view doc/admin-manual/installation-base.tex @ 901:1ebde13e620f

Moved all admin-manual specific files in new directory admin-manual doc/trunk@1024 c6561f87-3c4e-4783-a992-168aeb5c3f6f
author Hans Plum <hans.plum@intevation.de>
date Wed, 28 Apr 2010 14:25:08 +0000
parents
children fb1e051713cc
line wrap: on
line source
\section{Installationguide}

This section describes preconditions for the entire system and an
installation on a Debian 5.0.x (Lenny) for the GNV-System without an
running X-Environment.

For installing and operating the GNV-system access with {\bf root
rights} is needed.  If other permissions are needed, there will be a
hint in this manual.

% FIXME: Schreibweise bei Zeilen + und -

\subsection{Preconditions}

\subsubsection{System}

\begin{itemize}
  \item Storage for the delivered software: 100 MB
  \item Current processor on a 32-bit Architecture (Beginning
    2010)\footnote{Running on a 64-bit system should work out of the box
    and improve scalibility issues.}
  \item RAM: 1 GB for production as minimum.\footnote{This value depends
    mainly on the amount of connected users.}
  \item Network access to Database Backend
  \item RW-Access to the filesystem for logging, shapefile-export,
    caching
\end{itemize}

\subsubsection{Database: Software and Data}

The software has been developed for the following system:

\begin{itemize}
  \item ESRI ArcSDE 9.3.1 on Oracle 10.2\footnote{The development
    started in ESRI ArcSDE 9.2. There are known
    problems with this version.}
  \item ArcMarineBSH, model package "Time Series and Measurements"
  \item ArcMarineBSH, model package " MeshFeature"
  \item ArcMarineBSH, model package "Marine Feature"
  \item ArcS57 -- International Hydrographic Organization (IHO) S-57 for
    ENC Data Model. - ESRI Data Models. http://support.esri.com/datamodels
  \item CONTIS -- Federal Maritime and Hydrographic Agency (BSH). Continental 
    Shelf Information System --
    http://www.bsh.de/en/Marine\_uses/Industry/CONTIS\_maps/index.jsp
  \item GNV specific schema MapViewer interface -- Schema for integrating with MapViewer and
    their WMS services
  \item GNV specific schema for managing the cache -- The central
    dataware house is updated regulary. To keep the cache up-to-date,
    needs to cleaned after database updates.
\end{itemize}


\subsection{Operating System}

{\em Hint}: Configuring of partitions, firewalls, etc. for the system is out of
the scope of this project.

\subsection{Java Environment}

\subsubsection*{Installation Sun Java 6}

This GNV-system is developed for Sun Java 6. 

Add non-free packages of the Debian distribution to the system in
\verb+/etc/apt/sources.list+:

\begin{lstlisting}
  [...]
  deb http://ftp.de.debian.org/debian/ lenny main non-free
  deb-src http://ftp.de.debian.org/debian/ lenny main

  deb http://security.debian.org/ lenny/updates main
  deb-src http://security.debian.org/ lenny/updates main
  [...]
\end{lstlisting}


Install Sun Java 6 and its dependencies by executing the following:

\verb+ apt-get install sun-java6-jdk+


\subsubsection*{Install Native Components for Java6 (optional)}

This step is optional but recommended.

For a better support of the native server technologies, the package
\verb+libtcnative+ can be installed.

\verb+ apt-get install libtcnative-1+

% FIXME: Setzen des softlink

\subsubsection*{Configuration}

To ensure that the Apache Tomcat and the GNV Artefact Server will use
Sun Java 6 exclusively, switch to the default Java version
globally\footnote{This manual assumes that there are no other packages
depending to another Java version.}.

