Difference between revisions of "Seon Core installation"

Revision as of 14:38, 9 April 2007

TAR Package

Unpack the provided tar archive file for your platform. You get the following directory structure:

dist 
|-- apache 
|   `-- images 
|   `-- sounds 
|-- etc 
|-- opt 
|   `-- seon 
|       |-- backup 
|       |-- bin 
|       |-- cert 
|       |-- incoming 
|       |-- outgoing 
|       |-- rrd 
|       |-- scripts 
|       `-- tmp 
`-- sql 

Filesystem directories

The created directory structure under "/opt" shows a suggestion for a standard installation. All directories will get defined via web interface, so keep in mind that the names can change. An explanation for each directory is as follows:

backup

In this directory, backup files of the MySQL database can be stored. The scripts seonbackup and seonrestore use this directory.

bin

The binaries of the installation are stored here. The directory must at least contain the following binaries:

• seoneq2 – program to enqueue files into the send queue
• seonped2 – program to edit partner entries in the database
• seonrd2 – the receiving daemon
• seonsqd2 – the send queue daemon

cert

Global certificates, needed for resolving certificate chain resolution, are stored in this directory.

incoming

Incoming files which get successfully transfered by seonrd get placed here. This should be an own filesystem. It must also be on the same filesystem as the directory „tmp“ (see below). The user running the Seon processes must have read, write and execute permissions on that directory. For easy administration, set permissions to 777 (a+rwx).

outgoing

For availability reasons, we suggest to use an own filesystem for outgoing files. The send queue daemon can send every file available on the system.

rrd

Statistical files (like RRDtool database files) are stored in this directory. Per partner about 320kB of data is needed.

scripts

Event scripts are stored in this directory by default. These scripts are called whenever a session is started or ended, files start to transfer or the end of transfer is reached.

tmp

Temporary files like files during the receiving process are stored in this directory. After successful transfer they are moved into the incoming directory. Keep in mind to set the size to the maximum file size you can receive because these files will be temporarily stored into this directory. This directory must be on the same filesystem as incoming, otherwise the moving process cannot be done. The user running the Seon processes must have read, write and execute permissions on that directory. For easy administration, set permissions to 777 (a+rwx).

Notes about upgrades

If you upgrade from an older Seon version, you will see that the names of the binaries have changed. Some new binaries are new, others (like „seoneq“) have a new name („seoneq2“). A symbolic link is created to support the complete web interface for the older and the newer Seon version. The web interface calls all binaries without the appendix „2“, so without the links (i.e. „seoneq“ -> „seoneq2“, „seonsqd“ -> „seonsqd2“ and so on), the web interface will display errors.

MySQL

Either you use a graphical interface for managing the database settings (i.e. phpMyAdmin or MySQLCC), or you can use the commandline tools provided by your local MySQL installation.

The MySQL command line client should be called by a user who has administrative rights on the MySQL database (mostly "root"), otherwise use the command line parameters "-u" and "-p" to provide a valid MySQL user (with password, if needed) which has the administrative permissions.

Create MySQL database

Choose a name for your database where Seon stores its information. In this installation example, we use the name "seon" as the database name.

Commandline call:

mysqladmin [-uroot] [-p] create seon 

Create MySQL user

Now, create a MySQL user who gets full permissions on this database. We use "seon" for simplicity.

echo "GRANT ALL ON seon.* TO seon@localhost IDENTIFIED BY 'seon';" | mysql [-uroot] [-p] 
echo "FLUSH PRIVILEGES;" | mysql [-uroot] [-p] 

(Color explanation: green → database name; blue → username; red → password)

The user must get all available MySQL permission in this database, because internal upgrade mechanism (as described in the "Advanced administration documentation") will try to extend or modify the database schema! Seon supports MySQL databases from version 3.23 up to the latest MySQL version (which is 5.0 and 5.1beta when creating this document). Since MySQL version 4.x, the password hashing algorithm in the database server has changed. Because Seon supports also older MySQL server versions, it uses an older client protocol than your MySQL server provides. In order to use your prefered MySQL server version anyway, you can modify the created MySQL user. If you experience any problems when starting Seon processes and Syslog contains the message „Client does not support authentication protocol requested by server; consider upgrading MySQL client“, you have two options:

• start your MySQL daemon with the option "--old-passwords" (as documented on the MySQL website http://dev.mysql.com/doc/refman/5.0/en/old-client.html)
• refresh your Seon user in the database with an old-hashing algorithm password by doing this:

echo "SET PASSWORD FOR 'seon'@'localhost'= OLD_PASSWORD('seon');" | mysql [-uroot] [-p] 

(if the above user information and password were used)

echo "FLUSH PRIVILEGES;" | mysql [-uroot] [-p]

Import MySQL tables

Use the provided file „seon.sql“ as the data source for the mysql import process:

mysql [-uroot] [-p] seon < seon.sql 

Where the first "seon" is the database name for your installation (see above).

Main configuration

Copy the main configuration file seon.cfg from the distribution directory

dist/etc/seon.conf

to a path where you want (default: "/etc/seon.conf"). Then, configure the appropriate variables in this file. A sample configuration file looks like this:

DB_HOST=localhost 
DB_USER=seon 
DB_PASS=seon 
DB_NAME=seon 
# DB_SOCKET=/var/lib/mysql.sock 
# DB_PORT=3306 
TABLEPREFIX=seon_ 

Lines with a hash ("#") at the beginning of a line are interpreted as a comment. The variable

DB_PORT

is only used for remote MySQL databases. The tableprefix defines the prefix for all internally fix names of tables, not the partner table as defined in the basic configuration (the default of "seon_" should not be changed if you haven't modified all table names manually!).

Web interface

For using the web interface, you need a webserver (Apache prefered) with PHP4 or newer support (PHP5 is also successfully tested). The directory apache in the distribution contains the complete web interface and needs to be copied to a directory somewhere under the document root directory (refer to your local installation). For example, on most linux distributions the document root directory is placed under "/var/www/". For simple administration, you should copy recursively the Seon apache directory somewhere under that directory into a new one.

cp -R apache /var/www/seon/

To configure the web interface to use the specific MySQL database (and the complete Seon configuration in it), you have to edit the file "database.inc.php" in the web interface directory (i.e. "/var/www/seon/database.inc.php"). A sample head output of that file looks like this:

<?php 
$config_type="file"; 
// $config_type="direct"; 
$config_file="/etc/seon.conf"; 
// confguration part for direct configuration: just uncomment the 
following 5 lines and change values as needed 
// $mysql_host = "localhost:3306:/tmp/mysql.sock"; 
// $mysql_user = "seon"; 
// $mysql_password = "seon"; 
// $DBName = "seon"; 
// $tableprefix="seon_"; 

Lines beginning with "//" are comments. Because you can install multiple instances of Seon on one machine, you have either to define valid configuration file (by setting "config_type" to "file" and "config_file" to the approriate absolute file position) or by setting all MySQL parameters manually (by setting "config_type" to "direct" and setting the variables $mysql_host, $mysql_user, $mysql_password, $DBName and $tableprefix as needed (dont forget to remove the "//" comment characters!). The "normal configuration uses the "file method by pointing to an Seon configuration file.