Brain to Blog

# apt-get install squirrelmail

# /usr/sbin/squirrelmail-configure

SquirrelMail Configuration : Read: config.php (1.4.0)
---------------------------------------------------------
Main Menu --
1.  Organization Preferences
2.  Server Settings
3.  Folder Defaults
4.  General Options
5.  Themes
6.  Address Books
7.  Message of the Day (MOTD)
8.  Plugins
9.  Database
10. Languages

D.  Set pre-defined settings for specific IMAP servers

C   Turn color on
S   Save data
Q   Quit

Command >> 입력

##

Organization Preferences
1.  Organization Name : Nerv Team Webmail
2.  Organization Logo : ../images/sm_logo.png
3.  Org. Logo Width/Height : (308/111)
4.  Organization Title : SquirrelMail $version
5.  Signout Page :
6.  Top Frame : _top
7.  Provider link : http://www.nerv-team.co.kr/
8.  Provider name : nerv-team webmail

##

Server Settings

General
-------
1.  Domain                 : nerv-team.co.kr
2.  Invert Time            : false
3.  Sendmail or SMTP : SMTP

A.  Update IMAP Settings   : localhost:143 (other)
B.  Update SMTP Settings  : localhost:25

##

Folder Defaults
1.  Default Folder Prefix :
2.  Show Folder Prefix Option : false
3.  Trash Folder : INBOX.Trash
4.  Sent Folder : INBOX.Sent
5.  Drafts Folder : INBOX.Drafts
6.  By default, move to trash : true
7.  By default, save sent messages : true
8.  By default, save as draft : true
9.  List Special Folders First : true
10. Show Special Folders Color : true
11. Auto Expunge : true
12. Default Sub. of INBOX : true
13. Show 'Contain Sub.' Option : false
14. Default Unseen Notify : 2
15. Default Unseen Type : 2
16. Auto Create Special Folders : true
17. Folder Delete Bypasses Trash : false
18. Enable /NoSelect folder fix : false

##

General Options
1.  Data Directory : /var/squirrelmail/data/
2.  Attachment Directory : /var/squirrelmail/attach/
3.  Directory Hash Level : 0
4.  Default Left Size : 150
5.  Usernames in Lowercase : true
6.  Allow use of priority : true
7.  Hide SM attributions : true
8.  Allow use of receipts : true
9.  Allow editing of identity : true
    Allow editing of name : true
    Remove username from header : false
10. Allow server thread sort : false
11. Allow server-side sorting : false
12. Allow server charset search : true
13. Enable UID support : true
14. PHP session name : SQMSESSID
15. Location base :
16. Only secure cookies if poss. : true

##

Address Books
1.  Change LDAP Servers
2.  Use Javascript Address Book Search : true
3.  Global file address book :
4.  Allow writing into global file address book : false
5.  Allow listing of global file address book : true
6.  Allowed address book line length : 2048

##

Language preferences
1.  Default Language : ko_KR
2.  Default Charset : utf-8
3.  Enable lossy encoding  : false

##

While we have been building SquirrelMail, we have discovered some
preferences that work better with some servers that don't work so
well with others.  If you select your IMAP server, this option will
set some pre-defined settings for that server.

Please note that you will still need to go through and make sure
everything is correct.  This does not change everything.  There are
only a few settings that this will change.

Please select your IMAP server:
    bincimap    = Binc IMAP server
    courier     = Courier IMAP server
    cyrus       = Cyrus IMAP server
    dovecot     = Dovecot Secure IMAP server
    exchange    = Microsoft Exchange IMAP server
    hmailserver = hMailServer
    macosx      = Mac OS X Mailserver
    mercury32   = Mercury/32
    uw          = University of Washington's IMAP server

    quit        = Do not change anything
Command >> courier

              imap_server_type = courier
         default_folder_prefix = INBOX.
                  trash_folder = Trash
                   sent_folder = Sent
                  draft_folder = Drafts
            show_prefix_option = false
          default_sub_of_inbox = false
show_contain_subfolders_option = false
            optional_delimiter = .
                 delete_folder = true

Press any key to continue...

