need help installation ezpublish 4.3

need help installation ezpublish 4.3

Sunday 08 August 2010 1:57:07 am - 6 replies

Author Message

Doug Brethower

Sunday 08 August 2010 12:30:27 pm

Welcome.

Security is a complex subject. Even more complex when various hosting options are involved. The recommendations from the installer are explicit enough for those familiar with the issues. Follow them to mitigate risks.

Any free advice you receive beyond what is generated by the installer, may or may not be worth the price, and likely will not be any easier to understand.

Maybe I misinterpret your question?

Doug Brethower
Apple Certified Technical Consultant, Southwest, MO USA
http://share.ez.no/directory/companies/lakedata.net

Danny NG

Sunday 08 August 2010 1:57:00 pm

Hi Doug, thanks a lot for the respond. I may set the title of the topic to a wrong way that may be misunderstood. What i really mean and need help to is just how to setup up virtual host because i got this error during installation:

Your site is not running in a virtual host mode, this is insecure...etc...

even i followed the how-to documentation (virtual host and siteaccess) from the ez publish site. I've tried different way but none of those worked. Do you know anything about this?

Doug Brethower

Sunday 08 August 2010 9:19:51 pm

You are quite welcome and I wish I could help you more by understanding your situation better.

When you enable .htacess and nothing changes, it may be Apache AllowOverride directive is set to None in your httpd configuration file.

From the Apache docs "When this directive is set to None, then .htaccess files are completely ignored. In this case, the server will not even attempt to read .htaccess files in the filesystem."

More.. http://httpd.apache.org/docs/2.0/mod/core.html

If you could clarify "none of those worked" by explaining the failure mode. Is it that you continue to get the warning at install time?

Doug Brethower
Apple Certified Technical Consultant, Southwest, MO USA
http://share.ez.no/directory/companies/lakedata.net

Danny NG

Monday 09 August 2010 12:42:13 am

the hole error mode look likes this:

Site security

 

Your site is not running in a virtual host mode, this is insecure. It is recommended to run eZ Publish in virtual host mode. If you do not have the possibility to use virtual host mode, you should follow the instructions below about how to install an .htaccess file. The .htaccess file tells the web server to restrict the access to certain files.

 

If you have shell access, you can run the following commands.

cd /var/www/mysite1.com
cp .htaccess_root .htaccess

If you do not have shell access, you will have to copy the file using an FTP client or ask your hosting provider to do this for you.

According to the error above, I may understood that .htaccess is used in case there is no virtual host mode enable., or do i misinterpret? However i mean my virtual mode is on, because i could access to websites (i.e mysite1.com and mysite2.com) after the configurations. Here is the configure files and how I've done it:

This file is made from this link http://ez.no/doc/ez_publish/technical_manual/4_x/installation/virtual_host_setup. and placed under /etc/apache2/sites-available under ubuntu 10.04.

NameVirtualHost *:80
<VirtualHost *:80>
<Directory /var/www/mysite1.com>
Options FollowSymLinks
AllowOverride None
</Directory>
<IfModule sapi_apache2.c>
#<IfModule mod_php5.c>
php_admin_flag safe_mode Off
php_admin_value register_globals 0
php_value magic_quotes_gpc 0
php_value magic_quotes_runtime 0
php_value allow_call_time_pass_reference 0
</IfModule>

DirectoryIndex index.php
#<IfModule sapi_apache2.c>
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule content/treemenu/? /index_treemenu.php [L]
Rewriterule ^/var/storage/.* - [L]
Rewriterule ^/var/[^/]+/storage/.* - [L]
RewriteRule ^/var/cache/texttoimage/.* - [L]
RewriteRule ^/var/[^/]+/cache/(texttoimage|public)/.* - [L]
Rewriterule ^/design/[^/]+/(stylesheets|images|javascript)/.* - [L]
Rewriterule ^/share/icons/.* - [L]
Rewriterule ^/extension/[^/]+/design/[^/]+/(stylesheets|images|javascrip
ts?)/.* - [L]
Rewriterule ^/packages/styles/.+/(stylesheets|images|javascript)/[^/]+/.
* - [L]
RewriteRule ^/packages/styles/.+/thumbnail/.* - [L]
RewriteRule ^/favicon\.ico - [L]
RewriteRule ^/robots\.txt - [L]
# Uncomment the following lines when using popup style debug.
# RewriteRule ^/var/cache/debug\.html.* - [L]
# RewriteRule ^/var/[^/]+/cache/debug\.html.* - [L]
RewriteRule .* /index.php
</IfModule>

DocumentRoot /var/www/mysite1.com
ServerName mysite1.com
ServerAlias admin.mysite1.com

And this files /settings/override/site.ini.append.php is in the installations folder.I got it from http://ez.no/doc/ez_publish/technical_manual/4_x/installation/virtual_host_setup/virtual_host_example

<?php /* #?ini charset="utf-8"?
[RegionalSettings]
Locale=eng-US
TextTranslation=enabled
[SiteAccessSettings]
AvailableSiteAccessList[]=mysite1
AvailableSiteAccessList[]=mysite1_admin
MatchOrder=host
HostMatchMapItems[]=mysite1.com;mysite1
HostMatchMapItems[]=admin.mysite1.com;mysite1_admin
*/ ?>

After configurations, what I've done for the testing to see if virtual mode is working:

I made two directory for sites (mysite1.com and mysite2) under /var/www. If both of them can access from the browser address bar, then virtual mode must be working. Yes, it did, i could access to both of them.

So I cannot figure out why still get the above error.

Doug Brethower

Monday 09 August 2010 6:02:20 am

Well done!

I believe we may have reached resolution.

The Site Security message appears as the result of a logic switch. If x condition exists, then pop this message to advise. It does not subsequently check to see if you have followed the recommendations.

I can see where that may be confusing to new users. At the opening screen, you correct your problems, the errors go away. At this final screen, you follow the recommendations, yet the message persists.

The message must persist, because the underlying condition that triggered it remains true.

Maybe a bit of wording within the message to that effect could save confusion and time?

"Please take corrective measures outlined. This message will persist, as a necessary reminder for cases of future or additional installations"

Doug Brethower
Apple Certified Technical Consultant, Southwest, MO USA
http://share.ez.no/directory/companies/lakedata.net

Danny NG

Monday 09 August 2010 6:59:22 am

hmm.. I understand most part what you mean, but not all. However I'm still confuse, because it always appear this error, even i tried to delete this one project and installed another over and over again. Consume that you are right, how do i get rid of it by the next installation so it should not be appear again?

You must be logged in to post messages in this topic!

Powered by eZ Publish™ CMS Open Source Web Content Management. Copyright © 1999-2014 eZ Systems AS (except where otherwise noted). All rights reserved.