因为需要远程管理，所以连接的安全将首先考虑：

1：安装 OpenSSL软件
我本身就装了，版本号：0.9.7a
你可以按如下命令安装
wget http://www.openssl.org/source/openssl-0.9.7a.tar.gz
tar zxvf openssl-0.9.7a.tar.gz
cd openssl-0.9.7a
./configure
make
make install

2：安装NetSSLeay perl模块
我按装的版本号：1.30
你可以按如下命令安装
wget http://search.cpan.org/CPAN/authors/id/F/FL/FLORA/Net_SSLeay.pm-1.30.tar.gz
tar zxvf Net_SSLeay.pm-1.30.tar.gz
cd Net_SSLeay.pm-1.30
perl Makefile.PL
make install

3：安装webmin软件
我按装的版本号：1.30（以下连接2006/9/20更新，官方9/16升级为1.30）
你可以按如下命令安装
wget http://puzzle.dl.sourceforge.net/sourceforge/webadmin/webmin-1.300-1.noarch.rpm
rpm -Uvh webmin-1.300-1.noarch.rpm

编辑防火墙配置文件
vi /etc/sysconfig/iptables

-A RH-Firewall-1-INPUT -m state –state NEW -m tcp -p tcp –dport 443 -j ACCEPT
-A RH-Firewall-1-INPUT -m state –state NEW -m tcp -p tcp –dport 10000 -j ACCEPT —插入

保存后重起防火墙
/etc/rc.d/init.d/iptables restart

设置与系统一起自动启动
chkconfig webmin on

重新启动WEBMIN服务
/etc/rc.d/init.d/webmin restart

在浏览器输入：http://你的域名或者IP:10000/

为了安全一般修改默认的端口”10000″->”xxxx”,需要关闭webmin可以禁止掉该端口.

出现登陆画面后，输入你的root帐号密码就进入了。

附图：

本人环境：centos 5.x

错误现象：

svn: Valid UTF-8 data
(hex: 62 74 6e 5f 30 32)
followed by invalid UTF-8 sequence
(hex: b1 b8 b7 dd)

vim ~/.bash_profile [编辑配置文件]

在按下 shift + g 把 ~/.bash_profile

添加：

export SVN_EDITOR=vim
export LANG=zh_CN.UTF8
export LC_MESSAGES="en_US.UTF-8"

这里我的前提是安装了lamp环境.

linux 环境 : Description:    CentOS release 5.5 (Final)

apache 环境 : apache 2.x

mysql 环境 : mysql 5.x

php 环境 : 5.2x

下面是简单的zend Optimizer 安装过程.

1. wget -q -O – http://www.atomicorp.com/installers/atomic.sh | sh
   这个过程已经下载配置好了yum，接下来就是一句话.
   当然也可以直接冲官方下载再编译安装 (wget http://downloads.zend.com/optimizer/3.3.3/ZendOptimizer-3.3.3-linux-glibc23-i386.tar.gz)
2. yum install php-zend-optimizer
   等待安装完成.
3. 通过查看 phpinfo Loaded Configuration File 得到php.ini所在位置.
   根据自己php的版本选择zend Optimizer 文件.例如 php 5.2x 选择zend Optimizer5.2x
   在配置文件php.ini 最后部分添加.(vim /etc/php.ini)
   [Zend]
   zend_optimizer.optimization_level=15
4. zend_extension=”/usr/lib/php/zend/ZendOptimizer-5.2.so”

安装基本完成了.

service httpd restart

重启之后服务器网页刷新一下就自动关闭了。

后来一想，自己在之前已经安装了php-apc 同为加速器。估计有冲突。后台将php-apc 屏蔽掉，再重启下可以了。

下面是其他可能出现的问题解决方案

很多人说是slinux 出现了问题把。估计也不是空穴来潮。虽然我没有遇到。

方法如下:

vim /etc/selinux/config

#SELINUX=enforcin => SELINUX=disabled

重启下 selinux (service selinux restart).

