...
- follow instructions on VCL 2.3 Release page to download and verify apache-VCL-2.3-incubating.tar.bz2 and put in in /root
- extract VCL 2.3 code
Code Blocktip |
---|
tar xjf apache-VCL-2.3 -incubating.tar.bz2
|
Shutdown services
Shutdown the httpd and vcld services
Code Blocktip |
---|
service httpd stop or /etc/init.d/httpd stop
service vcld stop or /etc/init.d/vcld stop
|
Create a backup of vcl database
We will create a backup of the vcl database. This will provide a restore point if necessary.
Code Blocktip |
---|
mysqldump vcl > ~/vcl-pre2.3-upgrade.sql
|
Update mysql schema
This step updates the mysql schema.
Code Blocktip |
---|
cd /root/apache-VCL-2.3 -incubating
mysql vcl < mysql/update-vcl.sql |
One item of note: A new resource group is added in update-vcl.sql
...
- all profiles. Access to manage the group is added to the VCL->admin node in the privilege tree if that node exists. If not, you will need to add it manually after starting httpd again. To add it manually, pick a node in the privilege tree, scroll to Resources, click Add Resource Group, select serverprofile/all profiles from the drop-down box, check available, administer, manageGroup, and manageMapping, and click Submit New Resource Group.
Update web code
This step we will move the 2.2.1 web directory out of the way, so we can copy in the new web code base. After copying in the new code, we will migrate your configuration changes. These instructions assume that you installed the vcl web code at /var/www/html/vcl. If you installed it elsewhere, replace /var/www/html/vcl with your vcl web root.
- copy move your old code out of the way
Code Blocktip |
---|
cd /var/www/html
mv vcl ~/vcl_2.2.1_web
|
- copy the new code in place
Code Blocktip |
---|
cd /root/apache-VCL-2.3 -incubating
cp -r web /var/www/html/vcl
|
- copy your 2.2.1 config files
Code Blocktip |
---|
cd ~/vcl_2.2.1_web/.ht-inc
cp conf.php secrets.php pubkey.pem keys.pem /var/www/html/vcl/.ht-inc |
- Make the maintenance directory writable by the web server user. You will need to know what user httpd runs as on your server. This can be found with Look at the first column. One process will be owned by root. The remaining processes will be owned by the web server user. Now, own /var/www/html/vcl/.ht-inc/maintenance to that user (replacing 'apache' with your web server user if different):
Tip |
---|
chown apache /var/www/html/vcl/.ht-inc
|
- TODO explain options that need to be added to conf.php
Restart httpd service
- make some changes to conf.php:
- A new user group permission that controls who can manage block allocations globally or for a specific affiliation has been added. It can be granted to any user group under Privileges->Additional User Permissions->Manage Block Allocations. Users with this permission are notified of new block allocation requests. Remove from conf.php.
- A new user group permission that controls who can look up users globally or for a specific affiliation has been added. It can be granted to any user group under Privileges->Additional User Permissions->User Lookup. Users with this permission can look up information about other users. Remove from conf.php.
- Multilingualization has been added VCL. So, DEFAULTLOCALE has been added to conf.php to set the default locale. Add
Tip |
---|
define("DEFAULTLOCALE", "en_US"); |
to conf.php, changing en_US if needed to match your locale. You can look in /var/www/html/vcl/locale to see which ones are available. - Users authenticated using Shibboleth without also having an LDAP server can now be added before they log in. Add
Tip |
---|
define("ALLOWADDSHIBUSERS", 0); |
to conf.php. If you are using Shibboleth and would like to be able to add users to groups before the user has ever logged in to VCL, you can set this to 1. However, please note that if you typo the userid, there is no way to verify it, and the user will be added with the typoed userid. - Some LDAP related items have been simplified in the code using some additional options in $authMechs. For any LDAP entries, you need to add two options. "lookupuserbeforeauth" is used if you need VCL to look up the full DN of a user and use that when doing the bind that authenticates the user (if you don't know what this means, leave it set to 0). If you need to set it to 1, then you will need to set "lookupuserfield" to what LDAP attribute to use when looking up the user's DN (typically either 'cn', 'uid', or 'samaccountname'). Add
Tip |
---|
"lookupuserbeforeauth" => 0, "lookupuserfield" => '', |
to each LDAP array you have in the $authMech array in conf.php. - If you are using any Local accounts for authentication, you need to modify the entries for $addUserFunc and $updateUserFunc. Change
Warning |
---|
$addUserFunc[$item'affiliationid'] = create_function('', 'return 0;'); $updateUserFunc[$item'affiliationid'] = create_function('', 'return 0;'); |
to Tip |
---|
$addUserFunc[$item'affiliationid'] = create_function('', 'return NULL;'); $updateUserFunc[$item'affiliationid'] = create_function('', 'return NULL;'); |
Restart httpd service
Tip |
---|
service httpd start or |
Code Block |
---|
service httpd start or /etc/init.d/httpd start
|
Update management node code
This step will move make a backup copy of the 2.2.1 vcl code base out of the way, so we can cleanly copy in the new management node(MN) codeand then copy the new code over the existing code to preserve any drivers or other files you've added.
- Copy 2.2.1 code base to a backup location
Code Blocktip |
---|
cd <your vcl MN code root path>
ie. cd /usr/local/
cp -r vcl ~/vcl_2.2.1_managementnode
|
- Copy in the 2.3 code base to /usr/local, copying in should preserve any drivers or other files you've added.
Code Blocktip |
---|
/bin/cp -r /root/apache-VCL-2.3 -incubating/managementnode/* /usr/local/vcl |
- Run install_perl_libs.pl to add any new perl library requirements:
Tip |
---|
/usr/local/vcl
/bin/install_perl_libs.pl |
Restart vcld service
Code Blocktip |
---|
service vcld start or /etc/init.d/vcld start
|