rpms/mantis/devel mantis-README.Fedora,1.1,1.2

[Gianluca Sforna (giallu)]

Author: giallu

Update of /cvs/extras/rpms/mantis/devel
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv18654

Modified Files:
	mantis-README.Fedora 
Log Message:
Improved installation steps


Index: mantis-README.Fedora
===================================================================
RCS file: /cvs/extras/rpms/mantis/devel/mantis-README.Fedora,v
retrieving revision 1.1
retrieving revision 1.2
diff -u -r1.1 -r1.2
--- mantis-README.Fedora	9 Jan 2007 12:09:22 -0000	1.1
+++ mantis-README.Fedora	3 Jul 2007 15:01:50 -0000	1.2
@@ -1,6 +1,6 @@
 Fedora specific installation notes
 
-Mantis require a database to function; use the following steps to
+Mantis requires a database to function; use the following steps to
 configure mantis to work with MySQL:
 
 1. install MySQL packages
@@ -13,15 +13,40 @@
          Please have a look to the MySQL documentation to add a proper password
          and/or a separate account for mantis usage.
 
-3. point your browser to:
+3. allow yourself to access the admin directory
+    Please note that the provided configuration file for Apache 
+    (/etc/httpd/conf.d/mantis.conf) by default prevents access to the mantis
+    administration area. 
+    Change:
+    <Directory /usr/share/mantis/admin>
+        Order allow,deny
+    
+    to:
+    <Directory /usr/share/mantis/admin>
+        Order deny,allow
+    
+    and restart apache with:
+      service httpd restart
+
+    instead the needs to be edited in order to enable the execution of the installation script located
+   in /usr/share/mantis/admin.
+
+4. point your browser to:
     https://localhost/mantis/admin/install.php
    to create an empty DB.
 
+BIG FAT WARNING: when you are done with the installation, be sure to revert the 
+         modifications you've done in step 3.
+         Otherwise you will leave the administration area unprotected with
+         critical system information and database update capabilities open to 
+         any unauthorized person.
+
 WARNING: A DEFAULT ADMINISTRATOR level account is created.  The account name
-and password are administrator / root.  Use this when you first login to
-Mantis. Immediately go to Manage and create at least one administrator level
-account.  Immediately after that DISABLE or DELETE the administrator account.  
-You can recreate it but you should delete the account to prevent the 
-cookie_string from being used to trick the package.  It would be even better 
-to rename the account or delete it permanently.  REMEMBER: After setting up 
-the package, REMOVE the default administrator account.
+         and password are administrator / root.  Use this when you first login 
+         to Mantis. Immediately go to Manage and create at least one
+         administrator level account.  Immediately after that, DISABLE or DELETE
+         the administrator account. You can recreate it but you should delete
+         the account to prevent the cookie_string from being used to trick the
+         package.  It would be even better to rename the account or delete it
+         permanently.  REMEMBER: After setting up the package, REMOVE the
+         default administrator account.