Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Migrated to Confluence 5.3

Table of Contents

This documentation assumes you are upgrading from 2.2.X and currently have opFlow reports running.

Upgrade files

  1. Backup your existing installation 

    Code Block
    cd /usr/local
    cp -r opmantek opmantek_backup_<insert_date> 
  2. Obtain a copy of the tarball, from now on it will be assumed the file is in /tmp
  3. Untar 

    Code Block
    cd /usr/local
    tar -zxvf /tmp/opFlow-release.tar.gz   
  4. Update config files 

    Code Block
    cd /usr/local/opmantek
    ./bin/opupdateconfig.pl install/opFlow.nmis conf/opFlow.nmis
    ./bin/opupdateconfig.pl install/opCommon.nmis conf/opCommon.nmis    
  5. Copy new configuration files into conf/ 

    Code Block
    cd /usr/local/opmantek
    cp install/EmailReports* conf/ 
  6. Fix permissions 

    Code Block
    cd /usr/local/opmantek/bin
    ./opfixperms.pl  
  7. Restart Daemons 

    Code Block
    service flowd restart
    service opflowd restart 

Reports (optional)

  1. [OPTIONAL] If you want hourly reports to be available immediately after the hour, add their generation to cron 

    Code Block
    crontab -e
    0 0 * * * /usr/local/opmantek/bin/opFlowReports-hourly.sh 
  2. Daily reports should already be in the cron, if you have added hourly reports above they are not needed but running the script will do no harm

    Code Block
    crontab -e
     0 1 * * * /usr/local/opmantek/bin/opFlowReports-daily.sh

Email Reports (optional, requires reports to be configured)

NOTE: Emailing reports DOES NOT work with auth mode "apache".  Authentication must run through opmantek code, all other auth methods work, eg: htpasswd, ldap, etc.

  1. Install phantomjs

    1. Download it from http://phantomjs.org/
    2. Untar it, move it to /usr/local
    3. create a sym link to /usr/local/phantomjs, eg. ln -s phantomjs-1.9.2-linux-x86_64/ phantomjs
    4. Open /usr/local/opmantek/conf/opFlow.nmis, make sure this line 'phantomjs_executable' => '/usr/local/phantomjs/bin/phantomjs' is valid and points to the executable
  2. Ensure auth mode is not set to apache in nmis8/conf/Config.nmis, 'auth_method_1' => , also make sure auth is removed from apache config file 01opmantek.conf, and restart apache if necessary.
  3. Configure the email section of conf/opFlow.nmis 

    Code Block
    #the email section needs to be made valid
    'email' => {
     'mail_from' => 'open-audit_enterprise@yourdomain.com',
     'mail_password' => 'your_password',
     'mail_server' => 'smtp.yourdomain.com',
     'mail_server_port' => 25,
     'mail_subject_prefix' => '[mymagictag]',
     'mail_use_tls' => 'true',
     'mail_user' => 'your_user_account@your_domain.com'
     },
    
    # example Gmail configuration:
    'email' => {
     'mail_from' => 'user@gmail.com',
     'mail_password' => 'gmailPassword',
     'mail_server' => 'smtp.gmail.com',
     'mail_server_port' => 587,
     'mail_subject_prefix' => '[Report]',
     'mail_use_tls' => 'true',
     'mail_user' => 'user@gmail.com'
     },   
  4. [OPTIONAL] If you would like hourly reports to be emailed, configure the EmailReportsHourly.sh file, then enable it to be run from opFlowReports-hourly.sh

    Code Block
    vi /usr/local/opmantek/conf/EmailReportsHourly.sh
    
    # set email addresses
    # set sites
    # copy/paste code blocks for each site if that is how you want them sent out
    # create code block for specific reports if you don't want them all sent every time
    
    
    # then uncomment the line to run the EmailReportsHourly.sh script
    
    vi /usr/local/opmantek/bin/opFlowReports-hourly.sh 
    
    ## Uncomment the line below to enable emailing hourly reports
    ## Run Emails
    $OMK/conf/EmailReportsHourly.sh     # <- this line
  5. [OPTIONAL] If you would like daily reports to be emailed, follow the same steps as #2 BUT edit EmailReportsDaily.sh and opFlowReports-daily.sh

Troubleshooting

  1. Reminder, you can always test your settings by running the shell script manually (make sure you don't have email addresses listed that should not receive test emails) 

    Code Block
    # test
    /usr/local/opmantek/conf/EmailReportsHourly.sh
    
    # if you are not getting any emails, check /usr/local/opmantek/logs/opFlowReports.log
  2. Turn on DEBUG if you are having problems and check the logs again:

    Code Block
    # opFlowReports-daily.sh, opFlowReports-hourly.sh, EmailReportsDaily.sh, EmailReportsHourly.sh all have this setting
    DEBUG=false # change this line to:
    
    DEBUG=true
    
    # now run script again and check /usr/local/opmantek/logs/opFlowReports.log