Web Server/Services Web Server/Services huanghs

Computer Center, CS, NCTU 2 FAMP(FreeBSD+Apache+MySQL+PHP)  Apache 2.2 (35%) /usr/ports/www/apache22 apache22_enable="YES" (/etc/rc.conf) /usr/local/etc/rc.d/apache22 start  MySQL5.1 (20%) /usr/ports/databases/mysql55-server mysql_enable="YES" (/etc/rc.conf) /usr/local/etc/rc.d/mysql-server start  PHP 5 (20%) /usr/ports/lang/php5 /usr/ports/lang/php5-extensions  HTTPS (25%)  Bouns (20%)

Computer Center, CS, NCTU 3 Apache  Basic system (10%) Apache HTTP Server is the most popular HTTP server software in use. Open source software. Cross-platform and security.  Virtual Hosts (10%) .htaccess (5%)  Userdir (5%)  Blog (5%)

Computer Center, CS, NCTU 4 Apache – Virtual Hosts  Providing services for more than one domain-name (or IP) in one web server.  Apache Name-Based configuration example /usr/local/etc/apache22/extra/httpd-vhosts.conf Notice virtual host’s DocumentRoot permission  To do this homework, you need 2 domain name (If you don’t have static IP)

Computer Center, CS, NCTU 5 Apache –.htaccess .htaccess(hypertext access)  You can use these tools

Computer Center, CS, NCTU 6 Apache – Userdir  Let users have their own web space

Computer Center, CS, NCTU 7 Apache – Blog  You can use Wordpress Movable Type Others you like or Write a system yourself  Don’t use BSP(blog service provider)

Computer Center, CS, NCTU 8 MySQL  What is SQL(Structured Query Language) The most popular computer language which is used to create, modify, retrieve and manipulate data from relational database management systems. SQL Introduction:  A multithreaded, multi-user, SQL Database Management System.  Basic system(10%)  phpMyAdmin(10%) Create another user with limited privilege

Computer Center, CS, NCTU 9 MySQL – phpMyAdmin(1/2)  phpMyAdmin can manage a whole MySQL server as well as a single database over the World Wide Web.  Official Site:  Documentation:  Characteristics Browser-based, Supporting PHP5.2+, MySQL 5.0+, Open Source  There are four authentication modes offered : http, cookie, sign-on and config(the less secure one, not recommanded).

Computer Center, CS, NCTU 10 MySQL – phpMyAdmin(2/2)  Create another user with limited privilege

Computer Center, CS, NCTU 11 PHP  Basic system (10%) /usr/ports/lang/php5 /usr/ports/lang/php5-extensions  Other (10%) Discuz! Joomla! phpBB Xoops …

Computer Center, CS, NCTU 12 HTTPS  Root CA Be a Certificate Authority yourself Issue certifications for your services  /usr/local/etc/apache22/httpd.conf Include/etc/apache22/extra/httpd-ssl.conf  Able to browse your web site via HTTPs(25%)

Computer Center, CS, NCTU 13 Requirement(1/2)  You need two host names use same IP address.  When access user need enter id "nctucs" and password "sahw4" which is implemented by.htaccess.  System user sysadm can put file at ~/WWW/ and others can access it by visiting sysadm's password is your student id.  Your blog domain name is

Computer Center, CS, NCTU 14 Requirement(2/2)  Users use cookie authentication when access your phpMyAdmin site (You need to add a MySQL user for authentication). And notice that if others access can not access it. 

Computer Center, CS, NCTU 15 Bonus1  One of your domain name can use userdir, but another cannot. For example  web. example.org’s IP is  blog. example.org’s IP is  is valid, but is invalid.

Computer Center, CS, NCTU 16 Bonus2  suphp A tool for executing PHP scripts with the permissions of their owners. By using this, user does not need set permission to others. Official Site:  Install suphp and config it Don't permit a php file execution if user except file owner has its write permission.

Computer Center, CS, NCTU 17 Bonus3 – FTP-over-TLS(1/2)  Server ftp/pure-ftpd ftp/ftpd-tls ftp/bsdftpd-ssl  Client ftp/lftpd  OPENSSL "With OpenSSL support" on ftp/ftp-tls  Able to download file via FTP-over-TLS

Computer Center, CS, NCTU 18 Bonus3 – FTP-over-TLS(2/2)  OpenSSL In system › /usr/src/crypto/openssl In ports › security/openssl  How to generate SSL X.509 Certificate

Computer Center, CS, NCTU 19 Other Bonus  Other bonus you can try ： mod_rewrite fastcgi gallery …  If you add extra features, please let TAs know. TAs will give bonus score according to degree of difficulty.  This homework's score upper bound is 120.  Each bonus’s score upper bound is 5.

Computer Center, CS, NCTU 20 Demo  Due day: 12/21 18:30  Please go to your demo time. It will open on 12/21 21:30:00 It will close on 12/24 23:59:59