Sun WebServer 转换

下面的示例显示 Sun WebServer 1.0 httpd.conf 和 access.acl 文件向 Sun WebServer 2.0 的全面转换。在下面的示例中，新的 2.0 指令被忽视，除非它们为转换所明确要求。

Sun WebServer 1.0 httpd.conf 转换到 2.0

1. 假定有下列 Sun WebServer 1.0 /etc/http/httpd.conf 文件：

   server { server_root "/var/http/demo" server_user "root" mime_file "/etc/http/mime.types" mime_default_type text/html acl_enable "yes" acl_file "/etc/http/access.acl" acl_delegate_depth 3 cache_enable "yes" cache_small_file_cache_size 8 cache_large_file_cache_size 256 cache_max_file_size 1 cache_verification_time 10 map /cgi-bin/ /var/http/demo/cgi-bin/ cgi map /sws-icons/ /var/http/demo/sws-icons/ mime_add "appication/java" class mime_add "audio/basic" au mime_add "audio/basic" snd } url { doc_root "/var/http/demo/public" user_doc_enable "no" user_doc_root "public_html" cgi_enable "no" cgi_dns_enable "no" cgi_suffix_enable "no" cgi_user "nobody" log_type "elf" log_prefix "/var/http/logs/http" log_max_files 7 log_cycle_time 1440 log_max_file_size 1048576 ssi_enable "no" ssi_exec "no" ssi_xbithack "off" mime_add "application/x-csh" csh mime_add "application/xsh" sh } url //widgets { doc_root "/var/http/widgets/public" user_doc_enable "yes" user_doc_root "public_html" cgi_enable "yes" cgi_dns_enable "yes" cgi_suffix_enable "yes" cgi_user "nobody" log_type "clf" log_prefix "/var/http/logs/widgets" log_max_files 7 log_cycle_time 1440 log_max_file_size 1048576 ssi_enable "yes" ssi_exec "yes" ssi_xbithack "full" map /cgi-bin/ /var/http/widgets/cgi-bin/ cgi map /sws-icons/ /var/http/widgets/sws-icons/ } port 80 { keepalive_enable "yes" request_timeout 180 } port 1880 { ip_address 129.128.127.126 keepalive_enable "yes" request_timeout 180 hosts_supported widgets }

2. 为转换创建一个新服务器（我们将修改使用 1.0 的值为新服务器创建的配置文件）：

   #htserver add "server1"

3. 添加一个 Web 站点――widgets：

   # hthost add -i server1 -h widgets \ -s /var/http/server1/websites/widgets

4. 修改服务器级文件 /etc/http/server1.httpd.conf：

   server { server_root "/var/http/server1/" server_user "root" mime_file "/etc/http/mime.types" mime_default_type text/html access_enable "yes" cache_enable "yes" cache_small_file_cache_size 8 cache_large_file_cache_size 256 cache_max_file_size 1 cache_verification_time 10 } url { site_path /var/http/server1/websites/default_site site_config "conf/default_site.site.conf" site_enable "yes" } url //widgets { site_enable "yes" site_path "/var/http/server1/websites/widgets" site_config "conf/widgets.site.conf" conn_end_points 129.128.127.126:1880 :80 } port 80 { ip_address 0.0.0.0 keepalive_enable "yes" request_timeout 180 } port 1880 { ip_address 129.128.127.126 keepalive_enable "yes" request_timeout 180 }

5. 修改 /etc/http/mime.types：

   application/java class audio/basic au snd

6. 修改 /var/http/server1/websites/default_site/conf/default_site.site.conf：

   url { doc_root /var/http/demo/public map_file conf/map.conf realm_file conf/realms.conf access_file conf/access.conf content_file conf/content.conf mime_file conf/mime.types user_doc_enable "no" user_doc_root "public_html" cgi_enable "no" cgi_dns_enable "no" cgi_suffix_enable "no" cgi_user "nobody" log_type "elf" log_prefix "/var/http/server1/logs/default" log_max_files 7 log_cycle_time 1440 log_max_file_size 1048576 ssi_enable "no" ssi_exec "no" ssi_xbithack "off" }

