RHEL的一些服务配置

设置语言参数：
===============
#vi /etc/sysconfig/i18n
=> LANG="zh_CN.GB18030"

启用防火墙和SELinux：
=======================
#system-config-securitylevel =>启用
#vi /etc/selinux/config =>SELINUX=enforcing

开放TCP协议的8080端口：
=======================
#iptables -I INPUT -p tcp --dport 8080 -j ACCEPT

在安装好的linux上增加swap分区大小
=====================================
  [root@localhost ~]# mkdir -v /usr/local/tmpswap
  mkdir: 已创建目录 ‘/usr/local/tmpswap’
  [root@localhost ~]# dd if=/dev/zero of=/usr/local/tmpswap/tmpswap bs=1024k count=100
  读入了 100+0 个块
  输出了 100+0 个块
  [root@localhost ~]# mkswap /usr/local/tmpswap/tmpswap
  Setting up swapspace version 1, size = 104853 kB
  [root@localhost ~]# swapon /usr/local/tmpswap/tmpswap
  [root@localhost ~]# free
               total       used       free     shared    buffers     cached
  Mem:        515504     310164     205340          0      13180     235832
  -/+ buffers/cache:      61152     454352
  Swap:      1154640          0    1154640
  [root@localhost ~]# swapoff /usr/local/tmpswap/tmpswap
  [root@localhost ~]# free
               total       used       free     shared    buffers     cached
  Mem:        515504     310100     205404          0      13200     235832
  -/+ buffers/cache:      61068     454436
  Swap:      1052248          0    1052248

 

Samba服务器：
===============
#rpm -q samba
#cd /etc/samba
#smbpasswd -a duckdream =>必须为linux账户
#more ./smbpasswd
#more ./lmhosts
IP地址 主机名
#vi smb.conf =>encrypt password=yes加密方式传送密码
 [share]
  comment = My Linux Samba Server
  read list = duck
  write list = @samba
  #writable = yes
  path = /usr/SambaShare
#groupadd samba
#useradd -g samba duckdream
#mkdir /usr/SambaShare
#chown :samba /usr/SambaShare
#chmod -c g+wrx /usr/SambaShare
#/etc/rc.d/init.d/smb start/restart/stop
#rpm -q samba-client
#smbclient -L //IP -U LoginUserName =>列出目标主机共享列表
#smbclient //IP/sharename -U LoginUserName =>使用共享资源
#smbmount //IP/sharename/ 挂载点 -o username=name
#smbumount 挂载点
Windows => \\samba服务器IP

访问Windwos共享目录:
=====================
#mkdir /usr/local/windows
#mount -t smbfs -o username=administrator //172.16.1.125/Tools /usr/local/windows/
#umount /usr/local/windows/

MySQL源码安装：
=================
#groupadd mysql
#useradd -g mysql mysql
#mkdir /usr/local/mysql
#mkdir /var/lib/mysql
#chown -R mysql:mysql /usr/local/mysql
#cd /usr/local/src/mysql-5.0
#./configure --prefix=/usr/local/mysql --sysconfdir=/etc --localstatedir=/var/lib/mysql --with-charset=gbk
#echo $?
#make
#make install
#cd /usr/local/mysql/bin
#./mysql_install_db
#chown -R mysql:mysql /var/lib/mysql
#cp /usr/local/mysql/share/mysql/mysql.server /etc/rc.d/init.d/mysql
#cp /usr/local/mysql/share/mysql/my-small.cnf /etc/my.cnf
#chkconfig --add mysql
#chkconfig --list | grep mysql
#chkconfig --level 345 mysql on
#/etc/rc.d/init.d/mysql start
#/usr/local/mysql/bin/mysql -u root -p
#/usr/local/mysql/bin/mysqladmin -u root password 'duckdream'

MySQL口令忘记恢复：
#skillall -TERM mysqld => mysql若正在运行 将之杀掉
#/mysql/bin/mysql_safe --skip-grant-tables &
Enterpassword:    => 可以不用密码即可进入
>use mysql
>update user set password=password("new_password") where user="root";
>flush privileges;
#/etc/rc.d/init.d/mysql restart  =>重启mysql

Apache源码安装：
================
#mkdir /usr/local/apache2
#cd /usr/local/src/httpd
#./configure --prefix=/usr/local/apache2 --enable-so
#echo $?
#make
#make install

