IBM Aspera HST Admin Manual page 24

9. Restart your Apache web server.
Linux OS
Debian 8 or newer
Ubuntu 15.04 or newer
CentOS 7 or newer
RHEL 7 or newer
Debian 7 or older
Ubuntu 14.10 or older
CentOS 6
RHEL 6
10. Enable system-level security.
Enabling system-level security allows the web UI to accurately display users' files and show or hide controls
depending on users' permissions (this includes the delete and make directory functions).
$ sudo /opt/aspera/sbin/enablesecure enable
Once the script is executed, you are prompted to input the name of the Apache user.
User running apache (default apache):
Based on your input, the script generates text similar to the following. Use visudoers to copy-and-paste the
generated text into your file. In the following example output, apache is the account that is running Apache and
/opt/aspera is the Aspera installation directory.
Important: Do not paste the example output shown below into your sudoers file. Paste the output generated
when you ran the enablesecure script as described above.
# BEGIN IBM Aspera High-Speed Transfer Server
# The user account that runs the web server will impersonate
# the logged-in user to present that user's files and folders.
Defaults env_keep += "SERVER_NAME REQUEST_URI REQUEST_METHOD REMOTE_USER
QUERY_STRING CONTENT_LENGTH SESSION_ID CSRF_TOKEN"
Defaults:apache !requiretty
apache ALL=(ALL) NOPASSWD: /opt/aspera/var/webtools/scripts/aspera-
dirlist.pl,
SETENV: /opt/aspera/var/webtools/scripts/aspera-dirlist.pl
# END IBM Aspera High-Speed Transfer Server
Note: Once secure permissions are enabled, users see the Delete and Create Folder buttons, allowing then
to remove files and create directories on the server (within their docroot). To hide the Delete and Create
Folder buttons, update the web UI configuration parameters EnableDelete and EnableCreateFolder,
respectively. See Configuring your Web UI Settings
To disable the secure permissions, run the enablesecure script again with the argument disable.
# /opt/aspera/sbin/enablesecure disable
11. Verify that cookies are enabled in the client Web browsers.
Note: Cookies must be enabled in client browsers. Otherwise, they might get an error message when they attempt
to access the HST Server web UI.
Restart Command
$ systemctl restart apache2.service
$ systemctl restart httpd.service
$ sudo service apache2 restart
$ sudo service httpd restart
on page 25 for details.
| Set up the HST Server Web UI | 24