{"id":5356,"date":"2020-04-04T12:02:20","date_gmt":"2020-04-04T09:02:20","guid":{"rendered":"https:\/\/kifarunix.com\/?p=5356"},"modified":"2020-04-04T20:03:55","modified_gmt":"2020-04-04T17:03:55","slug":"install-glpi-itsm-tool-on-centos-8","status":"publish","type":"post","link":"https:\/\/kifarunix.com\/install-glpi-itsm-tool-on-centos-8\/","title":{"rendered":"Install GLPI ITSM Tool on CentOS 8"},"content":{"rendered":"\n

Welcome to our tutorial on how to install GLPI ITsM tool on CentOS 8. GLPI<\/a> is an acronym for Gestionnaire Libre de Parc Informatique<\/strong> (Open Source IT Equipment Manager<\/strong>). It is a Free Asset and IT Management Software package, ITIL Service Desk, licenses tracking and software auditing tool.<\/p>\n\n\n\n

GLPI  provides a lot of advanced features for inventory, asset and mobile devices management. Read more GLPI features page<\/a>.<\/p>\n\n\n\n

Install GLPI ITSM Tool on CentOS 8<\/h2>\n\n\n\n

Prerequisites<\/h3>\n\n\n\n

GLPI is a web application and thus requires the basic components of LAMP\/LEMP stack. In this demo, we are using LAMP Stack and thus;<\/p>\n\n\n\n

Install and enable Remi repos as they provide some of the required PHP modules.<\/p>\n\n\n\n

