From Linuxnetworks
[edit] Configuring phpGeneral
- Extract the .tar.gz file somewhere in the document directory of your web server
- Protect the communication by encrypting the connection between browser and server by using SSL
- Move the contents of the ./config directory to /etc/general/ and make them readable by the web server
- Modify the .conf files in the default realm, especially the support.conf and the files in the subdirectories as needed
- If you have different configurations create more realms (directories in /etc/general/) and modify them to match your needs
- Don't forget to change the /etc/general/realms.conf file if you added or deleted one or more realms
- Create an administrator account in your LDAP tree. It must at least consist of the uid and userpassword attribute and write access to the (sub)tree must be granted to this account
- Configure your LDAP Server, especially the Access Control Lists. See OpenLdap configuration for an example
- If you want to use both ldap and imap, keep in mind that you need an admin account with the same password for both (or you use the ldap account to authenticate yourself as admin)
- Copy example.htaccess to .htaccess if you don't want to change your php.ini and you have apache configured correctly
[edit] Configuring PHP
Copy example.htaccess as .htaccess into the admin and user directory if you don't want to change your php.ini and you have apache configured correctly. Otherwise modify the following options in your /etc/php.ini:
These options must be set:
- track_vars = On (normally set by default)
- session.use_cookies = 1
- register_globals = Off
- short_open_tags = Off (since 0.5.3)
These options should be set:
- allow_call_time_pass_reference = Off
- session.use_trans_sid = 0
Highly recommended because of security reasons (only /etc/php.ini):
- display_errors = Off
- log_errors = On
- error_log = /var/log/php/error_log #only accessible by apache
- session.save_path = /var/lib/php/ #only accessible by apache
