installing om2.x on debian64 wheezy - headless

5/24/2018 Installing OM2.x on Debian64 Wheezy - Headless

1/36

OpenMeetings 2.X Installation on Debian 64bit Wheezy

Stephen Cottham 15/2/21!

"his g#i$e has been %&itten step by step %iths'&eenshots to ai$ in the s#''ess(#l b#il$ o( OM.

SS) an$ *e+e&se p&o,y steps ha+e been a$$e$

b#t a&e optional.

N.B When copying and pasting commands

please check that symbols and character

returns are correctly copied across.


2/36



Installing Debian -Minimal ea$less System

Step 10 ase System

Choose Install

Choose English


3/36



Choose United Kingdom

Choose British English


4/36



Set the hostname, in this case its openmeetings

Set your domain, in this case we have used yourdomain.internal


5/36



Set the root password.

Create new user or server !"on#priv$


6/36



Set password or new user

Use guided % entire dis&


7/36



Select 'is& to partition

Choose (ll iles in one partition


8/36



Choose )inish partitioning and write changes to dis&

(nd inally choose yes


9/36



Choose 'e*ian archive % in this case we are using United Kingdom

(ny archive will do closest to you+ in this case we are using tp.u&.de*ian.org
ftp://ftp.uk.debian.org/ftp://ftp.uk.debian.org/


10/36



I you use a proy server then add the details here, i you have ull out*ound access then -ust choose

continue.

Choose not to participate in the survey.


11/36



ChooseonlySS Server and Standard System utilities.

Choose /es to install 0ru*.


12/36



Base install has now completed, choose continue to re*oot into your new system.


13/36



Step 20 Set#p SS 3n+i&onment

/ou should now *e at the ollowing screen, the net steps are easier done rom a remote des&top

using an SS client such as putty. % But irst we need to &now our I1 address, in most cases this was

issued *y your 'C1 server !unless you speciied manual networ& setup during install$

2o ind your I1 address, irst logon to your physical machine using root, then issue the ollowing

command3

i('on(ig

2his will show the ollowing screen3

/ou can see the I1 (ddress in this case is 45.46.78.8 !Interace eth5$

/ou can now log o o the server console.


14/36



)rom your des&top machine open your SS client, in this case we will *e using the putty client to

connect to our new Server.

Enter the details and choose open

2he irst log on you will receive this message+ you can choose yes here and accept the &ey.

"ow log in with your root credentials.


15/36



Step !0 Install Depen$ent so(t%a&e

)irstly we need to add some repos to apt to get the re9uired :ava version, so irst issue this

command3

+i /et'/apt/so#&'es.list

2his will open the ollowing ile in vi3 !you can use whatever ile editor you are comorta*le with$

"ow at the top o this ile add the ollowing entries3

$eb http0//se'#&ity.$ebian.o&g/ %heezy/#p$ates main 'ont&ib non(&ee

$ebs&' http0//se'#&ity.$ebian.o&g/ %heezy/#p$ates main 'ont&ib non(&ee

$eb http0//(tp.$ebian.o&g/$ebian/ %heezy main 'ont&ib non(&ee

$ebs&' http0//(tp.$ebian.o&g/$ebian/ %heezy main 'ont&ib non(&ee

$eb http0//(tp.$ebian.o&g/$ebian/ %heezy#p$ates main 'ont&ib non(&ee

$ebs&' http0//(tp.$ebian.o&g/$ebian/ %heezy#p$ates main 'ont&ib non(&ee

$eb http0//(tp2.$e.$ebian.o&g/$ebian %heezy main non(&ee

$eb http0//%%%.$ebm#ltime$ia.o&g %heezy main non(&ee


16/36



Eample a*ove % now save the ile

2o update the repos we need to issue the ollowing command3

aptget #p$ate

;nce that has completed you will *e here3

)irst add the &ey ring

aptgetinstall$ebm#ltime$iaey&ing

Choose yes to install without veriication.


17/36



#p$atealte&nati+es 'on(ig


18/36



Successul 'B creation shown a*ove.

