Summary of Contents for MACROMEDIA CONTRIBUTE 3 - DEPLOYING AND PUBLISHING SERVER
Page 1
CONTRIBUTE Deploying Contribute and Contribute Publishing Server...
Page 2
FlashPaper, Flash Video Encoder, Flex, Flex Builder, Fontographer, FreeHand, Generator, HomeSite, JRun, MacRecorder, Macromedia, MXML, RoboEngine, RoboHelp, RoboInfo, RoboPDF, Roundtrip, Roundtrip HTML, Shockwave, SoundEdit, Studio MX, UltraDev, and WebHelp are either registered trademarks or trademarks of Adobe Systems Incorporated and may be registered in the United States or in other jurisdictions including internationally.
Page 3
Contents Chapter 1: Overview ........5 Chapter 2: Preparing Your Network and Installing Contribute .
Page 5
CHAPTER 1 Overview Macromedia Contribute is a website editor that lets people connect to departmental and other websites so that they can update web page content. Administrative assistants, product managers, human resource managers, and other people in an organization can use Contribute to update their team website without having to contact a web team or other departmental resources.
Page 6
After entering their user name and password, they are granted access to the website and the role you’ve assigned to them. To use CPS, you must have a J2EE application server such as Macromedia JRun installed. To learn about other CPS functionality, see “Using Contribute Publishing Server with Contribute”...
Page 7
Consider a large organization with several decentralized websites. In addition to a public facing site that provides information about the organization, there are several internal sites in use by individual departments and workgroups. The organization uses LDAP as both a directory service that lets users look up other employees as well as an authentication service through which administrators set permissions limiting users’...
Page 8
Likewise, web designer Laura Logic and Contribute administrator Jah Wobble have access to all sites. As the web designer, Laura provides templates that are easy to add content to and that fit the needs of users collaborating internally. The templates she maintains include those for taking meeting minutes, for scheduling, and for providing product specifications, marketing launch plans, and sales projections, to name a few.
Page 9
CPS integrates with the organization’s LDAP service, which authenticates user access to various network resources. In this case, the LDAP authentication is the first step in granting access to websites hosted on various servers within the organization. The Contribute roles further define user privileges within a website, determining the degree to which users can modify pages within the site.
Page 10
The key to this arrangement is that all users have the same Contribute site connection. In other words, there is a single connection point for all users that controls the behavior of Contribute when editing the website. If you want to restrict users to editing content in their workgroup’s folder, you would need to create a role that limits access to a specific folder.
Page 11
Deploying Contribute for multiple websites on one webserver In this scenario, there are several departmental intranet sites, each of which needs access restricted to members of the given department. To accomplish this, the administrator creates a separate Contribute connection for each department’s folder within the website (to essentially create subsites).
Page 12
Users can browse the entire site but are restricted to editing within their department’s folder. By restricting user’s editing privileges to their department’s web pages, each group can maintain control over their web content and can act more independently with the content they make available to the entire organization.
Page 13
In regard to Contribute, the use of a staging server lets you copy only folders and files that you specify as necessary for your website. This enables you to use Contribute to update web content on the staging server, but only publish the necessary web pages to your production web server for public access.
Page 14
To use Contribute with a staging server, you create a connection to the staging server’s website. Users can update content on the staging server. Any temporary drafts that are created during the review process, or drafts of files that are in the process of being updated, but not yet published to the website, remain on the staging server, protected by your network’s firewall.
Page 15
The following table describes the function of each role that relates to Contribute: Role Function Contribute administrator Responsible for installing Contribute, setting up user roles and privileges, and determining the degree to which users can access and update websites. Contribute administrators are often members of an organization’s IT staff, responsible for maintaining server and network infrastructure, managing user and file permissions across an organization’s network.
Page 16
Task Description Install Contribute CPS is a suite of Java server applications that lets you integrate Publishing Server (CPS) Contribute with Lightweight Directory Access Protocol (LDAP) or Active (optional) Directory services, and implement e-mail notifications to keep Contribute users informed about the status of their drafts in progress. To use CPS, you must install and configure the server on a Java application server.
Page 17
CHAPTER 2 Preparing Your Network and Installing Contribute Once you have given some consideration to what is involvement in deploying Macromedia Contribute and Contribute Publishing Server (CPS), you are ready to begin. First you need to prepare your network, then you can install the software.
Page 18
As an administrator for a website managed by CPS, you can view or modify FTP, SFTP, and WebDAV settings by editing the connection. For more information see “Editing website connections” in Macromedia Contribute Help. Preparing Your Network and Installing Contribute...
Page 19
In particular, you might want to block HTTP access to the MMWIP folder. The MMWIP folder contains interim drafts of files (works in progress) that you might want to protect. Macromedia recommends that you restrict access to the MMWIP folder so that only members of your organization can browse files within that folder.
