————

connect-all.cmd

——————————–

for /f “delims=” %%T in (filename.txt) do (

rem start C:\Data\DEVEL\work\grs-mstsc\sleep.vbs

start mstsc /v: %%T /w:640 /h:480

rem start C:\Data\DEVEL\work\grs-mstsc\sendkeys.vbs pause )

———————————————-

sendkeys.vbs

———————–

Set objShell = CreateObject(“WScript.Shell”)
WScript.Sleep 500
objShell.AppActivate “Remote Desktop Connection”
WScript.Sleep 10000
objShell.SendKeys “{ENTER}”

——————

filename.txt

—————

<<list Ip or Server name in here >>

Index

1.     Topics covered.

2.     Prerequisites

3.     Theory:

3.1       What is Subversion?.

4      Setup repository

4.1        Create base repository

4.2       Set access control to repository

5.     Test repository by using ‘svnserve’ or ‘svnservice’

6.     Configure Apache for Subversion access

6.1       Copy SVN modules and DLLs for Subversion to Apache2.2.

6.2       Create Self-Signed SSL Certificate.

6.3       Create Svnaccess file.

6.4       Configure Apache.

6.5       Configure Apache with SSL.

Step 7      Start services.

Step 8      Check repository on web page.

Appendix: A.. 13

References. 13

1.      Topics covered

• Installation Subversion on Windows ( x86 )
• Installation of Apache on Windows (x86 )
• Creating Repository under SVN
• Configure Apache

2.      Prerequisites

3.      Theory:

Version control is the art of managing changes to information.

3.1     What is Subversion?

Subversion is a free/open-source version control system. Subversion manages files and directories over time. A tree of files is placed into a central repository. The repository is much like an ordinary file server, except that it remembers every change ever made to your files and directories. This allows user to recover older versions of user data, or examine the history of how data changed.

4       Setup repository

4.1      Create base repository

Cd  D:\SVNREPOS

svnadmin create test

Add trunk, branch, tag directory

e.g.

svn mkdir file:///<<repos_location>>//<repo_name>>/Trunk

svn mkdir file:///<<repos_location>>//<repo_name>>/Tag

svn mkdir file:///<<repos_location>>//<repo_name>>/Branch

svn mkdir file://D:\SVNREPOS/Test/branch -m “Creating branch directory”

svn mkdir file://D:\SVNREPOS/Test/Tag -m “Creating Tag directory”

svn mkdir file://D:\SVNREPOS/Test/Branch -m “Creating branch directory”

4.2     Set access control to repository

1. Go to repository dir ( e.g. D:\SVNREPOS\Test\conf )
2. Open the svnserve.conf file in a text editor, and uncomment the [general], anon-access = read, auth-access = write, and password-db = passwd lines. Save.

1. Open the authz file in a text editor, uncomment the [users] line, and add the username and password you want to use when connecting to your subversion server. Save.

5.      Test repository by using ‘svnserve’ or ‘svnservice’

Open command prompt, go to Subversion\bin directory and execute below command svnserve –daemon –root “D:\SVNREPOS\TEST”

Or Alternatively

Install SVNservice onto windows machine and run as per screenshot

It will start SVNService on port 3690

Note: Port 3690 is standard IANA port for SVN Protocol.

6.      Configure Apache for Subversion access

Install Apache2.2 and its modules to respective locations.

6.1     Copy SVN modules and DLLs for Subversion to Apache2.2

• Copy D:\subversion\bin\mod_dav_svn.so
  and D:\subversion\bin\mod_authz_svn.so to C:\Program Files\Apache Software Foundation\Apache2.2\modules\
• Copy D:\subversion\bin\libdb44.dll
  and D:\subversion\bin\intl3_svn.dll to C:\Program Files\Apache Software Foundation\Apache2.2\bin

6.2             Create Self-Signed SSL Certificate

Follow below commands

• • Cd C:\Program Files\Apache Software Foundation\Apache2.2\bin
  • openssl.exe  req -config openssl.cnf -new -out <<server_Name>>.csr -keyout 3319.pem
  • openssl.exe rsa -in 3319.pem -out <<server_Name>>.key
  • openssl.exe x509 -in 3319.csr -out <<server_Name>>.crt -req -signkey <<server_Name>>.key -days 365

Now copy generated 3319.crt and 3319.key to C:\Program Files\Apache Software Foundation\Apache2.2\conf folder.

