who made the changes) over the existense of the code.  Access to projects on the CVS respository at MBARI, however, also requires a pre-set individual passwords for all users in order to make changes to the code.  Without access permission, users may only view and download code - not upload it into the repository to make changes.  Access is given to users who are part of that project's group on CVS.  To gain a password or access to edit a project requires notification to the server administrator:  Karen Salamy (salamy@mbari.org). In addition to acquiring a password from the server administrator, you must also install a CVS software client.  There are multiple CVS clients for most major operating systems including WinCVS (Windows), MacCVS (Macs), and gcvs (Linux).  The CVS repository may also be accessed using the command line with the following syntax [CVS command Line Reference|^CVS-commandline-reference.pdf]. The most common CVS client at MBARI is WinCVS (version 1.2) which is a stable Windows version release. Additional information on these clients can be found at [http://cvsgui.sourceforge.net/. ]; Detailed documentation on using CVS can be found at [http://ximbiot.com/cvs/manual/].  The MBARI CVS repository may also simply be "viewed" from a web browser for any users who wish to look at its existing source code tree structure at [http://moonjelly.shore.mbari.org/cgi-bin/cvsweb.cgi/]. See [CVS at MBARI|CLT:CVS at MBARI] for more details. \\   h3. Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] The MBARI SVN repository may also simply be "viewed" from a web browser for any users who wish to look at its existing source code tree structure at http://kahuna.shore.mbari.org/viewvc/?root=svn\ . See [SVN at MBARI] for more details. \\   h3. Java Security Certificate If you intend to distribute java applications via Java Web Start, you will need to _sign_ your jar files. Details about how to do this can be found at [Java Signing at MBARI]]]> 3637320 3670084 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN {code}{warning} \\ \\ \\ \\ h3. Concurrent Versioning System CVS (Concurrent Versioning System) is an open source software tool used by software developers to manage code changes within their source code tree.  This source code versioning system is the predecessor of Subversion (see below) and applies stricter security access when editing MBARI project files.  Similar to Subversion, CVS enables programmers to store current and all previous records of code changes (along with those who made the changes) over the existense of the code.  Access to projects on the CVS respository at MBARI, however, also requires a pre-set individual passwords for all users in order to make changes to the code.  Without access permission, users may only view and download code - not upload it into the repository to make changes.  Access is given to users who are part of that project's group on CVS.  To gain a password or access to edit a project requires notification to the server administrator:  Karen Salamy (salamy@mbari.org). In addition to acquiring a password from the server administrator, you must also install a CVS software client.  There are multiple CVS clients for most major operating systems including WinCVS (Windows), MacCVS (Macs), and gcvs (Linux).  The CVS repository may also be accessed using the command line with the following syntax [CVS command Line Reference|^CVS-commandline-reference.pdf]. The most common CVS client at MBARI is WinCVS (version 1.2) which is a stable Windows version release. Additional information on these clients can be found at [http://cvsgui.sourceforge.net/. ]; Detailed documentation on using CVS can be found at [http://ximbiot.com/cvs/manual/].  The MBARI CVS repository may also simply be "viewed" from a web browser for any users who wish to look at its existing source code tree structure at [http://moonjelly.shore.mbari.org/cgi-bin/cvsweb.cgi/]. See [CVS at MBARI|CLT:CVS at MBARI] for more details. \\   h3. Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] The MBARI SVN repository may also simply be "viewed" from a web browser for any users who wish to look at its existing source code tree structure at http://kahuna.shore.mbari.org/viewvc/?root=svn\[\]. See [SVN at MBARI] for more details. \\   h3. Java Security Certificate If you intend to distribute java applications via Java Web Start, you will need to _sign_ your jar files. Details about how to do this can be found at [Java Signing at MBARI]]]> 3637319 3670087 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN {code}{warning} \\ \\ \\ \\ \\ \\ h3. Concurrent Versioning System CVS (Concurrent Versioning System) is an open source software tool used by software developers to manage code changes within their source code tree.  This source code versioning system is the predecessor of Subversion (see below) and applies stricter security access when editing MBARI project files.  Similar to Subversion, CVS enables programmers to store current and all previous records of code changes (along with those who made the changes) over the existense of the code.  Access to projects on the CVS respository at MBARI, however, also requires a pre-set individual passwords for all users in order to make changes to the code.  Without access permission, users may only view and download code - not upload it into the repository to make changes.  Access is given to users who are part of that project's group on CVS.  To gain a password or access to edit a project requires notification to the server administrator:  Karen Salamy (salamy@mbari.org). In addition to acquiring a password from the server administrator, you must also install a CVS software client.  There are multiple CVS clients for most major operating systems including WinCVS (Windows), MacCVS (Macs), and gcvs (Linux).  The CVS repository may also be accessed using the command line with the following syntax [CVS command Line Reference|^CVS-commandline-reference.pdf]. The most common CVS client at MBARI is WinCVS (version 1.2) which is a stable Windows version release. Additional information on these clients can be found at [http://cvsgui.sourceforge.net/. ]; Detailed documentation on using CVS can be found at [http://ximbiot.com/cvs/manual/].  The MBARI CVS repository may also simply be "viewed" from a web browser for any users who wish to look at its existing source code tree structure at [http://moonjelly.shore.mbari.org/cgi-bin/cvsweb.cgi/]. See [CVS at MBARI|CLT:CVS at MBARI] for more details. \\   h3. Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] The MBARI SVN repository may also simply be "viewed" from a web browser for any users who wish to look at its existing source code tree structure at http://kahuna.shore.mbari.org/viewvc/?root=svn. See [SVN at MBARI] for more details. \\   h3. Java Security Certificate If you intend to distribute java applications via Java Web Start, you will need to _sign_ your jar files. Details about how to do this can be found at [Java Signing at MBARI]]]> 3637324 5407186 5374450 826 Together_LINUX.BIN}} {{$ chmod u+x Together_LINUX.BIN}} {{$ ./Together_LINUX.BIN}}{code}{warning}]]> 829 5407184 5374448 829 Together_LINUX.BIN}} $ chmod u+x Together_LINUX.BIN}} $ ./Together_LINUX.BIN}}{code}{warning}]]> 832 830 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN{code}{warning}]]> 833 827 Together_LINUX.BIN}} {{$ chmod u+x Together_LINUX.BIN}} {{$ ./Together_LINUX.BIN}}{code}{warning}]]> 830 828 Together_LINUX.BIN}} $ chmod u+x Together_LINUX.BIN}} $ ./Together_LINUX.BIN}}{code}{warning}]]> 831 5407198 5374462 5407195 5374459 5407202 5374466 810 Together_LINUX.BIN}} {{$ chmod u+x Together_LINUX.BIN}} {{$ ./Together_LINUX.BIN}}{code}{warning}]]> 813 5407201 5374465 809 Together_LINUX.BIN}} {{$ chmod u+x Together_LINUX.BIN}} {{$ ./Together_LINUX.BIN}}{code}{warning}]]> 812 808 Together_LINUX.BIN}} {{$ chmod u+x Together_LINUX.BIN}} {{$ ./Together_LINUX.BIN}}{code}{warning}]]> 811 5407199 5374463 807 Together_LINUX.BIN}} {{$ chmod u+x Together_LINUX.BIN}} {{$ ./Together_LINUX.BIN}}{panel}]]> 810 5407190 5374454 5407188 5374452 28639681 28672447 3 2006-10-18 14:39:02.070 2008-04-10 14:03:55.513 53 5407193 5374457 5407191 5374455 5407211 5374475 5407213 5374477 5407214 5374478 3670034 3637269 5407205 5374469 3670032 3637267 5407206 5374470 5407207 5374471 5407209 5374473 3670042 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN {code}{warning} \\ \\ \\ h3. Concurrent Versioning System CVS (Concurrent Versioning System) is an open source software tool used by software developers to manage code changes within their source code tree.  This source code versioning system is the predecessor of Subversion (see below) and applies stricter security access when editing MBARI project files.  Similar to Subversion, CVS enables programmers to store current and all previous records of code changes (along with those who made the changes) over the existense of the code.  Access to projects on the CVS respository at MBARI, however, also requires a pre-set individual passwords for all users in order to make changes to the code.  Without access permission, users may only view and download code - not upload it into the repository to make changes.  Access is given to users who are part of that project's group on CVS.  To gain a password or access to edit a project requires notification to the server administrator:  Karen Salamy (salamy@mbari.org). In addition to acquiring a password from the server administrator, you must also install a CVS software client.  There are multiple CVS clients for most major operating systems including WinCVS (Windows), MacCVS (Macs), and gcvs (Linux).  The CVS repository may also be accessed using the command line with the following syntax [CVS command Line Reference|^CVS-commandline-reference.pdf]. The most common CVS client at MBARI is WinCVS (version 1.2) which is a stable Windows version release. Additional information on these clients can be found at [http://cvsgui.sourceforge.net/. ]; Detailed documentation on using CVS can be found at [http://ximbiot.com/cvs/manual/].  The CVS repository may also simply be "viewed" from a web browser for any users who wish to look at its existing source code tree structure at [http://moonjelly.shore.mbari.org/cgi-bin/cvsweb.cgi/]. See [CVS at MBARI|CLT:CVS at MBARI] for more details. \\   h3. Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] See [SVN at MBARI] for more details. h3. Java Security Certificate If you intend to distribute java applications via Java Web Start, you will need to _sign_ your jar files. Details about how to do this can be found at [Java Signing at MBARI]]]> 3637277 2392072 2007-10-24 17:19:27.157 2011-03-21 11:31:32.470 3670040 3637275 5407232 5374497 5407231 5374496 3670038 3637273 3670036 3637271 3670050 3637285 3670047 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN {code}{warning} \\ \\ \\ h3. Concurrent Versioning System CVS (Concurrent Versioning System) is an open source software tool used by software developers to manage code changes within their source code tree.  This source code versioning system is the predecessor of Subversion (see below) and applies stricter security access when editing MBARI project files.  Similar to Subversion, CVS enables programmers to store current and all previous records of code changes (along with those who made the changes) over the existense of the code.  Access to projects on the CVS respository at MBARI, however, also requires a pre-set individual passwords for all users in order to make changes to the code.  Without access permission, users may only view and download code - not upload it into the repository to make changes.  Access is given to users who are part of that project's group on CVS.  To gain a password or access to edit a project requires notification to the server administrator:  Karen Salamy (salamy@mbari.org). In addition to acquiring a password from the server administrator, you must also install a CVS software client.  There are multiple CVS clients for most major operating systems including WinCVS (Windows), MacCVS (Macs), and gcvs (Linux).  The CVS repository may also be accessed using the command line with the following syntax [CVS command Line Reference|^CVS-commandline-reference.pdf]. The most common CVS client at MBARI is WinCVS (version 1.2) which is a stable Windows version release. Additional information on these clients can be found at [http://cvsgui.sourceforge.net/. ]; Detailed documentation on using CVS can be found at [http://ximbiot.com/cvs/manual/].  The MBARI CVS repository may also simply be "viewed" from a web browser for any users who wish to look at its existing source code tree structure at [http://moonjelly.shore.mbari.org/cgi-bin/cvsweb.cgi/]. See [CVS at MBARI|CLT:CVS at MBARI] for more details. \\   h3. Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] The MBARI SVN repository may also simply be "viewed" from a web browser for any users who wish to look at its existing source code tree structure at http://kahuna.shore.mbari.org/viewvc/?root=svn\[\]. See [SVN at MBARI] for more details. \\   h3. Java Security Certificate If you intend to distribute java applications via Java Web Start, you will need to _sign_ your jar files. Details about how to do this can be found at [Java Signing at MBARI]]]> 3637282 3670045 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN {code}{warning} \\ \\ \\ \\ \\ \\ h3. Concurrent Versioning System CVS (Concurrent Versioning System) is an open source software tool used by software developers to manage code changes within their source code tree.  This source code versioning system is the predecessor of Subversion (see below) and applies stricter security access when editing MBARI project files.  Similar to Subversion, CVS enables programmers to store current and all previous records of code changes (along with those who made the changes) over the existense of the code.  Access to projects on the CVS respository at MBARI, however, also requires a pre-set individual passwords for all users in order to make changes to the code.  Without access permission, users may only view and download code - not upload it into the repository to make changes.  