topic Re: non-root Labs 3c install... Special considerations? in Alfresco Archive

non-root Labs 3c install... Special considerations?

meansartin14 — Tue, 09 Dec 2008 21:16:12 GMT

I do not have root, sudo or any other sort of root capabilities on the server that I am installing Alfresco Community Labs 3c. This includes for applications such as mysql, etc.Are there any special considerations I need to take into account when installing and configuring the Alfresco Community Lab

Re: non-root Labs 3c install... Special considerations?

mrogers — Wed, 10 Dec 2008 23:17:21 GMT

This should work.

Special considerations.
    Your account needs read/write access to the filesystem.
    Certain low ip ports are reserved for root only, you may need to change port configuration.

Re: non-root Labs 3c install... Special considerations?

meansartin14 — Thu, 11 Dec 2008 17:40:29 GMT

UPDATE:

Alfresco Community Labs 3c is installed on my server. I can now access the Alfresco application through the web interface (http://myserver:8080/alfresco) without an issue.

Unfortunately, the web interface is of significantly less interest to me (and my users). I [size=138]NEED[/size] to be able to use the Windows XP Map Network Drive… so that my users can map a network drive (e.g. Z:\) directly to the Alfresco CIFS server and use it as they would any filesystem from within Windows Explorer.

I am fairly certain that I have configured Alfresco to allow this, but I am unable to map a network drive to the Alfresco CIFS server. Here are the files I've modified so far:
<ALFRESCO_ROOT>/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/file-servers.properties - set cifs.localname, cifs.domain, and cifs.broadcast to values for my host server
<ALFRESCO_ROOT>/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/file-servers.xml - removed arbitrary 'A' from <host name="${cifs.localname}A" domain="${cifs.domain}"/>

Each time I attempt Map Network Drive… using the admin username and password, I receive a Windows pop-up error saying The drive could not be mapped because no network was found. It is worth noting that I am able to successfully ping the Alfresco server from my desktop AND connect via http://myserver:8080/alfresco.

Am I forgetting something? Could there be a network issue (firewall, domain, broadcast, etc) between me and the server causing this? What about a Tomcat/Alfresco configuration cause?

I would greatly appreciate any suggestions or helpful comments.

Re: non-root Labs 3c install... Special considerations?

mikeh — Thu, 11 Dec 2008 20:35:58 GMT

You don't say what the server O/S is you're installing on, but I'm going to presume it's some flavour of *nix.

You usually need root access in order to start listening services on TCP ports < 1024. You can see the following commented-out section in file-servers.xml:

<!– Can be mapped to non-privileged ports, then use firewall rules to forward
       requests from the standard ports –>
<!–       
 <tcpipSMB port="1445" platforms="linux,solaris,macosx"/>
 <netBIOSSMB sessionPort="1139" namePort="1137" datagramPort="1138" platforms="linux,solaris,macosx"/>
–>‍‍‍‍‍‍

So you'll need to comment out those sections and configure the appropriate firewall rules to forward incoming 445, 137-139 to their non-privileged equivalents.

Mike

Re: non-root Labs 3c install... Special considerations?

meansartin14 — Thu, 11 Dec 2008 21:06:08 GMT

You don't say what the server O/S is you're installing on, but I'm going to presume it's some flavour of *nix.

You usually need root access in order to start listening services on TCP ports < 1024. You can see the following commented-out section in file-servers.xml:
<!– Can be mapped to non-privileged ports, then use firewall rules to forward
       requests from the standard ports –>
<!–       
 <tcpipSMB port="1445" platforms="linux,solaris,macosx"/>
 <netBIOSSMB sessionPort="1139" namePort="1137" datagramPort="1138" platforms="linux,solaris,macosx"/>
–>‍‍‍‍‍‍
So you'll need to comment out those sections and configure the appropriate firewall rules to forward incoming 445, 137-139 to their non-privileged equivalent.

I have installed Alfresco Community Labs 3c on a fresh RHEL5.2 server.

Re: non-root Labs 3c install... Special considerations?

meansartin14 — Thu, 11 Dec 2008 21:17:51 GMT

So, MikeH, if I understand correctly, my process to correct my CIFS issue would be as follows:

1) Uncommment (remove the "<!–" and the "–>") the following code from file-servers.xml:

<!–
<tcpipSMB port="1445" platforms="linux,solaris,macosx"/>
<netBIOSSMB sessionPort="1139" namePort="1137" datagramPort="1138" platforms="linux,solaris,macosx"/>
–>‍‍‍‍

2) Configure the following port forwarding in my RHEL5.2 server's firewall (iptables):
   Port 445 –> Port 1445
   Port 137 –> Port 1137
   Port 138 –> Port 1138
   Port 139 –> Port 1139

Is that correct?

Re: non-root Labs 3c install... Special considerations?

mikeh — Thu, 11 Dec 2008 22:05:33 GMT

Yes, that should work.

Mike

Re: non-root Labs 3c install... Special considerations?

meansartin14 — Mon, 15 Dec 2008 19:52:53 GMT

Yes, that should work.

Mike - The System Administrator for the box hosting the Alfresco application seems to have run aground while trying to configure RHEL5.2 to forward the various ports to their locations.

I will admit that I only know enough of SysAdmin type stuff to "be dangerous", and therefore I'm at a loss also.

Are you familiar with how to configure RHEL5.2 to take the privileged ports and forward them to non-privileged ports?

Re: non-root Labs 3c install... Special considerations?

meansartin14 — Mon, 15 Dec 2008 20:37:18 GMT

Mike - The System Administrator for the box hosting the Alfresco application seems to have run aground while trying to configure RHEL5.2 to forward the various ports to their locations.

I will admit that I only know enough of SysAdmin type stuff to "be dangerous", and therefore I'm at a loss also.

Are you familiar with how to configure RHEL5.2 to take the privileged ports and forward them to non-privileged ports?

Woohoo!! Nevermind, Mike. The SysAdmin came through for me.

CIFS is now working like a champ!!

Thank you all for your help!!