• yum update

• yum install vsftpd

• service vsftpd status 查看状态

• 备份配置文件 cp /etc/vsftpd/vsftpd.conf /etc/vsftpd/vsftpd.conf.bak

• 配置vsftpd  vim /etc/vsftpd/vsftpd.conf
  本人配置:

# Example config file /etc/vsftpd/vsftpd.conf
#
# The default compiled in settings are fairly paranoid. This sample file
# loosens things up a bit, to make the ftp daemon more usable.
# Please see vsftpd.conf.5 for all compiled in defaults.
#
# READ THIS: This example file is NOT an exhaustive list of vsftpd options.
# Please read the vsftpd.conf.5 manual page to get a full idea of vsftpd's
# capabilities.
#
# Allow anonymous FTP? (Beware - allowed by default if you comment this out).
anonymous_enable=YES
#
# Uncomment this to allow local users to log in.
local_enable=YES
#
# Uncomment this to enable any form of FTP write command.
write_enable=YES
#
# Default umask for local users is 077. You may wish to change this to 022,
# if your users expect that (022 is used by most other ftpd's)
local_umask=022
#
# Uncomment this to allow the anonymous FTP user to upload files. This only
# has an effect if the above global write enable is activated. Also, you will
# obviously need to create a directory writable by the FTP user.
anon_upload_enable=YES
#
# Uncomment this if you want the anonymous FTP user to be able to create
# new directories.
anon_mkdir_write_enable=YES
#
# Activate directory messages - messages given to remote users when they
# go into a certain directory.
dirmessage_enable=YES
#
# The target log file can be vsftpd_log_file or xferlog_file.
# This depends on setting xferlog_std_format parameter
xferlog_enable=YES
#
# Make sure PORT transfer connections originate from port 20 (ftp-data).
connect_from_port_20=YES
#
# If you want, you can arrange for uploaded anonymous files to be owned by
# a different user. Note! Using "root" for uploaded files is not
# recommended!
#chown_uploads=YES
#chown_username=whoever
#
# The name of log file when xferlog_enable=YES and xferlog_std_format=YES
# WARNING - changing this filename affects /etc/logrotate.d/vsftpd.log
#xferlog_file=/var/log/xferlog
#
# Switches between logging into vsftpd_log_file and xferlog_file files.
# NO writes to vsftpd_log_file, YES to xferlog_file
xferlog_std_format=YES
#
# You may change the default value for timing out an idle session.
#idle_session_timeout=600
#
# You may change the default value for timing out a data connection.
#data_connection_timeout=120
#
# It is recommended that you define on your system a unique user which the
# ftp server can use as a totally isolated and unprivileged user.
#nopriv_user=ftpsecure
#
# Enable this and the server will recognise asynchronous ABOR requests. Not
# recommended for security (the code is non-trivial). Not enabling it,
# however, may confuse older FTP clients.
#async_abor_enable=YES
#
# By default the server will pretend to allow ASCII mode but in fact ignore
# the request. Turn on the below options to have the server actually do ASCII
# mangling on files when in ASCII mode.
# Beware that on some FTP servers, ASCII support allows a denial of service
# attack (DoS) via the command "SIZE /big/file" in ASCII mode. vsftpd
# predicted this attack and has always been safe, reporting the size of the
# raw file.
# ASCII mangling is a horrible feature of the protocol.
#ascii_upload_enable=YES
#ascii_download_enable=YES
#
# You may fully customise the login banner string:
#ftpd_banner=Welcome to blah FTP service.
#
# You may specify a file of disallowed anonymous e-mail addresses. Apparently
# useful for combatting certain DoS attacks.
#deny_email_enable=YES
# (default follows)
#banned_email_file=/etc/vsftpd/banned_emails
#
# You may specify an explicit list of local users to chroot() to their home
# directory. If chroot_local_user is YES, then this list becomes a list of
# users to NOT chroot().
# 屏蔽访问所有目录
chroot_list_enable=YES 
# (default follows)
chroot_list_file=/etc/vsftpd/chroot_list
#
# You may activate the "-R" option to the builtin ls. This is disabled by
# default to avoid remote users being able to cause excessive I/O on large
# sites. However, some broken FTP clients such as "ncftp" and "mirror" assume
# the presence of the "-R" option, so there is a strong case for enabling it.
#ls_recurse_enable=YES
#
# When "listen" directive is enabled, vsftpd runs in standalone mode and
# listens on IPv4 sockets. This directive cannot be used in conjunction
# with the listen_ipv6 directive.
listen=YES
#
# This directive enables listening on IPv6 sockets. To listen on IPv4 and IPv6
# sockets, you must run two copies of vsftpd whith two configuration files.
# Make sure, that one of the listen options is commented !!
#listen_ipv6=YES
 
