操作系统：Dbian6.0
安装环境：Tomcat6 Apache2 PHP Mysql phpMyAdmin
文章作者：豬頭濱 www.unixidc.com

#apt-get update

#apt-get install vim

#apt-get install mysql-server mysql-client

#apt-get install phpmyadmin

#apt-get install sun-java6-jdk

#apt-get install tomcat6 tomcat6-docs tomcat6-examples

#apt-get install libapache2-mod-jk

#vi /etc/tomcat6/server.xml
找到<!– <Connector port=”8009″ protocol=”AJP/1.3″ redirectPort=”8443″ /> –>这行
将<!– –>这个去掉 开启8009端口 否则会报500错误

#cat /etc/libapache2-mod-jk/workers.properties
找到workers.java_home=/usr/lib/jvm/default-java
#cd /usr/lib/jvm/default-java
如果没有此文件夹 需要做软连接
#ln -s /usr/lib/jvm/java-6-sun /usr/lib/jvm/default-java

#cd /etc/apache2/mods-available

#vi jk.conf

JkWorkersFile /etc/libapache2-mod-jk/workers.properties
# Where to put jk logs
JkLogFile /var/log/apache2/mod_jk.log
# Set the jk log level [debug/error/info]
JkLogLevel info
# Select the log format
JkLogStampFormat “[%a %b %d %H:%M:%S %Y]”
# JkOptions indicate to send SSL KEY SIZE,
JkOptions  +ForwardKeySize +ForwardURICompat -ForwardDirectories
# JkRequestLogFormat set the request format
JkRequestLogFormat “%w %V %T”

#a2enmod jk

#cd /etc/apache2/sites-available/

#vi tomcat

<VirtualHost *:80>
ServerAdmin root@unixidc.com
ServerName unixidc.com
ServerAlias www.unixidc.com
DocumentRoot /var/lib/tomcat6/webapps/ROOT
ErrorLog /var/log/apache2/tomcat-error.log
LogLevel warn
CustomLog /var/log/apache2/tomcat.log combined
JKMount /* ajp13_worker
</VirtualHost>

#a2ensite tomcat

#/etc/init.d/tomcat6 restart
#/etc/init.d/apache2 restart

#cd /var/www

#vi phpinfo.php
<?phpinfo()?>

用默认IP访问phpinfo.php 可以看到php参数 表示支持php

#cd /var/lib/tomcat6/webapps/ROOT
#vi test.jsp
Hello! The time is <%= new java.util.Date() %>

用tomcat绑定的域名访问test.jsp 如果显示系统时间 说明支持jsp

另外phpMyAdmin访问地址是 http://ip/phpmyadmin

有些童鞋们觉得奇怪 并没有看到安装apache和php组件，其实安装phpMyAdmin的时候 APACHE PHP都已经安装好了

wget http://pecl.php.net/get/PDO_MYSQL-1.0.2.tgz
tar xzvf PDO_MYSQL-1.0.2.tgz
cd PDO_MYSQL-1.0.2
/usr/local/php5/bin/phpize
Configuring for:
PHP Api Version:         20041225
Zend Module Api No:      20060613
Zend Extension Api No:   220060519
./configure –with-php-config=/usr/local/php5/bin/php-config

会发现一直有报错:如下
checking for mysql_config… /usr/bin/mysql_config
checking for mysql_query in -lmysqlclient… no
configure: error: mysql_query missing!?

# yum install mysql-devel

Dependencies Resolved

=============================================================================
Package                 Arch       Version          Repository        Size
=============================================================================
Installing:
mysql-devel             i386       5.0.77-4.el5_6.6  updates           2.4 M
Updating:
e2fsprogs-libs          i386       1.39-23.el5_5.1  base              118 k
krb5-libs               i386       1.6.1-55.el5_6.2  updates           667 k
libselinux              i386       1.33.4-5.7.el5   base               77 k
libsepol                i386       1.15.2-3.el5     base              128 k
mysql                   i386       5.0.77-4.el5_6.6  updates           4.8 M
openssl                 i686       0.9.8e-12.el5_5.7  base              1.4 M
Installing for dependencies:
e2fsprogs-devel         i386       1.39-23.el5_5.1  base              569 k
keyutils-libs-devel     i386       1.2-1.el5        base               27 k
krb5-devel              i386       1.6.1-55.el5_6.2  updates           1.9 M
libselinux-devel        i386       1.33.4-5.7.el5   base              144 k
libsepol-devel          i386       1.15.2-3.el5     base              187 k
openssl-devel           i386       0.9.8e-12.el5_5.7  base              1.9 M
zlib-devel              i386       1.2.3-3          base              101 k
Updating for dependencies:
e2fsprogs               i386       1.39-23.el5_5.1  base              977 k
krb5-workstation        i386       1.6.1-55.el5_6.2  updates           885 k
libselinux-python       i386       1.33.4-5.7.el5   base               73 k
mysql-server            i386       5.0.77-4.el5_6.6  updates           9.8 M