Step 50 Compile Install SW:"ools -2121151!J

"ow lets create a temporary wor&ing area *y issuing these commands3

m$i& p /#s&/a$m

'$ /#s&/a$m

'ownload, compile and install swtools *y issuing these commands3

%get http0//%%%.s%(tools.o&g/s%(tools2121151!J.ta&.gz

ta& z,+( s%(tools2121151!J.ta&.gz

'$ s%(tools2121151!J

./'on(ig#&e

mae

'he'install

. o# %ill be ase$ a se&ies o( ?#estions at the beginning o( the installK p&ess &et#&n (o& ea'h to

'ontin#e. -I( yo# #se '&onapt then mae s#&e the +e&sion to assign is g&eate& then the s%(tools in

the &epos

;nce that has completed you can now test it *y issuing the ollowing3

p$(2s%( +e&sion

Dhich should give you the ollowing output3

p$(2s%( pa&t o( s%(tools 2121151!J


19/36



Successul swtools *uild.

Step 60 Compile an$ Install ((mpeg -1.1.2


20/36



;nce that has completed you can now test it *y issuing the ollowing3

((mpeg +e&sion

Dhich should give you the ollowing output3

((mpeg1.1.2

Step J0 Install LOD Con+e&te&

.4 'ompile$ on May 22 212


21/36



Step a0 Do%nloa$ an$ 'ompile latest OM 2.1

(gain *ac& to our wor&ing area3

'$ /#s&/a$m

2hen chec& out the latest source code using the ollowing3

s+n 'he'o#t https0//s+n.apa'he.o&g/&epos/as(/openmeetings/tn/single%ebapp/

;nce that has completed we can then *uild the source *y issuing the ollowing3

'$ /#s&/a$m/single%ebapp

/#s&/a$m/apa'heant1.>.4/bin/ant 'lean.all

/#s&/a$m/apa'heant1.>.4/bin/ant -Ddb=mysql

2his will ta&e a little while depending on your system, once it has inished you should *e let the

ollowing message3

@I)D S@CC3SS:@)

"ow we move the compiled sourced into the correct location.

'$ /#s&/a$m/single%ebapp/$ist

m+ &e$5/ /#s&/lib/

Step a0 Install p&eb#ilt OM 2., -9lte&nati+e to Step

2o 'ownload the latest *uilds we use the ollowing lin&s3

7.5

https3??*uilds.apache.org?view?>#?view?;pen>eetings?-o*?;pen>eetingsF757.5?

;r

7.4

https3??*uilds.apache.org?-o*?openmeetings?lastSuccessulBuild?artiact?singlewe*app?dist?

2he ile will *e something li&e the ollowing apache#openmeetings#incu*ating#7..tar.gG3 !Dhere

is the date and *uild version$
https://builds.apache.org/view/M-R/view/OpenMeetings/job/OpenMeetings%202.0/https://builds.apache.org/job/openmeetings/lastSuccessfulBuild/artifact/singlewebapp/dist/https://builds.apache.org/view/M-R/view/OpenMeetings/job/OpenMeetings%202.0/https://builds.apache.org/job/openmeetings/lastSuccessfulBuild/artifact/singlewebapp/dist/


22/36



De can do this using wget, so irst we need to go *ac& to our *uild area li&e so3

'$ /#s&/a$m

m$i& p p&eb#ilt/&e$5

'$ p&eb#ilt/&e$5

2hen gra* the ile and etract it3

%get https0//b#il$s.apa'he.o&g/


23/36



Step 10 Install 'ompile$;E&e#ilt OM 2.,


24/36



N /bin/sh

NNN 3I II" I:O

N E&o+i$es0 &e$5

N *e?#i&e$Sta&t0 P&emote(s Psyslog

N *e?#i&e$Stop0 P&emote(s Psyslog

N De(a#ltSta&t0 2 ! 4 5

N De(a#ltStop0 1 6N Sho&tDes'&iption0 Sta&ts &e$5 se&+e& (o& Openmeetings.

