Koozali.org: home of the SME Server

MediaWiki Local Access Only

Offline Hummdis

  • 16
  • +0/-0
    • Hummdis.com
MediaWiki Local Access Only
« on: February 26, 2008, 01:07:28 AM »
I have installed MediaWiki on SME Server 7.3.

On the MidiaWiki page (http://wiki.contribs.org/Mediawiki) it states that:

Quote
The default behaviour of Mediawiki is: accessible from LAN + Internet with "standard http" (SSL off) You can easily change this default setting with following commands:

Code: [Select]
# config setprop mediawiki HTTPS on
# config setprop mediawiki HTTPS off

Code: [Select]
# config setprop mediawiki PublicAccess global
# config setprop mediawiki PublicAccess local

Once done, apply modifications and restart Apache:

Code: [Select]
# expand-template /etc/httpd/conf/httpd.conf
# svc -h /service/httpd-e-smith

I have done the "HTTPS off", the "PublicAccess local", and the restart Apache commands, however, the wiki can still be accessed from outside of the local network.

Why and can I turn outside access off at all?

Thanks!
"It is always darkest just before it goes pitch black."
-Despair, Inc.

Offline raem

  • *
  • 3,972
  • +4/-0
Re: MediaWiki Local Access Only
« Reply #1 on: February 26, 2008, 02:36:56 AM »
Hummdis

To check the actual settings do
config show mediawiki

To check the contents of httpd.conf do
cat /etc/httpd/conf/httpd.conf

Paste any applicable parts of the config file back here.

You could try
signal-event post-upgrade
reboot

although this may/will remove valuable information re troubleshooting the issue, so hold off on that until other information is analysed.
« Last Edit: February 26, 2008, 10:05:37 AM by RayMitchell »
...

Offline Hummdis

  • 16
  • +0/-0
    • Hummdis.com
Re: MediaWiki Local Access Only
« Reply #2 on: February 26, 2008, 05:16:58 AM »
Here is the output to the "config mediawiki show" command:

Code: [Select]
[root@mail ~]# config mediawiki show
usage:
    /sbin/e-smith/db dbfile keys
    /sbin/e-smith/db dbfile print [key]
    /sbin/e-smith/db dbfile show [key]
    /sbin/e-smith/db dbfile get key
    /sbin/e-smith/db dbfile set key type [prop1 val1] [prop2 val2] ...
    /sbin/e-smith/db dbfile setdefault key type [prop1 val1] [prop2 val2] ...
    /sbin/e-smith/db dbfile delete key
    /sbin/e-smith/db dbfile printtype [key]
    /sbin/e-smith/db dbfile gettype key
    /sbin/e-smith/db dbfile settype key type
    /sbin/e-smith/db dbfile printprop key [prop1] [prop2] [prop3] ...
    /sbin/e-smith/db dbfile getprop key prop
    /sbin/e-smith/db dbfile setprop key prop1 val1 [prop2 val2] [prop3 val3] ...
    /sbin/e-smith/db dbfile delprop key prop1 [prop2] [prop3] ...
[root@mail ~]#

Here is the httpd.conf file that pertains to the MediaWiki settings:

Code: [Select]
#------------------------------------------------------------
#   Mediawiki
#------------------------------------------------------------
Alias /mediawiki /opt/mediawiki
Alias /wiki      /opt/mediawiki/index.php

<Directory /opt/mediawiki>
          # SSLRequireSSL on
        AddType application/x-httpd-php .php .php3 .phtml
        Options FollowSymLinks
        order deny,allow
          allow from 127.0.0.1 192.168.0.0/255.255.255.0 192.168.1.0/255.255.255.0 192.168.2.0/255.255.255.0 192.168.3.0/255.255.255.0
        php_flag register_globals off
        php_admin_value open_basedir /opt/mediawiki/:/tmp/
</Directory>

<Directory /opt/mediawiki/includes>
        order deny,allow
          allow from 127.0.0.1 192.168.0.0/255.255.255.0 192.168.1.0/255.255.255.0 192.168.2.0/255.255.255.0 192.168.3.0/255.255.255.0
</Directory>

<Directory /opt/mediawiki/languages>
        order deny,allow
          allow from 127.0.0.1 192.168.0.0/255.255.255.0 192.168.1.0/255.255.255.0 192.168.2.0/255.255.255.0 192.168.3.0/255.255.255.0
</Directory>

<Directory /opt/mediawiki/maintenance>
        order deny,allow
          allow from 127.0.0.1 192.168.0.0/255.255.255.0 192.168.1.0/255.255.255.0 192.168.2.0/255.255.255.0 192.168.3.0/255.255.255.0
</Directory>

