CentOS7下部署self-service-password

1
tar -xvf openssl-1.1.1v.tar.gz -C /usr/local/src/
2
cd /usr/local/src/openssl-1.1.1v
3
./config --prefix=/opt/openssl
4
make && make install

1
tar -xvf openldap-2.5.16.tar.gz -C /usr/local/src/
2
cd /usr/local/src/openldap-2.5.16
3
export PKG_CONFIG_PATH=/opt/openssl/lib/pkgconfig
4
env CPPFLAGS="-I/opt/openssl/include" LDFLAGS="-L/opt/openssl/lib -D_GNU_SOURCE" ./configure --prefix=/opt/openldap
5
make && make install

1
tar -xvf nginx-1.24.0.tar.gz -C /usr/local/src/
2
cd /usr/local/src/nginx-1.24.0
3
./configure \
4
--prefix=/usr/local/nginx \
5
--with-http_realip_module \
6
--with-http_sub_module \
7
--with-http_gzip_static_module \
8
--with-http_stub_status_module \
9
--with-http_ssl_module  \
10
--with-http_v2_module \
11
--with-openssl=/usr/local/src/openssl-1.1.1v \
12
--with-pcre=/usr/local/src/pcre-8.45 \
13
--with-zlib=/usr/local/src/zlib-1.2.12
14

15
make && make install

1
tar -xvf php-8.0.30.tar.gz -C /usr/local/src/
2
cd /usr/local/src/php-8.0.30
3
./configure \
4
--prefix=/usr/local/php8 \
5
--exec-prefix=/usr/local/php8 \
6
--bindir=/usr/local/php8/bin \
7
--sbindir=/usr/local/php8/sbin \
8
--includedir=/usr/local/php8/include \
9
--libdir=/usr/local/php8/lib/php \
10
--mandir=/usr/local/php8/php/man \
11
--with-config-file-path=/usr/local/php8/etc \
12
--enable-fpm \
13
--enable-fastcgi \
14
--with-curl \
15
--enable-filter \
16
--enable-gd \
17
--with-ldap=/opt/openldap \
18
--enable-mbstring \
19
--with-openssl=/opt/openssl
20

21
make && make install

1
tar -xvf libpng-1.6.40.tar.gz -C /usr/local/src/
2
tar -xvf jpegsrc.v9e.tar.gz -C /usr/local/src/
3
tar -xvf freetype-2.13.1.tar.gz -C /usr/local/src/
4

5
cd /usr/local/src/libpng-1.6.40
6
./configure --prefix=/opt/libpng
7
make && make install
8

9

10
cd /usr/local/src/jpegsrc.v9e
11
./configure --prefix=/opt/jpeg
12
make && make install
13

14
cd /usr/local/src/freetype-2.13.1
15
./configure --prefix=/opt/freetype
16
make && make install

1
yum install autoconf
2
cd /usr/local/src/php-8.0.30/ext/gd
3
/usr/local/php/bin/phpize
4
./configure \
5
--with-php-config=/usr/local/php8/bin/php-config \
6
--with-libdir=/opt/libpng/lib \
7
--with-freetype=/opt/freetype/lib \
8
--with-jpeg=/opt/jpeg/lib
9

10
make && make install

1
######避免PHP信息暴露在http头中
2
expose_php = Off
3

4
######避免暴露php调用mysql的错误信息
5
display_errors = Off
6

7
######在关闭display_errors后开启PHP错误日志（路径在php-fpm.conf中配置）
8
log_errors = On
9

10
######设置PHP的扩展库路径
11
extension_dir = "/usr/local/php8/lib/php/extensions/no-debug-non-zts-20200930/"
12

13
######设置PHP的opcache和mysql动态库
14
zend_extension=opcache.so
15
extension=gd.so
16

17
######设置PHP的时区
18
date.timezone = PRC
19

20
######开启opcache
21
[opcache]
22
; Determines if Zend OPCache is enabled
23
opcache.enable=1
24

25
######设置PHP脚本允许访问的目录（需要根据实际情况配置）
26
;open_basedir = /usr/local/nginx/www;

1
error_log = /var/log/php-fpm/error.log
2
######引入www.conf文件中的配置
3
include=/usr/local/php8/etc/php-fpm.d/*.conf

1
######设置用户和用户组
2
user = nginx
3
group = nginx
4

5
######根据nginx.conf中的配置fastcgi_pass unix:/var/run/php-fpm/php-fpm.sock;设置PHP监听
6
; listen = 127.0.0.1:9000   #####不建议使用
7
listen = /var/run/php-fpm/php-fpm.sock
8

9
######开启慢日志
10
slowlog = /var/log/php-fpm/$pool-slow.log
11
request_slowlog_timeout = 10s
12

13
######设置php的session目录（所属用户和用户组都是nginx）
14
php_value[session.save_handler] = files
15
php_value[session.save_path] = /var/lib/php/session

1
user nginx nginx;
2

3
worker_processes  auto;
4

5
...省略...
6

7
events {
8
  use epoll;
9
  worker_connections 65535;
10
}
11

12
http {
13
  include       mime.types;
14
  default_type  application/octet-stream;
15
  server_tokens off;
16

17
  ...省略...
18

19
  server {
20
    listen       80;
21
    server_name  localhost;
22

23
    root    www/self/htdocs;
24
    index   index.php index.html index.htm;
25

26
    location ~* \.php$ {
27
      fastcgi_pass  unix:/var/run/php-fpm/php-fpm.sock;
28
      fastcgi_split_path_info       ^(.+\.php)(/.+)$;
29
      fastcgi_param PATH_INFO       $fastcgi_path_info;
30
      fastcgi_param PATH_TRANSLATED /usr/local/nginx/www/self/htdocs$fastcgi_path_info;
31
      fastcgi_param SCRIPT_FILENAME /usr/local/nginx/www/self/htdocs$fastcgi_script_name;
32
      fastcgi_index index.php;
33
        try_files $fastcgi_script_name =404;
34
      fastcgi_read_timeout 600;
35
      include fastcgi_params;
36
    }
37

38
    ...省略...
39

40
  }
41

42
}

1
tar -xvf smarty-4.3.2.tar.gz
2
cd smarty-4.3.2
3
mv libs /usr/local/nginx/www/self/smarty

1
### 修改410行左右
2
if (!defined("SMARTY")) {
3
     define("SMARTY", "/usr/share/self/smarty/Smarty.class.php");
4
}
5

6
修改成
7

8
if (!defined("SMARTY")) {
9
     define("SMARTY", "/usr/local/nginx/www/self/smarty/Smarty.class.php");
10
}
11

12
取消397-398行左右注释
13
$smarty_compile_dir = "/usr/local/nginx/www/self/templates_c";
14
$smarty_cache_dir = "/usr/local/nginx/www/self/cache";
15

16
将路径换成自己设置的路径

1
$keyphrase                    这个参数后面随便输入一串随机字符，不然页面无法正常显示
2
$use_questions = false;       关闭问题找回
3
$use_sms = false;        关闭短信找回
4
use_tokens = false;           关闭邮箱找回
5

6
# 以上这些功能我用不到，所以全部关闭了，要是需要则开启进行相应配置
7

8
$use_captcha = true;          开启图片验证码
9
$pwd_min_length = 8;          密码最小长度
10
$pwd_max_length = 32;         密码最大长度
11
$pwd_complexity = 3;          密码包含几种字符类型
12
$pwd_show_policy = "always";  页面显示密码策略
13

14
最后就是LDAP相关配置，按照参数对应填写就可以了。