Services/Sync/Server/Archived/0.3/Setup/Server: Difference between revisions

From MozillaWiki
< Services‎ | Sync‎ | Server‎ | Archived‎ | 0.3/Setup
Jump to navigation Jump to search
(New page: == Pre-Setup Considerations == It is strongly recommended that the Weave Server be set up under https, or behind a firewall with an https proxy in front of it, especially if you are plann...)
 
 
(28 intermediate revisions by 4 users not shown)
Line 1: Line 1:
== Pre-Setup Considerations ==
This server is deprecated. Please use [https://wiki.mozilla.org/Labs/Weave/API the new servers]
 
It is strongly recommended that the Weave Server be set up under https, or behind a firewall with an https proxy in front of it, especially if you are planning to use Apache basic authorization for access control.
 
The Weave Server requires PHP with PDO and JSON support installed. This should be the case if you are running PHP 5.1+. PDO will need drivers for whatever storage and authentications engines are used.
 
== Setting up the Server ==
 
1) Unzip the server-directory into the location you plan to serve the files from. You can get the latest server from http://hg.mozilla.org/labs/weaveserver (there you can download it in different formats). Be aware this code is always in development and may contain bugs.
 
2) Edit your apache conf files to add the following:
 
<pre>
Alias /0.3/user <full path to weave directory>/index.php
Alias /weave/register <full path to weave directory>/register.php
</pre>
 
Don't forget to set up the weave directory in a virtual-host-directive (or similar), or else php will not work.
 
3) Edit the weave_constants.php file as described below, and move it into a directory in the php include path.
 
== Setting up Weave Authentication ==
 
In weave_constants.php at the beginning (e.g. directly after the license-block)
 
<pre>
define('WEAVE_AUTH_ENGINE', '[sqlite|mysql|none]');
</pre>
 
so for example
 
<pre>
define('WEAVE_AUTH_ENGINE', 'mysql');
</pre>
 
=== Sqlite ===
 
<pre>
define('WEAVE_SQLITE_AUTH_DIRECTORY', '<path to stores directory>');
</pre>
 
additionally, create the users table
 
<pre>
$ sqlite3 <path to stores directory>/_users
SQLite version 3.4.0
sqlite> create table users (username text primary key, md5 text, email text, location text);
sqlite> .quit
</pre>
 
Change the owner of the _users db file to the account your webserver runs under.
 
=== Mysql ===
 
Create the mysql database. Add the following tables:
 
<pre>
create table users
(
username varbinary(32) primary key,
md5 varbinary(32),
email varbinary(64),
location text
) engine=InnoDB;
</pre>
 
Constants:
 
<pre>
define('WEAVE_MYSQL_AUTH_HOST', '<db host>');
define('WEAVE_MYSQL_AUTH_DB', '<db name>');
define('WEAVE_MYSQL_AUTH_USER', '<db username>');
define('WEAVE_MYSQL_AUTH_PASS', '<db password>');
</pre>
 
You can create users directly in mysql with the following command:
 
<pre>
insert into users ('username', 'md5') values ('<username>', md5('<password>'));
</pre>
 
But it is recommended to use the create_user.pl after setting up the admin-interface (see below).
 
== Setting up Weave Storage ==
 
<pre>
define('WEAVE_STORAGE_ENGINE', '[sqlite|mysql]');
</pre>
 
=== Sqlite ===
 
Edit the following constant:
 
<pre>
define('WEAVE_SQLITE_STORE_DIRECTORY', '<path to stores directory>');
</pre>
 
Easiest way to create a user is to go through the admin server process below.
 