Page 20
In addition to securing the administrative folders using the operating system’s permissions and access control lists, you should consider using UrlScan to further secure IIS web servers. UrlScan is a security tool provided by Microsoft that screens incoming requests to the server by filtering the requests based on rules that you create.
Page 21
The following figure shows an example of a file sent for review, and the files and folders that are created when you send a user of your website a page for review. messaging users WIPMetaData jlydon@acme.com index.html index.html wipMeta.mje1d0lzk4vxc.fre notifyWIP.jr615v2v4p.csi wipMeta.mje1d0lzk4vxc.csi.chk wipMetamje1d0lzk4vxc.csi MMWIP...
Page 22
This figure shows the main folders and files that are created when you enable the draft review process for a given site and a user sends a page for review. The following folders are created: _mm/ct2004/messaging/users contains a folder for each user for whom the draft review process is enabled.
Page 23
In this case, the connection paths overlap, and the second connection is a child website of the first connection, which is the parent website. Tip: Macromedia recommends that, if you create child sites, you make any users who are connected to a parent site, also connect to any child sites.
Page 24
Tip: Macromedia recommends that, if you create overlapping website connections, you make any users who are connected to a parent site, also connect to any child sites.
Page 25
Understanding the draft for review process in overlapping websites When you send drafts for review, your list of possible reviewers are users who are connected to your website. And the draft you send for review is temporarily placed in the root of your website (that is, the root of your Contribute website connection).
Page 26
Suppose User 1 edits a page in the marketing folder and sends it to User 2 for review. The draft for review is temporarily placed on the website at the root of User 1’s website connection (www.mysite.com/intranet/). (Remember, User 1 does not have a website connection to the marketing website.) When User 2 receives the draft, there is a conflict because User 2 has website connections to the site where the draft for review was placed and also to the website that contains the original page.
Page 27
Tip: If you will be using FTP to connect to a website, Macromedia recommends using SFTP. In addition to providing a secure connection when transferring files to and from Contribute and your website, SFTP is a more reliable connection protocol.
Page 28
With SFTP, everything you transmit is encrypted, protecting it from monitoring by intruders. In addition to increased security, Macromedia recommends using SFTP because it’s a more robust protocol that provides more reliable performance. The following reasons describe why SFTP is a better protocol: •...
Page 29
WebDAV Web-based Distributed Authoring and Versioning (WebDAV) is a series of extensions to the HTTP protocol that lets users collaboratively update and manage files on a website. A key feature of the WebDAV protocol is file locking. Users connecting to a WebDAV-enabled site lock files when they open the file for editing.
Page 30
The user name and e-mail address identify users and the web pages they are working on. Contribute prevents multiple users from simultaneously editing the same web page. (Contribute uses a system much like the Macromedia Dreamweaver check in/check out system to avoid editing conflicts.) Tip: If you have multiple copies of Contribute, use a different user name for each copy.
Page 31
.Mac account. In the Connection Assistant, select the .Mac check box. For information about selecting a folder to connect to in your .Mac website, see “Creating a connection to a .Mac account” in Macromedia Contribute Help. To create a new website connection: Start Contribute.
Application Archive (WAR) file onto any supported Java Application Server. You have the option of installing CPS as an integrated Java application server that includes Macromedia JRun 4.0 or as a WAR file that you deploy onto an existing Java application server. Preparing Your Network and Installing Contribute...
Page 33
In the Installation Method screen, select the Simple Installation option. Accept the default installation location or click Choose to select another location. The default location is: C:/Program Files/Macromedia/Contribute Publishing Server When prompted, enter an administrative password to restrict access to the CPS Console.
Page 34
“Configuring Contribute Publishing Server (CPS only)” on page Tip: In the future, you can access the CPS Console by selecting Start > Programs > Macromedia Contribute Publishing Server > Administer Macromedia Contribute Publishing Server. To install CPS by using the Simple Installation (UNIX): Download the installation file.
Page 35
Note: If there is not an installer for your platform, and you need to perform the WAR File Installation but do not have a Java application server, you can download a trial version of the JRun 4 server with limited licensing capabilities. For more information, see the Macromedia website at www.macromedia.com.
Page 36
To use the CPS installer to generate a WAR file (UNIX): Download the installation file. At a command prompt, enter the following command to set execute permissions for the JRun installation shell script: chmod +x pubserver-linux.bin Note: If you installing on the Solaris platform, substitute solaris for linux in the command. Enter the following command to run the JRun installation script: sh ./pubserver-linux.bin Note: If you installing on the Solaris platform, substitute solaris for linux in the command.