************
*httpd.conf*
************

设置虚拟目录
Alias /ftp "/usr/local/ftpdoc" =>http://host/ftp(alias)/file

设置目录权限
<Directory dirpath>
 Options FollowSymLinks
 AllowOverride None
 Order deny,allow
 Deny from all
</Directory>
Options =>定义目录使用哪些特性：
 Indexes =>允许目录浏览
  (client仅指定访问的目录 没指定文件且目录下无默认文件)
  (虚拟目录不会被列出)
 MultiViews =>允许内容协商的多重视图
 All =>包含除MultiViews之外的所有特性 若没Options选项 默认为All
 ExecCGI =>允许在该目录下执行CGI脚本
 FollowSymLinks =>允许在该目录中使用符号连接
 Includes =>允许服务器端包含功能
 IncludesNoExec =>允许服务器端包含功能 但禁止执行CGI脚本
AllowOverride =>指定每个目录下的访问控制文件(.htaccess)的指令类型 一般禁用(None)
Order =>定义缺省的访问权限和Allow,Deny语句的处理顺序
 allow,deny =>缺省禁止所有client访问 Allow => Deny
      若条件既匹配Deny又匹配Allow =>Deny语句起作用(Deny覆盖了Allow)
 deny,allow =>缺省允许所有client访问 Deny => Allow
      若条件......................=>Allow语句起作用(Allow覆盖了Deny)
 eg:
    允许所有的client访问
    Order allow,deny
    Allow from all

           允许所有的client访问 除了duckdream.com/172.16.1.125
    Order deny,allow
    Deny from duckdream.com
    Deny from 172.16.1.125

    仅仅允许来自172.16.1.0/24 client访问
    Order allow,deny
    Allow from 172.16.1.0/24

    Order deny,allow
    Allow from 172.16.1.0/24
    允许所有client访问

    仅允许来自网络172.16.1.0/24客户机访问 但172.16.1.125除外
    Order allow,deny
    Allow from 172.16.1.0/24
    Deny from 172.16.1.125

    Order deny,allow
    Allow from 172.16.1.0/24
    Deny from 172.16.1.125
    允许所有client访问(Allow覆盖了Deny)

用户认证
#/usr/local/apache2/bin/htpasswd -c /usr/local/apachepwd duckdream
htpasswd -c =>建立口令文件 -c：无论密码文件是否存在 都重新写入并删除原有的内容
#htpasswd /usr/local/apachepwd duck =>不需要-c选项
#vi httpd.conf
Alias /test "/usr/local/VirDirectory"
<Directory "/usr/local/VirDirectory">
 AuthType Basic
 AuthName "Protected Directory! Please Login:"
 AuthUserFile /usr/local/apachepwd
 Require user duckdream duck
</Directory>
http://host/test

虚拟主机
#vi /usr/local/apache2/conf/extra/httpd-vhosts.conf
NameVirtualHost IP:80
<VirtualHost 域名>
    ServerAdmin webmaster@dummy-host.example.com
    DocumentRoot /www/docs/dummy-host.example.com
    ServerName dummy-host.example.com
    ServerAlias www.dummy-host.example.com
    ErrorLog logs/dummy-host.example.com-error_log
    CustomLog logs/dummy-host.example.com-access_log common
</VirtualHost>

PHP源码安装：
==================
***************
*安装PHP支持包*
***************

libjpeg安装

#mkdri /usr/loca/libjpeg
#cd /usr/local/src/libjpeg
#./configure --help | less
#less INSTALL
#./configure --prefix=/usr/local/libjpeg --enable-static --enable-shared
#echo $?
#make
#make install
=>出现错误信息 按照错误信息mkdir相关目录
#echo "/usr/local/libjpeg/lib" >> /etc/ld.so.conf  =>添加包的库文件到ld.so.conf
#ldconfig  =>重新装载
#ldconfig -p | grep "/usr/local/libjpeg/lib"  =>查看所添加的共享库

zlib安装

#mkdir /usr/local/zlib
#cd /usr/local/src/zlib
#./configure --help | less
#less INSTALL
#./configure --prefix=/usr/local/zlib --libdir=/usr/lib --includedir=/usr/include
#echo $?
#make
#make install

