株式会社アイオーアーキテクトは、オープンソースなどを活用してシステム運用を最適にご提供します。

2019/02/25　桜井耕造

Tweet

OpenAudIT2.3.3インストール手順

CentOS7の環境にOpenAudIT2.3.3をインストールする手順をご紹介します。
英字ですが、本家のサイトも参考になるかもしれません。
https://community.opmantek.com/display/OA/Linux+-+Installing+or+Upgrading#Linux-InstallingorUpgrading-CentOS/RedHatconsiderations

（１）SELinuxを無効
OSをインストールした後のディフォルトは、SELinuxが有効になっていますので、無効にします。

# setenforce 0
# vi /etc/selinux/config
SELINUX=disabled

（２）iptablesの無効化
# systemctl stop firewalld
# systemctl disable firewalld
# iptables -L

（３）必要モジュールのインストール
# yum install wget
# yum install perl-core
# yum install httpd

（４）MariaDBのインストール
# yum install mariadb mariadb-server
# rpm -qa | grep mariadb
mariadb-libs-5.5.60-1.el7_5.x86_64
mariadb-server-5.5.60-1.el7_5.x86_64
mariadb-5.5.60-1.el7_5.x86_64

# systemctl start mariadb
# systemctl enable mariadb

mariadbの初期設定をします。
# mysql_secure_installation
Enter current password for root (enter for none): # Enter
→rootのパスワードを入力します。初期状態はパスワードがないので、そのままEnter。

Set root password? [Y/n]
New password:
Re-enter new password:
→rootのパスワードを設定して下さい。

Remove anonymous users? [Y/n]
→匿名ユーザーを削除しますか？

Disallow root login remotely? [Y/n]
→rootのリモートログインを禁止しますか？

Remove test database and access to it? [Y/n]
→testデータベースを削除しますか？

Reload privilege tables now? [Y/n]
→権限を管理するテーブルを今リロードしますか？

# cd /etc/my.cnf.d
# vi server.cnf
[mariadb-5.5]
character-set-server = utf8mb4

# vi client.cnf
[client-mariadb]
default-character-set = utf8mb4

# systemctl restart mariadb

（５）phpのインストール
# yum install libtool-ltdl
# yum install php-ldap php-mbstring php-mcrypt
# sed -i -e 's/memory_limit/;memory_limit/g' /etc/php.ini
# echo "memory_limit = 512M" >> /etc/php.ini
# sed -i -e 's/max_execution_time/;max_execution_time/g' /etc/php.ini
# echo "max_execution_time = 300" >> /etc/php.ini
# sed -i -e 's/max_input_time/;max_input_time/g' /etc/php.ini
# echo "max_input_time = 600" >> /etc/php.ini
# sed -i -e 's/error_reporting/;error_reporting/g' /etc/php.ini
# echo "error_reporting = E_ALL" >> /etc/php.ini
# sed -i -e 's/display_errors/;display_errors/g' /etc/php.ini
# echo "display_errors = On" >> /etc/php.ini
# sed -i -e 's/upload_max_filesize/;upload_max_filesize/g' /etc/php.ini
# echo "upload_max_filesize = 10M" >> /etc/php.ini
# sed -i -e 's/date.timezone/;date.timezone/g' /etc/php.ini
# echo "date.timezone = "Asia/Tokyo"" >> /etc/php.ini
# systemctl restart httpd
# systemctl enable httpd

（６）OpenAudITのインストール
# cd /tmp
# wget http://dl-openaudit.opmantek.com/OAE-Linux-x86_64-release_2.3.3.run
# sh ./OAE-Linux-x86_64-release_2.3.3.run

Verifying archive integrity... All good.
Uncompressing Open-AudIT 2.3.3  100%

途中で何度かインストールの確認を求められる。また、パッケージの確認をして、既に入っているものもNot installedと判定されインストールしようとする。Yum list で該当のものがインストール済みか、確認しておく。
Open-AudIT (2.3.3) Installation script
++++++++++++++++++++++++++++++++++++++++++++++++++++++
This installer will install Open-AudIT into /usr/local/omk.
To select a different installation location please rerun the
installer with the -t option.
Ok to proceed with installation?

