SYMPA is now installed, and sample configuration files were created in
/etc/sympa.conf and /etc/wwsympa.conf

Basic configuration
===================

You should first edit them to suit your needs, at least http_host,
domain, listmaster, db_type, db_host, db_user, db_passwd, wwsympa_url
settings in /etc/sympa.conf, and then configure the needed
database with one of the /usr/local/share/examples/sympa/create_db.*
provided schemas.
You should also install the corresponding p5-DBD-{mysql,SQLite,Pg} module.
Moreover, p5-ldap package is needed if you plan to use LDAP features
and p5-SOAP-Lite package is needed if you plan to use sympa_soap_server.

Start sympa using the init.d-style /usr/local/sbin/sympa script.

WWSympa configuration
=====================

Then, add the following lines to your httpd.conf :

Alias /wwsicons /var/sympa/static/icons/
Alias /static-sympa /var/sympa/static/
ScriptAlias /sympa /usr/local/libexec/sympa/wwsympa-wrapper.fcgi
FastCgiServer /usr/local/libexec/sympa/wwsympa.fcgi -processes 2
<Location /sympa>
	SetHandler fastcgi-script
</Location>

For optimal performance you also need to enable mod_fastcgi.

As WWSympa needs to access /var/sympa and /etc/sympa.conf
files, you have to run httpd unchrooted with httpd -u, or chroot the
whole sympa package and its dependencies otherwise.

WWSympa should be available at http://domain.tld/sympa/

Startup/Shutdown configuration
==============================

You can start sympa upon boot by adding the following lines to
/etc/rc.local after starting your DB server :

if [ -x /usr/local/sbin/sympa ]; then
	echo -n ' sympa' ; /usr/local/sbin/sympa start
fi

You should also cleanly stop sympa upon shutdown by adding the
following lines to /etc/rc.shutdown :

if [ -x /usr/local/sbin/sympa ]; then
	echo -n 'stopping sympa' ; /usr/local/sbin/sympa stop
fi

Mail aliases configuration
==========================

add systemwide robot aliases to your aliases file :

sympa: "| /usr/local/libexec/sympa/queue sympa@domain.tld"
listmaster: "| /usr/local/libexec/sympa/queue listmaster@domain.tld"
bounce+*: "| /usr/local/libexec/sympa/bouncequeue sympa@domain.tld"
abuse-feedback-report: "| /usr/local/libexec/sympa/bouncequeue sympa@domain.tld"
sympa-request: postmaster
sympa-owner: postmaster

if you're using sendmail, you should declare /var/sympa/sympa_aliases
as an additional alias file in your sendmail.mc :

define(`ALIAS_FILE', `/etc/mail/aliases,/var/sympa/sympa_aliases')dnl

If you're using postfix, edit main.cf and set :

alias_database = hash:/etc/mail/aliases, hash:/var/sympa/sympa_aliases
alias_maps = hash:/etc/mail/aliases, hash:/var/sympa/sympa_aliases

Security considerations
=======================

Note that the following binaries are installed with particular modes/owner/group :
- the following are 4755 _sympa:_sympa
/usr/local/libexec/sympa/bouncequeue
/usr/local/libexec/sympa/familyqueue
/usr/local/libexec/sympa/queue
- the following are 6755 _sympa:_sympa
/usr/local/libexec/sympa/sympa_soap_server-wrapper.fcgi
/usr/local/libexec/sympa/wwsympa-wrapper.fcgi
- the following are 4750 root:_sympa
/usr/local/sbin/aliaswrapper
/usr/local/sbin/virtualwrapper

For the various set-uid sympa wrappers to work fine, you have to make
sure /var/sympa is in a partition mounted without nosuid.

Now refer to http://www.sympa.org/manual/index for more information.