Transaction Summary
=============================================================================
Install      8 Package(s)
Update      10 Package(s)
Remove       0 Package(s)

Total download size: 26 M

[root@PDO_MYSQL-1.0.2]# ./configure –with-php-config=/usr/local/php5/bin/php-config

[root@PDO_MYSQL-1.0.2]#make & make install

[root@PDO_MYSQL-1.0.2]#vi /usr/local/php5/etc/php.ini

添加extension=pdo_mysql.so 重启httpd即可

或者是下载我已经编译的so (centos5.2 php5.2.4) pdo_mysql.tar

安装之前需要Server1与Server2之间SSH互相信任 请参考以下文章：
http://www.secblog.cn/article/928.html

Server1
#vi /etc/apt/sources.list
deb http://mirrors.163.com/debian squeeze main non-free contrib
deb http://mirrors.163.com/debian squeeze-proposed-updates main contrib non-free
deb http://mirrors.163.com/debian-security squeeze/updates main contrib non-free
deb-src http://mirrors.163.com/debian squeeze main non-free contrib
deb-src http://mirrors.163.com/debian squeeze-proposed-updates main contrib non-free
deb-src http://mirrors.163.com/debian-security squeeze/updates main contrib non-free
deb http://http.us.debian.org/debian squeeze main contrib non-free
deb http://non-us.debian.org/debian-non-US squeeze/non-US main contrib non-free
deb http://security.debian.org squeeze/updates main contrib non-free
#apt-get update
#apt-get install unison //两台Server都需要安装unison
#usr/bin/unison

#vi /root/.unison/default.prf 
root = /root/test/
root = ssh://192.168.1.105//root/test/

#force =/root/test/

# Paths to synchronize
#path = bbs/attachments
#path = uc/data/avatar
#path = uchome/attachment

# Some regexps specifying names and paths to ignore
#ignore = Path bbs/attachments/swfupload
#ignore = Name temp.*
#ignore = Name *~
#ignore = Name .*~
#ignore = Name *.mp3

auto = true
batch = true
maxthreads = 500
owner = true
group = true
perms = -1
repeat = 1
retry = 3
sshargs = -C 
xferbycopying = true 
silent = true
fastcheck = true
log = true
logfile = /root/.unison/unixidc_122.1547.log

Server1创建/root/test
#mkdir /root/test

Server2创建/root/test
#mkdir /root/test

#/usr/bin/unison&
推送到后台安静模式运行

如果Server1的/root/test想同步到Server2的/root/test2
需要在Server1创建/root/test Server2创建/root/test2
配置文件为 root = ssh://192.168.1.105//root/test2/

其中要注意的是：
1.force去掉前面的# 那就是Server1单向同步到Server2
2.silent = true 是以安静模式运行 否则一直会有以下提示

root@localhost:~# /usr/bin/unison
Contacting server…
Connected [//localhost//root/test -> //unixidc//root/test]
Looking for changes
  Waiting for changes from server
Reconciling changes
Nothing to do: replicas have not changed since last sync.

Sleeping for 1 seconds…

Looking for changes
  Waiting for changes from server
Reconciling changes
Nothing to do: replicas have not changed since last sync.

