HCoop uses webalizer to generate statistics for member sites.
Runs as pts user webalizer
- Requires read permissions
/afs/hcoop.net/common/etc/domtool/webalizer/config/... (per-vhost config generated by DomTool/Plugins#Webalizer)
/afs/hcoop.net/common/etc/domtool/nodes/... (for webbw to parse vhost info, should probably be removed as a dependency if possible)
- Requires write permissions
Our webalizer config replaces the standard cron job with one that grabs tokens and reads configuration for our vhosts.
Create a keytab for the webalizer principal before installing hcoop-webalizer-config. Webalizer should be able to run on any node, but ensure only one node is running it.
2. Future Work
If we support other statistic gathering programs like awstats, we will need to create a pts group (e.g. domtool:webstats) to control read access to log files.