Access is given to users who are part of that project's group on CVS.  To gain a password or access to edit a project requires notification to the server administrator:  Karen Salamy (salamy@mbari.org). In addition to acquiring a password from the server administrator, you must also install a CVS software client.  There are multiple CVS clients for most major operating systems including WinCVS (Windows), MacCVS (Macs), and gcvs (Linux).  The CVS repository may also be accessed using the command line with the following syntax [CVS command Line Reference|^CVS-commandline-reference.pdf]. The most common CVS client at MBARI is WinCVS (version 1.2) which is a stable Windows version release. Additional information on these clients can be found at [http://cvsgui.sourceforge.net/. ]; Detailed documentation on using CVS can be found at [http://ximbiot.com/cvs/manual/].  The MBARI CVS repository may also simply be "viewed" from a web browser for any users who wish to look at its existing source code tree structure at [http://moonjelly.shore.mbari.org/cgi-bin/cvsweb.cgi/]. See [CVS at MBARI|CLT:CVS at MBARI] for more details. \\   h3. Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] The MBARI SVN repository may also simply be "viewed" from a web browser for any users who wish to look at its existing source code tree structure at http://kahuna.shore.mbari.org/viewvc/?root=svn\[\]. See [SVN at MBARI] for more details. \\   h3. Java Security Certificate If you intend to distribute java applications via Java Web Start, you will need to _sign_ your jar files. Details about how to do this can be found at [Java Signing at MBARI]]]> 3637280 3670046 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN {code}{warning} \\ \\ \\ \\ \\ \\ \\ h3. Concurrent Versioning System CVS (Concurrent Versioning System) is an open source software tool used by software developers to manage code changes within their source code tree.  This source code versioning system is the predecessor of Subversion (see below) and applies stricter security access when editing MBARI project files.  Similar to Subversion, CVS enables programmers to store current and all previous records of code changes (along with those who made the changes) over the existense of the code.  Access to projects on the CVS respository at MBARI, however, also requires a pre-set individual passwords for all users in order to make changes to the code.  Without access permission, users may only view and download code - not upload it into the repository to make changes.  Access is given to users who are part of that project's group on CVS.  To gain a password or access to edit a project requires notification to the server administrator:  Karen Salamy (salamy@mbari.org). In addition to acquiring a password from the server administrator, you must also install a CVS software client.  There are multiple CVS clients for most major operating systems including WinCVS (Windows), MacCVS (Macs), and gcvs (Linux).  The CVS repository may also be accessed using the command line with the following syntax [CVS command Line Reference|^CVS-commandline-reference.pdf]. The most common CVS client at MBARI is WinCVS (version 1.2) which is a stable Windows version release. Additional information on these clients can be found at [http://cvsgui.sourceforge.net/. ]; Detailed documentation on using CVS can be found at [http://ximbiot.com/cvs/manual/].  The MBARI CVS repository may also simply be "viewed" from a web browser for any users who wish to look at its existing source code tree structure at [http://moonjelly.shore.mbari.org/cgi-bin/cvsweb.cgi/]. See [CVS at MBARI|CLT:CVS at MBARI] for more details. \\   h3. Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] The MBARI SVN repository may also simply be "viewed" from a web browser for any users who wish to look at its existing source code tree structure at http://kahuna.shore.mbari.org/viewvc/?root=svn\[\]. See [SVN at MBARI] for more details. \\   h3. Java Security Certificate If you intend to distribute java applications via Java Web Start, you will need to _sign_ your jar files. Details about how to do this can be found at [Java Signing at MBARI]]]> 3637281 3670043 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN {code}{warning} \\ \\ \\ \\ h3. Concurrent Versioning System CVS (Concurrent Versioning System) is an open source software tool used by software developers to manage code changes within their source code tree.  This source code versioning system is the predecessor of Subversion (see below) and applies stricter security access when editing MBARI project files.  Similar to Subversion, CVS enables programmers to store current and all previous records of code changes (along with those who made the changes) over the existense of the code.  Access to projects on the CVS respository at MBARI, however, also requires a pre-set individual passwords for all users in order to make changes to the code.  Without access permission, users may only view and download code - not upload it into the repository to make changes.  Access is given to users who are part of that project's group on CVS.  To gain a password or access to edit a project requires notification to the server administrator:  Karen Salamy (salamy@mbari.org). In addition to acquiring a password from the server administrator, you must also install a CVS software client.  There are multiple CVS clients for most major operating systems including WinCVS (Windows), MacCVS (Macs), and gcvs (Linux).  The CVS repository may also be accessed using the command line with the following syntax [CVS command Line Reference|^CVS-commandline-reference.pdf]. The most common CVS client at MBARI is WinCVS (version 1.2) which is a stable Windows version release. Additional information on these clients can be found at [http://cvsgui.sourceforge.net/. ]; Detailed documentation on using CVS can be found at [http://ximbiot.com/cvs/manual/].  The MBARI CVS repository may also simply be "viewed" from a web browser for any users who wish to look at its existing source code tree structure at [http://moonjelly.shore.mbari.org/cgi-bin/cvsweb.cgi/]. See [CVS at MBARI|CLT:CVS at MBARI] for more details. \\   h3. Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] The MBARI SVN repository may also simply be "viewed" from a web browser for any users who wish to look at its existing source code tree structure at http://kahuna.shore.mbari.org/viewvc/?root=svn[]. See [SVN at MBARI] for more details. h3. Java Security Certificate If you intend to distribute java applications via Java Web Start, you will need to _sign_ your jar files. Details about how to do this can be found at [Java Signing at MBARI]]]> 3637278 3670044 Together_LINUX.BIN $ chmod u+x Together_LINUX.BIN $ ./Together_LINUX.BIN {code}{warning} \\ \\ \\ \\ \\ h3. Concurrent Versioning System CVS (Concurrent Versioning System) is an open source software tool used by software developers to manage code changes within their source code tree.  This source code versioning system is the predecessor of Subversion (see below) and applies stricter security access when editing MBARI project files.  Similar to Subversion, CVS enables programmers to store current and all previous records of code changes (along with those who made the changes) over the existense of the code.  Access to projects on the CVS respository at MBARI, however, also requires a pre-set individual passwords for all users in order to make changes to the code.  Without access permission, users may only view and download code - not upload it into the repository to make changes.  Access is given to users who are part of that project's group on CVS.  To gain a password or access to edit a project requires notification to the server administrator:  Karen Salamy (salamy@mbari.org). In addition to acquiring a password from the server administrator, you must also install a CVS software client.  There are multiple CVS clients for most major operating systems including WinCVS (Windows), MacCVS (Macs), and gcvs (Linux).  The CVS repository may also be accessed using the command line with the following syntax [CVS command Line Reference|^CVS-commandline-reference.pdf]. The most common CVS client at MBARI is WinCVS (version 1.2) which is a stable Windows version release. Additional information on these clients can be found at [http://cvsgui.sourceforge.net/. ]; Detailed documentation on using CVS can be found at [http://ximbiot.com/cvs/manual/].  The MBARI CVS repository may also simply be "viewed" from a web browser for any users who wish to look at its existing source code tree structure at [http://moonjelly.shore.mbari.org/cgi-bin/cvsweb.cgi/]. See [CVS at MBARI|CLT:CVS at MBARI] for more details. \\   h3. Subversion SVN (Subversion) is a tool used by many software developers to manage changes within their source code tree. SVN provides the means to store not only the current version of a piece of source code, but a record of all changes (and who made those changes) that have occurred to that source code. Use of SVN is particularly common on projects with multiple developers, since SVN ensures changes made by one developer are not accidentally removed when another developer posts their changes to the source tree. In order to access a Subversion repository, you must install a special piece of software called a Subversion client. Subversion clients are available for most any operating system. Information about the official subversion client can be found at [http://subversion.tigris.org/]. Excellent documentation on using Subversion can be found at [http://svnbook.red-bean.com/] The MBARI SVN repository may also simply be "viewed" from a web browser for any users who wish to look at its existing source code tree structure at http://kahuna.shore.mbari.org/viewvc/?root=svn\[\]. See [SVN at MBARI] for more details.\\ h3. Java Security Certificate If you intend to distribute java applications via Java Web Start, you will need to _sign_ your jar files. Details about how to do this can be found at [Java Signing at MBARI]]]> 3637279 10387458 10354690 911 914 19071374 19038610 15664200 15631449 15664198 15631447 10945012 10912257 18285304 18252553 10945014 CENIC: The Corporation for Education Network Initiatives in California  http://www.cenic.org/ # CFD: Computational Fluid Dynamics # CMORE: Center for Microbial Oceanography: Research and Education (a funding source) # CNAME'd: canonical name, also referred to as a CNAME record, a record in a DNS database that indicates the true, or canonical, host name of a computer that its aliases are associated with. an alias so that DNS can resolve some alias to a specific machine [http://www.webopedia.com/TERM/C/CNAME.htm] # COI: Common operating infrastructure (one of seven projects that together implement the Network for Ocean Research, Interaction and Application (NORIA) OOI CI. # Condor: not an acronym. A specialized workload management system for compute-intensive jobs developed by the University of Wisconsin-Madison [http://www.cs.wisc.edu/condor/] # Cron: not an acronym. Cron is the name of program that enables UNIX users to execute commands or scripts (groups of commands) automatically at a specified time/date. [http://www.unixgeeks.org/security/newbie/unix/cron-1.html] # CTD: Conductivity, Temperature, and Depth [http://www.whoi.edu/instruments/viewInstrument.do?id=1003] # CUAHSI: Consortium of Universities for the Advancement of Hydrologic Science, Inc. - [http://www.cuahsi.org/] # CVS: Concurrent Versions System; maintains control of history of code/documents # DataNet solicitation: NSF 07-601, Sustainable Digital Data Preservation and Access Network Partners (DataNet). # DC: Dublin Core vocabulary # DEM: Digital Elevation Model # D-ESP:  Deep ESP; the sphere and all it's accouterments # DI: De-ionized, often used with water # DMO: Division of Marine Operations # DMZ: Demilitarized zone. Computers placed into their own subnetwork (sometimes protected by a back-end firewall) in direct connection with the internet, protected by a front-end firewall. [http://en.wikipedia.org/wiki/Demilitarized_zone_(computing]) # Doc Ricketts: ROV, replacing Tiburon, carried by R/V Western Flyer. # DOEST: Day of Engineering, Science and Technology # Dribbling: not an acronym. The act of bouncing the ball continuously # DSL:  Digital Subscriber Line;  used to describe a type of modem # DStoNetCDF: SSDS post-processing service # DVL: Doppler Velocity Log # DWSM:  Deep Water Sampling Module # EE: Electrical Engineering # eGY: the Electronic Geophysical Year [http://www.egy.org/] # EITS: Eye-in-the Sea - deepwater video observatory for unobtrusive monitoring. [http://www.mbari.org/mars/general/eits.html] # EOM: Electro-Optical-Mechanical # EPIC: Embedded Platform for Industrial Computing # ERA: Earned Run Average # ESB: Enterprise Service Bus # ESIP Federation: Federation of Earth Science Information Partners # ESONET: European Seafloor Observatory Network [http://www.oceanlab.abdn.ac.uk/research/esonet.php] # ESP: Environmental Sample Processor - Chris Scholin et al. [http://www.mbari.org/muse/platforms/ESP.htm] ## Darlene was the 1st generation ESP ## GiGi The first 'second generation' ESP instrument ## NEO 'Nasa-Earth-Observatory'; The second 'second generation' ESP instrument ## Mack The third 'second generation' ESP instrument ## Bruce Another 'second generation' ESP instrument ## MOE A second gen. instrument with the MFB connected ## Betty  \-another one ## Gordon  \-another one (Betty & Gordon named after the founders of the Moore Foundation, who funded the builds) # Et al.: and others # FC5: Fedora Core 5 # FDR: Final Design Review # Ferret: plotting/analysis software package # FOCE: Free Ocean CO2 Enrichment # FPGA: Field Programmable Gate Array # FSM: Finite State Machine # FVGR: Free Vehicle Grab Respirometer # GAL: Gene Array Layout which is the file generated when printing a microarray for the ESP instrument. It tells you what and where things were printed on the filter paper. # GEOSS: Global Earth Observation System of Systems [http://www.epa.gov/geoss/] # GRID Computing: Grid computing (or the use of a