6.0.0-git
2024-04-16

Diff for CentOS5InstallationNotes between 35 and 36

[[toc]]



+ Installing Horde Groupware Webmail Edition on !CentOS 5



[http://www.horde.org/webmail/ Horde Groupware Webmail Edition] is a free, enterprise ready, browser based communication suite. Users can read, send and organize email messages and manage and share calendars, contacts, tasks and notes with the standards compliant components from the Horde Project. Horde Groupware Webmail Edition bundles the separately available applications IMP, Ingo, Kronolith, Turba, Nag and Mnemo.





++ Versions



* !CentOS 5.0 i386 (OS)

* Horde Groupware Webmail Edition 1.0.3 (October 2 2007)

* Apache 2.2.3 (http server)

* !MySQL 5.0.22 (db server)

* Postfix 2.3.3 (mail server)

* Dovecot 1.0 (IMAP server)





++ Set up your host name and address



//This is only necessary if you didn't do it at installation.//



Use system-config-network-tui to set up IP, Netmask and Gateway:



<code>

system-config-network-tui

</code>



Edit /etc/sysconfig/network and set your hostname:



<code>

NETWORKING=yes

NETWORKING_IPV6=yes

HOSTNAME=yourhostname.yourdomain.com

</code>



Edit /etc/resolv.conf and add your DNS servers:



<code>

nameserver 208.67.222.222

nameserver 208.67.220.220

</code>



Edit /etc/hosts to something like this, according to your system settings:



<code>

# Do not remove the following line, or various programs

# that require network functionality will fail.

127.0.0.1         localhost.localdomain        localhost

192.168.0.100     yourhostname.yourdomain.com  yourhostname

::1               localhost6.localdomain6      localhost6

</code>



Restart network:



<code>

service network restart

</code>



If your using GUI interface (like gnome), you may need to restart it:



<code>

init 6

</code>





++ Installing prerequisites



<code>

yum install -y gettext httpd mysql mysql-server dovecot postfix system-switch-mail perl



yum install -y php php-mysql php-xml php-imap php-mbstring php-mcrypt php-pecl-Fileinfo php-pecl-memcache  

               php-pear-DB php-pear-File php-pear-Log php-pear-Mail-Mime php-pear-Auth-SASL php-pear-Date  

               php-pear-HTTP-Request php-pear-Mail php-pear-Net-Sieve php-pear-Net-Socket php-pear-Net-SMTP  

               php-pear-MDB2-Driver-mysql php-gd php-xmlrpc php-soap



yum install -y php-pear-Date-Holidays            <-- (for now, this package is available in the EPEL repo)



yum install -y openssl mod_ssl crypto-utils perl-Net-SSLeay         <--(for https secure browsing)



yum install -y php-devel gcc      <--(if you want to install extra pecl modules - PS: use 'pear install pecl/modulename')

</code>





++ Configuring Postfix and Dovecot



Turn off sendmail:



<code>

service sendmail stop

chkconfig sendmail off



system-switch-mail

(select postfix)

</code>



Configure Postfix:



<code>

postconf -e 'home_mailbox = Maildir/'

</code>



Edit /etc/dovecot.conf and add the following to the end of the file:



<code>

# to allow the creation of mail subfolders

mail_location = maildir:~/Maildir



# Enable IMAP protocol

protocols = imap

</code>



If using CentOS x86_64, temporary fix for this [http://bugs.centos.org/view.php?id=2651 bug]

<code>

login_process_size = 64

</code>





To configure the rest of postfix, such as domain name and secure connections, take a look at this nice tutorial: http://fedorasolved.org/server-solutions/postfix-mail-server



++ Configure php.ini



Don't forget to increase the number of MB on memory_limit in php.ini to, for example, 128MB or higher.



<code>

memory_limit = 128M

</code>



++ Start services



<code>

service httpd restart

chkconfig httpd on



service postfix restart

chkconfig postfix on



service dovecot restart

chkconfig dovecot on



service mysqld restart

chkconfig mysqld on

</code>



Configure mysqld root password:



<code>

/usr/bin/mysqladmin -u root password 'new-password'

/usr/bin/mysqladmin -u root -h yourhostname.yourdomain.com password 'new-password'

</code>





++ Download Horde Groupware Webmail Edition and extract it



Get the latest stable version of Horde Groupware Webmail Edition from http://www.horde.org/download/app/?app=webmail.



Extract files and rename folder:



<code>

tar zxf horde-webmail-*.tar.gz -C /var/www/html/

mv /var/www/html/horde-*/ /var/www/html/horde/

</code>





++ Creating database and tables in !MySQL



+++ Run the setup.php script:



<code>

cd /var/www/html/horde/scripts/

./setup.php

</code>



If asked, choose /horde.



Press 1; choose mysql; Persistent connection: 0; Username horde; Choose a password for mysql-user-horde; Unix sockets; Location /var/lib/mysql/mysql.sock; DB name horde; 



Press 2; yes; root; root-mysql-password.



Press 3; specify an existing IMAP user to have horde administration permissions (i.e. your current linux user).



+++ Create user horde in !MySQL and grant horde DB the proper permissions



Edit a text file and change the password for the same as in Step 1 above:



<code>

USE mysql;



REPLACE INTO user (host, user, password)

    VALUES (

        'localhost',

        'horde',

-- IMPORTANT: Change this password!

