home       inleiding       sysadmin       services       links       bash       werk       nothing      

>> mrt 2018: -3- apache2

apache op centos

  1. installeren van apache2
    [student@cOS74-T06-2 etc]$ sudo yum install httpd
    Loaded plugins: fastestmirror
    Loading mirror speeds from cached hostfile
    * base: ftp.belnet.be
    * extras: ftp.belnet.be
    * updates: ftp.belnet.be
    Resolving Dependencies
    --> Running transaction check
    ---> Package httpd.x86_64 0:2.4.6-67.el7.centos.6 will be installed
    --> Finished Dependency Resolution
     
    Dependencies Resolved
     
    =================================================================================
    Package      Arch          Version                         Repository      Size
    =================================================================================
    Installing:
    httpd        x86_64        2.4.6-67.el7.centos.6           updates        2.7 M
     
    Transaction Summary
    =================================================================================
    Install  1 Package
     
    Total download size: 2.7 M
    Installed size: 9.4 M
    Is this ok [y/d/N]: t
    Is this ok [y/d/N]: y
    Downloading packages:
    httpd-2.4.6-67.el7.centos.6.x86_64.rpm                    | 2.7 MB  00:00:00     
    Running transaction check
    Running transaction test
    Transaction test succeeded
    Running transaction
    Installing : httpd-2.4.6-67.el7.centos.6.x86_64                            1/1 
    Verifying  : httpd-2.4.6-67.el7.centos.6.x86_64                            1/1 
     
    Installed:
    httpd.x86_64 0:2.4.6-67.el7.centos.6                                           
     
    Complete!
  2. installeren van lynx
    we hebben lynx browser nodig om te testen vanaf CLI ...
    [student@cOS74-T06-2 etc]$ sudo yum install lynx
    Loaded plugins: fastestmirror
    Loading mirror speeds from cached hostfile
    * base: ftp.belnet.be
    * extras: ftp.belnet.be
    * updates: ftp.belnet.be
    Resolving Dependencies
    --> Running transaction check
    ---> Package lynx.x86_64 0:2.8.8-0.3.dev15.el7 will be installed
    --> Finished Dependency Resolution
     
    Dependencies Resolved
     
    =================================================================================
    Package       Arch            Version                       Repository     Size
    =================================================================================
    Installing:
    lynx          x86_64          2.8.8-0.3.dev15.el7           base          1.4 M
     
    Transaction Summary
    =================================================================================
    Install  1 Package
     
    Total download size: 1.4 M
    Installed size: 5.4 M
    Is this ok [y/d/N]: y
    Downloading packages:
    lynx-2.8.8-0.3.dev15.el7.x86_64.rpm                       | 1.4 MB  00:00:00     
    Running transaction check
    Running transaction test
    Transaction test succeeded
    Running transaction
    Installing : lynx-2.8.8-0.3.dev15.el7.x86_64                               1/1 
    Verifying  : lynx-2.8.8-0.3.dev15.el7.x86_64                               1/1 
     
    Installed:
    lynx.x86_64 0:2.8.8-0.3.dev15.el7                                              
     
    Complete!
  3. apache testen
     
    $ lynx localhost ALERT- unable to connect to remote hosts
     
    we moeten apache2 enablen:
    [student@cOS74-T06-2 etc]$ sudo systemctl enable httpd
    Created symlink from /etc/systemd/system/multi-user.target.wants/httpd.service to /usr/lib/systemd/system/httpd.service.
    [student@cOS74-T06-2 etc]$ sudo systemctl start httpd

    $ lynx localhost Testing 123..

    This page is used to test the proper operation of the Apache HTTP server
    after it has been installed. If you can read this page it means that
    this site is working properly. This server is powered by CentOS.
    The website you just visited is either experiencing problems or is
    undergoing routine maintenance.
    Are you the Administrator?
    You should add your website content to the directory /var/www/html/.
    To prevent this page from ever being used, follow the instructions in
    the file /etc/httpd/conf.d/welcome.conf.

    we zetten een index.html in /var/www/html

    GNU nano 2.3.1              File: index.html                         Modified  
    <html>
    <body>
    <h1>default webpage from st06 on centos 16 mar 2018</h1>
    </body>
    </html>

    testen opnieuw ...
    $ lynx localhost default webpage from st06 on centos 16 mar 2018
    bingo -- twerkt
     

  4. centOS firewall -- apache2 toegankelijk maken van buitenaf 
    Het werkt wel maar nog niet helemaal ....
    Op firefox onder Mint18 krijgen we: unable to connect
     
    centOS7 firewall
     
    We bekijken eerst alle firewall zondes:
    [student@cOS74-T06-2 html]$ sudo firewall-cmd --list-all-zones
    block
    target: %%REJECT%%
    icmp-block-inversion: no
    interfaces: 
    sources: 
    services: 
    ports: 
    protocols: 
    masquerade: no
    forward-ports: 
    source-ports: 
    icmp-blocks: 
    rich rules: 
        
    dmz
    target: default
    icmp-block-inversion: no
    interfaces: 
    sources: 
    services: ssh
    ports: 
    protocols: 
    masquerade: no
    forward-ports: 
    source-ports: 
    icmp-blocks: 
    rich rules: 
        
    drop
    target: DROP
    icmp-block-inversion: no
    interfaces: 
    sources: 
    services: 
    ports: 
    protocols: 
    masquerade: no
    forward-ports: 
    source-ports: 
    icmp-blocks: 
    rich rules: 
        
    external
    target: default
    icmp-block-inversion: no
    interfaces: 
    sources: 
    services: ssh
    ports: 
    protocols: 
    masquerade: yes
    forward-ports: 
    source-ports: 
    icmp-blocks: 
    rich rules: 
        
    home
    target: default
    icmp-block-inversion: no
    interfaces: 
    sources: 
    services: ssh mdns samba-client dhcpv6-client
    ports: 
    protocols: 
    masquerade: no
    forward-ports: 
    source-ports: 
    icmp-blocks: 
    rich rules: 
        
    internal
    target: default
    icmp-block-inversion: no
    interfaces: 
    sources: 
    services: ssh mdns samba-client dhcpv6-client
    ports: 
    protocols: 
    masquerade: no
    forward-ports: 
    source-ports: 
    icmp-blocks: 
    rich rules: 
        
    public (active)
    target: default
    icmp-block-inversion: no
    interfaces: ens192
    sources: 
    services: ssh dhcpv6-client
    ports: 
    protocols: 
    masquerade: no
    forward-ports: 
    source-ports: 
    icmp-blocks: 
    rich rules: 
        
    trusted
    target: ACCEPT
    icmp-block-inversion: no
    interfaces: 
    sources: 
    services: 
    ports: 
    protocols: 
    masquerade: no
    forward-ports: 
    source-ports: 
    icmp-blocks: 
    rich rules: 
        
    work
    target: default
    icmp-block-inversion: no
    interfaces: 
    sources: 
    services: ssh dhcpv6-client
    ports: 
    protocols: 
    masquerade: no
    forward-ports: 
    source-ports: 
    icmp-blocks: 
    rich rules: 

    In de public zone is er geen httpd ...
    dat moeten we aanpassen:

    [student@cOS74-T06-2 html]$ sudo firewall-cmd --zone=public --add-service=http --permanent
    success
    [student@cOS74-T06-2 html]$ sudo firewall-cmd --reload
    success

    nu werkt apache, ook van buitenaf ...