Apache HTTPD Multiple Instances
This guide outlines the procedures for identifying, deploying, and upgrading Apache HTTP Server (HTTPd) instances using integrated scanner mechanisms and automated workflows.
Scanner Process
For running the scans on every software versions, refer to BigFix Scanner for Middleware Application. These results are then used by the Apache HTTPD patching tasks to determine which instances require updates.
Mandatory Pre-Patching Prerequisites
- Apache files cannot be updated while in use. You must stop the Windows Service (e.g., Apache2.4) before patching to prevent file "locking". If a check fails, confirm that no background instances are running.
- The environment requires gcc, make, apr, apr-util, and PCRE to compile source code into executable binaries.
- Features enabled during configuration may require modules like mod_security and mod_wsgi. Users must ensure all third-party dependencies are installed and accessible so the patching script can verify them.
- For Windows only Fixlet deployments, manual caching is required to stage the update. Refer to the Manual caching for detailed instructions.
Patching Process
The Apache HTTPD patching task uses the scanner results to identify lower versions and update them to the patch version specified in the task.
- Select the applicable computer in the BigFix Console to review installed HTTPd versions.
- When the action is executed on the endpoint, the patching task reads the
results.xmlfile and identifies all HTTPd instances present on the system. - For each detected instance, distinct makefiles are created in the
middleware/httpddirectory. - For Windows: All outdated or lower versions of Apache HTTPd are updated in a single execution. Verify that no background instances are running if the patching process fails.
- For Linux: Distinct makefiles are created for all detected instances in the
middleware/httpddirectory by running a configuration check using theconfig.nicefile located in the Build folder of each instance.Note: If the configuration check step fails, verify that all required dependencies are installed and properly configured.
The upgrade process follows a structured sequence to ensure minimal downtime and configuration integrity.
Building and Installing Binaries
The task involves adding the patch source code and executing the configuration check script prior to installation.
For Linux: Users are required to compile and install the updated binaries by
running the make and make install commands using
the provided Makefile. After successful installation, the source code package should
be removed.
Exit codes and their meanings
| Exit code | Action |
|---|---|
| Exit Code 11: Patching of one or more instances failed |
|
| Exit Code 13: Archive file not found |
|
| Exit Code 14: Extraction of the archive failed |
|