pam_service_name=vsftpd
userlist_enable=YES
 
tcp_wrappers=YES

• 编辑该文件填入添加了ftp帐号
  vi /etc/vsftpd/chroot_list
• //添加组
  groupadd martin

• //添加用户
  useradd -G martin –d /www/test_user –M test_user

• //密码
  passwd martin “youpassword”

• chown martin.test_user /tmp/test_user

• chmod 750 /tmp/test_user (553错误)

• setsebool -P ftpd_disable_trans 1 (550错误)

• service vsftpd restart

1. 错误信息:50 create directory operation failed 解决方法 : setsebool -P ftpd_disable_trans 1 (550错误)
2. 错误信息：553 Could not create file。解决方法 : 修改文件所属组及权限。

附:vsftpd 配置文件介绍

Anonymous_enable=yes (允许匿名登陆)
 
Dirmessage_enable=yes （切换目录时，显示目录下.message的内容）
 
Local_umask=022 (FTP上本地的文件权限，默认是077)
 
Connect_form_port_20=yes （启用FTP数据端口的数据连接）
 
Xferlog_enable=yes （激活上传和下传的日志）
 
Xferlog_std_format=yes (使用标准的日志格式)
 
Ftpd_banner=XXXXX （欢迎信息）
 
Pam_service_name=vsftpd （验证方式）
 
Listen=yes （独立的VSFTPD服务器）

1. 下载软件包 ，编译安装 (./configure,make,make install)这样安装配置性更高。相信高手都是这样安装的。
2. yum安装。这样安装起来比较简单。(yum install 软件包名称) 主要适用于(centos,red hat)等.
   卸载：yum remove  软件包名称.
3. apt-get 安装 这个和yum安装差不多。(sudo apt-get install 软件包名称 ) 主要适用于(ubuntu ,debian).
   卸载 : sudo apt-get autoremove 卸载所有相关包。
4. 采用 package 方式安装 : 用 package 安装，只要抓取该程序 package 档案。
   安装 (pkg_add package_name) 移除 (pkg_delete package_name) 就可以完成安装 / 移除。
   注意 ：文件名称 .tgz 结尾的是 package 文件名称 .tar.gz 结尾的是 source 。
   注 : 目前已经安装的 package 数据库放在 /var/db/pkg/ 这个数据夹之中。
5. 另外还有 port tree 方式安装 （freebsd）.

下面是red hat 安装yum的方法

1. 下载包 :wget http://yum.baseurl.org/download/2.0/yum-2.0.8-1.src.rpm .
   当然也可以选择别的版本:http://yum.baseurl.org/download/2.0/
2. 进入目录进行安装 :
   rpmbuild –rebuild yum-2.0.8-1.src.rpm
   cd  /usr/src/redhat/RPMS/noarch/
   rpm -ivh yum-2.0.8-1.noarch.rpm
3. 如果报错 使用：rpm -ivh –nodeps –replacefiles –force ＊.rpm
4. 配置yum更新地址
   View Code SHELL

