Koozali.org: home of the SME Server

Obsolete Releases => SME 7.x Contribs => Topic started by: Hummdis on February 26, 2008, 01:07:28 AM

Title: MediaWiki Local Access Only
Post by: Hummdis on February 26, 2008, 01:07:28 AM
I have installed MediaWiki on SME Server 7.3.

On the MidiaWiki page (http://wiki.contribs.org/Mediawiki) it states that:

Quote
The default behaviour of Mediawiki is: accessible from LAN + Internet with "standard http" (SSL off) You can easily change this default setting with following commands:

Code: [Select]
# config setprop mediawiki HTTPS on
# config setprop mediawiki HTTPS off

Code: [Select]
# config setprop mediawiki PublicAccess global
# config setprop mediawiki PublicAccess local

Once done, apply modifications and restart Apache:

Code: [Select]
# expand-template /etc/httpd/conf/httpd.conf
# svc -h /service/httpd-e-smith

I have done the "HTTPS off", the "PublicAccess local", and the restart Apache commands, however, the wiki can still be accessed from outside of the local network.

Why and can I turn outside access off at all?

Thanks!
Title: Re: MediaWiki Local Access Only
Post by: raem on February 26, 2008, 02:36:56 AM
Hummdis

To check the actual settings do
config show mediawiki

To check the contents of httpd.conf do
cat /etc/httpd/conf/httpd.conf

Paste any applicable parts of the config file back here.

You could try
signal-event post-upgrade
reboot

although this may/will remove valuable information re troubleshooting the issue, so hold off on that until other information is analysed.
Title: Re: MediaWiki Local Access Only
Post by: Hummdis on February 26, 2008, 05:16:58 AM
Here is the output to the "config mediawiki show" command:

Code: [Select]
[root@mail ~]# config mediawiki show
usage:
    /sbin/e-smith/db dbfile keys
    /sbin/e-smith/db dbfile print [key]
    /sbin/e-smith/db dbfile show [key]
    /sbin/e-smith/db dbfile get key
    /sbin/e-smith/db dbfile set key type [prop1 val1] [prop2 val2] ...
    /sbin/e-smith/db dbfile setdefault key type [prop1 val1] [prop2 val2] ...
    /sbin/e-smith/db dbfile delete key
    /sbin/e-smith/db dbfile printtype [key]
    /sbin/e-smith/db dbfile gettype key
    /sbin/e-smith/db dbfile settype key type
    /sbin/e-smith/db dbfile printprop key [prop1] [prop2] [prop3] ...
    /sbin/e-smith/db dbfile getprop key prop
    /sbin/e-smith/db dbfile setprop key prop1 val1 [prop2 val2] [prop3 val3] ...
    /sbin/e-smith/db dbfile delprop key prop1 [prop2] [prop3] ...
[root@mail ~]#

Here is the httpd.conf file that pertains to the MediaWiki settings:

Code: [Select]
#------------------------------------------------------------
#   Mediawiki
#------------------------------------------------------------
Alias /mediawiki /opt/mediawiki
Alias /wiki      /opt/mediawiki/index.php

<Directory /opt/mediawiki>
          # SSLRequireSSL on
        AddType application/x-httpd-php .php .php3 .phtml
        Options FollowSymLinks
        order deny,allow
          allow from 127.0.0.1 192.168.0.0/255.255.255.0 192.168.1.0/255.255.255.0 192.168.2.0/255.255.255.0 192.168.3.0/255.255.255.0
        php_flag register_globals off
        php_admin_value open_basedir /opt/mediawiki/:/tmp/
</Directory>

<Directory /opt/mediawiki/includes>
        order deny,allow
          allow from 127.0.0.1 192.168.0.0/255.255.255.0 192.168.1.0/255.255.255.0 192.168.2.0/255.255.255.0 192.168.3.0/255.255.255.0
</Directory>

<Directory /opt/mediawiki/languages>
        order deny,allow
          allow from 127.0.0.1 192.168.0.0/255.255.255.0 192.168.1.0/255.255.255.0 192.168.2.0/255.255.255.0 192.168.3.0/255.255.255.0
</Directory>

<Directory /opt/mediawiki/maintenance>
        order deny,allow
          allow from 127.0.0.1 192.168.0.0/255.255.255.0 192.168.1.0/255.255.255.0 192.168.2.0/255.255.255.0 192.168.3.0/255.255.255.0
</Directory>

