IT:AD:DokuWiki:HowTo:Install on IIS
Process
Prerequisites
Obviously: IT:AD:PHP:HowTo:Install on IIS
Create a Website
- invoke
inetmgr - create a website with it's own apppool
- point it to a directory on
C:\inetpub\Dokuwiki\dokuwiki-2013-05-10
First Run
Will tell you you probably are misconfigured, and maybe you want to run the installer:
http://localhost:8080/install.php
Which will show you that you haven't configured security yet:
The installer found some problems, indicated below. You can not continue until you have fixed them.
{DOCUMENT_ROOT}/conf/ is not writable by DokuWiki. You need to fix the permission settings of this directory!
{DOCUMENT_ROOT}/data is not writable by DokuWiki. You need to fix the permission settings of this directory!
{DOCUMENT_ROOT}/data/pages is not writable by DokuWiki. You need to fix the permission settings of this directory!
{DOCUMENT_ROOT}/data/attic is not writable by DokuWiki. You need to fix the permission settings of this directory!
{DOCUMENT_ROOT}/data/media is not writable by DokuWiki. You need to fix the permission settings of this directory!
{DOCUMENT_ROOT}/data/media_attic is not writable by DokuWiki. You need to fix the permission settings of this directory!
{DOCUMENT_ROOT}/data/media_meta is not writable by DokuWiki. You need to fix the permission settings of this directory!
{DOCUMENT_ROOT}/data/meta is not writable by DokuWiki. You need to fix the permission settings of this directory!
{DOCUMENT_ROOT}/data/cache is not writable by DokuWiki. You need to fix the permission settings of this directory!
{DOCUMENT_ROOT}/data/locks is not writable by DokuWiki. You need to fix the permission settings of this directory!
{DOCUMENT_ROOT}/data/index is not writable by DokuWiki. You need to fix the permission settings of this directory!
{DOCUMENT_ROOT}/data/tmp is not writable by DokuWiki. You need to fix the permission settings of this directory!
And point you to https://www.dokuwiki.org/security#web_access_security
Where you will find:
Deny Directory Access in IIS
Lock down…
You should not be able to navigate to:
http://localhost:8080/data/pages/wiki/dokuwiki.txt
To lock it off, Need to ensure the following directories are not accessible:
- data
- conf
- bin
- inc (isn't dangerous when accessible, though)
Access to the mentioned directories can be disabled in IIS' configuration settings.
- Open the configuration tool: Start → Settings → Control Panel → Administrative Tools → Internet Information Services
- Navigate to the directory you want to protect: Local Computer → Web Sites → Default Web Site → path to directory
- Right-Click the folder and chose Properties → Directory Security → IP address and domain name restrictions → Edit…
- Choose “By default, all computers will be: Denied access”
In IIS7:
- select “IIS Request Filtering”
- go to the “URL” tab
- click on “Deny Sequence”
- enter ”/data/” in the popup box
- Repeat for ”/data/media” and choose “Always Allow” (otherwise your images and other won't be visible)
Note: By default, the Management Console snap-in for Internet Information Services 7 does not have UI access to “IIS Request Filtering” section. However, can be enabled by installing “IIS Administration pack 1.0” by using the Web Platform Installer.
Also note: Ensure you enter ”/data/” and NOT just ”/data”, otherwise pages that start with “data” will be inaccessible.
You should not be able to navigate to:
http://localhost:8080/data/pages/wiki/dokuwiki.txt
#### Permissions ####
It's still going to be upset regarding:
Using Windows Explorer, navigate to the c:\inetpup\wiki\whatever folder and find the data and conf folder mentioned.
On each:
- On WS2008 R2.
- I tried giving rights to the local apppool identity (IIS APPPOOL\wiki) didn't work
- I tried IIS_IUSRS
- The error messages only budged when I gave read/write/modify to
IUSR
Configuration
When the error messages go away, you get the basics of the configuration.
Name of Wiki
SuperUser, Etc.
Plugins
You will need a couple of basic plugins. The most important – from my point of view – is the installation of Markdownu
Skins
The basic skin is pretty ugly.