=== Mysql ===
 
Create the mysql database. Add the following tables:
 
<pre>
create table wbo
(
username varbinary(32),
collection varbinary(64),
id varbinary(64),
parentid varbinary(64),
modified bigint,
sortindex int,
depth tinyint,
payload longtext,
primary key(username, collection, id),
index parentindex(username, collection, parentid),
index modified(username, collection, modified)
) engine=InnoDB;
</pre>
 
 
Edit your constant file:
 
<pre>
define('WEAVE_MYSQL_STORE_HOST', '<db host>');
define('WEAVE_MYSQL_STORE_DB', '<db name>');
define('WEAVE_MYSQL_STORE_USER', '<db username>');
define('WEAVE_MYSQL_STORE_PASS', '<db password>');
</pre>
 
== Other Constants ==
 
<pre>
define('WEAVE_PAYLOAD_MAX_SIZE', '<bytes>');
</pre>
 
Caps the size (in bytes - watch out for large unicode characters!) of a payload.
 
<pre>
define('WEAVE_SHARE_DBH', '1');
</pre>
 
If both the storage engine and authentication engine are using the same database, setting this makes both engines use the same database handler rather than opening different ones. Note that SQLite cannot use the same db for authentication and storage.
 
<pre>
define('WEAVE_REGISTER_USE_CAPTCHA', '1');
</pre>
 
Requires use of a captcha for users creating accounts. (See registration spec)
 
== Setting up Weave Admin ==
 
You can create, update passwords and delete users through the Server Admin API. Using the [https://wiki.mozilla.org/Labs/Weave/0.3/Admin admin server] is optional and is offered as a convenience rather than a requirement.
 
Add the following to your apache conf:
 
<pre>
Alias /weave/admin <path to the admin.php script>
</pre>
 
Due to the security concerns, this script should be additionally protected, either through denying most IPs, or using htaccess. Additionally, the following constant, if set, is required to be passed in for all transactions to the server:
 
<pre>
define('WEAVE_USER_ADMIN_SECRET', '<secret>');
</pre>
 
== Testing the Weave Server ==
 
The load_data.pl script will run a series of tests against your server, creating, modifying, selecting from and deleting a collection. Make sure to change the parameters at the top before running it. Also, the script requires the libwww-perl module and the weave admin server above to be set up. It currently does not work with http-authentication, so also be sure to have your web-directory unprotected during the tests.
 
== Creating and deleting users ==
 
Simply use the create_user.pl for this. You will need to have the libwww-perl-module and admin-server set up for running it. Just edit the parameters at the top of the file.
 
== Sample virtual host config ==
Sample Virtual host config for a server having SSL enabled and requiring http authentication. For debian placed in /etc/apache2/sites-enabled/, weave server directory located at /var/www/weaveserver/server/.
<pre>
<VirtualHost weave.my.domain:443>
 
ServerName weave.my.domain
DocumentRoot /var/www/weaveserver/server/
 
ErrorLog /var/log/apache2/weaveserver-error.log
CustomLog /var/log/apache2/weaveserver-access.log combined
 
SSLENgine on
SSLCertificateKeyFile /path/to/server.cert.key
SSLCertificateFile /path/to/server.cert.crt
 
<Directory "/var/www/weaveserver/server/">
 
Options Indexes FollowSymLinks
AllowOverride none
Order allow,deny
Allow from all
AuthType Basic
AuthName "Weave Server"
AuthUserFile /path/to/auth/file
require valid-user
 
</Directory>
 
Alias /weave/register /var/www/weaveserver/server/register.php
Alias /weave/admin /var/www/weaveserver/server/admin.php
 
Alias /0.3/user /var/www/weaveserver/server/index.php
 
</VirtualHost>
</pre>
 
In your weave-clients only enter https://weave.my.domain as server location.
Some hints:
* the username/password of the http-authentication must be the same as the one for the weave-user, or else it won't work
* if you have a self-signed certificate for SSL (or it is not valid because of any other reason) you have to visit your server once manually and accept the certificate permanently

Latest revision as of 03:08, 12 July 2010

This server is deprecated. Please use the new servers

Retrieved from "https://wiki.mozilla.org/index.php?title=Services/Sync/Server/Archived/0.3/Setup/Server&oldid=237549"