Homeworks

Goal:

Assignment Date: 10/14/2002
Due Day: Part 1: 10/21/2002; Part2: 10/28/2002
Description:

Exercise 1. Configure LSCS to run as a Linux Secure Content Switch.

In this exercise, we will learn how to configure lscs to run as a content switch for a secure web server cluster.
We will use one of the desginated CS Unix machine to run the content switch and use frodo and eca as real server. You only have to configure CS Unix machine. There is no need to change frodo and eca.
Divide the last digit of your SS# by 4. If the remainder is
- 0: Use blanca.uccs.edu
- 1: Use sanluis.uccs.edu
- 2: Use shavano.uccs.edu
- 3: Use cresetone.uccs.edu
If the designated machine hang, you can use redcloud or wetterhorn as alternative.

Create directory and Edit the configuration file

Login to designated CS Unix machine.
cd public_html
mkdir cs526; cd cs526
mkdir lscs; cd lscs
cp ~cs526/public_html/lscs/lscs.tgz .
tar xzvf lscs.tgz
This will restore the lscs software package in a src directory.
cd src
Edit the include/config.h with the following changes on the define variables:
Replace the #define SERVER_ROOT line with
#define SERVER_ROOT "/users/server/students/<login>/public_html/cs526/lscs/src"
Here <login> is your login
Replace SERVER_IP with the IP address of your designated machine.
Replace SERVER_NAME with the domain name of your designated machine.
Replace RULE_SERVER_NAME with the domain name of your designated machine.
Replace RULE_SERVER_PORT with 5<last3digitsof SS#>
Assume that the last 3 digits of your SS# is 333. Then use the following #define statement:
#define RULE_SERVER_PORT 5333
#define DEFAULT_RULE_SERVER_NAME "<your designated CS Unix Machine>"
#define DEFAULT_RULE_SERVER_PORT 5333
#define SERVER_PORT 4333
Note that the lscs main server and rule server have different port numbers.
#define PREFORK_LOCK "/users/server/students/<login>/public_html/cs526/lscs/src/install.log"
#define CRITICAL_LOCK "/users/server/students/<login>/public_html/cs526/lscs/src/cs.lock"
After editing the include/config.h file, remove the prefork_sslproxy and recompile it with the following commands:
rm prefork_sslproxy
make prefork_sslproxy
Now you are ready to run the lscs.

In the same lscs/src directory, type "rb.sh" or "./rb.sh" to start the main server.
It should indicates it runs on port 4333 as below:
[cs526@blanca src]$ ./rb.shn
sserver is not started
bound to 4333
init_lock succesfull
Go to another window, login to the same lscs/src directory. We will start rule server here.
type "rulemodule -port 5333" Here 5333 is your designated port number.

type "https://<machine>.uccs.edu:4333/cs522/" Here <machine> is the domain name of the machine that runs the lscs content switch. 4333 is the main server port of the content switch. Make sure you have '/' at the end of cs522, use https instead of http.
See if the return web is from frodo.uccs.edu.
type "https://<machine>.uccs.edu:4333/cs301/" and see it is from eca.uccs.edu
cp ~cs526/public_html/lscstestcs.html web page to your public_html/cs526/
Edit the the web page to have the right machine name and port number as the action attribute value of the form tag.
Try to edit the first <subtotal> tag value >=50000 or <50000 and see if the results come from different real servers.
Note that during or after your exercise, you need to remove the processes (parent and children) of prefork_sslproxy and that of rulemodule. You can do so by "kill -9 `pidof prefork_ssl`" and by "kill -9 `pidof rulemodule`". Note that pidof is in /sbin. If you did not have /sbin in your search path, you need substitute the above commands with /sbin/pidof.