   [base]   #name=Red Hat Linux $releasever - $basearch - Base   #baseurl=http://mirror.dulug.duke.edu/pub/yum-repository/redhat/$releasever/$basearch/   name=Red Hat Linux $releasever - $basearch - Base   baseurl= http://centos.ustc.edu.cn/centos/4/os/i386/   #[updates]   #name=Red Hat Linux $releasever - Updates   #baseurl=http://mirror.dulug.duke.edu/pub/yum-repository/redhat/updates/$releasever/   name=Red Hat Linux $releasever - Updates   baseurl= http://mirror.centos.org/centos/4/updates/i386/   [base] #name=Red Hat Linux $releasever - $basearch - Base   #baseurl=http://mirror.dulug.duke.edu/pub/yum-repository/redhat/$releasever/$basearch/   name=Red Hat Linux $releasever - $basearch - Base   baseurl= http://centos.ustc.edu.cn/centos/4/os/i386/

5. 更新yum： yum update 等待更新完成就可以使用yum了。
6. 下面是yum 基本命令介绍
   View Code YUM

   install is used to install the latest version of a package or group of packages while ensuring that all dependencies are satisfied. If no package matches the given package name(s), they are assumed to be a shell glob and any matches are then installed.   update If run without any packages, update will update every currently installed package. If one or more packages are specified, Yum will only update the listed packages. While updating packages, yum will ensure that all dependencies are satisfied. If no package matches the given package name(s), they are assumed to be a shell glob and any matches are then installed.   check-update Implemented so you could know if your machine had any updates that needed to be applied without running it interactively. Returns exit value of 100 if there are packages available for an update. Also returns a list of the pkgs to be updated in list format. Returns 0 and no packages are available for update.   upgrade Can take packages as arguments, upgrade is just like update except that it includes package obsoletes in its calculations - this makes it better for distro-version changes, for example: upgrading from somelinux 8.0 to somelinux 9. *deprecated* - this command may be removed in the future.   remove is used to remove the specified packages from the system as well as removing any packages which depend on the package being removed.   list can be used to list various information about available packages; more complete details are available in the List Options section below.   provides can be used to find out which package provides some feature or file. Just use a specific name or a file-glob-syntax wild- cards to list the packages available or installed that provide that feature or file.   search can be used to find any packages matching a string in the description, summary, packager and package name fields of an rpm. Useful for finding a package you do not know by name but know by some word related to it. Takes the same file glob wild- cards as provides.   info can be used to list a description and summary information about available packages; takes the same arguments as in the List Options section below.   clean is used to clean up various things which accumulate in the yup cache directory over time. More complete details can be found in the Clean Options section below.

第一步，AMP环境采用Zend server 社区班Zend CE。
1.首先你要在建立Zend CE的下载库路径
vi /etc/yum.repos.d/zend.repo
添加的内容如下：

[Zend]
name=Zend CE $releasever - $basearch - Released Updates
baseurl=http://repos.zend.com/rpm/ce/$basearch/
enabled=1
gpgcheck=0
[Zendce-noarch]
name=Zend CE - noarch
baseurl=http://repos.zend.com/rpm/ce/noarch
enabled=1
gpgcheck=0

2.开始安装如果服务器没有安装svn则需
yum install svn
如果服务器svn版本比较老。可以先删除在从yum安装。
# rpm -qa | grep -i subversion
subversion-1.4.2-2.el5
subversion-1.4.2-2.el5
rpm -evf –allmatches subversion-1.4.2-2.el5
3.yum install zend-ce
yum clean all//清楚缓存
4.让linux自动加载zend库文件
vim /etc/profile
在最后面添加内容：
PATH=$PATH:/usr/local/zend/bin
LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/usr/local/zend/lib
保存退出
source /etc/profile   //生效
zendtpl.sh status //查看Zend server运行状态
zendtpl.sh start  //apache start
zendtpl.sh stop
zendtpl.sh restart  等同于 /etc/init.d/httpd restart 和 service httpd restart
5.查看80端口是否打开！
这个时候你可以通过netstat -an | grep 端口号来检验下是不是已经打开了某某服务
6 查看zend  server的网页的方法 http://IP(或域名):10081/ZendServer/Login#1263971368039
密码 test
邮箱 test@test.com
7 Zend CE没有安装msyql数据库。需要手动安装msyql。
yum install mysql-server
yum install mysql
mysqladmin -u root password ‘****’ //设置root密码
service mysqld start/stop/restart 开启/停止/重启mysql
8 开启apache mod_rewriete;
vim /etc/httpd/conf/httpd.conf 修改 AllowOverride All (默认为None);
9 主要配置文件
php /usr/local/zend/etc/php.ini
apache /etc/httpd/conf/httpd.conf
mysql /etc/my.conf

