Documenting the pulgroup-TWiki setup

URL of the pulgroup-TWiki installation at UWM: http://blip.phys.uwm.edu

TODOs

Configuration

Authentication / Shibboleth

Useful links:

• http://twiki.org/cgi-bin/view/Support/WebSearch?search=shibboleth
• http://twiki.org/cgi-bin/view/Codev/RegistrationOnDemandHack

Steps taken

-- OliverBehnke - 14 Jul 2008

• Package update via yum update
• Added rpmforge (dag) repository (default: disabled in /etc/yum.repos.d/rpmforge.repo)
• Added missing (recommended) Perl modules
  • Archive::Tar
  • Apache::Htpasswd (rpmforge)
  • Digest::SHA1
  • Encode::compat (rpmforge)
  • Unicode::MapUTF8
• Fixed and activated locale (utf8)
  • $TWiki::cfg{UseLocale} = 1;
  • $TWiki::cfg{Site}{Locale} = 'en_US.utf8';

-- OliverBehnke - 08 Jul 2008

• Added mail notification scripts to cron.daily

-- OliverBehnke - 07 Jul 2008

• Added new favicon (LIGO)

-- OliverBehnke - 04 Jul 2008

• /var/www/html/twiki is now under git change control
  • data and pub are ignored as they contain the volatile twiki content which is RCS controlled anyway
  • Important: make sure you use the --author option when you commit changes using git-commit!

-- OliverBehnke - 03 Jul 2008

• Moved VM image to another VM host (production quality! thanks to Adam Miller)

-- OliverBehnke - 27 Jun 2008

• Changed /etc/httpd/conf.d/twiki.conf to default to new CW web: RedirectMatch /twiki/?$ http://blip.phys.uwm.edu/twiki/bin/view/CW/WebHome$1
• Current authorization schema:
  • Main Web has DENYWEBCHANGE for LVC, DENYWEBVIEW for TWikiGuest and NOSEARCHALL = on
  • CW Web has DENYWEBCHANGE for LVC and DENYWEBVIEW for TWikiGuest
  • Public Web has DENYWEBCHANGE for LVC and TWikiGuest
  • Sandbox Web has DENYWEBVIEW for TWikiGuest
  • TWiki Web has default access but NOSEARCHALL = on

-- OliverBehnke - 26 Jun 2008

• Modified /var/www/html/twiki/templates/login.tmpl (see attachments). Displayed login page provides a useful hint of called due to registration attempt
• Current registration/authentication schema
  • Registration page is protected (DENYTOPICVIEW TWikiGuest, registered users only!) but...
  • ... LVC account can access everything read-only, hence registration is possible for all LSC/Virgo members

-- OliverBehnke - 25 Jun 2008

• Removed LVCReadOnlyGroup and LVCEditGroup because we don't need them anymore. From now on registration is only possible for LSC/Virgo members (using LVC). All registered members have read/write access to the Main and Restricted webs. LVC itself has read-only access to both webs so LSC/Virgo members don't need to register if they just want to look at the topics

-- ReinhardPrix - 24 Jun 2008

• created new group LVCReadOnlyGroup and added user new LVC to it: this group will be used for read-only access to all LVC content

-- OliverBehnke - 24 Jun 2008

• Config change: $TWiki::cfg{Site}{Locale} = 'en_US.UTF-8';
• Installed Plugins
  • BibtexPlugin
    • yum install BibTool
    • Installed bibtex2html-1.73-2.i386.rpm (no recent version available! no official repo version either!)
    • $TWiki::cfg{Plugins}{BibtexPlugin}{bibtex} = '/usr/bin/bibtex';
    • $TWiki::cfg{Plugins}{BibtexPlugin}{render} = '/var/www/html/twiki/tools/render.sh';