Use  \verb+update-alternatives+ mechanism of the Debian system, execute:

\verb+ update-alternatives --list java+

Lists all installed Java-Environments. E.g.:
 
\begin{lstlisting}
  Auswahl      Alternative
  -----------------------------------------------
            1    /usr/bin/gij-4.3
   +        2    /usr/lib/jvm/java-gcj/jre/bin/java
            3    /usr/lib/jvm/java-1.5.0-sun/jre/bin/java
   *        4    /usr/lib/jvm/java-6-sun/jre/bin/java
\end{lstlisting}


\verb+update-alternatives --config java+

Opens a dialog to reconfigure the java version which should be used as default.
Type the Number of the the java which should be used.
For the example above, type "4".

\subsubsection*{Test of the Installation}

Execute \verb+ java -version+

Check if a version of 1.6.0* has been set. Check:

\begin{lstlisting}
  java version  "1.6.0_12"
  Java(TM) SE Runtime Environment (build 1.6.0_12-b04)
  Java HotSpot(TM) Server VM (build 11.2-b01, mixed mode)
\end{lstlisting}


\subsubsection*{Uninstalling}

For removing Sun Java from the operating system, use:

\verb+apt-get --purge remove sun-java6-jdk+


\subsection{Tomcat Application Server}
To run the GNV-System a Apache Tomcat Server Version 5.5 is required.
This section describes the steps for installing and configuring
Apache Tomcat.

\subsubsection*{Installation}

To install the Tomcat Application-Server and its dependencies, execute:

\verb+ apt-get install tomcat5.5+
% FIXME: check for depencenies

\subsubsection{Configuration}

Adapt some run-time specific properties in
\verb+/etc/default/tomcat5.5+:

\begin{lstlisting}
   - #JAVA_OPTS="-Djava.awt.headless=true -Xmx128M"
   + JAVA_OPTS="-Djava.awt.headless=true -Xmx1024m -server"

   - #TOMCAT5_SECURITY=yes
   + TOMCAT5_SECURITY=no
\end{lstlisting}

{\bf Hint: As there is no Java security policy for the GNV WebClient,
Java Security Management is switched off.}

The Apache Tomcat is integrate with Apache WebServer just via the Apache
JServ Protocoll (AJP). To secure the connection, just local connections
are allowed for AJP on Tomcat.

Modify the \verb+ /etc/tomcat5.5/server.xml+:
\begin{lstlisting}

    # Deactivate Standard HTTP Connector:

    +<!--
     <Connector port="8180" maxHttpHeaderSize="8192" address="127.0.0.1"
                maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
                enableLookups="false" redirectPort="8443" acceptCount="100"
                connectionTimeout="20000" disableUploadTimeout="true" />
    +-->
 
     - <Connector port="8009" 
     -           enableLookups="false" redirectPort="8443" protocol="AJP/1.3" />
 
     + <Connector port="8009" 
     +           enableLookups="false" redirectPort="8443" protocol="AJP/1.3" address="127.0.0.1"/>
\end{lstlisting}
 
To activate these changes, restart  Apache Tomcat:
 
\verb+ /etc/init.d/tomcat5.5 restart+

 \subsubsection*{Test of the Installation}

Check if the port 8009 is opened via:
\verb+ netstat -nltp | grep 8009+

A possible listing looks like this:
\begin{lstlisting}
  tcp        0      0 127.0.0.1:8009          0.0.0.0:*  LISTEN      19252/jsvc
\end{lstlisting}
 
So fare, there is no commandline client for AJP to test the connection.
If there are problems, setup \verb+ mod_jk+ module in Apache WebServer
and check its according log files.

\subsubsection*{Uninstalling Apache Tomcat}

To uninstall the Apache Tomcat, use the following:
\verb+ apt-get --purge remove tomcat5.5+


\subsection{Apache Webserver}
This section describes the required steps for the installation and configuration 
of the Apache Webserver Version 2.2.