Type 'y' or <Enter> to accept, or 'n' to decline: y
→OpenAuditをインストールして良いですか？

Do you want to perform a backup of your installation directory?
Type 'y' or <Enter> to accept, or 'n' to decline: y
→インストールディレクトリをバックアップしてよいですか？

++++++++++++++++++++++++++++++++++++++++++++++++++++++
Opmantek daemon init scripts detected
++++++++++++++++++++++++++++++++++++++++++++++++++++++

Ok to shut down running Opmantek daemons for the duration of the installation?
Type 'y' or <Enter> to accept, or 'n' to decline: y

→Opmantekデーモンをシャットダウンしてよいですか？

++++++++++++++++++++++++++++++++++++++++++++++++++++++
Opmantek daemon init scripts detected
++++++++++++++++++++++++++++++++++++++++++++++++++++++

Ok to shut down running Opmantek daemons for the duration of the installation?
Type 'y' or <Enter> to accept, or 'n' to decline: y
→デーモンをシャットダウンしても良いですか？

++++++++++++++++++++++++++++++++++++++++++++++++++++++
Some required packages are missing!
++++++++++++++++++++++++++++++++++++++++++++++++++++++
Open-AudIT requires the following packages which are not installed:
mariadb-server php-mysql
The installer can use YUM to download and install these packages.
Do you want to install these packages with YUM now?
Type 'y' or <Enter> to accept, or 'n' to decline: y
→yumでインストールしても良いですか？

++++++++++++++++++++++++++++++++++++++++++++++++++++++
performing post-installation operations
++++++++++++++++++++++++++++++++++++++++++++++++++++++
Open-AudIT needs the live configuration files in /usr/local/omk/conf/,
and ships the defaults in /usr/local/omk/install/. If you agree, the installer
will copy all missing files to the live configuration directory - it will not
overwrite any files that are already present.

Ok to copy new or missing config files into the live configuration directory?
Type 'y' or <Enter> to accept, or 'n' to decline:　y
→不足しているファイルをコピーしますが、良いですか？

++++++++++++++++++++++++++++++++++++++++++++++++++++++
Configuration Updates
++++++++++++++++++++++++++++++++++++++++++++++++++++++
The new version of Open-AudIT may have introduced new configuration items,
which can be added automatically (with their default settings).

Do you want to import any new configuration settings now?
Type 'y' or <Enter> to accept, or 'n' to decline: y
→今すぐ新しい設定をインポートしますか？

++++++++++++++++++++++++++++++++++++++++++++++++++++++
Open-AudIT Database Setup
++++++++++++++++++++++++++++++++++++++++++++++++++++++
We require the MySQL root user credentials to create the database and user.
Enter the MySQL root user's password:
 →MySQLのrootのパスワードを入力して下さい。

++++++++++++++++++++++++++++++++++++++++++++++++++++++
Opmantek Daemon Startup
++++++++++++++++++++++++++++++++++++++++++++++++++++++
The Opmantek daemon can now be started. It needs to be active
to provide the Open-AudIT GUI, but you might want to delay
that operation until you have adjusted the configuration files.

Do you want to start the Opmantek daemon now?
Type 'y' or <Enter> to accept, or 'n' to decline: y
→デーモンを起動しますか？

If you have started the Opmantek daemon,
then your new Open-AudIT dashboard should now be accessible at
http://<HOSTNAME_OR_IP>/omk/open-audit/

If your browser is running on the same machine as Open-AudIT was
installed onto, this would be
http://localhost/omk/open-audit/

++++++++++++++++++++++++++++++++++++++++++++++++++++++
installation complete.
++++++++++++++++++++++++++++++++++++++++++++++++++++++

（６）OpenAudIT画面にログイン

インストールが完了したのち、下記サイトにアクセスする。
エンタープライズ版のログインURL

http://<HOSTNAME_OR_IP>/omk/oae/

デフォルトユーザ：nmis/nm1888

管理者：             admin/password
コミュニティ版のログインURL

http://<HOSTNAME_OR_IP>/open-audit/index.php/logon

デフォルトユーザ：nmis/nm1888

管理者：             admin/password