Changes between Version 1 and Version 2 of TracCgi
- Timestamp:
- 03/22/22 12:49:43 (4 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
TracCgi
v1 v2 1 = Installing Trac as CGI = 1 = Installing Trac as CGI 2 [[TracGuideToc]] 3 [[PageOutline]] 2 4 3 To install Trac as a CGI script, you need to make the `trac.cgi` executable as a CGI by your web server. 4 5 {{{ 6 #!div class=important 7 ''Please note that using Trac via CGI is significantly slower than any other deployment method, such as [TracModPython mod_python] or [TracFastCgi FastCGI] or even [trac:TracOnWindowsIisAjp IIS/AJP] on Windows.'' 5 {{{#!div class=important 6 ''Please note that using Trac via CGI is the slowest deployment method available. It is slower than [wiki:TracModWSGI mod_wsgi], [TracModPython mod_python], [TracFastCgi FastCGI] and even [trac:TracOnWindowsIisAjp IIS/AJP] on Windows.'' 8 7 }}} 9 8 10 If you're using [http://httpd.apache.org/ Apache HTTPD], there are a couple ways to do that: 9 CGI script is the entrypoint that web-server calls when a web-request to an application is made. The `trac.cgi` script can be created using the `trac-admin <env> deploy <dir>` command which automatically substitutes the required paths, see TracInstall#cgi-bin. Make sure the script is executable by your web server. 11 10 12 1. Use a `ScriptAlias` to map a URL to the `trac.cgi` script 13 2. Copy the `trac.cgi` file into the directory for CGI executables used by your web server (commonly named `cgi-bin`). A word of warning, copying the file directly from the repository onto a windows server 2003 machine created difficulties. Rather create a new text file and cut and copy the text into the newly created file. You can also create a symbolic link, but in that case make sure that the `FollowSymLinks` option is enabled for the `cgi-bin` directory. 11 == Apache web-server configuration 14 12 15 The first option is recommended as it also allows you to map the CGI to a friendly URL. 13 In [http://httpd.apache.org/ Apache] there are two ways to run Trac as CGI: 16 14 17 Now, edit the Apache configuration file and add this snippet, file names and locations changed to match your installation: 18 {{{ 19 ScriptAlias /trac /usr/share/trac/cgi-bin/trac.cgi 15 1. Use a `ScriptAlias` directive that maps a URL to the `trac.cgi` script (recommended) 16 1. Copy the `trac.cgi` file into the directory for CGI executables used by your web server (commonly named `cgi-bin`). You can also create a symbolic link, but in that case make sure that the `FollowSymLinks` option is enabled for the `cgi-bin` directory. 17 18 To make Trac available at `http://yourhost.example.org/trac` add `ScriptAlias` directive to Apache configuration file, changing `trac.cgi` path to match your installation: 19 {{{#!apache 20 ScriptAlias /trac /path/to/www/trac/cgi-bin/trac.cgi 20 21 }}} 21 22 22 ''Note that this directive requires th e `mod_alias` module to be installed andenabled.''23 ''Note that this directive requires that the `mod_alias` module is enabled.'' 23 24 24 25 If you're using Trac with a single project you need to set its location using the `TRAC_ENV` environment variable: 25 {{{ 26 {{{#!apache 26 27 <Location "/trac"> 27 28 SetEnv TRAC_ENV "/path/to/projectenv" … … 30 31 31 32 Or to use multiple projects you can specify their common parent directory using the `TRAC_ENV_PARENT_DIR` variable: 32 {{{ 33 {{{#!apache 33 34 <Location "/trac"> 34 35 SetEnv TRAC_ENV_PARENT_DIR "/path/to/project/parent/dir" … … 36 37 }}} 37 38 38 ''Note that the `SetEnv` directive requires the `mod_env` module to be installed and enable. If not, you could set TRAC_ENV in trac.cgi. Just add the following code between "try:" and "from trac.web ...":''39 ''Note that the `SetEnv` directive requires that the `mod_env` module is enabled.'' 