The installation of the Archive Portal can be carried out on the Windows server after the Apache 2.4 server has been deployed. This step will finalize the configuration of the Apache HTTP server and deploy all the files useful to the archiving portal (CTGate.exe, CTServer.exe, etc.).
Software prerequisites
The installation and configuration of the Archive Portal is facilitated by the use of a Wizard. You must verify that you have the following files on the machine hosting the Apache server before starting the installation process:
- InstallWizard.exe: This is the Archive Portal installation wizard. It was sent to you by the Cooperteam company.
- Licence.xml: This is the User License file containing the Portal activation key. This file was sent to you by Cooperteam.
- Directory.xml: This is the file containing the export of the Address Book of your Domino infrastructure. This file is generated from your AMF's Identity Station, using the Build Directory.xml and Access.xml files button from the Users / By Domino Mail Server view:
- Access.xml: This is the file containing the correspondence between Active Directory identities and Domino FullNames. This file is generated from your AMF's Identity Station, using the Build Directory.xml and Access.xml files button from the Users / By Domino Mail Server view. You must at least select one person who will have administrative rights on the Archive Portal when creating the Access.xml file (Archive Portal Administrators):
The identity entered in the last field must match the type of Login selected (UPN, sAM Acount Name, e-Mail, etc.).
SSL certificates
If you want to benefit from SSL encryption at the Apache server level, you must prepare the following certificate files:
- [archiveportal-cert].crt : This file contains the signed SSL certificate of the server.
- [archiveportal-cert].key : This file contains the server's private key.
User Authentication
The Installation Wizard will allow you to select the user authentication mode with the Apache server. You have 3 options:
- Simple authentication using the .htpasswd file containing the Apache Login / password pairs. This solution should be considered if the archive portal is reserved for a small number of users because the management of the login / password of the .htpasswd file will be the responsibility of the Apache server administrator, using the htpasswd.exe utility.
- Authentication with the Windows domain Active Directory. The user must enter their login / password each time they connect to the archive portal. This solution allows any user known in the Active Directory to be able to connect to the portal using their usual credentials. However, you will need to create a service account (login / password) which will be used by Apache to query the Active Directory via an LDAP query. The login and password for this account will be entered in plain text in the Apache configuration file (httpd.conf). This account does not need any special rights with Active Directory. All he needs is permission to read directory entries. You will need to check the expiration date of this service account so as not to block user authentication.
- SSO/NTLM authentication. The user connects transparently to the archive server without being asked for any login/password.
Installing the Archive Portal
To start the installation of the Archive Portal, please run the InstallWizard.exe file. A first window opens:
Simply select Install a new Instance and click the Next > button. A new window opens:
You must enter:
- The path where the Apache server was installed
- The path to the Access.xml file
- The path to the Directory.xml file
- The path to the License.xml file
You can then click on the Next > button. The main configuration window opens. It is divided into several zones:
- Archive Portal:
The following parameters are mandatory for the installation of the Archive Portal solution:
-
-
-
- Archive Portal folder path: Path to the folder where the Archive Portal configuration files will be installed.
- Archive Portal name: Internal name of the Archive Portal server. If several Archive Portal servers were to be installed on the same machine, care should be taken to enter a unique value in this field for each instance.
- Archive Portal administrator: This is the identity of one of the people who is declared as Administrator in the Access.xml file. If this identity is not found in the Access.xml file, an error window will be displayed.
-
-
- Apache Server:
The Archive Portal solution installation wizard has the ability to automatically configure the Apache HTTP server based on the authentication and security options chosen. To do this, simply check the Update Apache Configuration box and fill in the following fields:
-
-
-
- Apache Server Name: Apache server access URL.
- Apache Server Admin email: Email address of the Apache server administrator that will be displayed on error pages produced by the Apache server.
-
-
- Simple Authentication:
If you want to enable simple authentication, simply check the Enable Basic Authentication box and fill in the following fields:
-
-
-
- Password file path: Path to the .htpasswd file where Apache stores login/password.
- Administrator password: Password associated with the portal Administrator Login (see Archive Portal administrator).
-
-
- Active Directory Authentication:
If you want to enable LDAP authentication to the Active Directory, you must check the Enable LDAP Authentication box and complete the following fields:
-
-
-
- Authentication LDAP URL: Access URL to the LDAP directory that Apache will use to validate user authentication. The URL is made up of several subsets:
-
- ldap://active-directory-server:389/ : Hostname : Port of Active Directory server.
- DC=test,DC=ideas,DC=com? : Path to Person entries in the directory.
- sAMAccountName,mail : List of LDAP attributes used as Login.
- ?sub?(objectClass=*) : Search criteria.
-
- Authentication LDAP Bind DN: DN of the service account used to access the Active Directory (via LDAP) to read user Person records.
- Authentication LDAP Bind Password: Service account password.
- Authentication LDAP URL: Access URL to the LDAP directory that Apache will use to validate user authentication. The URL is made up of several subsets:
-
-
- Single Sign-On Authentication:
If you want to enable SSO authentication via NTLM, please check the Enable NTLM SSO Authentication box.
- SSL Certificates:
If you want to set up an encrypted connection with the Apache server, you must check the Enable SSL box and fill in the following fields:
-
-
-
- Signed Certificate file path: .crt SSL certificate file path.
- Private Key file path: .key SSL certificate file path.
-
-
Once all the options are selected, you need to press the Install button. The installation process starts and the progress bar displayed at the bottom of the window indicates the progress of the operations. Once completed, the installation completion window is displayed:
Installation Log File
In order to obtain details on the operations carried out by the installation Wizard, you can consult the Installation Log file (CTInstallWizardLog_*.txt) which is located in the temporary directory of the machine:
If any errors occurred during the installation process, you will find all the details in this file. Do not hesitate to go through it quickly to check that everything went well.
Comments
0 comments
Article is closed for comments.