dnf install epel-release<\/code><\/pre>\n\n\n\n
dnf install https:\/\/rpms.remirepo.net\/enterprise\/remi-release-8.rpm<\/code><\/pre>\n\n\n\n
Enable Remi Repos for PHP 7.4.<\/p>\n\n\n\n
dnf module reset php<\/code><\/pre>\n\n\n\n
dnf module enable php:remi-7.4<\/code><\/pre>\n\n\n\n
Execute the command below to install all GLPI LAMP stack requirements;<\/p>\n\n\n\n
Note, GLPI requires PHP > 5.6, MySQL > 5.6 or MariaDB > 10.0.<\/p>\n\n\n\n
dnf update<\/code><\/pre>\n\n\n\n
dnf install httpd mariadb-server php php-{curl,fileinfo,gd,json,mbstring,mysqli,session,zlib,simplexml,xml,cli,domxml,imap,ldap,openssl,xmlrpc,pecl-apcu} wget tar zip bzip2<\/code><\/pre>\n\n\n\n
You can check our other guides on setting up LAMP\/LEMP stack on CentOS 8.<\/p>\n\n\n\n
Install LAMP Stack on CentOS 8<\/a><\/p>\n\n\n\n
Install LEMP Stack on CentOS 8<\/a><\/p>\n\n\n\n
Configure PHP for GLPI<\/h3>\n\n\n\n
Edit the PHP configuration file, php.ini<\/code> and ensure the following settings are in place.<\/p>\n\n\n\n
vim \/etc\/php.ini<\/code><\/pre>\n\n\n\n
Set the Maximum amount of memory;<\/p>\n\n\n\n
memory_limit = 128M<\/code><\/pre>\n\n\n\n
Enable file uploads;<\/p>\n\n\n\n
file_uploads = On<\/code><\/pre>\n\n\n\n
Set Maximum execution time;<\/p>\n\n\n\n
max_execution_time = 30<\/code><\/pre>\n\n\n\n
Disable session initialization on request startup.<\/p>\n\n\n\n
session.auto_start = 0<\/code><\/pre>\n\n\n\n
Disable the use of trans sid.<\/p>\n\n\n\n
session.use_trans_sid = 0<\/code><\/pre>\n\n\n\n
Create GLPI Database and Database User<\/h3>\n\n\n\n
In this demo, we are using MariaDB as our database server. <\/p>\n\n\n\n
Start and enable MariaDB to run on system boot;<\/p>\n\n\n\n
systemctl enable --now mariadb<\/code><\/pre>\n\n\n\n
Run the initial security script.<\/p>\n\n\n\n
mysql_secure_installation<\/code><\/pre>\n\n\n\n
Login to MariaDB and create GLPi database. Be sure to replace the databse name used here accordingly.<\/p>\n\n\n\n
mysql -u root -p<\/code><\/pre>\n\n\n\n
create database glpidb;<\/code><\/pre>\n\n\n\n
Next, create GLPI database user and grant all rights on GLPI database.<\/p>\n\n\n\n
grant all on glpidb.* to glpiadmin@localhost identified by 'myP@ssw0rd';<\/code><\/pre>\n\n\n\n
Reload the privileges table and exit the database.<\/p>\n\n\n\n
flush privileges;<\/code><\/pre>\n\n\n\n
quit<\/code><\/pre>\n\n\n\n
Download GLPI Installer<\/h3>\n\n\n\n
Navigate to GLPI downloads page<\/a> or  GLPI GitHub releases page<\/a> and grab the latest stable release, which is v9.4.5 as of this writing. Get the link and pull it with wget command.<\/p>\n\n\n\n
wget https:\/\/github.com\/glpi-project\/glpi\/releases\/download\/9.4.5\/glpi-9.4.5.tgz<\/code><\/pre>\n\n\n\n
Install GLPI on CentOS 8<\/h3>\n\n\n\n
GLPI is a ready made application and its installation is as easy as extracting the archive contents to the GLPI web root directory. In this demo, our GLPI web root directory is set to \/var\/www\/html\/glpi<\/strong><\/code>.<\/p>\n\n\n\n
tar xzf glpi-9.4.5.tgz -C \/var\/www\/html\/<\/code><\/pre>\n\n\n\n
Verify the GLPI web root directory;<\/p>\n\n\n\n
ls \/var\/www\/html\/\nglpi<\/strong><\/code><\/pre>\n\n\n\n
Set the proper ownership and permissions on the GLPI web server configuration files.<\/p>\n\n\n\n
chown -R apache:apache \/var\/www\/html\/glpi<\/code><\/pre>\n\n\n\n
chmod -R 755 \/var\/www\/html\/glpi<\/code><\/pre>\n\n\n\n
Create Apache configuration file for GLPI.<\/p>\n\n\n\n
vim \/etc\/httpd\/conf.d\/glpi.conf<\/code><\/pre>\n\n\n\n
Make the appropriate substitutions in the configuration file to suit your environment.<\/p>\n\n\n\n
<VirtualHost *:80>\n   ServerName glpi.kifarunix-demo.com\n   DocumentRoot \/var\/www\/html\/glpi\n\n   ErrorLog \"\/var\/log\/httpd\/glpi_error.log\"\n   CustomLog \"\/var\/log\/httpd\/glpi_access.log\" combined\n\n   <Directory> \/var\/www\/html\/glpi\/config>\n           AllowOverride None\n           Require all denied\n   <\/Directory>\n   <Directory> \/var\/www\/html\/glpi\/files>\n           AllowOverride None\n           Require all denied\n   <\/Directory>\n<\/VirtualHost><\/code><\/pre>\n\n\n\n
To setup GLPI with TLS certificates install mod_ssl<\/code> package.<\/p>\n\n\n\n
dnf install mod_ssl<\/code><\/pre>\n\n\n\n
Edit the \/etc\/httpd\/conf.d\/ssl.conf<\/code> configuration file and set the correct paths to the TLS certificate, the CA certificate, if any, and certificate key file.<\/p>\n\n\n\n
vim +\/SSLCertificateFile \/etc\/httpd\/conf.d\/ssl.conf<\/code><\/pre>\n\n\n\n
Note that the configs below are Self-Signed Certificates and hence, no CA certificate specified. Be sure to obtain your certificates from a trusted CA and make appropriate configs.<\/p>\n\n\n\n
...\nSSLCertificateFile \/etc\/pki\/tls\/certs\/server.crt<\/strong>\n...\nSSLCertificateKeyFile \/etc\/pki\/tls\/private\/server.key<\/strong>\n...<\/code><\/pre>\n\n\n\n
Then enable HTTPS for GLPI by editing the GLPI Apache configuration file created above, You can as well enable HTTP-HTTPS redirection;<\/p>\n\n\n\n
vim \/etc\/httpd\/conf.d\/glpi.conf<\/code><\/pre>\n\n\n\n