computational grid) is the application of several computers to a single problem at the same time - usually to a scientific or technical problem that requires a great number of computer processing cycles or access to large amounts of data. [http://en.wikipedia.org/wiki/Grid_computing] # GUI: Graphical User Interface # GWT: Google Web Toolkit - [http://code.google.com/webtoolkit/] # Hexakosioihexekontahexaphobia: not an acronym. Fear of the number six-hundred sixty-six. # HOBI: Harbor Branch Oceanographic Institution # HOTS: Hawaii Ocean Time-Series program # HPP:  High-Pressure pump # ICD: Interface Control Diagram; block diagram of all system components and their interfaces # IDE: Integrated Development Environment # iLab: Professor Laurent Itti's biologically inspired computational modeling group at the University of Southern California. They maintain the iLab Neuromorphic Vision C+\+ Toolkit that we use in AVED for visual event detection. # International metadata summit: This summit is formally titled the IODE/JCOMM Forum on Oceanographic Data Management and Exchange Standards. It is a weeklong meeting of a small group (17) of leaders in international oceanographic data and metadata systems, yet is intended to initiate international agreements on metadata standards. See [http://www.iode.org/index.php?option=com_content&task=view&id=74] for details. # IO: Implementing Organization [http://www.orionprogram.org/PDFs/OOI_CG_RFP_16Mar07.pdf] # IOC: Intergovernmental Oceanographic Commission, [http://ioc.unesco.org/iocweb/index.php] # IODE: International Oceanographic Data Exchange, [http://www.iode.org] # IODP: Integrated Ocean Drilling Program [http://www.iodp.org] # IOOS: Integrated and Sustained Ocean Observing System [http://www.ocean.us] # ISUS:  In Situ Ultraviolet Spectrophotometer # JCOMM: Joint WMO-IOC Technical Commission on Oceanography and Marine Meteorology, [http://ioc.unesco.org/iocweb/index.php] # JIRA: A bug tracking, issue tracking, and project management application [http://www.atlassian.com/software/jira/] # JOI: Joint Oceanographic Institutions [http://www.joiscience.org/joi] # KML: Keyhole Markup Language - A file format used to display geographic data in an Earth browser, such as Google Earth # LED: Light-emitting diode # LDEO: Lamont-Doherty Earth Observatory, Columbia University # LLNL: Lawrence Livermore National Laboratories # LRAUV: Long Range AUV (Autonomous Underwater Vehicle) # LST: Langrangian sediment trap # MATE: Marine Advanced Technology Education Center at Monterey Peninsula College (MPC) # MARS: Monterey Accelerated Research System - Monterey Cabled Observatory System # Maven: software project management and comprehension tool. [http://maven.apache.org/] # MBA: Monterey Bay Aquarium # MEITS: Moored Eye-in-the Sea - deepwater video observatory for unobtrusive monitoring to be deployed on MARS # Meta-T: Water Temperature metadata pilot project, which is being developed under the umbrella of the Joint WMO-IOC Technical Commission for Oceanography and Marine Meteorology (JCOMM). ([http://marinemetadata.org/meta-t] ) # MFB: Micro-Fluidics Block--added instrumentation to the ESP # MMI: Marine Metadata Initiative [http://marinemetadata.org/] # MMI ORR: MMI Ontology Registry and Repository [http://mmisw.org/orr/] # MOBB: Monterey Ocean Bottom Broadband project # Modbus: a serial [communications protocol|http://en.wikipedia.org/wiki/Communications_protocol] [http://en.wikipedia.org/wiki/Modbus] # MOOS: Monterey Ocean Observing System [http://www.mbari.org/moos] # MRG: Red Hat Enterprise MRG is a next-generation IT infrastructure incorporating Messaging, Realtime, and Grid functionality. It offers increased performance, reliability, interoperability, and faster computing for enterprise customers. [http://www.redhat.com/mrg/ ]; # MSE: MOOS Science Experiment # MTS: Marine Technology Society # MUCE: Monterey Upper Canyon Experiment # Mule: not an acronym. Open source ESB. [http://mule.codehaus.org/display/MULE/Home] # MV: Medium Voltage (converter); located in node power supply of MARS # NAB: National Association of Broadcasters # Nagios: software to monitor all types of computer and network services. [http://www.nagios.org/] # Navproc: navigation processor # NCBO: The National Center for Biomedical Ontology # NCSA: National Center for Supercomputing Applications (at UIUC) # NDBC: National Data Buoy Center # netCDF: file format used for MBARI processed data (stands for Network Common Data Form) [http://www.unidata.ucar.edu/software/netcdf/conventions.html] # NSF: National Science Foundation # NMI: NSF Middleware initiative # NOAA: National Oceanic and Atmospheric Administration. [http://www.noaa.gov] # NORIA: Network for Ocean Research, Interaction and Application. The OOI CI IO. # NTR: Nothing To Report # OA: Obstacle Avoidance # OBIS: Ocean Biogeographic Information System # OceanSITES: A worldwide system of long-term, deepwater reference stations measuring dozens of variables and monitoring the full depth of the ocean from air-sea interactions down to 5,000 meters. [http://www.oceansites.org/] # ODI:  Ocean Design Inc.; makers of incredibly expensive underwater connectors # ODV: Ocean Data View [http://www.oceansites.org/] # OGC: Open Geospatial Consortium, Inc.® (OGC), a non-profit, international, voluntary consensus standards organization that is leading the development of standards for geospatial and location based services. [http://www.opengeospatial.org/] # OGC Oceans IE = Open Geospatial Consortium Oceans Interoperability Experiment. It is being hosted by the OOSTethys effort - [http://www.oostethys.org/ogc-oceans-interoperability-experiment] # OGF: Open Grid Forum, an open community committed to driving the rapid evolution and adoption of applied distributed computing. [http://www.ogf.org/] # OMF: Observatory Middleware Framework. A project funded by NSF. NCSA is the prime. MBARI is a subcontractor (at about ½ of the grant). UCSD (Frank Vernon) is a non-paid participant. # OMV: Ontology Metadata Vocabulary # OMV-MMI: MMI extensions to OMV # ONR: Office of Naval Research # OOI: Ocean Observatories Initiative (NSF) [http://www.orionprogram.org/OOI/default.html] # OOR: Open Ontology Repository initiative - [http://ontolog.cim3.net/cgi-bin/wiki.pl?OpenOntologyRepository] # OOSTethtys: not an acronym. A provider-to-user data systems framework, using interoperable standards, enabling discovery and use of data. [http://www.oostethys.org/] # ORION: Ocean Research Interactive Observatory Networks [http://www.orionprogram.org] # PC-104: small microprocessor for embedded systems (can run Linux) [http://www.pc104.org] # PCA: Principal component analysis. [http://en.wikipedia.org/wiki/Principal_components_analysis] # PCR: Polymerase Chain Reaction, procedure to make millions of copies of DNA from a few # PDR: preliminary design review ("Hey, I thought of something. Is it a stupid idea?") # PDU: Power Distribution Unit (? not sure about this though) # pH: a measure of the [acidity|http://en.wikipedia.org/wiki/Acid] or [alkalinity|http://en.wikipedia.org/wiki/Base_%28chemistry%29] of a solution. pH is a shorthand for its mathematical approximation: in chemistry a small p is used in place of writing log10 and the H here represents [H+], the concentration of hydrogen ions. [http://en.wikipedia.org/wiki/PH] # pl-navproc: the name of a computer {noformat} Name: pl-navproc.pl.mbari.org Address: 134.89.22.11 {noformat} we think navproc was the shortened name for navigation processor; we guess, "Point Lobos Navigation Processor". # PRDK: PUCK Reference Design Kit [http://www.mbari.org/pw] # PUCK: Pluggable Underwater Connector with Knowledge [http://www.mbari.org/pw] # PUP: Precision Underwater Positioner # QNX: A Unix-like real-time operating system # RAID: Redundant Array of Independent Drives [http://en.wikipedia.org/wiki/RAID] # RBI: Runs Batted In # RC: Radio controlled (airplane) # RCO: Regional Cabled Observatory [http://orionprogram.org/PDFs/RevisedOOICND08Mar07.pdf] # RDF: W3C Resource Description Framework # ROS: Remote Ocean Systems [http://www.rosys.com/] # ROV: Remotely Operated Vehicle # RS-232 (Recommended Standard 232) is a standard for [serial|http://en.wikipedia.org/wiki/Serial_communications] binary data signals connecting between a DTE ([Data terminal equipment|http://en.wikipedia.org/wiki/Data_terminal_equipment]) and a DCE ([Data Circuit-terminating Equipment|http://en.wikipedia.org/wiki/Data_circuit-terminating_equipment]). It is commonly used in [computer serial ports|http://en.wikipedia.org/wiki/Computer]. [http://en.wikipedia.org/wiki/RS-232] # RSN: Regional Scale Node. See RCO. [http://www.ooi.washington.edu/rsn/secondary.jsp?keywords=WHATSR&title=What%20is%20RSN?] # SAP: Single Axis PUP # SDCI: Software Development for Cyberinfrastructure. A program at NSF. # SeaDataNet: Multi-national, multi-system data management project funded by the European Union, which will provide metadata, data and products as a unique virtual data centre. ([http://www.seadatanet.org/]) # SensorML: not an acronym; markup language to describe sensors and their data. [http://vast.uah.edu/SensorML/] # SIFT: Scale-invariant feature transform [http://en.wikipedia.org/wiki/Scale-invariant_feature_transform] # SIIM: Science Instrument Interface Module # SIMM: Single In-line Memory Module # SIO: Scripps Institute of Oceanography # SMD: Soil Machine Dynamics Hydrovision [http://www.smdhydrovision.com] # SMP: Symmetric Multiprocessing # SNMP: (Scripps NCSA MBARI Prototype) a proof of concept project staffed at MBARI as part of SENSORS to integrate instrument network capabilities of SIO and MBARI with a policy management framework provided by NCSA and visualization capabilities provided by Calit2-Viz within an ESB-based integration infrastructure. # SOPAC: Pacific Islands Applied Geoscience Commission [http://www.sopac.org] # SOS: Sensor Observation Service, one of the SWE (Sensor Web Enablement) standards # SPARQL - Simple Protocol and RDF Query Language # SPE:  Solid-phase extraction; method from removing DNA or RNA from a 'soup' # SPS: Sensor Planning Service, one of the SWE (Sensor Web Enablement) standards # SSDS: Shore-Side Data System [http://www.mbari.org/ssds/] [http://new-ssds.mbari.org:8080/ssds/] # SURA: The Southeastern Universities Research Association # SURF Center:  Sensors for Underwater Research of the Future # SVN: Subversion which is a source code repository. # SWE: Sensor Web Enablement set of standards (approved by OGC) # SWE Common: next-generation core for Sensor Web Enablement standards # TAMU: Texas A&M University # TERCOM: Terrain Contour Matching # TREX: Autonomy group mission planning/scheduling software # TVS:  Transient voltage suppressor--special type of diode that protects against over-voltage conditions # TWIC: Transportation Worker Identification Credential (TWIC™) [http://www.tsa.gov/what_we_do/layers/twic/index.shtm] # UART: universal asynchronous receiver/transmitter, a type of "asynchronous receiver/transmitter", a piece of [computer|http://en.wikipedia.org/wiki/Computer] [hardware|http://en.wikipedia.org/wiki/Hardware] that translates data between parallel and serial interfaces. [http://en.wikipedia.org/wiki/UART] # UCB: University of California-Berkeley # UCSB: University of California, Santa Barbara # UCSD: University of California, San Diego # UI: User Interface # UIUC: University of Illinois at Urbana-Champaign # UNOLS: University-National Oceanographic Laboratory System. An organization of [61 academic institutions|http://www.unols.org/info/direct.html] and National Laboratories involved in oceanographic research and joined for the purpose of coordinating oceanographic ships' schedules and research facilities. # UPS: Uninterrupted Power Supply # URI: Uniform Resource Identifier - [http://www.ietf.org/rfc/rfc2396.txt] # URN: Uniform Resource Name - [http://www.ietf.org/rfc/rfc2141.txt] # UUST: Unmanned Untethered Submersible Technology Symposium [http://www.ausi.org/uust/uust.html] # UW: University of Washington # VARS: Video Annotation and Reference System. [http://vars.sourceforge.net/] # VB: Variable Buoyancy # VB: Visual Basic # VCS: Vehicle Control System # VENUS: Victoria Experimental Network Under the Sea. A cabled ocean observatory. [http://www.venus.uvic.ca/] # VHDL: VHSIC (Very-High-Speed Integrated Circuit) Hardware Description Language # VINE: Vocabulary INtegration Environment # Voc2RDF: Vocabulary to RDF conversion tool # W3C: The World Wide Web Consortium. [http://www.w3.org/] # WATERS Network: WATer and Environmental Research Systems Network (WATERS Network) # WFS: Web Feature Service # WHOI: Woods Hole Oceanographic Institute # WMO: World Meteorology Organization, [http://www.wmo.ch] # WMS: Web Map Service # WNS: Wet node simulator (MARS observatory simulation environment) # XML: Extensible Markup Language [http://en.wikipedia.org/wiki/XML] # XSD - XML Schema Definition [http://en.wikipedia.org/wiki/XML_Schema]]]> 10912259 15237262 15204498 15237261 15204497 20119726 20086963 15237263 15204499 19073057 19040355 10944903 10912143 11272194 11239426 15237167 15204400 10387662 10354898 2 2006-10-17 21:48:40.373 2026-02-04 08:33:05.020 10944885 10912125 10944888 10912128 10944890 10912130 10387706 10354941 6619149 6586381 15237236 15204472 10944817 10912058 9830546 9797777 16023574 15990807 9830543 9797774 10387768 10355015 7405590 7372822 622637 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to /opt/alfresco.2.0/tomcat/webapps/alfresco/images/logo and overwrite the one that is there. # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org {noformat} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} ## Now edit /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # TODO: Setup backup for MySQL database # TODO: Setup backup for data directory and for alfresco install directory.]]> 589870 7405592 7372824 9830500 9797731 622635 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to /opt/alfresco.2.0/tomcat/webapps/alfresco/images/logo and overwrite the one that is there. # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org {noformat} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Now, it is time to setup the server so we can login over SSL.]]