Note: This step is mandatory as SSPI module doesn’t work on http!

6.3             Create Svnaccess file

cd C:\Program Files\Apache Software Foundation\Apache2.2\conf\

—————————-File Content ————————————

[groups]

group1=<domain>\userid3,<domain>/userid2,<domain>/userid3

[/]

* = r

@group1=rw

6.4     Configure Apache

• Cd C:\Program Files\Apache Software Foundation\Apache2.2\conf
• Edit httpd.conf ( make changes according to server environment marked in Red below ).

ServerRoot “C:/Program Files/Apache Software Foundation/Apache2.2″

Listen 81

LoadModule actions_module modules/mod_actions.so

LoadModule alias_module modules/mod_alias.so

LoadModule asis_module modules/mod_asis.so

LoadModule auth_basic_module modules/mod_auth_basic.so

LoadModule authn_default_module modules/mod_authn_default.so

LoadModule authn_file_module modules/mod_authn_file.so

LoadModule authz_default_module modules/mod_authz_default.so

LoadModule authz_groupfile_module modules/mod_authz_groupfile.so

LoadModule authz_host_module modules/mod_authz_host.so

LoadModule authz_user_module modules/mod_authz_user.so

LoadModule autoindex_module modules/mod_autoindex.so

LoadModule cgi_module modules/mod_cgi.so

LoadModule dav_module modules/mod_dav.so

LoadModule dir_module modules/mod_dir.so

LoadModule env_module modules/mod_env.so

LoadModule include_module modules/mod_include.so

LoadModule isapi_module modules/mod_isapi.so

LoadModule log_config_module modules/mod_log_config.so

LoadModule mime_module modules/mod_mime.so

LoadModule negotiation_module modules/mod_negotiation.so

LoadModule setenvif_module modules/mod_setenvif.so

LoadModule ssl_module modules/mod_ssl.so

<IfModule !mod_auth_sspi.c>

LoadModule sspi_auth_module modules/mod_auth_sspi.so

</IfModule>

LoadModule dav_svn_module modules/mod_dav_svn.so #Add this line

LoadModule authz_svn_module modules/mod_authz_svn.so #Add this line

<IfModule !mpm_netware_module>

<IfModule !mpm_winnt_module>

User daemon

Group daemon

</IfModule>

</IfModule>

ServerAdmin admin@fm.rbsgrp.net

DocumentRoot “C:/Program Files/Apache Software Foundation/Apache2.2/htdocs”

<Directory />

Options FollowSymLinks

AllowOverride None

Order deny,allow

Deny from all

</Directory>

<Directory “C:/Program Files/Apache Software Foundation/Apache2.2/htdocs”>

Options Indexes FollowSymLinks

AllowOverride None

Order allow,deny

Allow from all

</Directory>

<IfModule dir_module>

DirectoryIndex index.html

</IfModule>

<FilesMatch “^\.ht”>

Order allow,deny

Deny from all

Satisfy All

</FilesMatch>

ErrorLog “logs/error.log”

LogLevel warn

<IfModule log_config_module>

LogFormat “%h %l %u %t \”%r\” %>s %b \”%{Referer}i\” \”%{User-Agent}i\”" combined

LogFormat “%h %l %u %t \”%r\” %>s %b” common

<IfModule logio_module>

LogFormat “%h %l %u %t \”%r\” %>s %b \”%{Referer}i\” \”%{User-Agent}i\” %I %O” combinedio

</IfModule>

CustomLog “logs/access.log” common

</IfModule>

<IfModule alias_module>

ScriptAlias /cgi-bin/ “C:/Program Files/Apache Software Foundation/Apache2.2/cgi-bin/”