        PASSWORD('password_for_mysql_horde_user')

);



REPLACE INTO db (host, db, user, select_priv, insert_priv, update_priv,

                 delete_priv, create_priv, drop_priv, index_priv)

    VALUES (

        'localhost',

        'horde',

        'horde',

        'Y', 'Y', 'Y', 'Y',

        'Y', 'Y', 'Y'

);



-- Make sure that priviliges are reloaded.

FLUSH PRIVILEGES;

</code>



Save the file as createuser.mysql (or something else) and load it as mysql stdin:



<code>

mysql --user=root --password=mysqlrootpassword < createuser.mysql

</code>





++ Configure Apache and PHP



Add a "horde.conf" file to /etc/httpd/conf.d:



<code>

#

# Horde

#



Alias /horde /var/www/html/horde



<Directory /var/www/html/horde>

	# Uncomment the following 3 lines to make Horde locally accessible only

	#Order Deny,Allow

	#Deny from all

	#Allow from 127.0.0.1



	Options +FollowSymLinks



	# horde.org's recommended PHP settings:

	php_admin_flag safe_mode off

	php_admin_flag magic_quotes_runtime off

	php_flag session.use_trans_sid off

	php_flag session.auto_start off

	php_admin_flag file_uploads on

	# Optional - required for weather block in Horde to function

	php_admin_flag allow_url_fopen on



	# If horde dies while trying to handle large email file attachments,

	#  you are probably hitting PHP's memory limit.  Raise that limit here,

	#  but use caution

	# Set to your preference - memory_limit should be at least 32M

	#  and be greater than the value set for post_max_size

	#php_value memory_limit 32M

	#php_value post_max_size 20M

	#php_value upload_max_filesize 10M



	# /usr/share/pear is needed for PEAR. /var/www/html/horde is needed for Horde itself

	# TODO: Set an appropriate include_path, too. Might even increase speed a bit.

	php_admin_value open_basedir "/var/www/html/horde:/var/www/html/horde/config:/usr/share/pear:/tmp"

	php_admin_flag register_globals off

</Directory>



<Directory /var/www/html/horde/config>

	Order Deny,Allow

	Deny from all

</Directory>



# Deny access to files that are not served directly by the webserver

<DirectoryMatch "^/var/www/html/horde/(.*/)?(config|lib|locale|po|scripts|templates)/(.*)?">

	Order Deny,Allow

	Deny from all

</DirectoryMatch>



# Deny access to the test.php files except from localhost

<LocationMatch "^/horde/(.*/)?test.php">

	Order Deny,Allow

	Deny from all

	Allow from 127.0.0.1

</LocationMatch>

</code>



Change horde.conf permission:



<code>

chmod 0644 -v /etc/httpd/conf.d/horde.conf 

</code>



Increase memory_limit option in /etc/php.ini to 32MB:



<code>

memory_limit = 32M

</code>



Restart httpd:



<code>

service httpd restart

</code>





++ Check if everything is alright



Open the following address in your browser:



<code>

http://localhost.localdomain/horde/test.php

</code>





++ Security configuration



Secure config files:



<code>

chown apache:root -R /var/www/html/horde/config

chown apache:root -R /var/www/html/horde/*/config

chmod -R go-rwx /var/www/html/horde/config

chmod -R go-rwx /var/www/html/horde/*/config

</code>



Secure scripts:



<code>

chown -R root:root /var/www/html/horde/scripts

chown -R root:root /var/www/html/horde/*/scripts

chmod -R go-rwx /var/www/html/horde/scripts

chmod -R go-rwx /var/www/html/horde/*/scripts

</code>



Secure test.php:



<code>

chmod a-rwx /var/www/html/horde/test.php

chmod a-rwx /var/www/html/horde/*/test.php

</code>





++ Finishing configuration



Open the following url in your browser and log into horde with the administrator user (defined above in Option 2 when creating databases):



<code>

http://localhost.localdomain/horde

</code>



(PS: use full URL address, with host and domain name)

(PS2: Remember to check $conf['cookie']['path'] = '/horde'; in horde/config/conf.php to match the path you use to access horde on your server)



Fell free to change other options, as you like. The good thing about Horde Groupware Webmail Edition is it comes pretty much configured and ready for use!



Remember to restart httpd after you make changes:



<code>

service httpd restart

</code>



++ Performance



++++ Memcached



Memcached is a great performance utility. In order to use it you will need the pecl memcache extension and the memcached package:



<code>

yum install php-pecl-memcache memcached

</code>



Then, configure the memcached by editing the file /etc/sysconfig/memcached:



<code>

PORT="11211"

USER="memcached"

MAXCONN="1024"

CACHESIZE="512"        <- Amount of memory to use (in MB)

OPTIONS=""

</code>



Turn on the service on the default runlevel and start it:



<code>chkconfig memcached on

service memcached start

</code>



Finish configurarion on Horde -> Administration -> Setup -> Horde -> Cache System (and) Memcache Server.



++++ MySQL



You could try to increase mysql performance by enabling query cache feature.



Edit your /etc/my.cnf and add the following under [mysqld]:



<code>

query-cache-size=50M  (or whatever you think is enough)

</code>



Run the exact same queries and then, on mysql console, check on query cache status:



<code>

mysql> show status like '%qcache%';

</code>