第二步， centos下安装red5的安装
1 安装java.red5是用户java语言写的一款开源流媒体服务器。
yum -y install java-1.6.0-openjdk java-1.6.0-openjdk-devel
如果java版本低于1.5.下载新版jdk后安装。
wget http://cds.sun.com/is-bin/INTERSHOP.enfinity/WFS/CDS-CDS_Developer-Site/en_US/-/USD/VerifyItem-Start/jdk-6u16-linux-i586-rpm.bin?BundledLineItemUUID=om5IBe.ovo4AAAEkbKsxcJo0&OrderID=BlRIBe.oOxwAAAEkXqsxcJo0&ProductID=Dx1IBe.prBgAAAEirRcTvuC_&FileName=/jdk-6u16-linux-i586-rpm.bink
解压 ./jdk-6u16-linux-i586-rpm.bink
安装 rpm -ivh jdk-6u16-linux-i586-rpm
注意:如果服务器上有两种不同的java版本。需做如下操作：
alternatives –install /usr/bin/java java /usr/java/jdk1.6.0_16/bin/java 2
再选择版本。
update-alternatives –config java
2 安装apache-ant
wget http://labs.xiaonei.com/apache-mirror/ant/binaries/apache-ant-1.7.1-bin.tar.gz
tar -xzvf
export ANT_HOME=/usr/local/apache-ant/
sudo ln -s /usr/local/apache-ant/bin/ant /usr/bin/ant
3 安装red5.
从svn仓库中牵出red5的代码。
svn co http://red5.googlecode.com/svn/java/server/trunk red5
如果服务器没有安装svn则需
yum install svn
如果服务器svn版本比较老。可以先删除在从yum安装。
rpm -qa | grep -i subversion
subversion-1.4.2-2.el5
subversion-1.4.2-2.el5
rpm -evf –allmatches subversion-1.4.2-2.el5
cd /usr/local/red5
/usr/local/apache-ant/bin/ant prepare
/usr/local/apache-ant/bin/ant dist
cd disk
./red.sh //启动red5服务器。常使用不挂断的启动：nohup ./red5.sh &

第三步 ffmpeg以及ffmpeg-php的安装。
1 编译安装ffmpeg非常麻烦，yum可以方便的安装ffmpeg以及ffmpeg-dev，
vim /etc/yum.repos.d/dag.repo
输入：
[dag]
name=Dag RPM Repository for Red Hat Enterprise Linux
baseurl=http://apt.sw.be/redhat/el$releasever/en/$basearch/dag
gpgcheck=1
enabled=1

Mark:以上源现在更新了,正确的如下:

[dag]
name=Dag RPM Repository for Red Hat Enterprise Linux
baseurl=http://apt.sw.be/redhat/el5/en/$basearch/dag
gpgcheck=1
enabled=1

“el5″ 值得注意。看清楚自己的版本。cat /etc/redhat-release，否则无法安装.

导入Dag的RPM_GPG_KEY,否则提示没有key无法安装
wget http://dag.wieers.com/packages/RPM-GPG-KEY.dag.txt
rpm -import RPM-GPG-KEY.dag.txt
安装ffmpeg&ffmpeg-php
yum install ffmpeg ffmpeg-devel
2 ffmpeg-php的安装
wget http://sourceforge.net/projects/ffmpeg-php/files/ffmpeg-php/0.6.0/ffmpeg-php-0.6.0.tbz2/download
cd 进入php源码目录
tar -xjf ffmpeg-php-0.6.0.tbz2
phpize
./configure –with-php-config=/usr/local/php/bin/php-config
make
make test
make install
Installing shared extensions:     /usr/local/php/lib/php/extensions/no-debug-non-zts-20060613/
php.ini配置文件里面增加 extensions=/usr/local/php/lib/php/extensions/no-debug-non-zts-20060613/ffmpeg-php.so
重启apache /etc/init.d/httpd retart 。 使用 php -r “phpinfo();” 查看ffmpeg-php模块是否安装成功;
安装完毕。欢迎指正。

