This is version 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 . It is not the current version, and thus it cannot be edited.
[Back to current version]   [Restore this version]

Please RefactorMe or get rid of me as no-one seems to care about looking after me

Deployment Guide #

This page describes how to deploy JSPWiki on a production server in a secure manner, with an initial focus on Red Hat and Gentoo Linux, Apache 2, Tomcat 5 and PostgreSQL (for authentication). Topics (will) include:

• Operating system and servlet container
  • Host a
    • Startup scripts
  • Authentication
    • Container-managed authentication
  • Service minimization
    • Tomcat hardening
  • File permissions
    • Servlet logs
    • Servlet configuration directory
  • Host-based firewall
    • IPTables example

• Authentication Database (PostgreSQL)
  • User and group tables
  • Authentication configuration
  • Servlet container realm configuration

• JSPWiki Application
  • Directory layout and permissions
    • WAR file
    • Wiki pages
    • Wiki logs

• Optimizations
  • Connecting Apache 2 to Tomcat
  • Serving static content from Apache
  • Pre-compiling JSPs
  • Running Tomcat & JSPWiki with a Security Manager

• Deployment tools
  • SSH agent
  • Ant scripts

This is just a rough outline. I will be fleshing this out over the next few weeks. -- Andrew Jaquith

Comments and Discussion:#

(starts here...)

Operating system and servlet container #

Host access #

Directory layout #

Runtime security #

Runtime users #

Startup scripts #

Authentication #

Container-managed authentication #

Service minimization #

Tomcat hardening #

File permissions #

Servlet logs #

Servlet configuration directory #

Host-based firewall #

IPTables example #

PostgreSQL Database #

User and group tables #

Authentication configuration #

Servlet container realm configuration #

JSPWiki Application #

Directory layout and permissions #

WAR file #

Wiki pages #