Loading...
 
Skip to main content
3
Page actions
Print

Tiki Suite Install

Information below is deprecated. Please proceed to http://wikisuite.org/How-to-install-WikiSuite



Servers

Server 1 example.org

ClearOS

  • Install from ISO, latest stable version, or USB
  • system registration is part of the post-installation wizard, which, while not mandatory, is recommended.
    • All Tiki Suite software will be packaged as "apps" in the ClearCenter marketplace, and thus, you need to have an account unless you are going to install all the apps manually (if you have the skills to do this, please instead join the Tiki Suite team!)
  • Activate & configure the features you need from the ClearCenter Marketplace. We are compiling a Quick Select File (QSF)
  • You should have an SSL if you don't want to use self-signed certificate automatically made by ClearOS
    • Wildcard SSL is better because several sub-domains will need to be secured (for XMPP, etc.)
  • You should disable SSLv2 and SSLv3 and the weak ciphers
    • Edit /etc/httpd/conf.d/ssl.conf to be like this (only edit appropriate section)
      Copy to clipboard
      #   SSL Protocol support:
# List the enable protocol levels with which clients will be able to
# connect.  Disable SSLv2 access by default:
# SSLProtocol all -SSLv2
SSLProtocol All -SSLv2 -SSLv3

#   SSL Cipher Suite:
# List the ciphers that the client is permitted to negotiate.
# See the mod_ssl documentation for a complete list.
# SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW
SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:!MEDIUM:+HIGH
    • Edit /etc/httpd/conf.d/flex-443.conf to be like this (do this for each domain name)
      Copy to clipboard
      # SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
# SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:!EXP:+eNULL
SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:!MEDIUM:+HIGH
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
SSLProtocol All -SSLv2 -SSLv3
    • Then restart httpd
      Copy to clipboard
      # service httpd restart
  • Install DenyHosts for SSH brute force attack protection
  • To make file management easier: http://www.clearfoundation.com/docs/howtos/midnight_commander

Zarafa

SMTP

Domain name configuration

  • For ActiveSync configuration tips, see below
  • If you want offline access to emails, see the Thunderbird section below (you will need to open firewall ports)

Tiki


After this beta period, Tiki will become an app in the marketplace. More info at: Tiki on ClearOS

We can also get OPcache. It's standard in PHP 5.5, but we can install on 5.3:
http://www.clearfoundation.com/docs/howtos/opcache

In ClearOS, you can't create a group which has the same name as a user. In Tiki, this is possible, so you should have a convention. Ex.: Users: first.name groups: must be different than usernames, no dots (.)

Other useful tools include:



To check logs (error, access, etc.), visit:
https://example.org:81/app/log_viewer/index

Cron job

This is an adaptation of http://doc.tiki.org/Cron+Job+to+Rebuild+Search+Index for ClearOS

Create/edit the crontab for the apache user (so the search index is created with this user)
Copy to clipboard
$ crontab -u apache -e
Add this line for a daily rebuild in Tiki11 and up
Copy to clipboard
0 0 * * * cd /var/www/html/; php console.php index:rebuild >/dev/null 2>&1
To verify that all is OK
Copy to clipboard
[root@labalab html]# crontab -u apache -l
0 0 * * * cd /var/www/html/; php console.php index:rebuild >/dev/null 2>&1


See also: http://www.clearfoundation.com/docs/howtos/cron

PHP 5.5

Piwik

Openfire Meetings

The base package is with Openfire Meetings (XMPP+WebRTC). If you also need a PBX phone system: FreeSWITCH + FusionPBX

Todo: document how to install Openfire Meetings on ClearOS with

    • OpenLDAP integration
    • Firewall ports
    • SRV records (If your server name is different than your XMPP domain)
    • Turn Server
    • SSL

Todo

RADIUS Server

Turn Server

QoS

POTS
  • Todo: connect JitMeet to FreeSWITCH
    • to call out to attendees
    • for attendees to be able to call in


Elasticsearch

https://doc.tiki.org/Elasticsearch
http://wikisuite.org/How-to-install-Elasticsearch-on-ClearOS

TogetherJS

  • For real-time collaborative editing of eventually all features in Tiki, TogetherJS integration has started. By default, it uses the always up to date version hosted by Mozilla. But you can host your own
    • This is still quite experimental so you should probably skip this unless you want to help code this 😉 -> Together

Server 2 - Kaltura

If you are not managing videos, just skip this one and install later

Laptops

  • On each client (Windows, MacOS X, GNU/Linux), install the following.

Firefox

Jitsi

Copy to clipboard
https://example.org/tiki-ajax_services.php?controller=suite&action=jitsi?username=${username}&password=${password}
    • This is another example in trunk
Copy to clipboard
http://demo.tiki.org/trunk/tiki-ajax_services.php?controller=suite&action=jitsi&username=${username}&password=${password}
  • Bug & feature requests are here: Jitsi
  • Later, we'll also do SIP / FreeSWITCH

Thunderbird

Syncthing

https://github.com/syncthing/syncthing-gtk is a nice GUI for Syncthing

OpenVPN


A quick way is to grab the 5 files in https://example.org:81/app/user_certificates and add them to a subdirectory of OpenVPN's config folder

ex.:
C:\Program Files\OpenVPN\config\projectA\(5 files for project A go here)
C:\Program Files\OpenVPN\config\projectB\(5 files for project B go here)

On Windows, you need to start OpenVPN as an administrator.

Mobile

ActiveSync Mail-Contacts-Calendar

  • Configure ActiveSync with Zarafa
  • How to move mail from one account to another? It works in Thunderbird, but how to do with ActiveSync?
  • To test ActiveSync: https://testconnectivity.microsoft.com/
  • 2014-02-25: There was an issue with ActiveSync not connecting, which was related to error reporting.
    Peter Baldwin wrote
    Copy to clipboard
    I turned off PHP error reporting for z-push by adding the following to /etc/httpd/conf.d/zarafa-z-push.conf

    # Make sure error reporting is off
    php_flag display_errors off

SIP-XMPP

OpenVPN

Page last modified on Monday 20 November 2023 16:39:58 GMT-0000
History Files 2
Similar Slideshow