Page 37
• Expand the WAR file and deploy the expanded structure as the working directory. On other application servers (such as JRun 4, BEA WebLogic, and JBoss), you expand the WAR file manually and then deploy the expanded directory structure, which becomes your working directory.
Page 38
Deploying CPS on JBoss (Macintosh) application servers JBoss is an open source, Java-based application server commonly deployed on Macintosh OS X servers. Macromedia recommends that you manually expand the pubserver.war file in the installation folder, and copy the expanded WAR file to the folder: <JBoss_home>/server/default/ deploy.
Page 39
Change the path value for to indicate the folder created in step 3to store <home_directory> user and connection information. The following example changes the database folder path to: <Macintosh HD>/Contribute Publishing Server/database. Note: If you already added user and connection information in CPS, you need to move that information from the current location to the new location you set.
Page 40
Change the path value for to indicate where you want to store CPS error <logger_settings> and output logs. For example: <out> <file>C:\Contribute Publishing Server\logs\out.log</file> </out> <err> <file>C:\Contribute Publishing Server\err.log</file> </err> Save and close ckm.xml, and then restart your J2EE server. Now you are ready to log in to the CPS Console and configure CPS.
CHAPTER 3 Configuring Contribute and Contribute Publishing Server to work with your website Once you have installed Contribute and connected to your website (see Chapter 2, “Preparing Your Network and Installing Contribute”), you are ready to configure Contribute and Contribute Publishing Server (CPS) to meet your needs.
Page 42
Rollbacks lets you enable rollback files and specify the number of rollback files to maintain on the server. To learn more about rollbacks, see “Enabling and disabling rollbacks” in Macromedia Contribute Help. New pages lets you specify the encoding used for characters in web pages and the default page extension (.htm, .html, and so on) to use when creating new pages.
Assigning an administrator to a site and assigning a password for the administrative account are optional. For more information, see “Becoming an administrator of an existing Contribute website” in Macromedia Contribute Help. The Administer Websites dialog box appears. Select the administrative settings category you want to modify from the list on the left side of the dialog box.
Page 44
(home) page that users in the selected role see when they enter the website. For more information, see To learn more about rollbacks, see “Setting general role settings” in Macromedia Contribute Help. Configuring Contribute and Contribute Publishing Server to work with your website...
Page 45
Macromedia Contribute Help. Styles and Fonts specifies which font sets users have access to, and which users can apply style and formatting to text. For more information, see “Setting style and font settings” in Macromedia Contribute Help. New Pages specifies whether Contribute users can create new, blank pages, and which (if any) Macromedia Dreamweaver MX templates they can use to create new pages.
Page 46
The following table describes the roles and privileges related to Contribute. Job Title Contribute Role Privileges System Administrator Installs Contribute, creates connections to the website, and administrator defines Contribute roles appropriate to the magazine’s job functions. The system administrator consults the designer on how to set up role settings so that other members of the magazine’s staff have appropriate editing privileges within their area.
Page 47
Select Users and Roles. By default, Contribute creates three roles: Administrator, Publisher, and Writer. Click Create New Role. The Create New Role dialog box appears. Select an existing role from the Create new role from copy of list box. Selecting an existing role as a base for a new role lets you reuse the selected role’s settings. You can modify the new role’s settings as needed.
At a later time you will probably also want to set up Simple File Deployment service and RSS Feed service. For more information, see Chapter 1, “Using Contribute Publishing Server” in Macromedia Contribute Publishing Server Help. Before you configure the User Directory service, you should understand the two authentication models available, and how Contribute works with LDAP and what the LDAP authentication workflow is.
Page 49
Understanding Contribute user authentication models Contribute provides two user authentication models that you can use: File-based authentication lets you use either a password stored in an XML file, or Windows domain authentication. When using the Contribute file-based authentication system, CPS looks up the user’s credentials in an XML file located on the server.
Page 50
User branch with baseDN:ou=Central,o=MyCompany, Search Scope:SUBTREE_LEVEL, filter:(objectClass=organizationalPerson) User branch with baseDN:ou=West,o=MyCompany, Search Scope:SUBTREE_LEVEL, filter:(objectClass=organizationalPerson) Group branch with baseDN:ou=Central,o=MyCompany, Search Scope:SUBTREE_LEVEL, filter:(objectClass=groupOfNames) Group branch with baseDN:ou=West,o=MyCompany, Search Scope:SUBTREE_LEVEL, filter:(objectClass=groupOfNames) LDAP permissions and Contribute permissions Integrating your company LDAP directory with CPS adds another layer of permissions. When connecting to an LDAP or Active Directory server, CPS respects any file/folder permissions set by the LDAP or Active Directory service.
