Install GLPI + Fusion Inventory Server plugin on freeBSD with php, Apache and %%MySQL%%

====== Introduction ======
[[http://www.glpi-project.org|G.L.P.I]] stands for Gestion Libre de Parc Informatique, it's a free IT and Assets Management software compatible with ITIL. Natively it manages inventories, tickets, demands, changes, licenses, budgets...It's [[http://plugins.glpi-project.org/|plugins ecosystem]] allows you to extend the features list with i.e. automatic inventories, software deployment, network cartography, reports, handle assets that are not IT...

[[http://fusioninventory.org/overview/|The Fusion inventory server plugin for GLPI]] collects and updates software/hardware components sent by agents (installed directly on the machines) or through "network" inventories, it's also capable of software deployment.

This tutorial includes the installation of both.

====== Tested ======

2017/07/17

| %%FreeBSD%% | 11.0 |
| Apache | 2.4 |
| %%MySQL%% | 5.6 |
| PHP | 5.6 |
| GLPI | 9.1.2 |
| Fusion Inventory plugin | 9.1.1.1 (9.1+1.1) |

====== Preparations ======

| //Topics// | //Values// |
| glpi database user | ''%%glpi_db_user%%'' |
| glpi database user password | ''%%glpi_db_user_password%%'' |
| glpi database | ''%%glpi%%'' |
| your server hostname | ''%%your_hostname%%'' |

====== Install FreeBSD ======
/* Link to a standard installation of freebsd to create here */
Standard installation of freeBSD

====== Install Apache ======

Install the binary package

<code>
# pkg install apache24
</code>

Make sure that Apache will start automatically at boot

<code>
# sysrc apache24_enable="YES"
</code>

====== Install MySQL server ======

Install %%MySQL%% server 5.6

<code>
# pkg install mysql56-server
</code>

Note: the package will also install the mysql client. You can check that by searching in the installed packages and filtering on the word "sql" with this command ''%%pkg info | grep sql%%''

Make sure that %%MySQL%% server will start at boot

<code>
# sysrc mysql_enable="YES"
</code>

Start %%MySQL%% server

<code>
# service mysql-server start
</code>

====== Secure the default MySQL configuration ======
([[#Sources|Source]])
/* this content should be in a separate tutorial in order to be able to refer it from other ones */
Assign a password to the %%MySQL%% root account (replace ''%%host_name%%'' and ''%%new_password%%'' with yours)

<code>
# mysql -u root
# mysql> SET PASSWORD FOR 'root'@'localhost' = PASSWORD('new_password');
# mysql> SET PASSWORD FOR 'root'@'127.0.0.1' = PASSWORD('new_password');
# mysql> SET PASSWORD FOR 'root'@'::1' = PASSWORD('new_password');
# mysql> SET PASSWORD FOR 'root'@'host_name' = PASSWORD('new_password');
</code>

Here's an alternative method

<code>
# mysql -u root
# mysql> UPDATE mysql.user SET Password = PASSWORD('new_password')
    ->     WHERE User = 'root';
# mysql> FLUSH PRIVILEGES;
</code>

Remove anonymous accounts.

<code>
# mysql -u root -p
   Enter password: (enter root password here)
# mysql> DROP USER ''@'localhost';
# mysql> DROP USER ''@'host_name';
</code>

Remove the test database that exists by default.

<code>
# mysql -u root -p
   Enter password: (enter root password here)
# mysql> DROP DATABASE test;
</code>

====== Prepare MySQL for GLPI ======

Note : when you have ''%%mysql>%%'' in front of the lines, this means that you are logged into the mysql server that has it's own syntax.

Create a database for glpi

<code>
# mysql -u root -p
# mysql> CREATE DATABASE glpi;
</code>

Create a user dedicated to the administration of the glpi database, replace ''%%glpi_db_user%%'' and ''%%glpi_db_password%%'' with yours

<code>
# mysql> CREATE USER 'glpi_db_user'@'localhost' IDENTIFIED BY 'glpi_db_user_password';
</code>

Give that user the permissions to access the glpi database, replace ''%%glpi_db_user%%'' with yours

<code>
# mysql> GRANT ALL ON glpi.* TO 'glpi_db_user'@'localhost'
# mysql> FLUSH PRIVILEGES;
</code>

/* dasti: generic content, should be in a separate tutorial */
Usefull commands for verifications :

List users :

<code>
# mysql> SELECT User, Host, Password FROM mysql.user;
</code>

note : a user is in fact a couple of [username@ip_from_where_it_connects], you should see a password for each combinations.

List databases :

<code>
# mysql> show databases;
</code>

Delete a user :

<code>
# mysql> DROP USER 'username'@'something';
</code>

====== Install PHP ======

Install php engine and the php mod for Apache.