39 40 40 {{{ 41 import os 41 An alternative to `SetEnv` is editing `TRAC_ENV` or `TRAC_ENV_PARENT_DIR` in `trac.cgi`: 42 43 {{{#!python 42 44 os.environ['TRAC_ENV'] = "/path/to/projectenv" 43 45 }}} 44 46 45 '' Or for TRAC_ENV_PARENT_DIR: '' 46 47 {{{ 48 import os 49 os.environ['TRAC_ENV_PARENT_DIR'] = "/path/to/project/parent/dir" 47 {{{#!python 48 os.environ['TRAC_ENV_PARENT_DIR'] = "/path/to/parent/dir" 50 49 }}} 51 50 52 This will make Trac available at `http://yourhost.example.org/trac`.51 If you are using the [http://httpd.apache.org/docs/suexec.html Apache suEXEC] feature please see [trac:ApacheSuexec]. 53 52 54 If you are using the [http://httpd.apache.org/docs/suexec.html Apache suEXEC] feature please see [http://trac.edgewall.org/wiki/ApacheSuexec].53 On some systems, you ''may'' need to edit the shebang line in the `trac.cgi` file to point to your real Python installation path. On a Windows system you may need to configure Windows to know how to execute a `.cgi` file (Explorer -> Tools -> Folder Options -> File Types -> CGI). 55 54 56 On some systems, you ''may'' need to edit the shebang line in the `trac.cgi` file to point to your real Python installation path. On a Windows system you may need to configure Windows to know how to execute a .cgi file (Explorer -> Tools -> Folder Options -> File Types -> CGI). 55 === Python Egg Cache 57 56 58 == Mapping Static Resources == 59 60 Out of the box, Trac will serve static resources such as style sheets or images itself. For a CGI setup, though, this is highly undesirable, because it results in the CGI script being invoked for documents that could be much more efficiently served by the web server directly. 61 62 Web servers such as [http://httpd.apache.org/ Apache HTTPD] allow you to create “Aliases” to resources, thereby giving them a virtual URL that doesn't necessarily bear any resemblance to the layout of the servers file system. We already used this capability above when defining a `ScriptAlias` for the CGI script, and we'll use it now to map requests to the static resources to the directory on the file system that contains them, thereby bypassing the processing of such requests by the CGI script. 63 64 Edit the Apache configuration file again and add the following snippet '''before''' the `ScriptAlias` for the CGI script , file names and locations changed to match your installation: 65 {{{ 66 Alias /trac/chrome/common /usr/share/trac/htdocs 67 <Directory "/usr/share/trac/htdocs"> 68 Order allow,deny 69 Allow from all 70 </Directory> 57 The [TracInstall#egg-cache egg-cache] can be configured using an `os.environ` statement in `trac.cgi`, as shown above. 58 To do the same from the Apache configuration, use the `SetEnv` directive: 59 {{{#!apache 60 SetEnv PYTHON_EGG_CACHE /path/to/dir 71 61 }}} 72 62 73 Note that whatever URL path you mapped the `trac.cgi` script to, the path `/chrome/common` is the path you have to append to that location to intercept requests to the static resources. 63 Put this directive next to where you set the path to the [TracEnvironment Trac environment], i.e. in the same `<Location>` block. 74 64 75 For example, if Trac is mapped to `/cgi-bin/trac.cgi` on your server, the URL of the Alias should be `/cgi-bin/trac.cgi/chrome/common`. 