> 589868 7405594 7372826 9830502 9797733 622636 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to /opt/alfresco.2.0/tomcat/webapps/alfresco/images/logo and overwrite the one that is there. # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org {noformat} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} ## Now edit /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat}]]> 589869 7405595 7372827 622633 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org {noformat} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning}]]> 589866 7405596 7372828 622634 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to /opt/alfresco.2.0/tomcat/webapps/alfresco/images/logo and overwrite the one that is there. # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org {noformat} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning}]]> 589867 7405597 7372829 622631 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org {noformat}]]> 589864 7405598 7372830 622632 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org {noformat}]]> 589865 7405599 7372831 622629 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org {noformat}]]> 589862 7405600 7372832 622630 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org {noformat}]]> 589863 622627 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I also wanted to tweak the web client ui a bit as well. I cd'd to /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages. I then edited the webclient.properties file. ## Changed company_home from 'Company Home' to 'MBARI' {note} Although this is supposed to work, it does not appear to have any affect {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org {noformat}]]> 589860 7405602 7372834 622628 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I also wanted to tweak the web client ui a bit as well. I cd'd to /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages. I then edited the webclient.properties file. ## Changed company_home from 'Company Home' to 'MBARI' {note} Although this is supposed to work, it does not appear to have any affect {note} # Since that did not seem to change the company home, I edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two line to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org {noformat}]]> 589861 622658 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 # I then moved the tar into the alfresco-2.0 directory # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0 {note} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {note} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} ## Now edit /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # Next, I needed to configure the CIFS server ## I edited the file /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/file-servers.xml ### I added 'domain="SHORE' to the tag. ### I made sure the domain broadcast submask was 255.255.254.0 ### I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ### I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # TODO: Integrate with OpenOffice # Setup backup ## On the server, mysql 5 was already installed as a service (whoo-hoo!). ## The first thing to do is to turn on binary logging. This is done when the mysql service is started. On oceana, the startup script is /etc/init.d/mysql. I vi'd the script and added the binary log option to the actual startup command. So I changed: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" >/dev/null 2>&1 & {noformat} to: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" --log-bin=/data/mysql_logs/oceana-bin --log-bin-index=/data/mysql_logs/oceana-bin-idx >/dev/null 2>&1 & {noformat} # TODO: Setup backup for data directory and for alfresco install directory.]]> 589891 622657 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 # I then moved the tar into the alfresco-2.0 directory # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0 # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to /opt/alfresco.2.0/tomcat/webapps/alfresco/images/logo and overwrite the one that is there. # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} ## Now edit /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # Next, I needed to configure the CIFS server ## I edited the file /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/file-servers.xml ### I added 'domain="SHORE' to the tag. ### I made sure the domain broadcast submask was 255.255.254.0 ### I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ### I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # TODO: Integrate with OpenOffice # Setup backup ## On the server, mysql 5 was already installed as a service (whoo-hoo!). ## The first thing to do is to turn on binary logging. This is done when the mysql service is started. On oceana, the startup script is /etc/init.d/mysql. I vi'd the script and added the binary log option to the actual startup command. So I changed: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" >/dev/null 2>&1 & {noformat} to: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" --log-bin=/data/mysql_logs/oceana-bin --log-bin-index=/data/mysql_logs/oceana-bin-idx >/dev/null 2>&1 & {noformat} # TODO: Setup backup for data directory and for alfresco install directory.]]> 589890 622656 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 # I then moved the tar into the alfresco-2.0 directory # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to /opt/alfresco.2.0/tomcat/webapps/alfresco/images/logo and overwrite the one that is there. # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} ## Now edit /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # Next, I needed to configure the CIFS server ## I edited the file /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/file-servers.xml ### I added 'domain="SHORE' to the tag. ### I made sure the domain broadcast submask was 255.255.254.0 ### I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ### I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # TODO: Integrate with OpenOffice # Setup backup ## On the server, mysql 5 was already installed as a service (whoo-hoo!). ## The first thing to do is to turn on binary logging. This is done when the mysql service is started. On oceana, the startup script is /etc/init.d/mysql. I vi'd the script and added the binary log option to the actual startup command. So I changed: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" >/dev/null 2>&1 & {noformat} to: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" --log-bin=/data/mysql_logs/oceana-bin --log-bin-index=/data/mysql_logs/oceana-bin-idx >/dev/null 2>&1 & {noformat} # TODO: Setup backup for data directory and for alfresco install directory.]]> 589889 622655 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 # I then moved the tar into the alfresco-2.0 directory # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to /opt/alfresco.2.0/tomcat/webapps/alfresco/images/logo and overwrite the one that is there. # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} ## Now edit /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # Next, I needed to configure the CIFS server ## I edited the file /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/file-servers.xml ### I added 'domain="SHORE' to the tag. ### I made sure the domain broadcast submask was 255.255.254.0 ### I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ### I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # TODO: Integrate with OpenOffice # Setup backup ## On the server, mysql 5 was already installed as a service (whoo-hoo!). ## The first thing to do is to turn on binary logging. This is done when the mysql service is started. On oceana, the startup script is /etc/init.d/mysql. I vi'd the script and added the binary log option to the actual startup command. So I changed: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" >/dev/null 2>&1 & {noformat} to: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" --log-bin=/data/mysql_logs/oceana-bin --log-bin-index=/data/mysql_logs/oceana-bin-idx >/dev/null 2>&1 & {noformat} # TODO: Setup backup for data directory and for alfresco install directory.]]> 589888 622654 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 # I then moved the tar into the alfresco-2.0 directory # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. To fix, I created symbolic links for those in /usr/lib using: ### cd /usr/lib ### ln -sf /usr/lib64/libgnome-2* . ### ln -sf /usr/lib64/libgconf-2* . # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to /opt/alfresco.2.0/tomcat/webapps/alfresco/images/logo and overwrite the one that is there. # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} ## Now edit /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # Next, I needed to configure the CIFS server ## I edited the file /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/file-servers.xml ### I added 'domain="SHORE' to the tag. ### I made sure the domain broadcast submask was 255.255.254.0 ### I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ### I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # TODO: Integrate with OpenOffice # Setup backup ## On the server, mysql 5 was already installed as a service (whoo-hoo!). ## The first thing to do is to turn on binary logging. This is done when the mysql service is started. On oceana, the startup script is /etc/init.d/mysql. I vi'd the script and added the binary log option to the actual startup command. So I changed: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" >/dev/null 2>&1 & {noformat} to: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" --log-bin=/data/mysql_logs/oceana-bin --log-bin-index=/data/mysql_logs/oceana-bin-idx >/dev/null 2>&1 & {noformat} # TODO: Setup backup for data directory and for alfresco install directory.]]> 589887 622653 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 # I then moved the tar into the alfresco-2.0 directory # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## I was missing two dependencies (libgnomevfs and libgconf). # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to /opt/alfresco.2.0/tomcat/webapps/alfresco/images/logo and overwrite the one that is there. # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} ## Now edit /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # Next, I needed to configure the CIFS server ## I edited the file /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/file-servers.xml ### I added 'domain="SHORE' to the tag. ### I made sure the domain broadcast submask was 255.255.254.0 ### I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ### I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # TODO: Integrate with OpenOffice # Setup backup ## On the server, mysql 5 was already installed as a service (whoo-hoo!). ## The first thing to do is to turn on binary logging. This is done when the mysql service is started. On oceana, the startup script is /etc/init.d/mysql. I vi'd the script and added the binary log option to the actual startup command. So I changed: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" >/dev/null 2>&1 & {noformat} to: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" --log-bin=/data/mysql_logs/oceana-bin --log-bin-index=/data/mysql_logs/oceana-bin-idx >/dev/null 2>&1 & {noformat} # TODO: Setup backup for data directory and for alfresco install directory.]]> 589886 622652 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 # I then moved the tar into the alfresco-2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to /opt/alfresco.2.0/tomcat/webapps/alfresco/images/logo and overwrite the one that is there. # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} ## Now edit /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # Next, I needed to configure the CIFS server ## I edited the file /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/file-servers.xml ### I added 'domain="SHORE' to the tag. ### I made sure the domain broadcast submask was 255.255.254.0 ### I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ### I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # TODO: Integrate with OpenOffice # Setup backup ## On the server, mysql 5 was already installed as a service (whoo-hoo!). ## The first thing to do is to turn on binary logging. This is done when the mysql service is started. On oceana, the startup script is /etc/init.d/mysql. I vi'd the script and added the binary log option to the actual startup command. So I changed: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" >/dev/null 2>&1 & {noformat} to: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" --log-bin=/data/mysql_logs/oceana-bin --log-bin-index=/data/mysql_logs/oceana-bin-idx >/dev/null 2>&1 & {noformat} # TODO: Setup backup for data directory and for alfresco install directory.]]> 589885 20119825 20087064 622651 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to /opt/alfresco.2.0/tomcat/webapps/alfresco/images/logo and overwrite the one that is there. # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} ## Now edit /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # Next, I needed to configure the CIFS server ## I edited the file /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/file-servers.xml ### I added 'domain="SHORE' to the tag. ### I made sure the domain broadcast submask was 255.255.254.0 ### I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ### I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # TODO: Integrate with OpenOffice # Setup backup ## On the server, mysql 5 was already installed as a service (whoo-hoo!). ## The first thing to do is to turn on binary logging. This is done when the mysql service is started. On oceana, the startup script is /etc/init.d/mysql. I vi'd the script and added the binary log option to the actual startup command. So I changed: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" >/dev/null 2>&1 & {noformat} to: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" --log-bin=/data/mysql_logs/oceana-bin --log-bin-index=/data/mysql_logs/oceana-bin-idx >/dev/null 2>&1 & {noformat} # TODO: Setup backup for data directory and for alfresco install directory.]]