# cd /var
/var# mkdir squirrelmail
/var# mkdir squirrelmail/data
/var# mkdir squirrelmail/attach
/var# chown -R www-data:www-data /var/squirrelmail
/var# chmod -R 770 /var/squirrelmail/data
/var# chmod -R 730 /var/squirrelmail/attach

# vi /etc/apache2/sites-enabled/000-default

# 추가
# mail
<VirtualHost *:80>
        ServerName mail.nerv-team.co.kr
        DocumentRoot /usr/share/squirrelmail
</VirtualHost>

# /etc/init.d/apache2 restart

/opt# wget http://www.igniterealtime.org/downloadServlet?filename=sparkweb/sparkweb_0_9_0.zip

/opt# unzip spark*
Archive:  sparkweb_0_9_0.zip
   creating: sparkweb/
  inflating: sparkweb/osxmousewheel.js
  inflating: sparkweb/AC_OETags.js
 extracting: sparkweb/playerProductInstall.swf
  inflating: sparkweb/history.htm
  inflating: sparkweb/SparkWeb.swf
  inflating: sparkweb/favicon.ico
 extracting: sparkweb/history.swf
  inflating: sparkweb/SparkWeb.html
  inflating: sparkweb/history.js

/opt# mv sparkweb /usr/share

/opt# cd /usr/share/sparkweb

/usr/share/sparkweb# cp SparkWeb.html index.html

# vi /etc/apache2/sites-enabled/000-default

# 추가
# spark
<VirtualHost *:80>
        ServerName spark.nerv-team.co.kr
        DocumentRoot /usr/share/sparkweb
</VirtualHost>

# /etc/init.d/apache2 restart

# apt-get install cacti

# rm /etc/apache2/conf.d/cacti.conf

# vi /etc/apache2/sites-enabled/000-default

# 추가
# cacti
<VirtualHost *:80>
        ServerName cacti.nerv-team.co.kr
        DocumentRoot /usr/share/cacti/site
</VirtualHost>

# /etc/init.d/apache2 restart

# a2enmod ssl
Enabling module ssl.
See /usr/share/doc/apache2.2-common/README.Debian.gz on how to configure SSL and create self-signed certificates.
Run '/etc/init.d/apache2 restart' to activate new configuration!

# cd /etc/apache2/conf.d

/etc/apache2/conf.d# openssl genrsa -rand rand.dat -des3 -out ssl.nerv-team.key
218 semi-random bytes loaded
Generating RSA private key, 512 bit long modulus
.....++++++++++++
.......................................++++++++++++
e is 65537 (0x10001)
Enter pass phrase for ssl.nerv-team.key:비밀번호입력
Verifying - Enter pass phrase for ssl.nerv-team.key:비밀번호입력

/etc/apache2/conf.d# openssl req -new -key ssl.nerv-team.key -out ssl.nerv-team.csr
Enter pass phrase for ssl.nerv-team.key:
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:KO
State or Province Name (full name) [Some-State]:SEOUL
Locality Name (eg, city) []:SEOUL
Organization Name (eg, company) [Internet Widgits Pty Ltd]:nerv-team
Organizational Unit Name (eg, section) []:nerv
Common Name (eg, YOUR name) []:antop
Email Address []:antop@nerv-team.co.kr

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

/etc/apache2/conf.d# openssl req -noout -text -in ssl.nerv-team.csr

/etc/apache2/conf.d# openssl req -new -x509 -days 365 -key ssl.nerv-team.key -out ssl2009.crt
Enter pass phrase for ssl.nerv-team.key:비밀번호입력
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:KO
State or Province Name (full name) [Some-State]:SEOUL
Locality Name (eg, city) []:SEOUL
Organization Name (eg, company) [Internet Widgits Pty Ltd]:nerv-team
Organizational Unit Name (eg, section) []:nerv
Common Name (eg, YOUR name) []:antop
Email Address []:antop@nerv-team.co.kr

/etc/apache2/conf.d# rm rand.dat   # 불필요한 파일 삭제

/etc/apache2/conf.d# mv ssl.nerv-team.* /opt/ssl   # 백업

# cp /opt/ssl/ssl.nerv-team.crt /etc/ssl/certs   # csr 파일 위치
# cp /opt/ssl/ssl.nerv-team.key /etc/ssl/private   # private key 파일 위치

# vi /etc/apache2/mods-enabled/ssl.conf

<IfModule mod_ssl.c>
....

# 추가
SSLCertificateFile /etc/ssl/certs/ssl.nerv-team.crt
SSLCertificateKeyFile /etc/ssl/private/ssl.nerv-team.key
</IfModule>

# vi /etc/apache2/sites-enabled/000-default

# 추가
# https
<VirtualHost *:443>
        DocumentRoot /var/www

        <Directory />
                Options FollowSymLinks
                AllowOverride None
        </Directory>

        <Directory /var/www/>
                Options Indexes FollowSymLinks MultiViews
                AllowOverride None
                Order allow,deny
                allow from all
        </Directory>

        ErrorLog /var/log/apache2/error.log
        LogLevel warn
        CustomLog /var/log/apache2/access.log combinded

        SSLEngine on
        SSLCertificateFile "/etc/ssl/certs/ssl.nerv-team.crt"
        SSLCertificateKeyFile "/etc/ssl/private/ssl.nerv-team.key"

        <FilesMatch "\.(cgi|shtml|phtml|php)$">
                SSLOptions +StdEnvVars
        </FilesMatch>

        <Directory "/usr/lib/cgi-bin">
                SSLOptions +StdEnvVars
        </Directory>

        # tomcat connecter
        Include /etc/apache2/mods-enabled/jk_mount.conf
</VirtualHost>

# /etc/init.d/apache2 restart
 * Restarting web server apache2
Apache/2.2.12 mod_ssl/2.2.12 (Pass Phrase Dialog)
Some of your private key files are encrypted for security reasons.
In order to read them you have to provide the pass phrases.