</IfModule>

<IfModule cgid_module>

</IfModule>

<Directory “C:/Program Files/Apache Software Foundation/Apache2.2/cgi-bin”>

AllowOverride None

Options None

Order allow,deny

Allow from all

</Directory>

DefaultType text/plain

<IfModule mime_module>

TypesConfig conf/mime.types

AddType application/x-compress .Z

AddType application/x-gzip .gz .tgz

</IfModule>

Include conf/extra/httpd-ssl.conf

<IfModule ssl_module>

SSLRandomSeed startup builtin

SSLRandomSeed connect builtin

</IfModule>

6.5     Configure Apache with SSL

• Now Edit file httpd-ssl.conf under C:/Program Files/Apache Software Foundation/Apache2.2/conf/extra (and enable SSL access by changing blue lines below).

Listen 443

AddType application/x-x509-ca-cert .crt

AddType application/x-pkcs7-crl    .crl

SSLPassPhraseDialog  builtin

SSLSessionCache        “shmcb:C:/Program Files/Apache Software Foundation/Apache2.2/logs/ssl_scache(512000)”

SSLSessionCacheTimeout  300

SSLMutex default

<VirtualHost _default_:443>

DocumentRoot “C:/Program Files/Apache Software Foundation/Apache2.2/htdocs”

ServerName lonms03319.fm.rbsgrp.net:443

ServerAdmin admin@fm.rbsgrp.net

ErrorLog “C:/Program Files/Apache Software Foundation/Apache2.2/logs/error.log”

TransferLog “C:/Program Files/Apache Software Foundation/Apache2.2/logs/access.log”

SSLEngine on

SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL

SSLCertificateFile “C:/Program Files/Apache Software Foundation/Apache2.2/conf/3319.crt”

SSLCertificateKeyFile “C:/Program Files/Apache Software Foundation/Apache2.2/conf/3319.key”

<FilesMatch “\.(cgi|shtml|phtml|php)$”>

SSLOptions +StdEnvVars

</FilesMatch>

<Directory “C:/Program Files/Apache Software Foundation/Apache2.2/cgi-bin”>

SSLOptions +StdEnvVars

</Directory>

BrowserMatch “.*MSIE.*” \

nokeepalive ssl-unclean-shutdown \

downgrade-1.0 force-response-1.0

CustomLog “C:/Program Files/Apache Software Foundation/Apache2.2/logs/ssl_request.log” \

“%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \”%r\” %b”

DocumentRoot “C:/Program Files/Apache Software Foundation/Apache2.2/htdocs”

ServerName <<server_name>:443

ServerAdmin admin@fm.rbsgrp.net

ErrorLog “logs/https_error.log”

CustomLog “logs/https_access.log” common

<IfModule mod_auth_sspi.c>

<Location /repos>

DAV svn

#SVNPath d:/SVNREPOS

SVNListParentPath on

SVNParentPath d:/SVNREPOS

AuthzSVNAccessFile conf/svnaccess.conf # newly created file

AuthType SSPI

AuthName “Subversion Repository”

SSPIAuth On

SSPIAuthoritative On

SSPIDomain <<domain_name>> #Add domain here

SSPIUsernameCase lower

SSPIPerRequestAuth on

SSPIOfferBasic On

SSPIOmitDomain Off

SSPIBasicPreferred On

Require valid-user

</Location>

</IfModule>

</VirtualHost>

7      Start services

Restart Apache and Subversion windows services and check for error ( if any ) in logs in case of failure.

8      Check repository on web page

Open browser and access repository e.g. https://<<server>>/<repo_location>/

Accept the security alert as this is a self signed certificate browser should confirm

Repository should ask login credential, supply user credential as per configuration. e.g. <<domain>>\<<username>>

On successful login you should see repository page like this

Appendix: A

References

http://sourceforge.net/projects/mod-auth-sspi

http://www.neilstuff.com/apache/apache2-ssl-windows.htm

http://tud.at/programm/apache-ssl-win32-howto.php3

http://svnbook.red-bean.com

http://www.subversionary.org/sspidomainauth

Appencix B: Attachments ( for Reference )