3.path 是指定你需要同步的目录，用ignore指定path中需要排除的目录及文件

4.要双向同步的目录都不允许为空 否则unison进程会自动结束 并提示Aborting…

5.如需了解更多参数 请参考http://www.seas.upenn.edu/~bcpierce/unison//download/releases/stable/unison-manual.htm

1.用password方式登录Linux Server1和2

2.在Linux Server1上命令操作如下：
#ssh-keygen -t dsa
并三次回车

#cd .ssh/
#cp id_dsa.pub authorized_keys
#chmod 600 authorized_keys
#scp * 192.168.1.105:/root/.ssh

其中在scp的时候 会提示Are you sure you want to continue connecting (yes/no)?
确定输入yes进行确认，之后会提示root@192.168.1.105′s password: 要求输入root密码
我们在Linux Server1(192.168.1.104)上ssh连接Linux Server2(192.168.1.105),看下是否正常
#ssh 192.168.1.105

然后在Linux Server2(192.168.1.105)上ssh连接Linux Server1(192.168.1.104),看下是否正常
如果提示：Are you sure you want to continue connecting (yes/no)? 输入yes即可
到目前为止 已经配置好Linux Server1和Linux Server2的SSH互相信任，SSH连接并不需要密码

3.打开SSH Secure Shell Client>Edit->settings->Keys>Generate New



选择DSA 2048


其中File 你可以选择你喜欢的文件名 会生成File.pub ,Commet可以写你自己的邮箱，Passphrase密码为空即可。

这里会提示是否确定密码为空.

3.切换到Linux Server1的SSH Secure Shell Client界面 Edit->settings->Keys>Upload

将Destination中的.ssh2 更改为.ssh 点Upload 。

#ssh-keygen -i -f /root/.ssh/unixidc.pub >>/root/.ssh/authorized_keys
#vi /etc/ssh/sshd_config
AuthorizedKeysFile去掉前面的# 允许AuthorizedKeys登录
PasswordAuthentication=no 修改为no 禁止使用password登录
重启SSH服务，并重新登录 Authentication选择：Public Key

在Linux Server2上重复操作以上步骤即可配置完成。

各种不同的域名地址对于搜索引擎的除重(deduplication)来说是一个负担，有没有”/”和首页的文件连接，一个域名首页就可以有6个地址：
www.secblog.cn/
secblog.cn/
www.secblog.cn
secblog.cn
www.secblog.cn/index.php
secblog.cn/index.php

如果加上一些参数，比如用于来源跟踪等还会有更多无穷无尽的地址。
www.secblog.cn/?source=foobar

所以搜索引擎鼓励发布者把URL标准化（归一化）。首先就是域名的归一化，原先我的设置为： www.secblog.cn / secblog.cn为别名。现在改为secblog.cn 301转向到www.secblog.cn
<VirtualHost *:80>
ServerName secblog.cn
RewriteEngine on
RewriteRule ^(.*)$ http://www.secblog.cn$1 [R=301,L]
</VirtualHost>

如果没有mod_rewrite也可以设置mod_alias：
RedirectMatch 301 ^(.*)$ http://www.secblog.cn

you can download the eAccelerator binaries for your version of PHP 5.2.5
//对应你的php版本下载相应的dll文件．如果是PHP 5.2.5请下载eAccelerator 0952 for PHP 5.2.5 eLoader 0952 for PHP 5.2.5

We have been using this PHP accelerator (0.9.5), on multiple servers, for a long time. It’s used on some high traffic sites without any problem.
Install:
a) Download a copy of eAccelerator that is compatible with your version of PHP.
This can be an issue with eAccelerator. Sometimes it can take a little time before the Windows binaries are available for the most recent version of PHP.
b) Copy a compatible eaccelerator.dll to your PHP extensions folder (like: c:\php\extensions replace with your actual folder location).
Make sure the configuration directive extension_dir in your php.ini is properly pointing to your extensions folder.
Like: extension_dir = “c:/php/extensions”
//将dll文件复制到c:/php/ext下．
c) Create a folder (with the appropriate permissions) for the temporary cached files.
For example: D:\tmp\eaccelerator
//创建tmp目录　权限可写
d) Add the following to your php.ini (as the first loaded extension):
.
.
.
;extension=php_yaz.dll
;extension=php_zip.dll
//编辑php.ini 在extension=php_zip.dll之后添以红字部分

;;;;;;;;;;;;;;;;;;;
; Module Settings ;
;;;;;;;;;;;;;;;;;;;
.
.
.