Server nerv-team.co.kr:443 (RSA)
Enter pass phrase:비밀번호입력

OK: Pass Phrase Dialog successful.
                                                                                             [ OK ]

# apt-get install libaio1 bc

# vi /etc/apt/sources.list

# 추가
# oracle
deb http://oss.oracle.com/debian unstable main non-free

# wget http://oss.oracle.com/el4/RPM-GPG-KEY-oracle  -O- | sudo apt-key add -

# apt-get update

# apt-get install oracle-xe-universal

# /etc/init.d/oracle-xe configure

Oracle Database 10g Express Edition Configuration
-------------------------------------------------
This will configure on-boot properties of Oracle Database 10g Express
Edition.  The following questions will determine whether the database should
be starting upon system boot, the ports it will use, and the passwords that
will be used for database accounts.  Press <Enter> to accept the defaults.
Ctrl-C will abort.

Specify the HTTP port that will be used for Oracle Application Express [8080]:8081   // tomcat과 겹쳐서 변경

Specify a port that will be used for the database listener [1521]:1521

Specify a password to be used for database accounts.  Note that the same
password will be used for SYS and SYSTEM.  Oracle recommends the use of
different passwords for each database account.  This can be done after
initial configuration:비밀번호
Confirm the password:비밀번호

Do you want Oracle Database 10g Express Edition to be started on boot (y/n) [y]:y

Starting Oracle Net Listener...Done
Configuring Database...Done
Starting Oracle Database 10g Express Edition Instance...Done
Installation Completed Successfully.
To access the Database Home Page go to "http://127.0.0.1:8081/apex"

# vi /etc/environment

# 수정
PATH="/usr/local/sbin:/usr/local/bin:/u.......:/usr/games:/usr/lib/oracle/xe/app/oracle/product/10.2.0/server/bin"
# 추가
export ORACLE_HOME='/usr/lib/oracle/xe/app/oracle/product/10.2.0/server'
export ORACLE_SID=XE
export NLS_LANG='KOREAN_KOREA.AL32UTF8'

# sqlplus

SQL*Plus: Release 10.2.0.1.0 - Production on 수 11월 11 22:02:53 2009

Copyright (c) 1982, 2005, Oracle.  All rights reserved.

사용자명 입력: sys as sysdba
암호 입력:

다음에 접속됨:
Oracle Database 10g Express Edition Release 10.2.0.1.0 - Production

SQL> exit
Oracle Database 10g Express Edition Release 10.2.0.1.0 - Production에서 분리되었습니다.

# apt-get install sun-java6-jdk

# javac -version
javac 1.6.0_15

# java -version
java version "1.6.0_15"
Java(TM) SE Runtime Environment (build 1.6.0_15-b03)
Java HotSpot(TM) Client VM (build 14.1-b02, mixed mode, sharing)

# apt-get install tomcat6

# vi /etc/tomcat6/server.xml

<!-- URIEncoding="UTF-8" 추가 -->
<Connector port="8080" protocol="HTTP/1.1" URIEncoding="UTF-8"
           connectionTimeout="20000"
           redirectPort="8443" />

<!-- 주석을 제가하고 URIEncoding="UTF-8" enableLookups="false" 추가 -->
<!-- Define an AJP 1.3 Connector on port 8009 -->
<Connector port="8009" protocol="AJP/1.3" redirectPort="8443" URIEncoding="UTF-8" enableLookups="false" />

# vi /etc/init.d/tomcat6

# 추가
JAVA_OPTS="$JAVA_OPTS -Djava.endorsed.dirs=$CATALINA_HOME/endorsed -Dcatalina.base=$CATALINA_BASE -Dcatalina.home=$CATALINA_HOME -Djava.io.tmpdir=$JVM_TMP -Dfile.encoding=8859_1 -Dfile.client.encoding=8859_1 -Dclient.encoding.override=8859_1"

# /etc/init.d/tomcat6 restart

# apt-get install libapache2-mod-jk

# vi /etc/apache2/mods-enabled/jk.conf

# 생성
# ServerName nerv-team.co.kr
JkWorkersFile   /etc/apache2/mods-enabled/workers.properties
JkShmFile       /var/log/apache2/mod_jk.shm
JkLogFile       /var/log/apache2/mod_jk.log
JkLogLevel      debug
JkLogStampFormat   "[%a %b %d %H:%M:%S %Y] "
JkOptions +ForwardKeySize +ForwardURICompat -ForwardDirectories
JkRequestLogFormat "%w %V %T"

