Install guide
Building the Apache Server from Source
Building Apache from source is an alternative where a binary distribution is not available or
is unsuitable for any reason. In this example, a new Apache binary distribution is compiled
and installed into /usr/local/apache2. See the previous section for instructions on
required WOW changes to Apache httpd.conf.
1. Download the Apache source from http://httpd.apache.org/download.cgi
. Look for the
latest stable 2.0.x version (RHEL 4) or 2.2.x (RHEL 5), e.g. httpd-2.0.64.tar.gz
or httpd-2.2.17.tar.gz.
2. Build Apache and install to a writeable local directory e.g. /usr/local/apache2.
Use any directory, taking care not to overwrite any existing installations:
cd /tmp
gzip -dc httpd-2.0.64.tar.gz | tar xvf -
cd httpd-2.0.64
./configure –-prefix=/usr/local/apache2
make
make install
Using PAM for NIS Password Authentication (RHEL 4 only)
By default WOW uses a duplicated password file /etc/httpd/conf/.wp to store
encrypted passwords for authentication purposes. This is required for any activity if
security level is C, and for write activity at level B. If a client uses NIS, i.e. if a list of users
and their encrypted passwords can be obtained using ypcat passwd, then it is possible
to authenticate directly using the Apache mod_auth_pam module (for Apache 2.0 on
RHEL 4 only). The procedure is described below (root is required):
1. Install mod_auth_pam.so :
cp $OWHOME/WebApps/dso/mod_auth_pam.so /usr/lib64/httpd/modules
chmod 755 /usr/lib64/httpd/modules/mod_auth_pam.so
2. Edit httpd.conf, add entries to LoadModule section:
vi /etc/httpd/conf/httpd.conf.
LoadModule auth_pam_module modules/mod_auth_pam.so
3. Configure Pam:
vi /etc/pam.d/httpd, add the following lines:
#%PAM-1.0
auth required pam_unix.so
account required pam_unix.so
Alternative for AD:
auth required pam_stack.so service=system-auth
account required pam_stack.so service=system-auth
password required pam_stack.so service=system-auth
session required pam_limits.so
4. Edit $OWHOME/WebApps/cgi-bin/.htaccess, remove AuthUserFile line.
5. Restart Apache:
/usr/sbin/apachectl restart
WOW 5000.0.1.11 Release Notes Page 86 of 104 March 2014