<VirtualHost *:80>\n   ServerName glpi.kifarunix-demo.com\n   DocumentRoot \/var\/www\/html\/glpi\n\n   RewriteEngine On\n   RewriteCond %{HTTPS} off\n   RewriteRule ^(.*)$ https:\/\/%{HTTP_HOST}%{REQUEST_URI} [R=301,L]\n<\/VirtualHost>\n<VirtualHost *:443>\n   ServerName glpi.kifarunix-demo.com\n   DocumentRoot \/var\/www\/html\/glpi\n\n   ErrorLog \"\/var\/log\/httpd\/glpi_error.log\"\n   CustomLog \"\/var\/log\/httpd\/glpi_access.log\" combined\n\n   <Directory> \/var\/www\/html\/glpi\/config>\n           AllowOverride None\n           Require all denied\n   <\/Directory>\n   <Directory> \/var\/www\/html\/glpi\/files>\n           AllowOverride None\n           Require all denied\n   <\/Directory>\n   SSLEngine on\n   SSLCertificateKeyFile \/etc\/pki\/tls\/private\/server.key\n   SSLCertificateFile \/etc\/pki\/tls\/certs\/server.crt\n<\/VirtualHost>\n<\/code><\/pre>\n\n\n\n
Verify Apache configuration syntax.<\/p>\n\n\n\n
httpd -t\nSyntax OK<\/code><\/pre>\n\n\n\n
If you moved SSL\/TLS files to the specified directories instead of copying them, you need to correct the SELinux contexts on those files by running the command below;<\/p>\n\n\n\n
restorecon -RvF \/etc\/pki<\/code><\/pre>\n\n\n\n
Start and enable Apache to run on system boot.<\/p>\n\n\n\n
systemctl enable --now httpd<\/code><\/pre>\n\n\n\n
If firewall is running, allow external access to Apache.<\/p>\n\n\n\n
firewall-cmd --add-port={80,443}\/tcp --permanent\nfirewall-cmd --reload<\/code><\/pre>\n\n\n\n
Configure other SELinux Permissions for GLPI<\/h3>\n\n\n\n
In our demo, SELinux is set on enforcing mode. Hence, run the commands below to set the SELinux permissions for GLPI.<\/p>\n\n\n\n
setsebool -P httpd_unified 1\nsetsebool -P httpd_can_network_connect 1\nsetsebool -P httpd_graceful_shutdown 1\nsetsebool -P httpd_can_network_relay 1\nsetsebool -P nis_enabled 1\nsetsebool -P httpd_can_network_connect_db 1\nsetsebool -P httpd_can_sendmail on<\/code><\/pre>\n\n\n\n
Accessing GLPI Web Interface<\/h3>\n\n\n\n
You can now finalize the setup of GLPI from browser. Use the address, http:\/\/glpi-server-IP-or-Hostname<\/code><\/strong>.<\/p>\n\n\n\n
Choose you installation language.<\/p>\n\n\n\n
\"Install<\/figure>\n\n\n\n
Accept the terms and conditions of GLPI license and click continue.<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Click install, then verify that all prerequisites are met. Ignore the CAS extension warning if you are not using CAS authentication.<\/p>\n\n\n\n
\"Install<\/figure><\/div>\n\n\n\n
After all is set, proceed to configure Database connection settings;<\/p>\n\n\n\n
\"Install<\/figure>\n\n\n\n
Choose your GLPI database.<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Wait for the database initialization to complete. Then click continue to follow through other steps and finally login to your GLPI web interface.<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
To login to GLPI web interface, there are a number of default user accounts you can use;<\/p>\n\n\n\n
Name<\/strong><\/td>Username<\/strong><\/td>Account Type<\/strong><\/td><\/tr>
glpi<\/td>glpi<\/td>Admin account<\/td><\/tr>
tech<\/td>tech<\/td>Technical Account<\/td><\/tr>
normal<\/td>normal<\/td>Normal Account<\/td><\/tr>
post-only<\/td>postonly<\/td>Post only account<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
Simply login as Admin, glpi<\/code> and make the necessary changes including removing the default accounts above as well as resetting the password and username for GLPI admin user once you are logged in.<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Remove installation file;<\/p>\n\n\n\n
mv \/var\/www\/html\/glpi\/install\/install.php \/var\/www\/html\/glpi\/install\/install.php.old<\/code><\/pre>\n\n\n\n
There you go. You have successfully installed GLPI ITSM on CentOS 8. That brings us to the end of our guide on how to install GLPI ITSM tool on CentOS 8.<\/p>\n\n\n\n
Reference<\/p>\n\n\n\n
Install GLPI Documentation<\/a><\/p>\n\n\n\n
Related Guides<\/h3>\n\n\n\n
Install ManageEngine AssetExplorer on CentOS 7\/Fedora 30\/29<\/a><\/p>\n\n\n\n
Install ManageEngine AssetExplorer on Ubuntu 18.04<\/a><\/p>\n\n\n\n
Install Snipe-IT on Debian 10\/Ubuntu 18.04<\/a><\/p>\n\n\n\n
Install OCS-NG Inventory on CentOS 8<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"
Welcome to our tutorial on how to install GLPI ITsM tool on CentOS 8. GLPI is an acronym for Gestionnaire Libre de Parc Informatique (Open<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rank_math_lock_modified_date":false,"footnotes":""},"categories":[984,121],"tags":[1399,1400,1402,1403,1404,1401],"class_list":["post-5356","post","type-post","status-publish","format-standard","hentry","category-asset-management","category-howtos","tag-glpi","tag-glpi-centos-8","tag-glpi-itam","tag-gppi-itsm","tag-install-glpi-centos-8","tag-it-asset-management","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-50"],"_links":{"self":[{"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/posts\/5356"}],"collection":[{"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/comments?post=5356"}],"version-history":[{"count":7,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/posts\/5356\/revisions"}],"predecessor-version":[{"id":5375,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/posts\/5356\/revisions\/5375"}],"wp:attachment":[{"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/media?parent=5356"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/categories?post=5356"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/tags?post=5356"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}