<code>
# pkg install php56 mod_php56
</code>

====== Install PHP extensions ======

/* need to talk to the dev team for them to produce a definitive list */
There is for now a bit of confusion around what extensions are needed or not : the port, the github page and some information gathered from the dev team don't match at 100%

| extension name | glpi github | the package | this howto |
| ctype | no | yes | yes |
| curl | yes | no | yes |
| exif | no | no | yes |
| domxml | yes | no | yes |
| fileinfo | no | yes | yes |
| filter | no | yes | yes |
| gd | yes | yes | yes |
| imap | yes | yes | yes |
| json | yes | yes | yes |
| ldap | yes | yes | yes |
| mbstring | yes | yes | yes |
| mysql | no | no | yes |
| mysqli | no | yes | yes |
| openssl | yes | no | yes |
| session | no | yes | yes |
| simplexml | no | yes | yes |
| wddx | no | yes | yes |
| xml | no | yes | yes |
| xmlrpc | no | yes | yes |
| zlib | no | yes | yes |

As a workaround, here's the command to install the php extensions (this topic needs an exchange with the glpi dev team)

<code>
# pkg install php56-ctype php56-curl php56-exif php56-fileinfo php56-filter php56-gd php56-imap php56-json php56-ldap php56-mbstring php56-mysql php56-mysqli php56-session php56-simplexml php56-wddx php56-xml php56-xmlrpc php56-zlib 
</code>

====== Install GLPI ======

Install the binary package

<code>
# pkg install glpi
</code>

/* is it the proper way to store the files for a website ? should it be /var ? */
note : the website will be stored by default in ''%%/usr/local/www/glpi%%''

Fix file permissions - NOT CORRECT YET, only files and config need www access - to RECHECK
/* is it a correct method ?? */

<code>
# chown -R www:www /usr/local/www
</code>

====== Configure apache ======

([[#Sources|Source]])

===== Basic configuration =====

Open Apache configuration file

<code>
# ee /usr/local/etc/apache24/httpd.conf
</code>

Change the server administrator email address : find this line and replace ''%%you@example.com%%'' with yours

<code>
ServerAdmin you@example.com
</code>

Change the server name : add a line in this format and replace ''%%your_server_name_here%%'' with your domain name or the hostname of the server if you keep the use local

<code>
ServerName your_server_name_here:80
</code>

Save and exit : press the ''%%[esc]%%'' key (that makes the menu appear), exit and save

Other important defaults
/* is that correct ?? */
The server root is configured with this line ''%%ServerRoot "/usr/local"%%''

The documents will be served from here ''%%DocumentRoot "/usr/local/www/apache24/data"%%''

===== Verify that Apache includes configuration files automatically =====

By default, Apache should automatically include all configurations files that are located in the folder ''%%Includes%%''
/* is that a proper way to use apache ?? */

Verify Apache's configuration file

<code>
# less /usr/local/etc/apache24/httpd.conf | grep Include
</code>

You should find this line uncommented  ''%%Include etc/apache24/Includes/*.conf%%''
If not, add it using this command or edit the configuration file using ''%%ee /usr/local/etc/apache24/httpd.conf%%''

<code>
cat 'Include etc/apache24/Includes/*.conf' >> /usr/local/etc/apache24/httpd.conf
</code>

===== Add the PHP module configuration =====

Edit a separate configuration file for the php module

<code>
# ee /usr/local/etc/apache24/Includes/php.conf
</code>

to setup index.php as a default directory index, add these lines

<code>
<IfModule dir_module>
   DirectoryIndex index.php index.html
</code>

to process .php files with the PHP processor, continue and add these lines

<code>
   <FilesMatch "\.php$">
      SetHandler application/x-httpd-php
   </FilesMatch>
   <FilesMatch "\.phps$">
      SetHandler application/x-httpd-php-source
   </FilesMatch>
</IfModule>
</code>

Save : press the ''%%[esc]%%'' key, save and exit.

===== Add the GLPI configuration =====

Create a separate configuration file for GLPI

<code>
ee /usr/local/etc/apache24/Includes/glpi.conf
</code>

add these lines

<code>
Alias /glpi /usr/local/www/glpi
<Directory /usr/local/www/glpi>
   AllowOverride Options Fileinfo
   Options Indexes FollowSymLinks
   Require all granted
   DirectoryIndex index.php
</Directory>
</code>

Save : press the ''%%[esc]%%'' key, save and exit.