NNN 3D II" I:O

E*O7&e$5

*3D5OM37/#s&/lib/&e$5

D93MO7P*3D5OM3/PE*O.sh

EID:I)37/+a&/n/PE*O.pi$

Q & /et'/sys'on(ig/&e$5 R . /et'/sys'on(ig/&e$5

*3"F9)7

'ase P1 in

sta&t

'$ P*3D5OM3

sta&tstop$aemon sta&t ' nobo$y pi$(ile PEID:I)3 ;

'h$i& P*3D5OM3 ba'g&o#n$ maepi$(ile ;

e,e' PD93MO T/$e+/n#ll 2T/$e+/n#ll

*3"F9)7PU

i( Q P*3"F9) e? RB then

e'ho P T PEID:I)3

(i

e'ho

BB

stop

sta&tstop$aemon stop ?#iet pi$(ile PEID:I)3 ;

name


25/36



Save the ile and then set the permissions li&e *elow3

'hmo$ =, /et'/init.$/&e$5

#p$ate&'.$ &e$5 $e(a#lts

"ow we need to move the persistence iles so we can connect to mys9l, so issue the ollowing3

>a&e *ac&up copy

m+ /#s&/lib/&e$5/%ebapps/openmeetings/W3I:/'lasses/M3"9I:/pe&sisten'e.,ml ;

/#s&/lib/&e$5/%ebapps/openmeetings/W3I:/'lasses/M3"9I:/pe&sisten'e.,mlo&i

ename mys9l template to persistence.ml

m+ /#s&/lib/&e$5/%ebapps/openmeetings/W3I:/'lasses/M3"9I:/mys?lpe&sisten'e.,ml ;

/#s&/lib/&e$5/%ebapps/openmeetings/W3I:/'lasses/M3"9I:/pe&sisten'e.,ml

Edit the persistence ile and add out mys9l details, in this case we used openmeetings and

pass%o&$ % so issue the ollowing3

+i /#s&/lib/&e$5/%ebapps/openmeetings/W3I:/'lasses/M3"9I:/pe&sisten'e.,ml

2hen change the ollowing

K @se&name7openmeetings

K Eass%o&$7pass%o&$/T

(t this stage we are ready to start up ;> 7. or the irst time.

/et'/init.$/&e$5 sta&t

"ow open the *rowser and go to the ollowing lin&. . &emembe& to 'hange the IE a$$&ess to yo#&

OM2., se&+e&K the one belo% 1.1J.2!.! is


26/36



I( all %ent %ell yo# sho#l$ no% see this page0

Choose the Continue with S2E1 4 lin&


27/36



2he only section we need to ill out at this stage is the ollowing3

Username3 oma$min

Userpass3 ompass%o&$

Email3 somethingHsomething.'om

2imeone3 @nite$ Ying$om

'omain "ame3 some$omain

"ow clic& on I"S2(


28/36



Step 110 9$$ &ele+ant paths to the 'on(ig#&ation

;nce logged in go to 9$minist&ation T Con(ig#&ation

/ou will see on the let hand pane a list o &eys and values, the ones we are interested in are

SD)2ools 1ath /#s&/lo'al/bin

Image>agic& 1ath /#s&/bin

))>1E0 1ath /#s&/lo'al/bin

SoJ 1ath /#s&/bin

:;' 1ath /#s&/lib/&e$5/%ebapps/openmeetings/


29/36



LOD %ill (in$ open o((i'e in this 'ase so %e $o not nee$ to set the path.


30/36



Step 120 Se'#&ing OpenMeetings #sing en'&yption -Optional

12.1 ene&ating CS*0

De can do this in a ew ways, the irst way I will show here is simply *y generating a CS and

inserting these into ;pen>eetings.