7. 创建 /var/http/server1/websites/default_site/conf/mime.types：

   application/x-csh csh application/x-sh sh

8. 修改 /var/http/server1/websites/default_site/conf/map.conf：

   map /cgi-bin/ /var/http/demo/cgi-bin/ cgi map /sws-icons/ /var/http/demo/sws-icons/

9. 修改 /var/http/server1/websites/widgets/conf/widgets.site.conf：

   url { doc_root /var/http/widgets/public map_file conf/map.conf realm_file conf/realms.conf access_file conf/access.conf content_file conf/content.conf mime_file conf/mime.types user_doc_enable "yes" cgi_enable "yes" cgi_dns_enable "yes" cgi_suffix_enable "yes" cgi_user "nobody" log_type "clf" log_prefix "/var/http/server1/logs/widgets" log_max_files 7 log_cycle_time 1440 log_max_file_size 1048576 ssi_enable "yes" ssi_exec "yes" ssi_xbithack "full" }

10. 修改 /var/http/server1/websites/widgets/conf/map.conf：

    map /cgi-bin/ /var/http/widgets/cgi-bin/ cgi map /sws-icons/ /var/http/widgets/sws-icons/

Sun WebServer 1.0 access.acl 转换到 2.0

1. 假定有下列 Sun WebServer 1.0 /etc/http/access.acl 文件和被代理文件 /var/http/widgets/widgets.acl：

   • /etc/http/access.acl:

     url "/sws-administration" { authentication_type md5 realm serverAdmin password_file /etc/http/swsadmin.pw + user * } url "/statistics" { authentication_type basic realm statsRealm password_file /var/http/demo/stats/usrs group_file /var/http/demo/stats/grps + user * } url "//widgets" { delegate /var/http/widgets/widgets.acl }

   • /var/http/widgets/widgets.acl:

     url "/" { authentication_type basic realm widgetsRealm password_file /var/http/widgets/users group_file /var/http/widgets/groups + user * - user Joe - group thoseDenied }

2. 创建一个全局 serverAdmin 领域（在 /etc/http/realms/ 中），并以 /etc/http/swsadmin.pw 替换其用户文件

   ---

   注意：

   如果领域已存在，则只运行复制命令。

   ---

   # htrealm add -r serverAdmin -s HTPASSWD # cp /etc/http/swsadmin.pw /etc/http/realms/serverAdmin/users

3. 创建一个全局 statsRealm，并用上面 "/statistics" URL 中指定的那些文件替换其用户和组文件。将这个新领域添加到缺省站点和 widgets 站点的 realms.conf 文件中：

   ---

   注意：

   下面的 <hostname> 指工作站的主机名，用来指定缺省站点。

   ---

   # htrealm add -r statsRealm -s HTPASSWD # cp /var/http/demo/stats/usrs /etc/http/realms/statsRealm/users # cp /var/http/demo/stats/grps /etc/http/realms/statsRealm/groups # htrealm add -i server1 -h widgets -r statsRealm \ -s HTPASSWD -d /etc/http/realms/statsRealm # htrealm add -i server1 -h <hostname> -r statsRealm \ -s HTPASSWD -d /etc/http/realms/statsRealm

4. 在 widgets 站点创建一个本地 widgetsRealm ，并用上面所指定的文件替换其用户和组文件：

   # htrealm add -i server1 -h widgets -r widgetsRealm -s HTPASSWD # cp /var/http/widgets/users \ var/http/server1/websites/widgets/conf/realms/widgetsRealm/ # cp /var/http/widgets/groups \ /var/http/server1/websites/widgets/conf/realms/widgetsRealm/

5. 修改 /etc/http/access.conf:

   url /sws-administration { authentication_type md5 realm serverAdmin + user * }

6. 修改 /var/http/server1/websites/default_site/conf/access.conf:

   # Specify /sws-administration ACL here for site administration, # create a siteAdmin realm and add administrators to that realm # url "/sws-administration" { # authentication_type md5 # realm siteAdmin # + user * # } url "/statistics" { authentication_type basic realm statsRealm + user * }

7. 修改 /var/http/server1/websites/widgets/conf/access.conf:

   # Specify /sws-administration ACL here for site administration url "/statistics" { authentication_type basic realm statsRealm + user * } url "/" { authentication_type basic realm widgetsRealm + user * - user Joe - group thoseDenied }