> 589884 622650 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to /opt/alfresco.2.0/tomcat/webapps/alfresco/images/logo and overwrite the one that is there. # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} ## Now edit /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # Next, I needed to configure the CIFS server ## I edited the file /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/file-servers.xml ### I added 'domain="SHORE' to the tag. ### I made sure the domain broadcast submask was 255.255.254.0 ### I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ### I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # TODO: Integrate with OpenOffice # TODO: Setup backup for MySQL database # TODO: Setup backup for data directory and for alfresco install directory.]]> 589883 622649 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to /opt/alfresco.2.0/tomcat/webapps/alfresco/images/logo and overwrite the one that is there. # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org {noformat} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} ## Now edit /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # Next, I needed to configure the CIFS server ## I edited the file /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/file-servers.xml ### I added 'domain="SHORE' to the tag. ### I made sure the domain broadcast submask was 255.255.254.0 ### I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} # TODO: Integrate with OpenOffice # TODO: Setup backup for MySQL database # TODO: Setup backup for data directory and for alfresco install directory.]]> 589882 622648 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to /opt/alfresco.2.0/tomcat/webapps/alfresco/images/logo and overwrite the one that is there. # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org {noformat} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} ## Now edit /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # Next, I needed to configure the CIFS server ## I edited the file /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/file-servers.xml ### I added 'domain="SHORE' to the tag. ### I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} # TODO: Integrate with OpenOffice # TODO: Setup backup for MySQL database # TODO: Setup backup for data directory and for alfresco install directory.]]> 589881 9830529 9797760 622647 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to /opt/alfresco.2.0/tomcat/webapps/alfresco/images/logo and overwrite the one that is there. # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org {noformat} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} ## Now edit /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # Next, I needed to configure the CIFS server ## I edited the file /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/file-servers.xml ### I added 'domain="SHORE' to the tag. ### I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} # TODO: Integrate with OpenOffice # TODO: Setup backup for MySQL database # TODO: Setup backup for data directory and for alfresco install directory.]]> 589880 622646 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to /opt/alfresco.2.0/tomcat/webapps/alfresco/images/logo and overwrite the one that is there. # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org {noformat} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} ## Now edit /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # Next, I needed to configure the CIFS server ## I edited the file /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/file-servers.xml ### I added 'domain="SHORE' to the tag. ### I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} # TODO: Setup backup for MySQL database # TODO: Setup backup for data directory and for alfresco install directory.]]> 589879 7405621 7372853 7405622 7372854 7405619 7372851 7405620 7372852 622603 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. ]]> 589835 27099387 27066624 7405626 7372858 622604 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat}]]> 589836 7405623 7372855 622605 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line]]> 589837 7405624 7372856 622606 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note}]]> 589838 7405629 7372861 20119862 20087102 7405627 7372859 7405628 7372860 622595 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [http://dev.mysql.com/downloads/connector/j|MySQL JConnector Site]]]> 589827 7405634 7372866 7405631 7372863 7405632 7372864 622624 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I also wanted to tweak the web client ui a bit as well. I cd'd to /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages. I then edited the webclient.properties file. ## Changed company_home from 'Company Home' to 'MBARI' # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added 'User Homes' to the end to try to get them to create the user spaces there instead of in the Company Home. # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org {noformat}]]> 589857 7405605 7372837 622623 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I also wanted to tweak the web client ui a bit as well. I cd'd to /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages. I then edited the webclient.properties file. ## Changed company_home from 'Company Home' to 'MBARI' # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org {noformat}]]> 589856 622626 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I also wanted to tweak the web client ui a bit as well. I cd'd to /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages. I then edited the webclient.properties file. ## Changed company_home from 'Company Home' to 'MBARI' # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org {noformat}]]> 589859 7405603 7372835 622625 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I also wanted to tweak the web client ui a bit as well. I cd'd to /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/messages. I then edited the webclient.properties file. ## Changed company_home from 'Company Home' to 'MBARI' # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added '/${spaces.user_homes.childname}' to the end to try to get them to create the user spaces there instead of in the Company Home. # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org {noformat}]]> 589858 7405610 7372842 622620 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## Copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## Created a new custom-authority-services-context.xml file and added {noformat} kgomes admin administrator {noformat} ### Edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org {noformat}]]> 589853 622619 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## Copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [^|here] ## Created a new custom-authority-services-context.xml file and added {noformat} kgomes admin administrator {noformat} ### Edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org {noformat}]]> 589852 7405608 7372840 622622 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org {noformat}]]> 589855 7405607 7372839 622621 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat}]]> 589854 7405614 7372846 622616 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure NTLM and LDAP. ## LDAP ## NTLM ### Edited the /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/web.xml #### Commented out the current authentication filter and uncommented the ntlm one so it looks like this {noformat} Authentication Filter org.alfresco.web.app.servlet.NTLMAuthenticationFilter {noformat} #### Uncommented the three AuthenticationFilter url patterns to turn them on. Should now look like {noformat} Authentication Filter /navigate/* Authentication Filter /command/* Authentication Filter /template/* {noformat} #### Under the WebDAV Authentication filter, I commented out the current one and uncommented the ntlm one so it looks like: {noformat} WebDAV Authentication Filter org.alfresco.repo.webdav.auth.NTLMAuthenticationFilter {noformat} ### Copied the ntlm-authentication-context.xml.sample to ntlm-authentication-context.xml and edited #### Changed the id of the authenticationComponentImpl to authenicationComponent #### Changed the use-local-server property to false #### Added the servers property and put blizzard,breeze and whirlwind as ntlm servers {noformat} false blizzard.shore.mbari.org,breeze.shore.mbari.org,whirlwind.shore.mbari.org true {noformat} ### Created a new custom-authority-services-context.xml file and added {noformat} kgomes admin administrator {noformat}]]> 589849 7405613 7372845 622615 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure NTLM and LDAP. ## LDAP ## NTLM ### Edited the /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/web.xml #### Commented out the current authentication filter and uncommented the ntlm one so it looks like this {noformat} Authentication Filter org.alfresco.web.app.servlet.NTLMAuthenticationFilter {noformat} #### Uncommented the three AuthenticationFilter url patterns to turn them on. Should now look like {noformat} Authentication Filter /navigate/* Authentication Filter /command/* Authentication Filter /template/* {noformat} #### Under the WebDAV Authentication filter, I commented out the current one and uncommented the ntlm one so it looks like: {noformat} WebDAV Authentication Filter org.alfresco.repo.webdav.auth.NTLMAuthenticationFilter {noformat} ### Copied the ntlm-authentication-context.xml.sample to ntlm-authentication-context.xml and edited #### Changed the id of the authenticationComponentImpl to authenicationComponent #### Changed the use-local-server property to false #### Added the servers property and put blizzard,breeze and whirlwind as ntlm servers #### Added the domain property and set to SHORE. Final file should look like {noformat} false blizzard.shore.mbari.org,breeze.shore.mbari.org,whirlwind.shore.mbari.org true SHORE {noformat} ### Created a new custom-authority-services-context.xml file and added {noformat} kgomes admin administrator {noformat}]]> 589848 7405612 7372844 622618 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## Copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. ## Created a new custom-authority-services-context.xml file and added {noformat} kgomes admin administrator {noformat} ### Edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org {noformat}]]> 589851 7405611 7372843 622617 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure NTLM and LDAP. ## LDAP ## NTLM ### Edited the /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/web.xml #### Commented out the current authentication filter and uncommented the ntlm one so it looks like this {noformat} Authentication Filter org.alfresco.web.app.servlet.NTLMAuthenticationFilter {noformat} #### Uncommented the three AuthenticationFilter url patterns to turn them on. Should now look like {noformat} Authentication Filter /navigate/* Authentication Filter /command/* Authentication Filter /template/* {noformat} #### Under the WebDAV Authentication filter, I commented out the current one and uncommented the ntlm one so it looks like: {noformat} WebDAV Authentication Filter org.alfresco.repo.webdav.auth.NTLMAuthenticationFilter {noformat} ### Copied the ntlm-authentication-context.xml.sample to ntlm-authentication-context.xml and edited #### Changed the id of the authenticationComponentImpl to authenicationComponent #### Changed the use-local-server property to false #### Added the servers property and put blizzard,breeze and whirlwind as ntlm servers {noformat} false blizzard.shore.mbari.org,breeze.shore.mbari.org,whirlwind.shore.mbari.org true {noformat} ### Created a new custom-authority-services-context.xml file and added {noformat} kgomes admin administrator {noformat} ### Edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org {noformat}]]> 589850 7405618 7372850 7405617 7372849 7405616 7372848 622614 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure NTLM and LDAP. ## LDAP ## NTLM ### Edited the /opt/alfresco.2.0/tomcat/webapps/alfresco/WEB-INF/web.xml #### Commented out the current authentication filter and uncommented the ntlm one so it looks like this {noformat} Authentication Filter org.alfresco.web.app.servlet.NTLMAuthenticationFilter {noformat} #### Uncommented the three AuthenticationFilter url patterns to turn them on. Should now look like {noformat} Authentication Filter /navigate/* Authentication Filter /command/* Authentication Filter /template/* {noformat} #### Under the WebDAV Authentication filter, I commented out the current one and uncommented the ntlm one so it looks like: {noformat} WebDAV Authentication Filter org.alfresco.repo.webdav.auth.NTLMAuthenticationFilter {noformat} ### Copied the ntlm-authentication-context.xml.sample to ntlm-authentication-context.xml and edited #### Changed the use-local-server property to false #### Added the servers property and put blizzard,breeze and whirlwind as ntlm servers #### Added the domain property and set to SHORE. Final file should look like {noformat} false blizzard.shore.mbari.org,breeze.shore.mbari.org,whirlwind.shore.mbari.org true SHORE {noformat} ### Created a new custom-authority-services-context.xml file and added {noformat} kgomes admin administrator {noformat}]]> 589847 622613 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 4.3.9 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco.2.0 # I then moved the tar into the alfresco.2.0 directory # I cd'd into that directory and untarred it. # I downloaded the mysql JDBC driver from [MySQL JConnector Site|http://dev.mysql.com/downloads/connector/j] and put it in my home directory (I don't want all the stuff from the download, just the JAR) # I then cd'd into the mysql driver directory and copied the mysql-connector-java-5.0.5-bin.jar file to the /opt/alfresco.2.0/tomcat/common/lib directory # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco.2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.1 for linux. # I kept the download in my home directory and gunzip and untarred it there (there is an install script). {note} I hit a snag here as the OpenOffice RPMs needed krb5 and some X11 stuff and I did not have easy access to the install media or prey, so I just skipped this for now. {note} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco to house the data ## I cd'd to /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco.2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco.2.0 # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. ]]> 589846 7405639 7372871 7405641 7372873 7405636 7372868 26312786 26247251 7405635 7372867 7405637 7372869 622667 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 # I then moved the tar into the alfresco-2.0 directory # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### I also added the following lines at the end of the file to connect up to the external mail server {noformat} # # The external email server properties # mail.host=mail.shore.mbari.org mail.port=25 mail.username= mail.password= {noformat} ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0 {note} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {note} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.254.0 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # OK, this is a total HACK and needed to be done due to the wonderful world of open source. In Internet Explorer with SSL turned on, you would get a dialog pop-up that stated the secure server was trying to serve non-secure content. This was due to the Alfresco Community logo being served from http://www.alfresco.com. Only IE did this and you can work around it on the client end by doing the following: ## Startup IE. ## Go to Tools->Internet Options ... ## Click on Security tab ## Click on "Trusted Sites" zone ## Click on Sites button ## Make sure check box for "Require Server verification (https:) for all sites in this zone" is unchecked 7. Type in "http://www.alfresco.com" into the "Add this website to the zone:" text field and click Add. ## Click on close ## Make sure "Trusted Sites" is still selected. