Web Server/Services Web Server/Services pyhsu

Computer Center, CS, NCTU 2 FAMP(FreeBSD+Apache+MySQL+PHP)  Apache 2.2 (40%) /usr/ports/www/apache22 apache22_enable="YES" (/etc/rc.conf) /usr/local/etc/rc.d/apache22 start  MySQL5.5 (20%) /usr/ports/databases/mysql55-server mysql_enable="YES" (/etc/rc.conf) /usr/local/etc/rc.d/mysql-server start  PHP 5 (20%) /usr/ports/lang/php5 /usr/ports/lang/php5-extensions  HTTPS (20%)  Bouns (20%)

Computer Center, CS, NCTU 3 Apache  Basic system (10%) Apache HTTP Server is the most popular HTTP server software in use. Open source software. Cross-platform and security.  Virtual Hosts (10%) .htaccess (5%)  Userdir (5%)  Blog (5%)  Redirect (5%)

Computer Center, CS, NCTU 4 Apache – Virtual Hosts  Providing services for more than one domain-name (or IP) in one web server.  Apache Name-Based configuration example /usr/local/etc/apache22/extra/httpd-vhosts.conf Notice virtual host’s DocumentRoot permission  To do this homework, you need 2 domain name (If you don’t have static IP)

Computer Center, CS, NCTU 5 Apache –.htaccess .htaccess(hypertext access)  You can use these tools

Computer Center, CS, NCTU 6 Apache – Userdir  Let users have their own web space

Computer Center, CS, NCTU 7 Apache – Blog  You can use Wordpress Movable Type Others you like or Write a system yourself  Don’t use BSP(blog service provider)

Computer Center, CS, NCTU 8 Apache – Redirect  You can use mod_rewrite mod_alias  Reference

Computer Center, CS, NCTU 9 MySQL  What is SQL(Structured Query Language) The most popular computer language which is used to create, modify, retrieve and manipulate data from relational database management systems. SQL Introduction:  A multithreaded, multi-user, SQL Database Management System.  Basic system(10%)  phpMyAdmin(10%) Create another user with limited privilege

Computer Center, CS, NCTU 10 MySQL – phpMyAdmin(1/2)  phpMyAdmin can manage a whole MySQL server as well as a single database over the World Wide Web.  Official Site:  Documentation:  Characteristics Browser-based, Supporting PHP5.2+, MySQL 5.0+, Open Source  There are four authentication modes offered : http, cookie, sign-on and config(the less secure one, not recommanded).

Computer Center, CS, NCTU 11 MySQL – phpMyAdmin(2/2)  Create another user with limited privilege

Computer Center, CS, NCTU 12 PHP  Basic system (10%) /usr/ports/lang/php5 /usr/ports/lang/php5-extensions  Other (10%) Discuz! Joomla! phpBB Xoops Album

Computer Center, CS, NCTU 13 HTTPS  Root CA Be a Certificate Authority yourself Issue certifications for your services  /usr/local/etc/apache22/httpd.conf Include/etc/apache22/extra/httpd-ssl.conf  Able to browse your web site via HTTPs(20%)

Computer Center, CS, NCTU 14 Requirement(1/3)  You need two host names use same IP address.  When access user need enter id "nctucs" and password "sahw4" which is implemented by.htaccess.  System user sysadm can put file at ~/WWW/ and others can access it by visiting sysadm's password is your student id.  Your blog domain name is

Computer Center, CS, NCTU 15 Requirement(2/3)  Users use cookie authentication when access your phpMyAdmin site (You need to add a MySQL user for authentication). And notice that if others access can not access it. Only *.* can access it But * can’t access it 

Computer Center, CS, NCTU 16 Requirement(3/3)  Redirect to / / But will not redirect.

Computer Center, CS, NCTU 17 Bonus1  One of your domain name can use userdir, but another cannot. For example  web. example.org’s IP is  blog. example.org’s IP is  is valid, but is invalid.

Computer Center, CS, NCTU 18 Bonus2  suphp A tool for executing PHP scripts with the permissions of their owners. By using this, user does not need set permission to others. Official Site:  Install suphp and config it Don't permit a php file execution if user except file owner has its write permission. Let can run with owner sysadm ( system(“/usr/bin/id”) )

Computer Center, CS, NCTU 19 Bonus3 – FTP-over-TLS(1/2)  Server ftp/pure-ftpd ftp/ftpd-tls ftp/bsdftpd-ssl  Client ftp/lftpd  OPENSSL "With OpenSSL support" on ftp/ftp-tls  Able to download file via FTP-over-TLS

Computer Center, CS, NCTU 20 Bonus3 – FTP-over-TLS(2/2)  OpenSSL In system › /usr/src/crypto/openssl In ports › security/openssl  How to generate SSL X.509 Certificate

Computer Center, CS, NCTU 21 Other Bonus  Other bonus you can try ： fastcgi …  If you add extra features, please let TAs know. TAs will give bonus score according to degree of difficulty.  This homework's score upper bound is 120.  Each bonus’s score upper bound is 5.