Gold Allocation Manager

Web Server Setup

If you want to use the Gold web GUI, you will need to configure your Httpd server to use SSL. For RedHat Linux systems, a good guide on this is "Buiding a Secure RedHat Apache Server HOWTO" at http://www.faqs.org/docs/Linux-HOWTO/SSL-RedHat-HOWTO.php.

The following shows an example configuration that involves making some modifications to the httpd configuration to support the use of cgi-bin and SSL connections as well as the creation of a private key and a self-signed certificate.

Edit the httpd configuration file::

[root]# cd /etc/apache2 [root]# vi sites-enabled/000-default

Add a virtual host definition and edit as appropriate for your environment:

<VirtualHost 192.168.72.24:443>
  DocumentRoot /var/www/cgi-bin/gold
  ServerName mygoldserver.mysite.org
  ServerAdmin my.email@mysite.org
  ErrorLog /var/logs/apache2/gold-error_log
  TransferLog /var/log/apache2/gold-access_log
  SSLEngine on
  SSLCertificateFile /etc/apache2/ssl.crt/gold-server.crt
  SSLCertificateKeyFile /etc/apache2/ssl.key/gold-server.key
  SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown

  # Configure your cgi-bin directory
  <Directory "/var/www/cgi-bin">
    Options ExecCGI
    AddHandler cgi-script .cgi .pl
  </Directory>

  # Create an Alias for /cgi-bin pointing to your cgi-bin directory
  # You may also have to comment out any comparable ScriptAlias definition
  #ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
  Alias /cgi-bin/ /var/www/cgi-bin/

 # Add index.cgo to the DirectoryIndex so you can use the shorter dir name
 DirectoryIndex index.cgi
</VirtualHost>

Note If you are installing your cgi-bin files directly under /var/www/cgi-bin, use /var/www/cgi-bin as your DocumentRoot. If you are installing your cgi-bin files under a subdirectory such as /var/www/cgi-bin/gold, you may want to use /var/www/cgi-bin/gold as your DocumentRoot. You could specify /var/www/cgi-bin here, but then you'll need to use an extra gold subdirectory in your URL when accessing the Gold GUI from your browser.

Create a Private Key for Gold

[root]# mkdir ssl.key
[root]# openssl genrsa -out ssl.key/gold-server.key 1024

Create a Self-Signed Certificate

[root]# openssl req -new -key ssl.key/gold-server.key -x509 -out ssl.crt/gold-server.crt

Startup or restart httpd.

[root]# service apache2 restart