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on the "Local Intranet" zone. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on OK to close Internet Options dialog. # Now there are a couple of reasons why this is bad, but the main one is that if you are trying to reach this from outside the firewall, you will have to change those settings for the Internet Zone (I think) which is bad. Plus every user will have to do this. To get around this, I had to: ## Take [this|^alfresco_community_horiz20.gif] logo image and save it to ./images/logo directory. ## This next step can either be very easy or very complicated. You can try downloading [this|^a0.jar] jar file and copying it to ./WEB-INF/lib. If when you start up Alfresco you get some exceptions that look like they are related to a class called PageTag, you will have to do it the hard way: ### Now you have to actually check out the subversion source code from Alfresco. I am assuming you know how to do that. By the way, you will need ant and java installed to do this. The SVN URL for the repository is svn://www.alfresco.org/alfresco. ### Once it is checked out find the PageTag.java file (should be in HEAD/root/projects/web-client/source/java/org/alfresco/web/ui/repo/tag directory) and edit: #### Change the line {noformat} private final static String ALF_LOGO = "http://www.alfresco.com/images/alfresco_community_horiz20.gif"; {noformat} to: {noformat} private final static String ALF_LOGO = "/alfresco/images/logo/alfresco_community_horiz20.gif"; {noformat} ### Save the file. {warning} If you run this next step on the machine where the application is installed and have a TOMCAT_HOME environment variable defined, it will try to deploy everything to your Tomcat installation. The best thing to do is build this on a separate machine. {warning} ### Open a command prompt in the HEAD/root directory and type "ant build-tomcat". After a long wait, the build will actually fail if you don't have a TOMCAT_HOME defined in your environment. ### Once the build has failed you will need to create a new jar file called a0.jar with only the PageTag.class file in it. ### Copy the a0.jar file to the ./WEB-INF/lib directory. # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Make sure startup/shutdown script in /etc/init.d is working correctly # I.S. then setup backup regime to do incremental backups nightly and full backups weekly]]> 589900 622669 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 # I then moved the tar into the alfresco-2.0 directory # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### I also added the following lines at the end of the file to connect up to the external mail server {noformat} # # The external email server properties # mail.host=mail.shore.mbari.org mail.port=25 mail.username= mail.password= {noformat} ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0 {note} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {note} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.255.255 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # OK, this is a total HACK and needed to be done due to the wonderful world of open source. In Internet Explorer with SSL turned on, you would get a dialog pop-up that stated the secure server was trying to serve non-secure content. This was due to the Alfresco Community logo being served from http://www.alfresco.com. Only IE did this and you can work around it on the client end by doing the following: ## Startup IE. ## Go to Tools->Internet Options ... ## Click on Security tab ## Click on "Trusted Sites" zone ## Click on Sites button ## Make sure check box for "Require Server verification (https:) for all sites in this zone" is unchecked 7. Type in "http://www.alfresco.com" into the "Add this website to the zone:" text field and click Add. ## Click on close ## Make sure "Trusted Sites" is still selected. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on the "Local Intranet" zone. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on OK to close Internet Options dialog. # Now there are a couple of reasons why this is bad, but the main one is that if you are trying to reach this from outside the firewall, you will have to change those settings for the Internet Zone (I think) which is bad. Plus every user will have to do this. To get around this, I had to: ## Take [this|^alfresco_community_horiz20.gif] logo image and save it to ./images/logo directory. ## This next step can either be very easy or very complicated. You can try downloading [this|^a0.jar] jar file and copying it to ./WEB-INF/lib. If when you start up Alfresco you get some exceptions that look like they are related to a class called PageTag, you will have to do it the hard way: ### Now you have to actually check out the subversion source code from Alfresco. I am assuming you know how to do that. By the way, you will need ant and java installed to do this. The SVN URL for the repository is svn://www.alfresco.org/alfresco. ### Once it is checked out find the PageTag.java file (should be in HEAD/root/projects/web-client/source/java/org/alfresco/web/ui/repo/tag directory) and edit: #### Change the line {noformat} private final static String ALF_LOGO = "http://www.alfresco.com/images/alfresco_community_horiz20.gif"; {noformat} to: {noformat} private final static String ALF_LOGO = "/alfresco/images/logo/alfresco_community_horiz20.gif"; {noformat} ### Save the file. {warning} If you run this next step on the machine where the application is installed and have a TOMCAT_HOME environment variable defined, it will try to deploy everything to your Tomcat installation. The best thing to do is build this on a separate machine. {warning} ### Open a command prompt in the HEAD/root directory and type "ant build-tomcat". After a long wait, the build will actually fail if you don't have a TOMCAT_HOME defined in your environment. ### Once the build has failed you will need to create a new jar file called a0.jar with only the PageTag.class file in it. ### Copy the a0.jar file to the ./WEB-INF/lib directory. # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Make sure startup/shutdown script in /etc/init.d is working correctly # I.S. then setup backup regime to do incremental backups nightly and full backups weekly]]> 589902 622659 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 # I then moved the tar into the alfresco-2.0 directory # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0 {note} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {note} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.254.0 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # TODO: Integrate with OpenOffice # Setup backup ## On the server, mysql 5 was already installed as a service (whoo-hoo!). ## The first thing to do is to turn on binary logging. This is done when the mysql service is started. On oceana, the startup script is /etc/init.d/mysql. I vi'd the script and added the binary log option to the actual startup command. So I changed: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" >/dev/null 2>&1 & {noformat} to: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" --log-bin=/data/mysql_logs/oceana-bin --log-bin-index=/data/mysql_logs/oceana-bin-idx >/dev/null 2>&1 & {noformat} # TODO: Setup backup for data directory and for alfresco install directory.]]> 589892 622660 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 # I then moved the tar into the alfresco-2.0 directory # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0 {note} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {note} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.254.0 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as 'admin/admin'. {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # TODO: Integrate with OpenOffice # Setup backup ## On the server, mysql 5 was already installed as a service (whoo-hoo!). ## The first thing to do is to turn on binary logging. This is done when the mysql service is started. On oceana, the startup script is /etc/init.d/mysql. I vi'd the script and added the binary log option to the actual startup command. So I changed: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" >/dev/null 2>&1 & {noformat} to: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" --log-bin=/data/mysql_logs/oceana-bin --log-bin-index=/data/mysql_logs/oceana-bin-idx >/dev/null 2>&1 & {noformat} # TODO: Setup backup for data directory and for alfresco install directory.]]> 589893 622661 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 # I then moved the tar into the alfresco-2.0 directory # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0 {note} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {note} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.254.0 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Setup startup/shutdown script in /etc/init.d and link to one of the rcX.d levels # Setup backup ## On the server, mysql 5 was already installed as a service (whoo-hoo!). ## The first thing to do is to turn on binary logging. This is done when the mysql service is started. On oceana, the startup script is /etc/init.d/mysql. I vi'd the script and added the binary log option to the actual startup command. So I changed: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" >/dev/null 2>&1 & {noformat} to: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" --log-bin=/data/mysql_logs/oceana-bin --log-bin-index=/data/mysql_logs/oceana-bin-idx >/dev/null 2>&1 & {noformat} # TODO: Setup backup for data directory and for alfresco install directory.]]> 589894 622662 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 # I then moved the tar into the alfresco-2.0 directory # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### I also added the following lines at the end of the file to connect up to the external mail server {noformat} # # The external email server properties # mail.host=mail.shore.mbari.org mail.port=25 mail.username= mail.password= {noformat} ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0 {note} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {note} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.254.0 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Setup startup/shutdown script in /etc/init.d and link to one of the rcX.d levels # Setup backup ## On the server, mysql 5 was already installed as a service (whoo-hoo!). ## The first thing to do is to turn on binary logging. This is done when the mysql service is started. On oceana, the startup script is /etc/init.d/mysql. I vi'd the script and added the binary log option to the actual startup command. So I changed: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" >/dev/null 2>&1 & {noformat} to: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" --log-bin=/data/mysql_logs/oceana-bin --log-bin-index=/data/mysql_logs/oceana-bin-idx >/dev/null 2>&1 & {noformat} # TODO: Setup backup for data directory and for alfresco install directory.]]