-- OliverBehnke - 23 Jun 2008

• Set RedirectMatch entries in /etc/httpd/conf.d and subsequently removed /var/www/html/twiki/index.html again (not necessary)
• Installed Plugins
  • BatchUploadPlugin
    • incl. conditional batch upload, original files renamed to *.org.*
    • yum install perl-Archive-Zip (incl. dependencies)
  • TagMePlugin
    • incl. SKIN setting in TWikiPreferences
  • LatexModePlugin
    • yum install perl-Image-Info (incl. dependencies)
    • yum install tetex-latex (incl. dependencies)
    • yum install ImageMagick (incl. dependencies)
    • $TWiki::cfg{Plugins}{LatexModePlugin}{latex} = '/usr/bin/latex';
    • $TWiki::cfg{Plugins}{LatexModePlugin}{pdflatex} = '/usr/bin/pdflatex';
    • $TWiki::cfg{Plugins}{LatexModePlugin}{dvips} = '/usr/bin/dvips';
    • $TWiki::cfg{Plugins}{LatexModePlugin}{dvipng} = '/usr/bin/dvipng';
    • $TWiki::cfg{Plugins}{LatexModePlugin}{convert} = '/usr/bin/convert';
    • $TWiki::cfg{Plugins}{LatexModePlugin}{fgrep} = '/bin/fgrep';
    • $TWiki::cfg{Plugins}{LatexModePlugin}{engine} = 'dvipng';
    • $TWiki::cfg{Plugins}{LatexModePlugin}{imagetype} = 'png';
    • $TWiki::cfg{Plugins}{LatexModePlugin}{donotrenderlist} = 'input,include,catcode,newcommand,def,newenvironment,newfont,newtheorem,newsavebox';
    • $TWiki::cfg{Plugins}{LatexModePlugin}{tweakinline} = 1;
    • $TWiki::cfg{Plugins}{LatexModePlugin}{bypassattach} = 1;
  • GenPDFLatexAddOn
    • $TWiki::cfg{Plugins}{GenPDFLatex}{home} = '/home/twiki';
    • $TWiki::cfg{Plugins}{GenPDFLatex}{pdflatex} = '/usr/bin/pdflatex';
    • Using customized form defined here
    • Disabled edit message for custom form in /var/www/html/twiki/lib/TWiki/Contrib/GenPDFLatex.pm (line 348)

-- OliverBehnke - 20 Jun 2008

• Used TWiki's config generator to recreate twiki.conf as I wanted to make sure it's correct (put into /etc/httpd/conf.d)
  • Important: configure can only be accessed on localhost or from 130.75.117.0/24 for the time being. However, we might change this as soon as the admin accounts are properly set up in TWiki!
• Provide immediate access to main web for URLs http://blip.phys.uwm.edu/twiki and http://blip.phys.uwm.edu
  • Moved /var/www/html/twiki/index.html to /var/www/html/twiki/index.twiki.html and created a new /var/www/html/twiki/index.html (redirect)
  • Copied new /var/www/html/twiki/index.html to /var/www/html/index.html (redirect)
• Changed configuration
  • Anti-spam measures
    • {EmailPadding} = REMOVETHISTAG
  • Security
    • {SafeEnvPath} = /bin:/usr/bin
    • {Register}{NeedVerification} = true
    • {MinPasswordLength} = 8
• Changed TWiki/Web preferences
  • Have a look at the TWikiAdminGroup diff
  • Have a look at the Main.WebHome diff
  • Have a look at the TWikiPreferences diff

-- ReinhardPrix - 19 Jun 2008

• installed emacs (don't chase me with vi...)
  

  [root@blip ~]# yum install emacs

  logfile

• Create 'admin' user with sudo privilege for more security in sharing admin-rights

  [root@blip ~]# adduser admin

  and added the following to /etc/sudoers:

      #ReinhardPrix: Members of the admin group may gain root privileges
      %admin ALL=(ALL) ALL
     

-- ReinhardPrix - 11 Jun 2008:

• changed root password