Page 51
• Windows domain uses your organization’s Microsoft Windows authentication solution. If you use this method, the User IDs in your LDAP directory must match your Windows user IDs. Authentication workflow When a user attempts to connect to a CPS-managed website through Contribute, the process through which CPS communicates with your organization’s LDAP or other user directory service is as follows: Contribute prompts the user for their user directory authentication credentials.
Page 52
E-mail Notification and Log services at the same time, or you can wait until later. Note: For more information about configuring the other CPS services, see Chapter 1, “Using Contribute Publishing Server” in Macromedia Contribute Publishing Server Help. After you configure the User Directory service, you can enable your website to use CPS.
Page 53
CPS uses on some of the more popular Java application servers: Java Application Server Port number BEA Weblogic 7001 IBM Websphere 9080 Macromedia JRUN 8900 JBoss 8080 Tip: If you select the Simple Installation for installing CPS (see “Installing Contribute Publishing Server using the Simple Installation” on page 38), the URL for the CPS Console is https:// localhost:8900/contribute/admin/server.cfm/.
Page 54
Enter the CPS administrator password you created during the installation process, and then click Login to log in to the CPS Console. The CPS Console appears. Make a note of the CPS Console web address that appears at the top of the Overview panel; you’ll need this address later when you enable CPS in Contribute. Select User Directory from the Services Settings list on the left.
To import your LDAP SSL certificate into CPS trust store to use LDAPS: In a command prompt, change to the CPS installation directory in the following default location: C:/Program Files/Macromedia/Contribute Publishing Server/jre/bin Enter the following command: keytool Depending on your configuration, you might need to include more information. The complete command is: keytool -import -alias serverca -file <certificate filename and path>...
Page 56
Click Enable Publishing Server. The Enable Publishing Server dialog box appears. Enter the Publishing Server web address in the address field and deselect the Enable User Directory check box if you will not use the User Directory service to manage users. Note: If you plan to use the User Directory service to manage users, see “Adding users to your website (CPS only)”...
Verify that you want the Log and E-mail Notification services enabled. By default, the Log and E-mail Notification services are enabled. To disable one or more of these services, deselect the appropriate check box, and click Save Settings. Now Contribute is enabled to use Contribute Publishing Server and you are ready to add users to your website.
Page 58
Click Add Users. The Add Users dialog box appears. Select a role to assign users from the Role for the new users pop-up menu. The role you assign determines the users’ editing permissions for modifying the site’s pages. Add users to the role you selected. The Search Results panel lets you locate users in your organization’s user directory and add them to the list of users for the role you’ve selected.
Click OK to close the Add Users dialog box. The Users and Roles panel of the Administer Website dialog box shows the new users who are assigned to a specific role. To add additional users, repeat steps 4 through 8. Tip: For more information on creating user roles, see “About Contribute user roles and settings”...
Page 60
After receiving a connection key, a user simply double-clicks it to start the connection process. Because the file is encrypted, the user must know the password that the administrator defined for the key. Connection keys also specify what role settings to apply. When the user supplies the correct password, Contribute automatically makes a connection to the site and allows page edits as defined for the associated Contribute role.
Page 61
To create a website connection key to share with users: Select Edit > Administer Websites (Windows) or Contribute > Administer Websites (Macintosh), and select the website you want to administer from the submenu. Do one of the following: If the website has no administrator, click Yes when a dialog box asks whether you want to become the website administrator.
Page 62
You can send a connection key file to a new user, or you can send a connection key to a user who has already connected to the site, and assign them a new role. To send a connection key to a new user, click Send Connection Key. ■...
Page 63
Note: Before users can use a connection key or type connect: to connect to a CPS managed website, you must add users to the website. If you haven’t already done so, see “Adding users to your website (CPS only)” on page If you’re not using CPS to manage your website, see “Sending connection keys for websites”...
Page 64
Configuring Contribute and Contribute Publishing Server to work with your website...
Page 65
Index Contribute Publishing Server case study 6 Add Users dialog box 58 overview 6 Administer Website dialog box 55, 57 Simple Installation 32, 33 administration using secure LDAP with User Directory 54 settings, about 42 WAR File Installation 32, 35 sitewide settings 43 administrator overview 6...
Page 66
LDAP secure LDAP, using with User Directory 54 using secure LDAP with User Directory 54 server permissions 18 Log service, about 6 services E-mail Notification 6 Log 6 User Directory 6 SFTP connection information 27, 31 network Simple Installation about 18 Contribute Publishing Server 32, 33 connection types, about 26 Sitewide Settings dialog box 43...
Need help?
Do you have a question about the CONTRIBUTE 3 - DEPLOYING AND PUBLISHING SERVER and is the answer not in the manual?
Questions and answers