> 589895 622663 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 # I then moved the tar into the alfresco-2.0 directory # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### I also added the following lines at the end of the file to connect up to the external mail server {noformat} # # The external email server properties # mail.host=mail.shore.mbari.org mail.port=25 mail.username= mail.password= {noformat} ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0 {note} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {note} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.254.0 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} ## OK, this is a total HACK and needed to be done due to the wonderful world of open source. In Internet Explorer with SSL turned on, you would get a dialog pop-up that stated the secure server was trying to serve non-secure content. This was due to the Alfresco Community logo being served from http://www.alfresco.com. Only IE did this and you can work around it on the client end by doing the following: ### Startup IE. ### Go to Tools->Internet Options ... ### Click on Security tab ### Click on "Trusted Sites" zone ### Click on Sites button ### Make sure check box for "Require Server verification (https:) for all sites in this zone" is unchecked 7. Type in "http://www.alfresco.com" into the "Add this website to the zone:" text field and click Add. ### Click on close ### Make sure "Trusted Sites" is still selected. ### Click on "Custom Level..." under Security level for this zone. ### Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ### Click on OK ### Click on the "Local Intranet" zone. ### Click on "Custom Level..." under Security level for this zone. ### Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ### Click on OK ### Click on OK to close Internet Options dialog. ## Now there are a couple of reasons why this is bad, but the main one is that if you are trying to reach this from outside the firewall, you will have to change those settings for the Internet Zone (I think) which is bad. Plus every user will have to do this. To get around this, I had to: ### Take this [here|^alfresco_community_horiz20.gif] logo image and save it to ./images/logo directory. ### Now you have to actually check out the subversion source code from Alfresco. I am assuming you know how to do that. By the way, you will need ant and java installed to do this. The SVN URL for the repository is svn://www.alfresco.org/alfresco. ### Once it is checked out find the PageTag.java file (should be in HEAD/root/projects/web-client/source/java/org/alfresco/web/ui/repo/tag directory) and edit: #### Change the line {noformat} private final static String ALF_LOGO = "http://www.alfresco.com/images/alfresco_community_horiz20.gif"; {noformat} to: {noformat} private final static String ALF_LOGO = "/images/logo/alfresco_community_horiz20.gif"; {noformat} ### Save the file. {warning} If you run this next step on the machine where the application is installed and have a TOMCAT_HOME environment variable defined, it will try to deploy everything to your Tomcat installation. The best thing to do is build this on a separate machine. {warning} ### Open a command prompt in the HEAD/root directory and type "ant build-tomcat". After a long wait, the build will actually fail if you don't have a TOMCAT_HOME defined in your environment. ### Once the build has failed. Find the alfresco-web-client.jar file and copy it to ./WEB-INF/lib. Delete the existing web-client.jar file in the ./WEB-INF/lib directory and rename the alfresco-web-client.jar to web-client.jar. # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Setup startup/shutdown script in /etc/init.d and link to one of the rcX.d levels # Setup backup ## On the server, mysql 5 was already installed as a service (whoo-hoo!). ## The first thing to do is to turn on binary logging. This is done when the mysql service is started. On oceana, the startup script is /etc/init.d/mysql. I vi'd the script and added the binary log option to the actual startup command. So I changed: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" >/dev/null 2>&1 & {noformat} to: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" --log-bin=/data/mysql_logs/oceana-bin --log-bin-index=/data/mysql_logs/oceana-bin-idx >/dev/null 2>&1 & {noformat} # TODO: Setup backup for data directory and for alfresco install directory.]]> 589896 622664 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 # I then moved the tar into the alfresco-2.0 directory # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### I also added the following lines at the end of the file to connect up to the external mail server {noformat} # # The external email server properties # mail.host=mail.shore.mbari.org mail.port=25 mail.username= mail.password= {noformat} ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0 {note} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {note} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.254.0 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # OK, this is a total HACK and needed to be done due to the wonderful world of open source. In Internet Explorer with SSL turned on, you would get a dialog pop-up that stated the secure server was trying to serve non-secure content. This was due to the Alfresco Community logo being served from http://www.alfresco.com. Only IE did this and you can work around it on the client end by doing the following: ## Startup IE. ## Go to Tools->Internet Options ... ## Click on Security tab ## Click on "Trusted Sites" zone ## Click on Sites button ## Make sure check box for "Require Server verification (https:) for all sites in this zone" is unchecked 7. Type in "http://www.alfresco.com" into the "Add this website to the zone:" text field and click Add. ## Click on close ## Make sure "Trusted Sites" is still selected. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on the "Local Intranet" zone. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on OK to close Internet Options dialog. # Now there are a couple of reasons why this is bad, but the main one is that if you are trying to reach this from outside the firewall, you will have to change those settings for the Internet Zone (I think) which is bad. Plus every user will have to do this. To get around this, I had to: ## Take this [here|^alfresco_community_horiz20.gif] logo image and save it to ./images/logo directory. ## Now you have to actually check out the subversion source code from Alfresco. I am assuming you know how to do that. By the way, you will need ant and java installed to do this. The SVN URL for the repository is svn://www.alfresco.org/alfresco. ## Once it is checked out find the PageTag.java file (should be in HEAD/root/projects/web-client/source/java/org/alfresco/web/ui/repo/tag directory) and edit: ### Change the line {noformat} private final static String ALF_LOGO = "http://www.alfresco.com/images/alfresco_community_horiz20.gif"; {noformat} to: {noformat} private final static String ALF_LOGO = "/images/logo/alfresco_community_horiz20.gif"; {noformat} ## Save the file. {warning} If you run this next step on the machine where the application is installed and have a TOMCAT_HOME environment variable defined, it will try to deploy everything to your Tomcat installation. The best thing to do is build this on a separate machine. {warning} ## Open a command prompt in the HEAD/root directory and type "ant build-tomcat". After a long wait, the build will actually fail if you don't have a TOMCAT_HOME defined in your environment. ## Once the build has failed you will need to create a new jar file called a0.jar with only the PageTag.class file in it. ## Copy the a0.jar file to the ./WEB-INF/lib directory. # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Setup startup/shutdown script in /etc/init.d and link to one of the rcX.d levels # Setup backup ## On the server, mysql 5 was already installed as a service (whoo-hoo!). ## The first thing to do is to turn on binary logging. This is done when the mysql service is started. On oceana, the startup script is /etc/init.d/mysql. I vi'd the script and added the binary log option to the actual startup command. So I changed: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" >/dev/null 2>&1 & {noformat} to: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" --log-bin=/data/mysql_logs/oceana-bin --log-bin-index=/data/mysql_logs/oceana-bin-idx >/dev/null 2>&1 & {noformat} # TODO: Setup backup for data directory and for alfresco install directory.]]> 589897 622665 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 # I then moved the tar into the alfresco-2.0 directory # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### I also added the following lines at the end of the file to connect up to the external mail server {noformat} # # The external email server properties # mail.host=mail.shore.mbari.org mail.port=25 mail.username= mail.password= {noformat} ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0 {note} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {note} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.254.0 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # OK, this is a total HACK and needed to be done due to the wonderful world of open source. In Internet Explorer with SSL turned on, you would get a dialog pop-up that stated the secure server was trying to serve non-secure content. This was due to the Alfresco Community logo being served from http://www.alfresco.com. Only IE did this and you can work around it on the client end by doing the following: ## Startup IE. ## Go to Tools->Internet Options ... ## Click on Security tab ## Click on "Trusted Sites" zone ## Click on Sites button ## Make sure check box for "Require Server verification (https:) for all sites in this zone" is unchecked 7. Type in "http://www.alfresco.com" into the "Add this website to the zone:" text field and click Add. ## Click on close ## Make sure "Trusted Sites" is still selected. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on the "Local Intranet" zone. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on OK to close Internet Options dialog. # Now there are a couple of reasons why this is bad, but the main one is that if you are trying to reach this from outside the firewall, you will have to change those settings for the Internet Zone (I think) which is bad. Plus every user will have to do this. To get around this, I had to: ## Take this [here|^alfresco_community_horiz20.gif] logo image and save it to ./images/logo directory. ## Now you have to actually check out the subversion source code from Alfresco. I am assuming you know how to do that. By the way, you will need ant and java installed to do this. The SVN URL for the repository is svn://www.alfresco.org/alfresco. ## Once it is checked out find the PageTag.java file (should be in HEAD/root/projects/web-client/source/java/org/alfresco/web/ui/repo/tag directory) and edit: ### Change the line {noformat} private final static String ALF_LOGO = "http://www.alfresco.com/images/alfresco_community_horiz20.gif"; {noformat} to: {noformat} private final static String ALF_LOGO = "/alfresco/images/logo/alfresco_community_horiz20.gif"; {noformat} ## Save the file. {warning} If you run this next step on the machine where the application is installed and have a TOMCAT_HOME environment variable defined, it will try to deploy everything to your Tomcat installation. The best thing to do is build this on a separate machine. {warning} ## Open a command prompt in the HEAD/root directory and type "ant build-tomcat". After a long wait, the build will actually fail if you don't have a TOMCAT_HOME defined in your environment. ## Once the build has failed you will need to create a new jar file called a0.jar with only the PageTag.class file in it. ## Copy the a0.jar file to the ./WEB-INF/lib directory. # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Setup startup/shutdown script in /etc/init.d and link to one of the rcX.d levels # Setup backup ## On the server, mysql 5 was already installed as a service (whoo-hoo!). ## The first thing to do is to turn on binary logging. This is done when the mysql service is started. On oceana, the startup script is /etc/init.d/mysql. I vi'd the script and added the binary log option to the actual startup command. So I changed: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" >/dev/null 2>&1 & {noformat} to: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" --log-bin=/data/mysql_logs/oceana-bin --log-bin-index=/data/mysql_logs/oceana-bin-idx >/dev/null 2>&1 & {noformat} # TODO: Setup backup for data directory and for alfresco install directory.]]> 589898 622666 use mysql; Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Database changed mysql> UPDATE user SET password=PASSWORD('*******') WHERE User='root' and Host='localhost'; Query OK, 1 row affected (0.02 sec) Rows matched: 1 Changed: 1 Warnings: 0 mysql> FLUSH PRIVILEGES; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # Now I enabled root access from my desktop so I could use the MySQL Admin GUI like so: {noformat} mysql> GRANT USAGE ON *.* TO 'root'@'skagit.shore.mbari.org' IDENTIFIED BY '********'; Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # BTW, PHP 5.1.4 was already installed (this is optional for Alfresco) # I cd'd to the /opt directory and gunzipped the alfreco tar.gz file # I created a directory for alfresco as the tar.gz file does not have a base directory. I created a directory called alfresco-2.0 # I then moved the tar into the alfresco-2.0 directory # I cd'd into that directory and untarred it. # In order to setup the DB on the mysql server, I cd'd to the /opt/alfresco-2.0/extras/databases/mysql directory and started up 'mysql -u root -p' and ran {noformat} mysql> source db_setup.sql Query OK, 1 row affected (0.01 sec) Query OK, 0 rows affected (0.00 sec) Query OK, 0 rows affected (0.00 sec) mysql> {noformat} # The database is now created and the appropriate permissions are given to a user name 'alfresco' with password 'alfresco'. That should be fine for now. # I did the optional OpenOffice install by visting openoffice.org and downloading verion 2.2 for linux. ## This may not always be the case, but I had a previous install of OpenOffice which I wanted to remove first ### I first ran 'rpm -qa | grep openoffice > rmlist' which gave me a list of all rpms with openoffice in them. ### I looked over the list to make sure I really wanted to remove everything in that list (I did) and then ran 'rpm -e `cat rmlist`' ## I kept the download in my home directory as this will be an RPM based install ## I unzipped the download ## I untarred the download (this created an OOF680_m14_native_packed-1_en-US.9134 directory) ## I cd'd into the new directory and then into the RPMS directory ## I already had java installed, so I moved the jre-6-linux-i596.rpm out of this directory ## I then installed the OpenOffice core by running 'rpm -Uvh --prefix /opt/openoffice-2.2/ *.rpm' ## It said I was missing two dependencies (libgnomevfs and libgconf), but they look like they are located in /usr/lib64. Since I think I have them, I ran the previous command with --nodeps appended to skip dependency checking ## I then cd'd into the desktop-integration directory and executed ### rpm -Uvh openoffice.org-redhat-menus-2.2-9119.noarch.rpm ## Now run /opt/openoffice-2.2/program/soffice to get the GUI interface which will allow you to register soffice (run this as the user that will be running alfresco/soffice) ## Exit OpenOffice ## Run OpenOffice in headless mode to make sure it runs. Before you run OpenOffice in headless mode you may have to actually install Xvfb so you can run from the command line (I leave that to you to figure out). ### /usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16 & ### /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless - display :1 ## Cntl-C out of soffice (assuming it ran) ## Now cd to /opt/alfresco-2.0 and rename the zstart_oo.sh to start_oo.sh and edit so that it looks like the following: {noformat} #!