libpng安装

#mkdir /usr/local/libpng
#cd /usr/local/src/libpng
#./configure --help | less
#less INSTALL
#cp scripts/makefile.linux makefile
#echo $?
#make
#make install-headers
#make install
#echo "/usr/local/lib" >> /etc/ld.so.conf
#ldconfig

freetype安装

GD库安装

#mkdir /usr/local/gd
#cd /usr/local/src/gd
#./configure --help | less
#less INSTALL
#./configure --prefix=/usr/local/gd --with-png=/usr/local/lib --with-jpeg=/usr/local/jpeg --with-freetype=/usr/local/freetype
#make
#make install
#cp gd.h /usr/local/gd/lib  =>编译PHP时需要该文件
#echo "/usr/local/gd/lib" >> /etc/ld.so.conf
#ldconfig

mm安装 =>为PHP提供 session storage服务

#mkdir /usr/local/mm
#cd /usr/local/mm
#./configure --help | less
#less INSTALL
#./configure --prefix=/usr/local/mm
#echo $?
#make
#make install
#echo "/usr/local/mm/lib" >> /etc/ld.so.conf
#ldconfig

libxml2安装  =>提供对XML2支持

#mkdir /usr/local/libxml
#cd /usr/local/src/libxml
#./configure --prefix=/usr/local/libxml
#make
#make install
#echo "/usr/local/libxml/lib" >> /etc/ld.so.conf
#ldconfig

*********
*安装PHP*
*********

编译成apache的动态模块 将PHP作为apache服务器的一个模块运行
./configure --with-apxs2=/usr/local/apache/bin/apxs
/* --with-apxs2 =>将PHP编译成apache2.0的模块 调用apxs(apache extension)将其编译成DSO动态模块 */

#mkdri /usr/local/php
#cd /usr/local/src/php
#./configure --help
#./configure --prefix=/usr/local/php --with-apxs2=/usr/local/apache/bin/apxs2 \
> --with-mysql=/usr/local/mysql
> --enable-track-vars --enable-debug \
> --enable-safe-mode \
> --enable-sockets --with-mysql-sock=/tmp/mysql.sock \
> --with-libxml-dir=/usr/local/libxml \
> --with-gd=/usr/local/gd \
> --with-jpeg-dir=/usr/local/jpeg \
> --with-zlib-dir=/usr/lib \
> --with-png --with-freetype-dir=/usr/local/freetype

其中./configure 后的 
--prefix=/usr/local/php 
--with-apxs2=/usr/local/apache/bin/apxs 
--with-mysql=/usr/local/mysql/
--with-libxml-dir=/usr/local/libxml2
是必要的选项

--with-gd=/usr/local/gd/ 
--with-jpeg-dir=/usr/local/jpeg/ 
--with-png 
--with-zlib-dir=/usr/lib
--with-freetype-dir=/usr/local/freetype
这是让PHP支持GD库的配置选项

#echo $?
#make
#make install
#ll /usr/local/apache/modules/
libphp5.so  =>存在的话 表示编译成功
#cd /usr/local/php
#cp ./php.ini-recommanded /usr/local/apache/conf/php.ini
#vi /usr/local/apache/conf/httpd.conf

LoadModule php5 module modules/libphp5.so
AddType application/x-httpd-php .php .phtml .php3
AddType application/x-httpd-php-source .phps
DirectoryIndex index.php index.php3 index.htm index.html default.htm default.html

#vi /usr/local/apache/conf/php.ini
#vi /usr/local/apache/htdocs/test.php
<html>
<body>
<?php
 phpinfo();
?>
</body>
</html>
=>访问http://host/test.php

****************
*安装phpMyAdmin*
****************

#mkdir /usr/loca/apache/htdocs/phpmyadmin
#cp /usr/local/src/phpMyAdmin /usr/local/apache/htdocs/phpmyadmin
#cd /usr/local/apache/htdocs/phpmyadmin
#cp ./config.sample.inc.php ./config.inc.php
#vi ./config.inc.php

mysql> UPDATE mysql.user SET Password = OLD_PASSWORD('duckdream')

　　-> WHERE Host = 'localhost'  AND  User = 'root';

　　mysql> FLUSH PRIVILEGES

 

$cfg['blowfish_secret'] = 'cookie'; /* YOU MUST FILL IN THIS FOR COOKIE AUTH! */
 
/*
 * Servers configuration
 */
$i = 0;
 