Create a new &eystore and &ey, use the same password or *oth3 !2a&en rom

http3??openmeetings.apache.org?2>1S(nd221S.html$

eytool eysize 24> geney alias &e$5 eyalg *S9 eysto&e &e$5/'on(/eysto&e

3nte& eysto&e pass%o&$0

*eente& ne% pass%o&$0

What is yo#& (i&st an$ last nameU

Q@nno%nR0 Zyo#& hostnameK e.g $emo.openmeetings.$eTWhat is the name o( yo#& o&ganizational #nitU

Q@nno%nR0 De+

What is the name o( yo#& o&ganizationU

Q@nno%nR0 OpenMeetings

What is the name o( yo#& City o& )o'alityU

Q@nno%nR0 en$e&son

What is the name o( yo#& State o& E&o+in'eU

Q@nno%nR0 e+a$a

What is the t%olette& 'o#nt&y 'o$e (o& this #nitU

Q@nno%nR0 @S

Is C7$emo.openmeetings.$eK O@7De+K O7OpenMeetingsK )7en$e&sonK S"7e+a$aK C7@S

'o&&e'tU

QnoR0 yes

3nte& ey pass%o&$ (o& Z&e$5T

0enerate a CS3

eytool 'e&t&e? eyalg *S9 alias &e$5 (ile &e$5.'s& eysto&e &e$5/'on(/eysto&e

Su*mit CS to your C( o choice and receive a signed certiicate

Import your chosen C(s root certiicate into the &eystore !may need to download it rom their site #

ma&e sure to get the root C( and not the intermediate one$

eytool impo&t alias &oot eysto&e &e$5/'on(/eysto&e tst'a'e&ts (ile &oot.'&t

!note3 you may receive a warning that the certiicate already eists in the system wide &eystore #

import anyway$


31/36



Import the intermediate certiicate!s$ you normally receive with the certiicate3

eytool impo&t alias inte&me$ eysto&e &e$5/'on(/ eysto&e tst'a'e&ts (ile inte&me$iate.'&t

Import the certiicate you received3

eytool impo&t alias &e$5 eysto&e &e$5/'on(/eysto&e tst'a'e&ts (ile

$emo.openmeetings.$e.'&t

12.2 [ @sing 3,isting 'e&ts s#'h as %il$ 'a&$ 'e&ti(i'ates instea$ o( gene&ating a ne% CS*.

)irst lets go *ac& to our wor& area3

'$ /#s&/a$m/

m$i& 'e&ts'$ 'e&ts/

Using DinSC1 or e9uivalent copy your wild card &ey and cert iles3 yourdomain.&ey.pem and

yourdomain.cert.pem # -"hese sho#l$ be in E3M (o&mat

"ow issue the ollowing to convert the iles to 'E ormat

openssl p's> top> no'&ypt in apa'he.ey.pem in(o&m E3M o#t ey.$e& o#t(o&m D3*

openssl ,5 in apa'he.'e&t.pem in(o&m E3M o#t 'e&t.$e& o#t(o&m D3*

"ow we need a couple o iles to help us import the 'E iles into the &eystore, so issue the

ollowing3

%get http0//%%%.agentbob.in(o/agentbob/>/+e&sion/$e(a#lt/pa&t/9tta'hmentData/$ata/Impo&tYey.1/+e&sion/$e(a#lt/pa&t/9tta'hmentData/$ata/Impo&tYey.'lass

2hen use these commands to import3


32/36



"ow that we have either a new Cert o the wild card cert inside our Keystore we need to ma&e some

changes to ;> 7. to use these certiicates and thus encrypt communications using 221S and

2>1S.

2o use 2>1S do the ollowing3

)irst ma&e some changes to the redH#core.ml ile *y issuing the ollowing3

'$ /#s&/lib/&e$5/'on(

+i &e$5'o&e.,ml

now uncomment Z *"MES Tsection *y removing the Zand the Tleaving this3

Zbean i$7&tmpsMinaIoan$le&

'lass7o&g.&e$5.se&+e&.net.&tmps.*"MESMinaIoan$le&T

Zp&ope&ty name7han$le& &e(7&tmpan$le& /T Zp&ope&ty name7'o$e':a'to&y &e(7&tmpCo$e':a'to&y /T