/bin/sh # --------------------------------------------------------------------------- # Start script for the OpenOffice transform service # --------------------------------------------------------------------------- export DISPLAY=:1 echo "Starting Xvfb..." `/usr/bin/Xvfb -fp /usr/share/X11/fonts/misc :1 -screen 0 800x600x16` & echo "Starting OpenOffice service..." # Comment or uncomment the appropriate location using # # Assumes OpenOffice is installed in /opt /opt/openoffice-2.2/program/soffice "-accept=socket,host=localhost,port=8100;urp;StarOffice.ServiceManager" -nologo -headless -nofirststartwizard -display :1 & {noformat} # In order to make sure Alfresco was using the MySQL installation, I removed the following files from the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extenstion directory: {noformat} custom-db-and-data-context.xml custom-db-connection.properties custom-hibernate-dialect.properties {noformat} # Now before running, I want to make sure the configuration points to the right location where the data will be stored and the database connections. ## I created a directory /data/alfresco-2.0 to house the data ## I cd'd to /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions ## I copied the custom-repository-context.xml.sample to custom-repository-context.xml ## I copied the custom-repository.properties.sample to custom-repository.properties ## I edited the custom-repository.properties file: ### Set the dir.root=/data/alfresco-2.0/data ### Uncommented the db.* properties and left as is (that is the way I set them up) ### Uncommented db.schema.update=true ### Uncommented the two MySQL connection lines and changed the driver to 'com.mysql.jdbc.Driver' ### I also added the following lines at the end of the file to connect up to the external mail server {noformat} # # The external email server properties # mail.host=mail.shore.mbari.org mail.port=25 mail.username= mail.password= {noformat} ### Saved the file ## I copied custom-hibernate-dialect.properties.sample to custom-hibernate-dialect.properties ## I edited the custom-hibernate-dialect.properties file and uncommented the MySQL Dialect line # I then cd'd back to the /opt/alfresco-2.0 directory and edited the alfresco.sh script and change the APPSERVER to point to the correct directory of /opt/alfresco-2.0 {note} In the tomcat version of alfresco, the actual alfresco deployment is in a .war file in the tomcat/webapps directory. If the server has been started, the .war gets expanded into a directory and you could make changes to the files there, but if the war file was ever "touched" again, it would redeploy those file and overwrite your changes. That is why it is best to make the changes in the .war file so they are permanent {note} # Copy the /opt/alfresco-2.0/tomcat/webapps/alfresco.war file to your home directory # cd to your home directory and make another copy so you will have the original (something like alfresco.war.orig) # Now I created a new directory called 'scratch' and moved the war there so that it was a clean directory for expansion. I moved the alfresco.war file to that directory, cd'd to it and then ran 'jar -xvf alfresco.war'. This expands the contents of the war file (like tar). # I also wanted to change the "Company Home" that seems to be everywhere. ## Edited ./WEB-INF/classes/alfresco/messages/webclient.properties and changed company_home from 'Company Home' to 'MBARI' ## Edited ./WEB-INF/classes/alfresco/messages/webclient_en_US.properties and changed company_home from 'Company Home' to 'MBARI' ## I edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces.properties and changed the first two lines to read {noformat} spaces.company_home.name=MBARI spaces.company_home.description=The root space for MBARI {noformat} ## Edited ./WEB-INF/classes/alfresco/messages/bootstrap-spaces_en_US.properties and made the same changes as the previous step {note} This took a bit to find all these, and to be honest, I am not sure which one actually made the change on the GUI, but I suspect it was the _en_US ones. {note} # When users are imported via LDAP, user spaces get created automatically. In order to put them where I wanted them to go (instead of right in the Company Home), I edited the ./WEB-INF/classes/alfresco/authentication-services-context.xml file. In the file there is a bean with an name of personalHomeFolderProvider. There is a property name 'path' and I added {noformat} /${spaces.user_homes.childname} {noformat} to the end to try to get them to create the user spaces there instead of in the Company Home. # I wanted to change the logo that is used. I attached the replacement logo [here|^AlfrescoLogo32.png]. Copy this to ./images/logo and overwrite the one that is there. # In order to setup SSL for the application (will do that later), edit ./WEB-INF/web.xml and add the following {noformat} Login Pages /* CONFIDENTIAL {noformat} # In order to configure CIFS server, I edited the file ./WEB-INF/classes/alfresco/file-servers.xml ## I added 'domain="SHORE' to the tag. ## I made sure the domain broadcast submask was 255.255.254.0 ## I uncommented the WINS section and changed it to {noformat} 134.89.10.32 134.89.12.87 {noformat} ## I deleted the enterprise authenticator and replaced it with this: {noformat} blizzard.shore.mbari.org shore {noformat} # OK, this is a total HACK and needed to be done due to the wonderful world of open source. In Internet Explorer with SSL turned on, you would get a dialog pop-up that stated the secure server was trying to serve non-secure content. This was due to the Alfresco Community logo being served from http://www.alfresco.com. Only IE did this and you can work around it on the client end by doing the following: ## Startup IE. ## Go to Tools->Internet Options ... ## Click on Security tab ## Click on "Trusted Sites" zone ## Click on Sites button ## Make sure check box for "Require Server verification (https:) for all sites in this zone" is unchecked 7. Type in "http://www.alfresco.com" into the "Add this website to the zone:" text field and click Add. ## Click on close ## Make sure "Trusted Sites" is still selected. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on the "Local Intranet" zone. ## Click on "Custom Level..." under Security level for this zone. ## Scroll down till you find the option that says "Display Mixed Content" and select "Enable" ## Click on OK ## Click on OK to close Internet Options dialog. # Now there are a couple of reasons why this is bad, but the main one is that if you are trying to reach this from outside the firewall, you will have to change those settings for the Internet Zone (I think) which is bad. Plus every user will have to do this. To get around this, I had to: ## Take [this|^alfresco_community_horiz20.gif] logo image and save it to ./images/logo directory. ## This next step can either be very easy or very complicated. You can try downloading [this|^a0.jar] jar file and copying it to ./WEB-INF/lib. If when you start up Alfresco you get some exceptions that look like they are related to a class called PageTag, you will have to do it the hard way: ### Now you have to actually check out the subversion source code from Alfresco. I am assuming you know how to do that. By the way, you will need ant and java installed to do this. The SVN URL for the repository is svn://www.alfresco.org/alfresco. ### Once it is checked out find the PageTag.java file (should be in HEAD/root/projects/web-client/source/java/org/alfresco/web/ui/repo/tag directory) and edit: #### Change the line {noformat} private final static String ALF_LOGO = "http://www.alfresco.com/images/alfresco_community_horiz20.gif"; {noformat} to: {noformat} private final static String ALF_LOGO = "/alfresco/images/logo/alfresco_community_horiz20.gif"; {noformat} ### Save the file. {warning} If you run this next step on the machine where the application is installed and have a TOMCAT_HOME environment variable defined, it will try to deploy everything to your Tomcat installation. The best thing to do is build this on a separate machine. {warning} ### Open a command prompt in the HEAD/root directory and type "ant build-tomcat". After a long wait, the build will actually fail if you don't have a TOMCAT_HOME defined in your environment. ### Once the build has failed you will need to create a new jar file called a0.jar with only the PageTag.class file in it. ### Copy the a0.jar file to the ./WEB-INF/lib directory. # That takes care of all the changes to the WAR file. We can now put it back into .war form. # You should still have a alfresco.war file in the directory where you ran the jar -xvf command. Delete or move that file out as you will be recreating it. # While you are in the directory you expanded the war file in, run ## jar cvfm alfresco.war META-INF/MANIFEST.MF . # You should now have an alfresco.war file in the directory. Move that back to the alfreco install and overwrite the existing one. ## mv alfresco.war /opt/alfresco-2.0/tomcat/webapps # Most users like the details view, so I set the default to that by editing /opt/alfresco.2.0/tomcat/shared/classes/alfresco/extensions/web-client-config-custom.xml and added: {noformat} details 20
20
20 {noformat} # Now in order to use MBARI accounts, I needed to configure LDAP. {note} In the older version of Alfresco, I actually used NTLM to manage logins, but currently 2.0's NTLM for ActiveDirectory is broken. The supposedly have fixed it in the Enterprise version, but it has not made it to the Community edition yet. That is OK, as I will just use LDAP to authenticate. {note} ## I cd'd to the /opt/alfresco-2.0/tomcat/shared/classes/alfresco/extensions directory ## I then copied the ldap-authentication-context.xml.sample to ldap-authentication-context.xml and edited to match our ActiveDirectory setup. I have attached the file to this WIKI pages instead of detailing out all the changes. The file is [here|^ldap-authentication-context.xml] ## In order to grant certain accounts admin privs, I created a new custom-authority-services-context.xml in the same directory as the ldap-authentication-context.xml file and added {noformat} kgomes admin administrator {noformat} ## In the same directory, I edited the file-servers-custom.xml file and added a new config section {noformat} blizzard.shore.mbari.org shore {noformat} # Now, it is time to setup the server so we can login over SSL. ## In a shell run the keytool and answer the questions as shown (note the first and last name must be the fully qualified host name where alfresco will be run) {noformat} kgomes$ sudo keytool -genkey -alias tomcat -keyalg RSA Enter keystore password: alfresco What is your first and last name? [Unknown]: skana.shore.mbari.org What is the name of your organizational unit? [Unknown]: MBARI What is the name of your organization? [Unknown]: Monterey Bay Aquarium Research Institute What is the name of your City or Locality? [Unknown]: Moss Landing What is the name of your State or Province? [Unknown]: CA What is the two-letter country code for this unit? [Unknown]: US Is CN=mbari.org, OU=MBARI, O=Monterey Bay Aquarium Research Institute, L=Moss Landing, ST=CA, C=US correct? [no]: yes Enter key password for (RETURN if same as keystore password): {noformat} This will generate a .keystore file in your home directory. ## Now edit the /opt/alfresco.2.0/tomcat/conf/server.xml. Locate the element with port of 8443 and uncomment that section. Also add the keystorePass="alfresco" phrase. It should look like {noformat} {noformat} # I then started alfreso with './alfresco.sh start' {note} This takes a couple minutes as it has to first build the DB and all the indexes and such. {note} {warning:title=Wait 5 minutes} After you start up Alfresco with LDAP turned on, it takes 5 minutes before it will import users and groups from Active Directory, so go get a cup of coffee. {warning} # Then I can go to the web interface at http://prey.mbari.org:8080/alfresco and login as your MBARI username. # TODO: Setup startup/shutdown script in /etc/init.d and link to one of the rcX.d levels # Setup backup ## On the server, mysql 5 was already installed as a service (whoo-hoo!). ## The first thing to do is to turn on binary logging. This is done when the mysql service is started. On oceana, the startup script is /etc/init.d/mysql. I vi'd the script and added the binary log option to the actual startup command. So I changed: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" >/dev/null 2>&1 & {noformat} to: {noformat} /usr/bin/mysqld_safe --defaults-file=/etc/my.cnf --pid-file="$mypidfile" --log-error="$errlogfile" --log-bin=/data/mysql_logs/oceana-bin --log-bin-index=/data/mysql_logs/oceana-bin-idx >/dev/null 2>&1 & {noformat} # TODO: Setup backup for data directory and for alfresco install directory.]]> 589899 9830420 9797652 3180081 3114614 3180082 3114615 28672447 28639681 13795329 2010-06-14 21:54:04.303 2010-08-17 17:21:47.447 9372367 5 false 0.0 0 0 5374547 5 false 0.0 0 0 3637619 5 false 0.0 0 0 5374530 6 false 0.0 0 0 5374530 5 false 0.0 0 0 9372367 6 false 0.0 0 0 5374627 5 false 0.0 0 0 9372190 5 false 0.0 0 0 54 6 false 0.0 0 0 3114634 5 false 0.0 0 0 54 5 false 0.0 0 0 3114628 5 false 0.0 0 0 3114634 6 false 0.0 0 0 3637619 6 false 0.0 0 0 5374494 5 false 0.0 0 0 5374494 6 false 0.0 0 0 5374627 6 false 0.0 0 0 3114617 5 false 0.0 0 0 3114628 6 false 0.0 0 0 9372190 6 false 0.0 0 0 3114617 6 false 0.0 0 0 879 5 false 0.0 0 0 879 6 false 0.0 0 0 101 6 false 0.0 0 0 5374547 6 false 0.0 0 0 3637693 6 false 0.0 0 0 3637696 6 false 0.0 0 0 3637693 5 false 0.0 0 0 3637696 5 false 0.0 0 0 101 5 false 0.0 0 0