===== Verify and start Apache =====

Verify the configuration

<code>
service apache24 configtest
</code>

Start Apache

<code>
service apache24 start
</code>

====== Configure GLPI ======

This will be done inside GLPI, to access it use this url ''%%http://your_server_ip/glpi%%''

Select your language and click "OK"

{{davidstievenard/howto/glpi/glpi_setup_1_language.png}}

Accept the license terms

{{davidstievenard/howto/glpi/glpi_setup_2_license.png}}

The GLPI setup will do a self check

{{davidstievenard/howto/glpi/glpi_setup_3_check.png}}

Database connection setup : enter the credentials for your glpi database user

| SQL server (%%MariaDB%% or %%MySQL%%) | ''%%localhost%%'' |
| SQL user | ''%%glpi_db_user%%'' |
| SQL password | ''%%glpi_db_user_password%%'' |

{{davidstievenard/howto/glpi/glpi_setup_4_database_connection_settings_1.png}}

Create a database or use an existing one -> in this tutorial we will use the database we just created, by default it's ''%%glpi%%''

{{davidstievenard/howto/glpi/glpi_setup_5_database_connection_settings_2.png}}

Login to GLPI (''%%http://your_server_ip/glpi%%'') with the default super administrator user/password  : ''%%glpi/glpi%%''

GLPI reminds you to secure the installation

You should change the passwords for the default users ''%%glpi%%'', ''%%post-only%%'', ''%%tech%%'', ''%%normal%%'' in the administration tab ''%%http://your_ip_address/glpi/front/user.php%%''

{{davidstievenard/howto/glpi/glpi_setup_6_cleanup.png}}

You should delete the installation file ''%%installation_directory/install/install.php%%''

<code>
# rm /usr/local/www/glpi/install/install.php
</code>

====== Setup the Fusion Inventory Server plugin ======

===== Install =====

Go into the GLPI's plugin directory

<code>
# cd /usr/loca/www/glpi/plugins
</code>

Download the tar file of the release from github

<code>
# fetch https://github.com/fusioninventory/fusioninventory-for-glpi/releases/download/glpi9.1%2B1.1/fusioninventory-for-glpi_9.1.1.1.tar.gz
</code>

Note : you can check what version are available [[https://github.com/fusioninventory/fusioninventory-for-glpi/releases|here]]

Unpack the plugin

<code>
# tar -xvf fusioninventory-for-glpi_9.1.1.1.tar.gz
</code>

When it's done, you can remove the original tar file

<code>
# rm fusioninventory-for-glpi_9.1.1.1.tar.gz
</code>

===== Configure =====

In the GUI, go in the "Administration/Plugins" section (''%%http://your_ip_address/glpi/front/plugin.php%%'') where you should see the fusion inventory server plugin in the list, click on "install"

{{davidstievenard/howto/glpi/glpi_setup_7_fusioninventory_install.png}}

Now you have to enable it by clicking on "enable" (''%%http://your_ip_address/glpi/front/plugin.php%%'')

{{davidstievenard/howto/glpi/glpi_setup_8_fusioninventory_enable.png}}

===== Fix the "GLPI cron not running" error message =====

With the plugin enabled, a new menu item "plugins" appeared in the main menu bar on the top, inside of it you can see an error message "GLPI cron not running, see documentation". To fix that, you have to create a cronjob that will run the GLPI cron every minutes. ([[#Sources|Source]])

{{davidstievenard/howto/glpi/glpi_setup_9_fusioninventory_fix_cron.png}}

Edit the crontab for the user ''%%www%%''

<code>
# crontab -u www -e
</code>

This will launch the ''%%vi%%'' text editor
/* VI is really not user friendly, must find a way to avoid it */
Press ''%%[i]%%'' to go in insert mode

Enter the content of this line

<code>
* * * * * /usr/local/bin/php  /usr/local/www/glpi/front/cron.php &>/dev/null
</code>

Press the ''%%[Esc]%%'' key to go back in normal mode

Press ''%%[:]%%'' to go in command mode

To save, enter ''%%wq%%'' (for __W__rite and __Q__uit) and press the ''%%[enter]%%'' key

====== Sources ======

[[https://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/network-apache.html|Apache HTTP server on the FreeBSD handbook]]

[[https://dev.mysql.com/doc/refman/5.6/en/default-privileges.html|Securing the Initial MySQL Accounts]]

[[http://fusioninventory.org/documentation/fi4g/cron.html|fix cron for GLPI and for Fusion Inventory]]

====== To do ======
  * A version of this tutorial with with %%FreeBSD%% nginx mangoDB php
  * add HTTPS to the  web server -> should be a separate tutorial for apache

====== Credits ======

Original howto written by David Stievenard : Thanks for the dev. team for this great piece of software and for their help and patience at Freenode#glpi and to ddurieux in particular.

----

{{tag>HowTo}}