(r2) LcgNodesStatus < LCG

LCG Web>LcgNodesStatus (revision 2) (raw view)~~EditAttachPDF~~

---++ Apache configuration for Virtual Server with certificate-based authentication for https://lcg-nodes-status.cern.ch:8282/

*Status of 2006-12-07*

   * Physical host  lxb2051.
   * Defined DNS alias lcg-nodes-status in LANDB.
   * Opened port 8282 on the firewall (this is desirable but not mandatory, access is mostly needed from within CERN). The port 443 was busy by another application on the same host.
   * cgi-bin scripts and datafiles are in afs (the host must run the afs client).
   * The users' certificate DNs are kept in a file used by AuthUserFile.
   * Apache configuration in _/etc/httpd/conf/httpd.conf_ calls  the specific configuration file in _/etc/httpd/conf.d/lcg-nodes-status.ssl_ (could be _/etc/httpd/conf.d/ssl.conf_ if it weren't taken). Content of this file:
<verbatim>
Listen 0.0.0.0:8282
## SSL Virtual Host Context for lcg-nodes-status.cern.ch
## Prepared for Guillermo Diez on 2004-03-18
## Changed for Laurence Field
## Added SSLCACertificatePath to accept certificates from non-CERN CA
## users,e.g. Di and Louis. Maria Dimou 2005-02-16

<VirtualHost _default_:8282>
  DocumentRoot "/afs/cern.ch/project/gd/www/gis/lcg-nodes-status"
  ServerName lcg-nodes-status.cern.ch
  ServerAdmin laurence.field@cern.ch
  ErrorLog "/var/log/httpd/8282_error_log"
  TransferLog /var/log/httpd/8282_access_log

  SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
  ScriptAlias /cgi-bin/ "/afs/cern.ch/project/gd/www/gis/lcg-nodes-status/cgi-bin/"

  SSLEngine on
  SSLCACertificatePath /etc/grid-security/certificates
  SSLCertificateFile /etc/grid-security/lcg-nodes-status-cert.pem
  SSLCertificateKeyFile /etc/grid-security/lcg-nodes-status-key.pem
  SSLCACertificateFile /etc/grid-security/certificates/fa3af1d7.0
 <Directory /afs/cern.ch/project/gd/www/gis/lcg-nodes-status/cgi-bin>
    # Allow to run cgis here
    Options +ExecCGI
    SSLOptions +OptRenegotiate +StdEnvVars
    SSLVerifyClient require
    SSLVerifyDepth 5
    SSLOptions         +FakeBasicAuth
    SSLRequireSSL
    AuthName           "LCG Nodes Status"
    AuthType           Basic
    AuthUserFile       /afs/cern.ch/project/gd/www/gis/lcg-nodes-status/crt/httpd.passwd
    require            valid-user
  </Directory>
</VirtualHost>

</verbatim>




-- Main.dimou - 07 Dec 2006

Topic revision: r2 - 2006-12-07 - MariaDimou

LCG Wikis

LCG Service
Coordination

LCG Grid
Deployment

LCG
Apps Area

Public webs

Welcome Guest

- Cern Search
- TWiki Search
- Google Search
LCG All webs

Copyright &© 2008-2022 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
or Ideas, requests, problems regarding TWiki? use Discourse or Send feedback