/livemeshfolders/BlogUplaod/POC/Apache2.zip

/livemeshfolders/BlogUplaod/POC/_setup.zip

If you are behind a firewall, and only have internet access through a restrictive proxy server, you will have to use a Web Based SSH terminal client. Note: the performance is severely below that of Putty. I suggest you exhaust all possibilities of using any available Socks and Http Proxies from within Putty

Ajaxterm ( http://antony.lesuisse.org/qweb/trac/wiki/AjaxTerm ) is in the upcoming Debian Etch. It is an alternative to Anyterm (discussed here) and Mindterm (this is in Debian Sarge

Stable, however runs as a java applet).

apt-get install ajaxterm
//Debian Etch only

To Start / Stop

/etc/init.d/ajaxterm start|stop

To Config

The config file is: /etc/default/ajaxterm . You can change the default port been used. Default=8022.

The ajaxterm Debian docs are located at: /usr/share/docs/ajaxterm

Depending on your setup etc. you may have to do the following:

vi /etc/ssh/ssh_config
//uncomment: PasswordAuthentication yes

Otherwise you may see the following error:
Permission denied (publickey,password).

To Access (from Localhost)

telnet localhost 8022

Browse in an Internet Window to http://localhost:8022

Note: By default, ajaxterm will only bind to localhost, on port 8022, and thus will not be accessable from any other computer apart from localhost. Ajaxterm only runs in http and is not secure.
To help alleviate these problems, we configure Apache to serve out Ajaxterm over https.

Config Ajaxterm and Apache

Put the following in an Apache vhost file:

<VirtualHost *:80>
        ServerName ajaxterm.website.com
        Redirect 301 / https://ajaxterm.website.com
        CustomLog /var/log/apache2/access.log combined
        ErrorLog /var/log/apache2/error.log
</VirtualHost>

<VirtualHost *:443>
        ServerName ajaxterm.website.com
        HostnameLookups Double
        CustomLog /var/log/apache2/access.log combined env=!dontlog
        SetEnvIf Request_URI "^/u" dontlog
        ErrorLog /var/log/apache2/error.log
        Loglevel warn
        SSLEngine On
        SSLCertificateFile /etc/apache2/ssl/apache.pem

        ProxyRequests Off
        <Proxy *>
                AuthUserFile /srv/ajaxterm/.htpasswd
                AuthName EnterPassword
                AuthType Basic
                require valid-user

                Order Deny,allow
                Allow from all
        </Proxy>
        ProxyPass / http://localhost:8022/
        ProxyPassReverse / http://localhost:8022/
</VirtualHost>

Enable the proxy and proxy_html modules in apache.

ln -s /etc/apache2/mods-available/proxy.conf /etc/apache2/mods-enabled/proxy.conf
ln -s /etc/apache2/mods-available/proxy.load /etc/apache2/mods-enabled/proxy.load
ln -s /etc/apache2/mods-available/proxy_http.load /etc/apache2/mods-enabled/proxy_http.load

That should do it. Check auth.log and apache logs etc.

Why Ajaxterm

The reasons I have chosen Ajaxterm over Anyterm is because Anyterm is not yet in Debian Packages. Anyterm is difficult to complile correctly. When I did manage to compile anyterm, I recieved apache threading errors ( see Anyterm ).

Although Mindterm is in Debian Sarge, it will not be in etch, as the free version of Mindterm does not support SSH v_2. Also Mindterm requires a user/client to have a JRE, and may possibly require port 22 access open (which is the main problem).

Ajaxterm, while slow, works quickly and effectively out of the box with little work. Again, I have Ajaxterm on a secondary box which is not mission critical.

Larger Terminal Window

To get ajaxterm using a larger terminal window within the browser, the following files need to be edited:

vi /usr/share/ajaxterm/ajaxterm.html
window.onload=function() {
               t=ajaxterm.Terminal("term",100,40);
       };
       </script>

vi /usr/share/ajaxterm/ajaxterm.py
def __init__(self,width=100,height=40):

You may have to restart ajaxterm for the above to work.