1. 安装软件
View Code SHELL

yum install gcc   yum install gcc-c++   yum install python   yum install python-devel   yum install gtk+   yum install libtool   yum install automake yum install autoconf   yum install mysql-devel

下载mmseg

wget http://www.coreseek.cn/uploads/sources/mmseg3_0b3.tar.gz

下载coreseek
wget http://www.coreseek.cn/uploads/sources/csft3.1b3.tar.gz

解压缩两个文件包
tar -xzvf mmseg3_0b3.tar.gz
tar -xzvf csft3.1b3.tar.gz

编译mmseg
cd /mmseg.3_0b3
./configure –prefix=/usr/local/mmseg
make
make install

注意:如果在这一步出错,且出错提示为：css/UnigramCorpusReader.cpp:89: error: ’strncmp’ was not declared in this scope
则需手工编辑.src/css目录下UnigramCorpusReader.cpp 文件,在其第一行加上

#include <string.h>
然后执行make clean 再重新 make,make install即可通过

在这一步安装完了后,将会在 /usr/local 下产生 mmseg目录,
手工修改 /usr/local/mmseg/include/mmseg/freelist.h
vi   /usr/local/mmseg/include/mmseg/freelist.h
在上面添加
#include <string.h>

编译coreseek
cd  /opt/software/csft3.1b3/
到这里都一切正常；下面就开始可能有问题出现
第一configure

./configure –prefix=/usr/local/coreseek –with-python –with-mysql –with-mmseg-includes=/usr/local/mmseg/include/mmseg –with-mmseg-libs=/usr/local/mmseg/lib/

make

make install

可能的错误一：

pydatasource.cpp:742: 错误：从类型 ‘const char*’ 到类型 ‘char*’ 的转换无效
pydatasource.cpp:742: 错误：  初始化实参 2，属于 ‘PyObject* PyObject_GetAttrString(PyObject*, char*)’
make[2]: *** [pydatasource.o] 错误 1
make[2]: Leaving directory `/opt/csft3.1b3/src’
make[1]: *** [all] 错误 2
make[1]: Leaving directory `/opt/csft3.1b3/src’
make: *** [all-recursive] 错误 1

解决办法：yum install python-devel  或者 去了–with-python

可能错误二：

sphinxutils.cpp:793: error: cannot convert ‘int*’ to ‘Py_ssize_t*’ for argument ‘2’ to ‘int PyDict_Next(PyObject*, Py_ssize_t*, PyObject**, PyObject**)’
sphinxutils.cpp:802: warning: unused variable ‘nRet’
make[2]: *** [sphinxutils.o] 错误 1
make[2]:正在离开目录 `/home/syu/sphinx/csft3_0b4/src’
make[1]: *** [all] 错误 2
make[1]:正在离开目录 `/home/syu/sphinx/csft3_0b4/src’
make: *** [all-recursive] 错误 1

解决办法：手工打开 src目录下的 sphinxutils.cpp 修改第789行左右int pos = 0; 修改为   Py_ssize_t pos = 0;

执行make clean 重新make & make install 即可

此步安装完成后,将在/usr/local/下生成 coreseek 目录.

创建目录

mkdir /usr/local/coreseek/log
mkdir /usr/local/coreseek/pid

mkdir /usr/local/coreseek/data/dict

编辑sphinx.conf

cp /usr/local/coreseek/etc/sphinx.conf.dist  /usr/local/coreseek/etc/sphinx.conf
vi /usr/local/coreseek/etc/sphinx.conf
/usr/local/coreseek/bin/searchd --config /usr/local/coreseek/etc/sphinx.conf --all
/usr/local/coreseek/bin/searchd --config /usr/local/coreseek/etc/sphinx.conf