<Directory /opt/mediawiki/math>
        order deny,allow
          allow from 127.0.0.1 192.168.0.0/255.255.255.0 192.168.1.0/255.255.255.0 192.168.2.0/255.255.255.0 192.168.3.0/255.255.255.0
</Directory>

<Directory /opt/mediawiki/tests>
        order deny,allow
          allow from 127.0.0.1 192.168.0.0/255.255.255.0 192.168.1.0/255.255.255.0 192.168.2.0/255.255.255.0 192.168.3.0/255.255.255.0
</Directory>

<Directory /opt/mediawiki/maintenance/archives>
        order deny,allow
          allow from 127.0.0.1 192.168.0.0/255.255.255.0 192.168.1.0/255.255.255.0 192.168.2.0/255.255.255.0 192.168.3.0/255.255.255.0
</Directory>

#------------------------------------------------------------

I should also mention that the SME Server is NOT the firewall, there is a different system that performs all firewall functions and passes port 80 and 25 to the mail server.  I've been wondering if because the request is coming from a different system with a local IP if that's why outside access is allowed as well.  Does this have any affect to the Local restriction?

Thanks for the help!
"It is always darkest just before it goes pitch black."
-Despair, Inc.

Offline Hummdis

  • 16
  • +0/-0
    • Hummdis.com
Re: MediaWiki Local Access Only
« Reply #3 on: February 26, 2008, 05:22:31 AM »
Oh, and I already tried the reboot commands - no joy.  :-(
"It is always darkest just before it goes pitch black."
-Despair, Inc.

Offline raem

  • *
  • 3,972
  • +4/-0
Re: MediaWiki Local Access Only
« Reply #4 on: February 26, 2008, 10:04:46 AM »
Hummdis

Sorry that should have been
config show mediawiki

« Last Edit: February 26, 2008, 12:47:43 PM by RayMitchell »
...

Offline berdie

  • *
  • 237
  • +0/-0
Re: MediaWiki Local Access Only
« Reply #5 on: February 26, 2008, 12:23:39 PM »
Hummdis,
thanks for your posting. I have checked this and you're right, the change of httpd setting to local access did not work. I hope I have fixed this behaviour in a new rpm version.
You can download it after syncing the mirrors at http://mirror.contribs.org/smeserver/contribs/dberteld/mediawiki/smeserver-mediawiki-1.6.10-7.noarch.rpm

Greetings,
Dietmar

Offline Hummdis

  • 16
  • +0/-0
    • Hummdis.com
Re: MediaWiki Local Access Only
« Reply #6 on: February 26, 2008, 10:33:21 PM »
Berdie,
That updated version did it, thank you!   :-D
"It is always darkest just before it goes pitch black."
-Despair, Inc.

Offline eastend99

  • **
  • 48
  • +0/-0
Re: MediaWiki Local Access Only
« Reply #7 on: September 20, 2008, 09:59:29 AM »
Sorry for opening up an old post.

I have the same problem. Local access only setting not working.
Last week I installed mediawiki from the smecontribs repository on a fresh 7.3 server as requested on the wiki contribs page:

Code: [Select]
yum --enablerepo=smecontribs install smeserver-mediawiki
The installed version returned by yum is:
Code: [Select]
Installed Packages
smeserver-mediawiki.noarch               1.6.10-6.el4.sme       installed

The latest version according to this post should be
Quote
Hummdis,
thanks for your posting. I have checked this and you're right, the change of httpd setting to local access did not work. I hope I have fixed this behaviour in a new rpm version.
You can download it after syncing the mirrors at http://mirror.contribs.org/smeserver/contribs/dberteld/mediawiki/smeserver-mediawiki-1.6.10-7.noarch.rpm

Can I install the .7 version rpm manually now and still receive updates through yum and the smecontribs repository when the repository has been updated?

I hope somebody can update the repository to prevent this from happening again.
Do I have to file a bug report for this?
If I can help to get it done, please let me know.

Regards,

Marcel
« Last Edit: September 20, 2008, 10:02:05 AM by eastend99 »

Offline janet

  • ****
  • 4,812
  • +0/-0
Re: MediaWiki Local Access Only
« Reply #8 on: September 20, 2008, 10:22:30 AM »
eastend99

Quote
Can I install the .7 version rpm manually now and still receive updates through yum and the smecontribs repository when the repository has been updated?

Yes


Quote
I hope somebody can update the repository to prevent this from happening again.
Do I have to file a bug report for this?

Yes please do, or the problem (of an old version rpm in smecontribs repo) may continue unresolved

« Last Edit: September 20, 2008, 11:39:55 AM by mary »
Please search before asking, an answer may already exist.
The Search & other links to useful information are at top of Forum.

Offline eastend99

  • **
  • 48
  • +0/-0
Re: MediaWiki Local Access Only
« Reply #9 on: September 20, 2008, 10:46:06 AM »