e) Restart your Web Server.You can see..D:\tmp\eaccelerator have folders
//重启iis 你会看到tmp目录下有相应的文件出现
C:\tmp\eaccelerator
0
1
2
3
4
5
6
7
8
9
a
b
c
d
e
f

f)testing eAccelerator
测试 eAccelerator
C:\Documents and Settings\Administrator>php -v
PHP 5.2.5 (cli) (built: Nov  8 2007 23:18:51)
Copyright (c) 1997-2007 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2007 Zend Technologies
with eAccelerator v0.9.5.2, Copyright (c) 2004-2006 eAccelerator, by eAccelerator
with Zend Extension Manager v1.2.0, Copyright (c) 2003-2007, by Zend Technologies
with Zend Optimizer v3.3.0, Copyright (c) 1998-2007, by Zend Technologies
And You can see phpinfo.
你也可以通过phpinfo.php查看是否成功

－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－
1.首先在下载编译好的版本 以php5.2.5为例

2.将附件解压，然后移至您的 php目录下 的 ext 文件夹中

3.建立一个临时目录，比如 D:\tmp\eaccelerator，并赋予 IUSR 用户读写权限

3.根据您系统的情况，一般都是PHP 扩展 ISAPI
打开php.ini文件, 找到extension=php_zip.dll, 在下面添加
保存。

重启 IIS 你会在D:\tmp\eaccelerator看到有一些文件夹．如123456789abcdef

打开 phpinfo 看，应该会有 eAccelerator 加载的信息，比如
with eAccelerator v0.9.5, Copyright (c) 2004-2004 eAccelerator, by eAccelerator

2.开始>运行>CMD>iisapp -a 提示注册
C:\Documents and Settings\Administrator>iisapp -a

3.注册成功后再运行iisapp -a 列出w3wp的PID及对应的应用池名

Microsoft Windows [版本 5.2.3790]
(C) 版权所有 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrator>iisapp -a
W3WP.exe PID: 4880   AppPoolId: WinWebMail
W3WP.exe PID: 5028   AppPoolId: DefaultAppPool
W3WP.exe PID: 4148   AppPoolId: apppool005001
W3WP.exe PID: 3492   AppPoolId: apppool005003
W3WP.exe PID: 6116   AppPoolId: apppool020001
W3WP.exe PID: 5652   AppPoolId: apppool010001
W3WP.exe PID: 5144   AppPoolId: apppool001001
W3WP.exe PID: 588   AppPoolId: apppool005002
W3WP.exe PID: 2568   AppPoolId: apppool025001

4.通过PID值查找相应的应用池名.排除法关闭站点
比如W3WP.exe PID: 5144占用CPU百分之百
那么在iis里对应的是apppool001001

5.关闭站点.观察CPU状态.
关掉其中一个站点 CPU五分钟下降了 就说明是这个站点的问题

6.CPU使用超标的解决方法
此应用池右键属性 内存回收及性能监视

7.重启iis 观察CPU使用状态.
开始>运行>iisreset

/root/fire.sh
#!/bin/sh
echo “ipadd=====================Time:`date +%r`:===================”;
if [ -s "/var/www/black.list" ];then
for i in `cat /var/www/black.list`;do
iptables -I INPUT -p TCP -s $i  –dport 80 -j REJECT
echo $i;
done;
fi
echo “===========================end===============================”;
exit 0

/root/flush.sh
#!/bin/sh
iptables -Z;
sleep 40;
iptables -vnxL INPUT|awk ‘$1==0&&$2==0{ print $8 }’|xargs -t -i iptables -D INPUT -p TCP -s {} –dport 80 -j REJECT;
echo “`date +%r`”;
exit 0

2、找到操作类型是“更新应用缓存”的项目，删除它！我这个图是为了演示刚抓屏的。你们的通知数会不一样的，只要找到这个类型的删除，您的UC就马上恢复正常，健步如飞了！如图 ：

3、关闭是否接受通知

另外一种删除方法是（以 删除c 盘xxxxxx…文件夹为例）,在执行删除动作时,提示文件夹无法删除，找不到指定路径

注意:需要删除其他类似文件,把盘符和xxxxxx…改为你电脑里面的 盘符和文件名 即可!