<Directory /opt/mediawiki/math>
        order deny,allow
          allow from 127.0.0.1 192.168.0.0/255.255.255.0 192.168.1.0/255.255.255.0 192.168.2.0/255.255.255.0 192.168.3.0/255.255.255.0
</Directory>

<Directory /opt/mediawiki/tests>
        order deny,allow
          allow from 127.0.0.1 192.168.0.0/255.255.255.0 192.168.1.0/255.255.255.0 192.168.2.0/255.255.255.0 192.168.3.0/255.255.255.0
</Directory>

<Directory /opt/mediawiki/maintenance/archives>
        order deny,allow
          allow from 127.0.0.1 192.168.0.0/255.255.255.0 192.168.1.0/255.255.255.0 192.168.2.0/255.255.255.0 192.168.3.0/255.255.255.0
</Directory>

#------------------------------------------------------------

I should also mention that the SME Server is NOT the firewall, there is a different system that performs all firewall functions and passes port 80 and 25 to the mail server.  I've been wondering if because the request is coming from a different system with a local IP if that's why outside access is allowed as well.  Does this have any affect to the Local restriction?

Thanks for the help!
Title: Re: MediaWiki Local Access Only
Post by: Hummdis on February 26, 2008, 05:22:31 AM
Oh, and I already tried the reboot commands - no joy.  :-(
Title: Re: MediaWiki Local Access Only
Post by: raem on February 26, 2008, 10:04:46 AM
Hummdis

Sorry that should have been
config show mediawiki

Title: Re: MediaWiki Local Access Only
Post by: berdie on February 26, 2008, 12:23:39 PM
Hummdis,
thanks for your posting. I have checked this and you're right, the change of httpd setting to local access did not work. I hope I have fixed this behaviour in a new rpm version.
You can download it after syncing the mirrors at http://mirror.contribs.org/smeserver/contribs/dberteld/mediawiki/smeserver-mediawiki-1.6.10-7.noarch.rpm (http://mirror.contribs.org/smeserver/contribs/dberteld/mediawiki/smeserver-mediawiki-1.6.10-7.noarch.rpm)

Greetings,
Dietmar
Title: Re: MediaWiki Local Access Only
Post by: Hummdis on February 26, 2008, 10:33:21 PM
Berdie,
That updated version did it, thank you!   :-D
Title: Re: MediaWiki Local Access Only
Post by: eastend99 on September 20, 2008, 09:59:29 AM
Sorry for opening up an old post.

I have the same problem. Local access only setting not working.
Last week I installed mediawiki from the smecontribs repository on a fresh 7.3 server as requested on the wiki contribs page:

Code: [Select]
yum --enablerepo=smecontribs install smeserver-mediawiki
The installed version returned by yum is:
Code: [Select]
Installed Packages
smeserver-mediawiki.noarch               1.6.10-6.el4.sme       installed

The latest version according to this post should be
Quote
Hummdis,
thanks for your posting. I have checked this and you're right, the change of httpd setting to local access did not work. I hope I have fixed this behaviour in a new rpm version.
You can download it after syncing the mirrors at http://mirror.contribs.org/smeserver/contribs/dberteld/mediawiki/smeserver-mediawiki-1.6.10-7.noarch.rpm

Can I install the .7 version rpm manually now and still receive updates through yum and the smecontribs repository when the repository has been updated?

I hope somebody can update the repository to prevent this from happening again.
Do I have to file a bug report for this?
If I can help to get it done, please let me know.

Regards,

Marcel
Title: Re: MediaWiki Local Access Only
Post by: janet on September 20, 2008, 10:22:30 AM
eastend99

Quote
Can I install the .7 version rpm manually now and still receive updates through yum and the smecontribs repository when the repository has been updated?

Yes


Quote
I hope somebody can update the repository to prevent this from happening again.
Do I have to file a bug report for this?

Yes please do, or the problem (of an old version rpm in smecontribs repo) may continue unresolved

Title: Re: MediaWiki Local Access Only
Post by: eastend99 on September 20, 2008, 10:46:06 AM
I created a bug report: http://bugs.contribs.org/show_bug.cgi?id=4584