Zp&ope&ty name7&tmpConnManage& &e(7&tmpMinaConnManage& /T

Zp&ope&ty name7eySto&eEass%o&$ +al#e7P&tmps.eysto&epass /T

Zp&ope&ty name7eysto&e:ile +al#e7'on(/eysto&e /T

Z/beanT

Zbean i$7&tmps"&anspo&t 'lass7o&g.&e$5.se&+e&.net.&tmp.*"MEMina"&anspo&t init

metho$7sta&t $est&oymetho$7stopT

Zp&ope&ty name7ioan$le& &e(7&tmpsMinaIoan$le& /T

Zp&ope&ty name7'onne'to&sT

ZlistT

Zbean 'lass7


33/36



"ow edit conig.ml *y doing the ollowing3

'$ /#s&/lib/&e$5/%ebapps/openmeetings/

+i 'on(ig.,ml

Set these ollowing values3

LrtmpsslportM544!L?rtmpsslportM

LuseSS


34/36



De can now connect using the ollowing lin&3

https3??yourdomain?openmeetings

Step 1!0 Installing *e+e&se E&o,y #sing 9pa'he Web Se&+e& -Optional

(nother way to secure the ;pen>eetings service is to use (pache as a reverse proy, to do this we

need to do the ollowing3

)irst install (pache7 and ena*ling relevant modules *y running the ollowing commands3

aptget install apa'he2

a2enmo$ p&o,y

a2enmo$ p&o,yhttpa2enmo$ ssl

a2enmo$ hea$e&s

a2enmo$ &e%&ite

a2enmo$ 'a'he

/et'/init.$/apa'he2 &esta&t

De can now redirect port N5 !less secure$ or port OO8 !secure$ to port H5N5, to do this we need to

create a virtual host, to do this do the ollowing3

'$ /et'/apa'he2/sitesenable$/

"ow or SS< redirect -#sing a Ce&t on 9pa'he instea$ o( eysto&e do the ollowing

+i om.yo#&$omain.'omssl

and add the ollowing

ZI(Mo$#le mo$ssl.'T

NameFi&t#alost G044!E&o,y*e?#ests O((

ZFi&t#alost G0>T

Se&+e&9$min hostmaste&H$omain.'om

Se&+e&ame om.yo#&$omain.'om

E&o,yE&ese&+eost On

*e%&ite3ngine on

N *e$i&e't http t&a((i' to https

*e%&ite*#le \/-.GP https0//om.yo#&$omain.'om/P1 Q)K*R

Z/Fi&t#alostT
https://yourdomain/openmeetingshttps://yourdomain/openmeetings


35/36



ZFi&t#alost G044!T

Se&+e&9$min hostmaste&H$omain.'om


SS)3ngine on

SS)E&o,y3ngine On

*e?#estea$e& set :&ont3n$ttps On

E&o,yE&ese&+eost On

*e%&ite3ngine on

Ca'heDisable G

N *e+e&se p&o,y all &e?#ests

*e%&ite*#le \/-.G http0//om.yo#&$omain.'om05>/P1 QER

SS)Ce&ti(i'ate:ile /et'/ssl/'e&ts/yo#&$omain.pem SS)Ce&ti(i'ateYey:ile /et'/ssl/p&i+ate/yo#&$omain.ey

Set3n+I( @se&9gent .GMSI3.G ;

noeepali+e ssl#n'leansh#t$o%n ;

$o%ng&a$e1. (o&'e&esponse1.

Z/Fi&t#alostT

/ou will need SS< certs or this to wor&, so copy your Key and Cert to the ollowing lo'ations -#se

WinSCE o& e?#i+

/et'/ssl/'e&ts/ 7 yo#&$omain.pem

/et'/ssl/p&i+ate/ 7 yo#&$omain.ey

"ow restart apache7


/ou can now go to https3??om.yourdomain.com?openmeetingswhich will encrypt ;"1 or lash.

(nd inally or 221 redirect and re#write do the ollowing3 -ass#ming no SS) $on]t #se this in

'on


36/36




E&o,yE&ese&+eost On

*e%&ite3ngine on

Ca'heDisable G

N *e+e&se p&o,y all &e?#ests

*e%&ite*#le \/-.G http0//om.yo#&$omain.'om05>/P1 QER

Z/Fi&t#alostT

2hen restart (pache with


"ow you can access ;> with

http3??om.yourdomain.com?
http://om.yourdomain.com/http://om.yourdomain.com/

installing om2.x on debian64 wheezy - headless

Documents