it:ad:dokuwiki:howto:install_on_iis

IT:AD:DokuWiki:HowTo:Install on IIS

  • invoke inetmgr
  • create a website with it's own apppool
  • point it to a directory on C:\inetpub\Dokuwiki\dokuwiki-2013-05-10

Will tell you you probably are misconfigured, and maybe you want to run the installer:

http://localhost:8080/install.php

Which will show you that you haven't configured security yet:

The installer found some problems, indicated below. You can not continue until you have fixed them.

{DOCUMENT_ROOT}/conf/ is not writable by DokuWiki. You need to fix the permission settings of this directory!
{DOCUMENT_ROOT}/data is not writable by DokuWiki. You need to fix the permission settings of this directory!
{DOCUMENT_ROOT}/data/pages is not writable by DokuWiki. You need to fix the permission settings of this directory!
{DOCUMENT_ROOT}/data/attic is not writable by DokuWiki. You need to fix the permission settings of this directory!
{DOCUMENT_ROOT}/data/media is not writable by DokuWiki. You need to fix the permission settings of this directory!
{DOCUMENT_ROOT}/data/media_attic is not writable by DokuWiki. You need to fix the permission settings of this directory!
{DOCUMENT_ROOT}/data/media_meta is not writable by DokuWiki. You need to fix the permission settings of this directory!
{DOCUMENT_ROOT}/data/meta is not writable by DokuWiki. You need to fix the permission settings of this directory!
{DOCUMENT_ROOT}/data/cache is not writable by DokuWiki. You need to fix the permission settings of this directory!
{DOCUMENT_ROOT}/data/locks is not writable by DokuWiki. You need to fix the permission settings of this directory!
{DOCUMENT_ROOT}/data/index is not writable by DokuWiki. You need to fix the permission settings of this directory!
{DOCUMENT_ROOT}/data/tmp is not writable by DokuWiki. You need to fix the permission settings of this directory!

And point you to https://www.dokuwiki.org/security#web_access_security

Where you will find:

Deny Directory Access in IIS

Lock down…

You should not be able to navigate to:

http://localhost:8080/data/pages/wiki/dokuwiki.txt

To lock it off, Need to ensure the following directories are not accessible:

  • data
  • conf
  • bin
  • inc (isn't dangerous when accessible, though)

Access to the mentioned directories can be disabled in IIS' configuration settings.

  1. Open the configuration tool: Start → Settings → Control Panel → Administrative Tools → Internet Information Services
  2. Navigate to the directory you want to protect: Local Computer → Web Sites → Default Web Site → path to directory
  3. Right-Click the folder and chose Properties → Directory Security → IP address and domain name restrictions → Edit…
  4. Choose “By default, all computers will be: Denied access”

In IIS7:

  1. select “IIS Request Filtering”
  2. go to the “URL” tab
  3. click on “Deny Sequence”
  4. enter ”/data/” in the popup box
  5. Repeat for ”/data/media” and choose “Always Allow” (otherwise your images and other won't be visible)

Note: By default, the Management Console snap-in for Internet Information Services 7 does not have UI access to “IIS Request Filtering” section. However, can be enabled by installing “IIS Administration pack 1.0” by using the Web Platform Installer.

Also note: Ensure you enter ”/data/” and NOT just ”/data”, otherwise pages that start with “data” will be inaccessible.

You should not be able to navigate to:

http://localhost:8080/data/pages/wiki/dokuwiki.txt

#### Permissions ####

It's still going to be upset regarding:

Using Windows Explorer, navigate to the c:\inetpup\wiki\whatever folder and find the data and conf folder mentioned.

On each:

  • On WS2008 R2.
    • I tried giving rights to the local apppool identity (IIS APPPOOL\wiki) didn't work
    • I tried IIS_IUSRS
    • The error messages only budged when I gave read/write/modify to IUSR

Configuration

When the error messages go away, you get the basics of the configuration.

Name of Wiki

SuperUser, Etc.

Plugins

You will need a couple of basic plugins. The most important – from my point of view – is the installation of Markdownu

Skins

The basic skin is pretty ugly.

Moving Data Directory to somewhere where you can back it up.

  • /home/skysigal/public_html/data/pages/it/ad/dokuwiki/howto/install_on_iis.txt
  • Last modified: 2023/11/04 01:41
  • by 127.0.0.1