/*
 * First server
 */
$i++;
/* Authentication type */
$cfg['Servers'][$i]['auth_type'] = 'config';
/* Server parameters */
$cfg['Servers'][$i]['host'] = 'localhost';
$cfg['Servers'][$i]['connect_type'] = 'tcp';
$cfg['Servers'][$i]['compress'] = false;
/* Select mysqli if your server has it */
$cfg['Servers'][$i]['extension'] = 'mysql';
/* User for advanced features */
$cfg['Servers'][$i]['socket'] = '/tmp/mysql.sock';
$cfg['Servers'][$i]['user'] = 'root';
$cfg['Servers'][$i]['password'] = 'duckdream';
$cfg['Servers'][$i]['controluser'] = 'root';
$cfg['Servers'][$i]['controlpass'] = 'duckdream';
/* Advanced phpMyAdmin features */
// $cfg['Servers'][$i]['pmadb'] = 'phpmyadmin';
// $cfg['Servers'][$i]['bookmarktable'] = 'pma_bookmark';
// $cfg['Servers'][$i]['relation'] = 'pma_relation';
// $cfg['Servers'][$i]['table_info'] = 'pma_table_info';
// $cfg['Servers'][$i]['table_coords'] = 'pma_table_coords';
// $cfg['Servers'][$i]['pdf_pages'] = 'pma_pdf_pages';
// $cfg['Servers'][$i]['column_info'] = 'pma_column_info';
// $cfg['Servers'][$i]['history'] = 'pma_history';
// $cfg['Servers'][$i]['designer_coords'] = 'pma_designer_coords';
 
/*
 * End of servers configuration
 */
 
/*
 * Directories for saving/loading files from server
 */
$cfg['UploadDir'] = '';
$cfg['SaveDir'] = '';
#/usr/local/apache/bin/apachectl restart
#/etc/init.d/xinetd restart
=>访问http://host/phpmyadmin

JAVA开发环境
================
JDK

#chmod +x ./jdk-1_5_0_12-linux-i586-rpm.bin
#./jdk-1_5_0_12-linux-i586-rpm.bin
#mv -v /usr/java/jdk-1_5_0_12 /usr/local/jdk1.5

Tomcat

#tar zxvf ./tomcat-5.5.25.tar.gz
#mv -v ./apache-tomcat-5.5.25 /usr/local/tomcat5.5

TomcatAdmin

#tar zxvf ./apache-tomcat-5.5.25-admin.tar.gz
#cp -av ./apache-tomcat-5.5.25-admin/{conf,server} /usr/local/tomcat5.5/
#vi /usr/local/tomcat5.5/conf/tomcat-users.xml
  <role rolename="tomcat"/>
  <role rolename="role1"/>
  <role rolename="manager"/>
  <role rolename="admin"/>
  <user username="tomcat" password="tomcat" roles="tomcat"/>
  <user username="role1" password="tomcat" roles="role1"/>
  <user username="both" password="tomcat" roles="tomcat,role1"/>
  <user username="admin" password="tomcat" roles="admin,manager"/>
</tomcat-users>

#cat << EOF >> /etc/profile
>export JAVA_HOME=/usr/local/jdk1.5
>export CATALINA_HOME=/usr/local/tomcat5.5
>export CLASSPATH=.:$JAVA_HOME/lib/tools.jar:$JAVA_HOME/lib/dt.jar:$CATALINA_HOME/common/lib/servlet-api.jar:$CATALINA_HOME/common/lib/jsp-api.jar
>export PATH=$PATH:$JAVA_HOME/bin:$JAVA_HOME/jre/bin:$CATALINA_HOME/bin
>EOF

+-----------------------------------------------------------
+ 登陆shell和非登陆shell
+
+ #su - test =>登陆shell
+ 读取/etc/profile => 读取~/.bash_profile => 完成登陆初始化
+
+ #su test =>非登陆shell
+ 直接读取~/.bashrc =>完成登陆初始化
+
+ /etc/profile =>对所有用户有效
+------------------------------------------------------------

#logout
#echo -e {$JAVA_HOME'\n',$CATALINA_HOME'\n',$CLASSPATH'\n',$PATH}
#javac -version
#startup.sh
http://172.16.1.126:8080
http://172.16.1.126:8080/admin