Index: openacs-4/packages/acs-core-docs/www/xml/install-guide/openacs.xml =================================================================== RCS file: /usr/local/cvsroot/openacs-4/packages/acs-core-docs/www/xml/install-guide/openacs.xml,v diff -u -r1.25 -r1.26 --- openacs-4/packages/acs-core-docs/www/xml/install-guide/openacs.xml 15 Nov 2004 17:41:01 -0000 1.25 +++ openacs-4/packages/acs-core-docs/www/xml/install-guide/openacs.xml 1 Dec 2004 19:23:38 -0000 1.26 @@ -21,6 +21,7 @@ Because if an intruder somehow breaks in through AOLserver, you don't want her to have any ability to do damage to the rest of your server. + At the same time, AOLserver needs to have write access to some files on your system in order for OpenACS to function properly. So, we'll run AOLserver with a different user account @@ -30,6 +31,7 @@ example "$OPENACS_SERVICE_NAME" might be the service name for the $OPENACS_SERVICE_NAME.net community. + We'll leave the password blank, which prevents login by password, for increased security. The only way to log in will be with ssh certificates. The only people who should log in are @@ -38,14 +40,16 @@ can use database and server commands associated with that group. (If you don't know how to do this, type man usermod. You can type - groups to find out which groups a user + groups to find out which groups a user is a part of) + [root root]# useradd $OPENACS_SERVICE_NAME - You also need to set up a group called web. + You also need to set up a group called web. + [root root]# groupadd web