T2BTrac

From T2B Wiki
Revision as of 12:29, 26 August 2015 by Maintenance script (talk | contribs) (Created page with " === init === <pre> mkdir -p /var/www/trac/centralised-begrid-v3 cd /var/www/trac/centralised-begrid-v3 trac-admin $PWD initenv cd .. chown -R apache.apache ce...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

init

  mkdir -p /var/www/trac/centralised-begrid-v3
  cd /var/www/trac/centralised-begrid-v3
  trac-admin $PWD initenv
  cd ..
  chown -R apache.apache centralised-begrid-v3

Permissions

  • By default, only anonymous user has permissions set, and the authenticated users inherits from those.
 trac-admin $PWD permission list

User       Action
--------------------------
anonymous  BROWSER_VIEW
anonymous  CHANGESET_VIEW
anonymous  FILE_VIEW
anonymous  LOG_VIEW
anonymous  MILESTONE_VIEW
anonymous  REPORT_SQL_VIEW
anonymous  REPORT_VIEW
anonymous  ROADMAP_VIEW
anonymous  SEARCH_VIEW
anonymous  TICKET_CREATE
anonymous  TICKET_MODIFY
anonymous  TICKET_VIEW
anonymous  TIMELINE_VIEW
anonymous  WIKI_CREATE
anonymous  WIKI_MODIFY
anonymous  WIKI_VIEW


Available actions:
 CONFIG_VIEW, MILESTONE_ADMIN, MILESTONE_CREATE, MILESTONE_DELETE,
 MILESTONE_MODIFY, MILESTONE_VIEW, REPORT_ADMIN, REPORT_CREATE,
 REPORT_DELETE, REPORT_MODIFY, REPORT_SQL_VIEW, REPORT_VIEW, ROADMAP_ADMIN,
 ROADMAP_VIEW, SEARCH_VIEW, TICKET_ADMIN, TICKET_APPEND, TICKET_CHGPROP,
 TICKET_CREATE, TICKET_MODIFY, TICKET_VIEW, TIMELINE_VIEW, TRAC_ADMIN,
 WIKI_ADMIN, WIKI_CREATE, WIKI_DELETE, WIKI_MODIFY, WIKI_VIEW
  • Remove write permissions from anonymous, enable them for authenticated
trac-admin $PWD permission remove anonymous WIKI_MODIFY WIKI_CREATE TICKET_MODIFY TICKET_CREATE
trac-admin $PWD permission add authenticated WIKI_MODIFY WIKI_CREATE TICKET_MODIFY TICKET_CREATE

Migrate/update

  • Copy the old tree to a new one
cp -rf /var/www/trac/centralised-begrid-4 /var/www/entralised-begrid-5
  • The new tree should be owned by apache
chown -R apache.apache /var/www/trac/centralised-begrid-v5
  • adapt /var/www/trac/centralised-begrid-v5/conf/trac.ini
    • url
    • svn repos
    • etc.
  • Finally run this:
trac-admin /var/www/trac/centralised-begrid-v5 repository resync "*"

Login rules

  • you can't login using http access, you will be redirected (and logged in) to https version
  • Apache rewrite quick guide
  • a script runs on the box to collect DNs for logging in using edg-mkgridmap and VOMS.



Template:TracNotice