76 77 Similarly, if you have static resources in a projects htdocs directory, you can configure apache to serve those resources (again, put this '''before''' the `ScriptAlias` for the CGI script, and adjust names and locations to match your installation): 78 79 {{{ 80 Alias /trac/chrome/site /path/to/projectenv/htdocs 81 <Directory "/path/to/projectenv/htdocs"> 82 Order allow,deny 83 Allow from all 84 </Directory> 65 {{{#!apache 66 <Location /trac> 67 SetEnv TRAC_ENV /path/to/projenv 68 SetEnv PYTHON_EGG_CACHE /path/to/dir 69 </Location> 85 70 }}} 86 71 87 Alternatively, you can set the `htdocs_location` configuration option in [wiki:TracIni trac.ini]:88 {{{89 [trac]90 htdocs_location = /trac-htdocs91 }}}92 93 Trac will then use this URL when embedding static resources into HTML pages. Of course, you still need to make the Trac `htdocs` directory available through the web server at the specified URL, for example by copying (or linking) the directory into the document root of the web server:94 {{{95 $ ln -s /usr/share/trac/htdocs /var/www/your_site.com/htdocs/trac-htdocs96 }}}97 98 Note that in order to get this `htdocs` directory, you need first to extract the relevant Trac resources using the `deploy` command of TracAdmin:99 [[TracAdminHelp(deploy)]]100 72 101 73 102 == Adding Authentication ==74 === Using WSGI 103 75 104 The simplest way to enable authentication with Apache is to create a password file. Use the `htpasswd` program to create the password file: 105 {{{ 106 $ htpasswd -c /somewhere/trac.htpasswd admin 107 New password: <type password> 108 Re-type new password: <type password again> 109 Adding password for user admin 110 }}} 76 You can run a [http://henry.precheur.org/python/how_to_serve_cgi WSGI handler] [http://pythonweb.org/projects/webmodules/doc/0.5.3/html_multipage/lib/example-webserver-web-wsgi-simple-cgi.html under CGI]. You can [wiki:TracModWSGI#Thetrac.wsgiscript write your own application function], or use the deployed trac.wsgi's application. 111 77 112 After the first user, you dont need the "-c" option anymore: 113 {{{ 114 $ htpasswd /somewhere/trac.htpasswd john 115 New password: <type password> 116 Re-type new password: <type password again> 117 Adding password for user john 118 }}} 78 == Mapping Static Resources 119 79 120 ''See the man page for `htpasswd` for full documentation.'' 80 See TracInstall#MappingStaticResources. 121 81 122 After you've created the users, you can set their permissions using TracPermissions. 82 == Adding Authentication 123 83 124 Now, you'll need to enable authentication against the password file in the Apache configuration: 125 {{{ 126 <Location "/trac/login"> 127 AuthType Basic 128 AuthName "Trac" 129 AuthUserFile /somewhere/trac.htpasswd 130 Require valid-user 131 </Location> 132 }}} 133 134 If you're hosting multiple projects you can use the same password file for all of them: 135 {{{ 136 <LocationMatch "/trac/[^/]+/login"> 137 AuthType Basic 138 AuthName "Trac" 139 AuthUserFile /somewhere/trac.htpasswd 140 Require valid-user 141 </LocationMatch> 142 }}} 143 144 For better security, it is recommended that you either enable SSL or at least use the “digest” authentication scheme instead of “Basic”. Please read the [http://httpd.apache.org/docs/2.0/ Apache HTTPD documentation] to find out more. For example, on a Debian 4.0r1 (etch) system the relevant section in apache configuration can look like this: 145 {{{ 146 <Location "/trac/login"> 147 LoadModule auth_digest_module /usr/lib/apache2/modules/mod_auth_digest.so 148 AuthType Digest 149 AuthName "trac" 150 AuthDigestDomain /trac 151 AuthUserFile /somewhere/trac.htpasswd 152 Require valid-user 153 </Location> 154 }}} 155 and you'll have to create your .htpasswd file with htdigest instead of htpasswd as follows: 156 {{{ 157 # htdigest /somewhere/trac.htpasswd trac admin 158 }}} 159 where the "trac" parameter above is the same as !AuthName above ("Realm" in apache-docs). 84 See TracInstall#ConfiguringAuthentication. 160 85 161 86 ---- 162 See also: Trac Guide, TracInstall, wiki:TracModWSGI, TracFastCgi, TracModPython87 See also: TracInstall, [wiki:TracModWSGI], TracFastCgi, TracModPython
