WalkerWiki - wiki.alanwalker.uk

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Apache HLS Origin Server ======
<color #db5f0b>Jul 2017</color>
\\ 
\\ 
\\ 
{{:apache_logo.jpg?250|}}
----

===== Introduction =====
First of all, this is a rather crude implementation of a Webdav server for HLS, while this configuration works, do not use this in a production environment, its full of holes as far as security goes.
\\ 
\\ 
However, if you need an Origin server for HLS pretty fast, this will get you going in almost no time, you can follow this guide step-by-step, or you can use the installation script and have everything done for you in a matter of seconds.
\\ 
\\ 
This guide assumes that you are going to use the path <color #ed1c24>/var/www/html/webdav/</color> to store your HLS output(s), if you wish to use another location then you are going to have to read this page very carefully to make the necessary changes.
\\ 
\\ 
----
==== Install Apache ====
First we need to install Apache (yes I know the new kid on the block is nginx, but I haven't tried it yet). To install Apache (handily called httpd on CentOS/Red Hat):
<file>
sudo yum install httpd -y
</file>
\\ 

----
==== Test Webdav is present ====
We need to ensure that Webdav is present, we can check this with the following command:
<file>
sudo httpd -M | grep fs
</file>
You should get an output like:
<file>
dav_fs_module (shared)
</file>
You can ignore the domain name error if you get one.
\\ 

----
==== Create Webdav Directory ====
Next we need to create the location where we will publish our HLS outputs to, this will be <color #ed1c24>/var/www/html/webdav</color> and I suggest you don't change this if you are not sure how this all works.
<file>
mkdir /var/www/html/webdav
</file>
\\ 

----
==== Set webdav Ownership and Rights ====
Next, change the ownership (to the Apache user) and the permissions for the webdav directory with the following commands:
<file>
sudo chown -R apache:apache /var/www/html/
sudo chmod -R 755 /var/www/html/
sudo chmod -R g+s /var/www/html
</file>
\\ 

----
==== Password Authentication ====
It is important to secure your webdav directory with a password. You can do this by creating an .htpasswd file.
\\ 
\\ 
To create it, run the following command:
<file>
sudo htpasswd -c /etc/httpd/.htpasswd dev
</file>
You will be prompted to enter a password, then confirm it. This will create a password file for the user dev.
\\ 
\\ 
Now, you need to assign group ownership of the file to the Apache user, and lock down the permissions for everyone else. To do this, run the following commands:
<file>
sudo chown root:apache /etc/httpd/.htpasswd
sudo chmod 640 /etc/httpd/.htpasswd
</file>
\\ 

----
==== Configure an Apache vhost for WebDAV ====
Next, you need to create a virtual host file for the webdav directory. Start by creating a new site configuration file called webdav.conf:
<file>
sudo nano /etc/httpd/conf.d/webdav.conf
</file>
Add the following content:
<sxh [text], gutter: false; highlight: 1-20;>
DavLockDB /var/www/html/DavLock
<VirtualHost *:80>
        ServerAdmin webmaster@localhost
        DocumentRoot /var/www/html/webdav/
    ErrorLog /var/log/httpd/error.log
    CustomLog /var/log/httpd/access.log combined
        Alias /webdav /var/www/html/webdav
        <Directory /var/www/html/webdav>
            DAV On
            AuthType Basic
            AuthName "webdav"
            AuthUserFile /etc/httpd/.htpasswd
            Require valid-user
        </Directory>
</VirtualHost>
</sxh>
Now, restart Apache to activate the new configuration:
\\ 
<file>
sudo apachectl restart
</file>
\\ 

----
==== Test WebDav ====
Finally, WebDAV is ready for testing. Here, we will use a browser and a client to check WebDAV.
\\ 
\\ 
**Test with a web browser**
\\ 
To test whether the authentication is working correctly or not, open your web browser and navigate to the URL 
<file>
http://your.server.ip/webdav/
</file>
You should be prompted with a dialogue box to enter the username and password:
\\ 
\\ 
Username: dev
Paswword: What you entered earlier (hope you remembered). 
\\ 
\\ 
You need to test you can create files, I suggest using a application called CyberDuck, some information here:[[origin_server_credential_test|CyberDuck]].
\\ 

----
===== Automatic Script ====
Automatic you say? Yep that's right, just copy this to your server, chmod 777 on it, and run it. Your server must have access to the internet or it won't be able to download the files.
\\ 
\\ 
Before you run this file, please check this page to ensure you don't have any Carriage returns in your script:[[remove_special_chars_from_windows_files|Remove Special Chars from Windows files]]
\\ 
\\ 
You can download the script from {{ :setorigin.tar |HERE}}.
\\ 
\\ 

<file>
sudo yum install nano -y
sudo yum install httpd -y
sudo mkdir /var/www/html/webdav
sudo chown -R apache:apache /var/www/html/
sudo chmod -R 755 /var/www/html/
sudo chmod -R g+s /var/www/html
sudo htpasswd -c /etc/httpd/.htpasswd dev
sudo chown root:apache /etc/httpd/.htpasswd
sudo chmod 640 /etc/httpd/.htpasswd
sudo touch /etc/httpd/conf.d/webdav.conf
chkconfig httpd on

echo "DavLockDB /var/www/html/DavLock
<VirtualHost *:80>
        ServerAdmin webmaster@localhost
        DocumentRoot /var/www/html/webdav/
    ErrorLog /var/log/httpd/error.log
    CustomLog /var/log/httpd/access.log combined
        Alias /webdav /var/www/html/webdav
        <Directory /var/www/html/webdav>
            DAV On
            AuthType Basic
            AuthName "webdav"
            AuthUserFile /etc/httpd/.htpasswd
            Require valid-user
        </Directory>
</VirtualHost>" > /etc/httpd/conf.d/webdav.conf

echo "# This file controls the state of SELinux on the system.

# SELINUX= can take one of these three values:
#     enforcing - SELinux security policy is enforced.
#     permissive - SELinux prints warnings instead of enforcing.
#     disabled - No SELinux policy is loaded.
SELINUX=disabled
# SELINUXTYPE= can take one of three two values:
#     targeted - Targeted processes are protected,
#     minimum - Modification of targeted policy. Only selected processes are protected.
#     mls - Multi Level Security protection.
SELINUXTYPE=targeted" > /etc/selinux/config

echo "Please Reboot..."

</file>
\\ 
Once rebooted you can use a Browser and CyberDuck to test access.
\\ 
\\