summaryrefslogtreecommitdiff
path: root/README
blob: 845863058537192f9f037cdf31800390455da29a (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
Installation
============

# sudo aptitude install apache2 libapache2-mod-perl2 libconfig-inifiles-perl libdbd-mysql-perl libjs-jquery rivendell-server
# sudo a2enmod ssl authnz_ldap perl
# sudo /etc/init.d/apache2 restart

add the following to /etc/apache2/mods-endabled/ldap.conf:

~~~snip~~~
LDAPTrustedGlobalCert CA_BASE64 /etc/ldap/ldapscert.pem
~~~/snip~~~

# sudo rm /etc/apache2/conf.d/rivendell

add the following to the virtualhost config:

~~~snip~~~
  DocumentRoot /var/www/
  <Directory /var/www/>
    Options -Indexes -FollowSymLinks MultiViews
    AllowOverride None
    Order allow,deny
    allow from all
    RedirectMatch 404 /\\.svn(/|$)
  </Directory>
  <Directory /var/www/config>
    Order allow,deny
    Deny from all
  </Directory>

  Include /etc/rivendell/apache.conf

  <Location /rh-bin/>
    SetHandler perl-script
    PerlResponseHandler ModPerl::Registry
    PerlOptions +ParseHeaders
    Options +ExecCGI
  </Location>
  <Location /authtoken.json>
    SetHandler perl-script
    PerlResponseHandler ModPerl::Registry
    PerlOptions +ParseHeaders
    Options +ExecCGI
    Order deny,allow
    Deny from All
    AuthName "Radio Helsinki - Automation Import"
    AuthType Basic
    AuthBasicProvider ldap
    AuthzLDAPAuthoritative off
    AuthLDAPUrl ldap://ldap.helsinki.at/ou=People,dc=helsinki,dc=at?uid TLS
    Require valid-user
    Satisfy any
  </Location>
~~~/snip~~~