APTARE IT Analytics Installation and Upgrade Guide for Linux

Download httpd-2.4.xx.tar.gz compiled with FIPS compliant SSL and following apache configuration files

Stop aptare services.

# /opt/aptare/bin/aptare stop

Extract http-2.4.xx into /opt directory

# tar -xzvf httpd-2.4.xx.tar.gz -C /opt/

Copy workers.properties from /opt/apache/conf/ into /opt/httpd-2.4.xx/conf/

# cp -p /opt/apache/conf/workers.properties /opt/httpd-2.4.xx/conf/

Verify workers.properties copied into /opt/httpd-2.4.xx/conf/

# ls -lrt /opt/httpd-2.4.xx/conf/workers.properties

If https is enabled and certificates are inside /opt/apache directory then copy certificates in /opt/httpd-2.4.xx/ folder on same path .

Remove symbolic link:

# unlink /opt/apache

Create symbolic link with httpd-2.4.xx:

# ln -s /opt/httpd-2.4.xx /opt/apache

Copy httpd.conf, httpd-aptare.conf, and httpd-override.conf into /opt/apache/conf/.

Copy httpd-ssl.conf, httpd-ssl-aptare.conf, and httpd-ssl-override.conf into /opt/apache/conf/extra/.

Execute the following command to replace token with actual value in /opt/apache/conf/httpd.conf, /opt/apache/conf/httpd-aptare.conf and /opt/apache/conf/extra/httpd-ssl.conf. Replace <domain name used in portal> with the actual aptare domain name used on the portal in the command below.

# export DOMAIN_NAME="<domain name used in portal>"
# export AGENT_HOST="aptareagent"
# export PORTAL_HOST="aptareportal"

# export PORTAL_BASE="/opt/aptare"
# export SERVER_NAME="${PORTAL_HOST}.${DOMAIN_NAME}"

# sed -i -e "s/~SERVER_NAME~/$SERVER_NAME/g" 
-e "s/~AGENT_HOST~/$AGENT_HOST/g"
 -e "s/~DOMAIN_NAME~/$DOMAIN_NAME/g" 
-e "s/~PORTAL_HOST~/$PORTAL_HOST/g" 
-e "s#~PORTAL_BASE~#$PORTAL_BASE#g" 
/opt/apache/conf/httpd.conf

# sed -i -e "s/~SERVER_NAME~/$SERVER_NAME/g" 
-e "s/~AGENT_HOST~/$AGENT_HOST/g" 
-e "s/~DOMAIN_NAME~/$DOMAIN_NAME/g" 
-e "s/~PORTAL_HOST~/$PORTAL_HOST/g" 
-e "s#~PORTAL_BASE~#$PORTAL_BASE#g" 
/opt/apache/conf/httpd-aptare.conf

# sed -i -e "s/~SERVER_NAME~/$SERVER_NAME/g" 
-e "s/~AGENT_HOST~/$AGENT_HOST/g" 
-e "s/~DOMAIN_NAME~/$DOMAIN_NAME/g" 
-e "s/~PORTAL_HOST~/$PORTAL_HOST/g" 
-e "s#~PORTAL_BASE~#$PORTAL_BASE#g" 
/opt/apache/conf/extra/httpd-ssl.conf

If https was enabled in the previous Apache version, then uncomment the following lines in /opt/apache/conf/httpd.conf:

LoadModule ssl_module modules/mod_ssl.so 
Include conf/extra/httpd-ssl.conf

Update SSLCertificateFile, SSLCertificateKeyFile and SSLCertificateChainFile in /opt/apache/conf/extra/httpd-ssl.conf as per value in agent & portal virtualhost section present in /opt/httpd-<prev>/conf/extra/httpd-ssl.conf.

Add following lines in /opt/aptare/bin/apache after APACHE_HOME:

LD_LIBRARY_PATH=$APACHE_HOME/ssl/lib:$LD_LIBRARY_PATH
export LD_LIBRARY_PATH

Create apache group:

# groupadd -r apache

Create apache user:

# useradd -g apache -d /home/apache -s /sbin/nologin apache

Create directory for core file generation:

# mkdir -p /opt/apache/logs/core

Change ownership of Apache:

# chown -R root:root /opt/httpd-2.4.xx

Change permission of Apache:

# find /opt/apache -type d -exec chmod o-wrx {} +
# find /opt/apache -type f -exec chmod o-wrx {} +

Change ownership for core directory:

# chown -R root:apache /opt/apache/logs/core

Verify Apache configurations:

# export LD_LIBRARY_PATH=/opt/apache/ssl/lib:$LD_LIBRARY_PATH
# /opt/apache/bin/apachectl -t

Run the getSystemInfo.sh script which is located at /opt/aptare/utils.

# cd  /opt/aptare/utils
# ./getSystemInfo.sh

Start aptare services:

# /opt/aptare/bin/aptare start

Check apache version:

# /opt/apache/bin/httpd -v
Server version: Apache/2.4.xx (Unix)