\subsubsection*{Installation}

To install the Apache Webserver you have to execute the following command:

* apt-get install apache2

- Additional Modules
To establish the Connection between the Tomcat Application Server and the 
Apache Webserver we have to install an additional Module named Mod-JK

* apt-get install libapache2-mod-jk

- Configuration

-- Edit the Settings for mod-jk

Edit the Settings for mod-jk in File /etc/libapache2-mod-jk/workers.propertie
as follows:

\begin{lstlisting}
  - workers.java_home= /usr/lib/jvm/java-gcj/
  + workers.java_home=/usr/lib/jvm/java-6-sun
\end{lstlisting}

-- Enable mod-jk in Apache Webserver

For this add the follwing Lines to File /etc/apache2/httpd.conf:

\begin{lstlisting}
  + JkWorkersFile "/etc/libapache2-mod-jk/workers.properties"
  + JkLogFile "/var/log/mod_jk.log"
\end{lstlisting}

--Disable default Site of Apache Webserver

* a2dissite default

--Enable the specific Site of GNV

* Copy File FIXME/gnv to /etc/apache2/sites-available

%FIXME: Configure contact address for Webserver

* a2ensite gnv

--Reload the Configuration of Apache Webserver

* /etc/init.d/apache2 reload

\subsubsection*{Test of the Installation}

You can test the Installation by executing the follwing url

* http://localhost/gnv/start.do


\subsubsection*{Uninstalling the Apache Webserver}

To uninstall the Apache Webserver you can use the following Command:
* apt-get --purge remove apache2


\subsection{Installation of UMN MapServer}

\subsubsection*{Installation}
-- Remove the installed old mapserver-Version from the System

* apt-get remove cgi-mapserve

-- Installing required Libraries

* apt-get install ttf-freefont
* apt-get install libming0 libfribidi0


-- Installing mapserver-gp

At first you have to configure the source for the Gispatcher-server where
the Mapserverpackes are hosted by the Intevation.
For this we have to add the followin line to File /etc/apt/sources.list

  deb http://apt.gispatcher.com/ lenny gispatcher

Then it is necessary to import the Key which is used to sign the Packages:

  TODO: gpg --keyserver hkp://keys.gnupg.net --recv-keys EC70B1B8
  TODO: gpg --export EC70B1B8 | apt-key add -

Then install the mapserver-gp executing the follwong command

* apt-get install cgi-mapserv-gp

-- Installing mapserv-gp withou access to the Internet

If there is no access to the Internet it is possible to install the Mapserver
manually.
For this do the following steps:

\begin{lstlisting}
* Copy the Packages of mapserver-gp via scp onto the Server
* http://apt.gispatcher.com/dists/lenny/gispatcher/binary-i386/cgi-mapserver-gp_5.6.3-1~gp+1_i386.deb 
* dpkg -i cgi-mapserver-gp_5.6.3-1~gp+1_i386.deb
\end{lstlisting}

-- Make the Wrapper-Script available

To use the UMN-Mapserver without putting the Mapfile-Path into each URL it is
possible to use a Script which will do that.

For this you have to copy TODO FIXME to /usr/lib/cgi-bin

You also have to edit the Script and set the PATH where the Mapfile is stored
by the Artifact-Server into the Script.
\begin{lstlisting}
- export MS_MAPFILE=/opt/artifacts/mapfiles/mapfile.map
+ export MS_MAPFILE=/opt/artefact-server/mapfiles/mapfile.map // TODO FIXME
\end{lstlisting}

%FIXME ERROR_LOGGING

% FIXME: Adapting contact data

\subsubsection*{Test of installation}
You can chack if the Installation was sucsessful executing the following URl:

* curl http://localhost/cgi-bin/mapserv-gp

The response should look like this:

No query information to decode. \verb+QUERY_STRING+ is set, but empty.

\subsubsection*{Uninstall UMN- Mapserver}

To uninstall the UMN-mapserver you have to execute the following commands.

* rm TODO FIXME wrapperscript
*  apt-get --purge remove cgi-mapserv-gp

http://dive4elements.wald.intevation.org