Nagios Support Forum

Hi all,

We're currently using the Trial/Free version of Nagios XI. It is the downloadable VM supplied by Nagios. OS of that VM is CentOS 6.7

I attempted to upgrade PHP on the Nagios server. This was prompted by a vulnerability scan showing that the version of PHP Nagios XI is running was vulnerable. After the upgrade the Nagios XI server was broken. I experienced the following:
-AD integration broken as it was missing files
-Unable to remove hosts or access Core Config Manager.

I have since rolled the snapshot of the VM back to a workable state, but I still need to know how to upgrade PHP, and even Apache, so that PHP is not running a vulnerable version and that Nagios XI doesn't break.

What are the recommended steps to accomplish this?

What version of PHP and Apache do you want to upgrade to?

Did you follow any specific guide to do the upgrade which caused it to break? Can you provide a link to the guide?

After following the steps in this link http://webcache.googleusercontent.com/s ... clnk&gl=us for upgrading PHP in CentOS I believe the end result was PHP version 5.6. Generally speaking I would like to upgrade to a version of PHP that is not obsolete that won't break Nagios XI. regarding Apache a more current version would acceptable. Default appears to be 2.2.15

If any official documentation exists from Nagois that shows steps to take for upgrading PHP and Apcahe, that would be great.

Your upgrading of PHP most likely broke because some of our dependencies that XI uses, are not built for the specific version.

As for upgrading apache, it's pretty straight forward. You will need to change a couple things though, specifically change this in any applicable file in your /etc/httpd/conf.d/ directory - to - This was a change between 2.2 -> 2.4 in apache.

Just a note, if you do a clean install of XI on top of Centos 7, it will install with the latest version possible of PHP, and apache 2.4 out of the box.

Thanks for the info rkennedy

If the PHP upgrade broke some of the dependencies of the XI server, how is Nagios protecting/securing it if the version of PHP currently in use is vulnerable?

I also found this thread regarding a clean install of Nagios XI on CentOS 7.
https://webcache.googleusercontent.com/ ... clnk&gl=us
https://webcache.googleusercontent.com/ ... clnk&gl=us
https://webcache.googleusercontent.com/ ... clnk&gl=us

It appears the same types of issues exist that I'm experiencing. What what the final outcome for this person? As the user in the thread asks, is there a VM available yet for NAgios XI on CentOS 7? Is there official documentation for installing the XI server on CentOS 7?

wat_006 wrote:If the PHP upgrade broke some of the dependencies of the XI server, how is Nagios protecting/securing it if the version of PHP currently in use is vulnerable?

We use RHEL/CentOS repositories. My understanding is that if there is a major security vulnerability found in one of the packages on there, the fix will be patched in to the current version, which can be obtained with a 'yum update' or 'yum install'. If those repos were insecure by nature, I imagine we would be seeing a lot more problems than there currently are.

wat_006 wrote: What what the final outcome for this person?

It looks like they marked their thread with a green checkmark for 'resolved' in the original post. Not everyone that fixes their issue posts back a solution. You could attempt to PM them.

wat_006 wrote:As the user in the thread asks, is there a VM available yet for NAgios XI on CentOS 7?

Not at this time.

wat_006 wrote:Is there official documentation for installing the XI server on CentOS 7?

XI should install using the exact same method as you use on CentOS6. I use CentOS7 for all of my lab systems here.