• View
• Edit
• Upload
• History
• Print

IPFM

<< | Page list | >>

Notes about the Invision Power File Manager (IPFM)

You can not access the Invision Power File Manager (IPFM) through the following URI:

• http://wiki.lyx.org/ipfm/index.php

In order to upload files, you will need to login as the user lyx and give a password. The current password is simply obtained by asking for it on one of the LyX mailing lists.

If you only wish to browse the existing files, you can login as the user guest, which doesn't require a password.

Installation

The Invision Power File Manager (IPFM) was installed as follows.

1. Copy files etc to pmwiki/ipfm/ and fixing permissions, see below
2. Executing pmwiki/ipfm/install.php (and then deleting it).
   A copy of the chosen administrator password is stored in the file pmwiki/passwords.txt on the wiki server in case we forget it...
3. Removing pmwiki/ipfm/install.php for security reasons
4. Added the user lyx, the password will be published on the lists. See IPFM administration below and also the lyx user below

         Settings/Script settings/Default CHMOD

IPFM administration

The administration tool is started from this URI:

• http://wiki.lyx.org/ipfm/admin/index.php

The password is stored in pmwiki/passwords.txt on the wiki server, just in case we forget it...

Permissions and ownership

Special effort was taken to fix ownership of directories so that everything belongs to the group wiki (wiki administrators are members of this group). In addition, the group-'s' bit has been set on directories, so that newly created files etc will also belong to the wiki group.

Here is the directory structure:

Perm.	User	: Group	Directory
2775	chr 	: wiki  ipfm
2775    chr	: wiki  ipfm/admin
2775    apache	: wiki  ipfm/images
2775    apache	: wiki  ipfm/images/icons
2775    apache	: wiki  ipfm/languages
2775    chr	: wiki  ipfm/modules
2775    apache	: wiki  ipfm/settings
2775    apache	: wiki  ipfm/settings/templates
2775    apache	: wiki  ipfm/settings/templates/javascript
2775    apache	: wiki  ipfm/templates

The above was created by using the 's' bit on pmwiki/ipfm/, and having apache execute a .php-script which copied parts of the archive containing IPFM. This ensured the files and directories are ownded by apahce, enabling the web server user to write to these files in the future, without having everybody being able to write to the files.

Then one of the administrators (here it was chr) manually overwrote some of the directories, so that they aren't owned by apache.

The user lyx

This user is intended for anyone who needs to upload files and manipulate them.

• Access details were set as follows:
  • Username: lyx
  • Password: See pmwiki/passwords.txt on the wiki server for a copy of the password in case we forget. Users should ask for the password on one of the mailing lists.
• User Permissions was set up as follows. All but the following were enabled:
  • Disabled @@"Lock" a directory"
  • Disabled Change their own password
  • Disabled CHMOD files or folders
• MySQL Settings were all disabled
• Other settings were set as follows:
  • Root directory: /home/lyx/www/pmwiki/uploads
  • Root URL: /uploads
  • Space Limit: 100 MB
  • Default Language: English (British)

The user guest

This user is intended for anyone who just needs to browse the available files in order to download them etc.

• Access details were set as follows:
  • Username: guest
  • Password: No password is required
• User Permissions was set up as follows.
  • All settings but Create ZIP archives were disabled.
• MySQL Settings were all disabled
• Other settings were set as follows:
  • Root directory: /home/lyx/www/pmwiki/uploads
  • Root URL: /uploads
  • Space Limit: 2 GB
  • Default Language: English (British)