Chapter 2. Installing JBoss Core Services Apache HTTP Server on Red Hat Enterprise Linux

1. Open a browser and log in to the Red Hat Customer Portal JBoss Software Downloads page.
2. Select Apache HTTP Server in the Product drop-down menu.
3. Select the correct JBoss Core Services version from the Version drop-down menu.
4. Find Red Hat JBoss Core Services Apache HTTP Server in the list, ensuring that you select the correct platform and architecture for your system, and click the Download link.

5. Extract the downloaded ZIP file to your installation directory.

   Note

   We recommend that you install Apache HTTP Server in the /opt/ directory.

1. On a command line, change directory to HTTPD_HOME.

2. Run the following command to create the apache user group:

   # groupadd -g 48 -r apache

   Copy to Clipboard Toggle word wrap

3. Run the following command to create the apache user in the apache user group:

   # useradd -c "Apache" -u 48 -g apache -s /bin/sh -r apache

   Copy to Clipboard Toggle word wrap

4. From HTTPD_HOME, issue the following command to assign the ownership of the Apache directories to the apache user to allow the user to run Apache HTTP Server:

   # chown -R apache:apache *

   Copy to Clipboard Toggle word wrap

   You can use ls -l to verify that the apache user is the owner of the directory.

1. Go to the HTTPD_HOME/conf.d/ directory and rename the SSL configuration file:

   1. To disable SSL, rename ssl.conf to ssl.conf.disabled.
   2. To re-enable SSL, rename ssl.conf.disabled to ssl.conf.

1. On a command line, change to the HTTPD_HOME directory (root user access not required).

2. Issue the following command:

    ./.postinstall

   Copy to Clipboard Toggle word wrap

1. Stop all instances of Apache HTTP Server:

   pkill httpd

   Copy to Clipboard Toggle word wrap

2. Set the http listen port to higher than 1024 in HTTPD_HOME/conf/httpd.conf:

   Listen 2080
   ServerName <hostname>:2080

   Copy to Clipboard Toggle word wrap

3. Set the https listen port to higher than 1024 in HTTPD_HOME/conf.d/ssl.conf:

   Listen 2443

   Copy to Clipboard Toggle word wrap

4. Change the ownership of the logs directory:

   chown -R apache:apache HTTPD_HOME/logs/

   Copy to Clipboard Toggle word wrap

5. Change the ownership of the run directory:

   chown -R apache:apache HTTPD_HOME/var/run/

   Copy to Clipboard Toggle word wrap

6. Verify that httpd is only running under the apache user, not the root and apache users:

   $ ps -eo euser,egroup,comm | grep httpd
   
   apache   apache   httpd
   apache   apache   httpd
   apache   apache   httpd
   ...

   Copy to Clipboard Toggle word wrap
   Important

   To prevent unauthorized access or modification of files and directories by website users and to prevent unwanted changes to Apache HTTP Server configuration files, limit the file permissions of the apache user and enable SELinux .

1. Log in to the Red Hat Subscription Manager.
2. Click on the Systems tab.
3. Click on the Name of the system to add the subscription to.
4. Change from the Details tab to the Subscriptions tab, then click Attach Subscriptions.
5. Select the check box beside the subscription to attach, then click Attach Subscriptions.

Installing the Apache HTTP Server from RPM packages using YUM

1. On a command line, subscribe to the Apache HTTP Server CDN repositories for your operating system version using subscription-manager:

   # subscription-manager repos --enable <repository>

   Copy to Clipboard Toggle word wrap

   • For Red Hat Enterprise Linux 6:

     • jb-coreservices-1-for-rhel-6-server-rpms

   • For Red Hat Enterprise Linux 7:

     • jb-coreservices-1-for-rhel-7-server-rpms

2. Run the following command as the root user to install the Apache HTTP Server:

   # yum groupinstall jbcs-httpd24

   Copy to Clipboard Toggle word wrap

1. At a shell prompt, run the following command as the root user:

   # yum remove jbcs-httpd24-mod_ssl

   Copy to Clipboard Toggle word wrap

1. Install the selinux-policy-devel package:

   yum install -y selinux-policy-devel

   Copy to Clipboard Toggle word wrap

2. Execute the .postinstall.selinux script:

   cd <httpd_home>
   sh .postinstall.selinux

   Copy to Clipboard Toggle word wrap

3. Make and install the SELinux module:

   cd <httpd_home>/selinux/
   make -f /usr/share/selinux/devel/Makefile
   semodule -i jbcs-httpd24-httpd.pp

   Copy to Clipboard Toggle word wrap

4. Apply the SELinux contexts for Apache HTTP Server:

   restorecon -r <httpd_home>

   Copy to Clipboard Toggle word wrap

5. Add access permissions to the required ports for Apache HTTP Server:

   semanage port -a -t http_port_t -p tcp 6666
   semanage port -a -t http_port_t -p udp 23364

   Copy to Clipboard Toggle word wrap

6. Start the Apache HTTP Server service:

   <httpd_home>/sbin/apachectl start

   Copy to Clipboard Toggle word wrap

7. Check the context of the running process expecting httpd_t:

   $ ps -eZ | grep httpd | head -n1
   
   unconfined_u:unconfined_r:httpd_t:s0-s0:c0.c1023 2864 ? 00:00:00 httpd

   Copy to Clipboard Toggle word wrap

8. To verify the contexts of the httpd directories, for example:

   ls -lZ <httpd_home>/logs/

   Copy to Clipboard Toggle word wrap