# vi /etc/apache2/mods-enabled/jk_mount.conf

# 생성
# Apache Tomcat에서 처리할 URL 패턴을 등록
JkMount /*.jsp          worker1
JkMount /servlet/*      worker1
JkMount /*.do           worker1
JkMount /*.action       worker1

# vi /etc/apache2/mods-enabled/workers.properties

# 생성
workers.tomcat_home=/usr/share/tomcat6
workers.java_home=/usr/lib/jvm/java-6-sun
ps=/

worker.list=worker1
worker.worker1.host=localhost
worker.worker1.port=8009
worker.worker1.type=ajp13
worker.worker1.lbfactor=50
worker.worker1.socket_keepalive=1
worker.worker1.socket_timeout=60

# vi /etc/apache2/sites-enabled/000-default

# 원하는 호스트 부분에 추가
# www.nerv-team.co.kr
<VirtualHost *:80>
        ServerAdmin antop@nerv-team.co.kr
        ServerName www.nerv-team.co.kr
        ServerAlias nerv-team.co.kr

        DocumentRoot /var/www

        # tomcat connecter
        Include /etc/apache2/mods-enabled/jk_mount.conf
...
</VirtualHost>

# vi /etc/tomcat6/server.xml

<Host name="www.nerv-team.co.kr" unpackWARs="true" autoDeploy="true" xmlValidation="false" xmlNamespaceAware="false">
  <Context path="/" docBase="/var/www" reloadable="true" />
</Host>

# /etc/init.d/tomcat6 restart

# /etc/init.d/apache2 restart

# echo '<%="Hello World"%>' > /var/www/jspinfo.jsp

# apt-get install bind9

# vi /etc/bind/named.conf.local

//
// Do any local configuration here
//
zone "nerv-team.co.kr" {
        type master;
        file "/etc/bind/db.nerv-team.co.kr";
};

# cp /etc/bind/db.local /etc/bind/db.nerv-team.co.kr

# vi /etc/bind/db.nerv-team.co.kr

;
; BIND data file for local loopback interface
;
; 도메인 주소 뒤에 ' . ' 주의!!
$TTL    604800
@       IN      SOA     ns.nerv-team.co.kr. root.nerv-team.co.kr. (
                              2         ; Serial
                         604800         ; Refresh
                          86400         ; Retry
                        2419200         ; Expire
                         604800 )       ; Negative Cache TTL
;
@       IN      NS      ns.nerv-team.co.kr.
@       IN      A       220.86.83.10
www  IN      A       220.86.83.10
mail    IN      A       220.86.83.10
*        IN      A       220.86.83.10

# /etc/init.d/bind9 restart

# ping nerv-team.co.kr
PING nerv-team.co.kr (220.86.83.10) 56(84) bytes of data.
64 bytes from 220.86.83.10: icmp_seq=1 ttl=64 time=0.039 ms
64 bytes from 220.86.83.10: icmp_seq=2 ttl=64 time=0.036 ms
64 bytes from 220.86.83.10: icmp_seq=3 ttl=64 time=0.035 ms
64 bytes from 220.86.83.10: icmp_seq=4 ttl=64 time=0.034 ms
64 bytes from 220.86.83.10: icmp_seq=5 ttl=64 time=0.034 ms
64 bytes from 220.86.83.10: icmp_seq=6 ttl=64 time=0.036 ms
64 bytes from 220.86.83.10: icmp_seq=7 ttl=64 time=0.026 ms
64 bytes from 220.86.83.10: icmp_seq=8 ttl=64 time=0.027 ms
^C
--- nerv-team.co.kr ping statistics ---
8 packets transmitted, 8 received, 0% packet loss, time 7009ms
rtt min/avg/max/mdev = 0.026/0.033/0.039/0.006 ms

# named-checkzone nerv-team.co.kr /etc/bind/db.nerv-team.co.kr
zone nerv-team.co.kr/IN: NS 'ns.nerv-team.co.kr' has no address records (A or AAAA)
zone nerv-team.co.kr/IN: loaded serial 2
OK

# dig nerv-team.co.kr

; <<>> DiG 9.6.1-P1 <<>> nerv-team.co.kr
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49830
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;nerv-team.co.kr.               IN      A

;; ANSWER SECTION:
nerv-team.co.kr.        604800  IN      A       220.86.83.10

;; AUTHORITY SECTION:
nerv-team.co.kr.        604800  IN      NS      ns.nerv-team.co.kr.

;; Query time: 4 msec
;; SERVER: 168.126.63.1#53(168.126.63.1)
;; WHEN: Wed Nov 11 01:13:33 2009
;; MSG SIZE  rcvd: 66