• Registered: 2013-12-13
  • Posts: 4

Topic: set allow_url_fopen for glpi-fusioninventory server

allow_url_fopen must be On in order to communicate with fusion agents,
but it's advisable to keep it off globally to improve security.

I think that this shoud be added to /etc/httpd/conf.d/glpi-fusioninventory.conf :

<Directory /usr/share/glpi>       (maybe /usr/share/glpi/plugins/fusioninventory)
  php_admin_flag allow_url_fopen On
</Directory>

  • Remi
  • Remi
  • Administrateur
  • Offline
  • From: Champagne...
  • Registered: 2009-04-28
  • Posts: 3,836

Re: set allow_url_fopen for glpi-fusioninventory server

Ajouté https://github.com/remicollet/remirepo/ … 58eeffd536

Bon en principe c'est ON dans la config php fournie par défaut...
Donc si un admin les bloque il devrait savoir ce qu'il fait...

Côté sécurité, il y a aussi SElinux qui doit bloquer.

Laptop:  Fedora 38 + rpmfusion + remi (SCL only)
x86_64 builder: Fedora 39 + rpmfusion + remi-test
aarch64 builder: RHEL 9 with EPEL
Hosting Server: CentOS 8 Stream with EPEL, rpmfusion, remi

Remi's Website

  • Registered: 2013-12-13
  • Posts: 4

Re: set allow_url_fopen for glpi-fusioninventory server

I notice there is a new upstream release 0.84+2.0, could you please package it?
Thank you for your efforts.

  • Remi
  • Remi
  • Administrateur
  • Offline
  • From: Champagne...
  • Registered: 2009-04-28
  • Posts: 3,836

Re: set allow_url_fopen for glpi-fusioninventory server

Added to my (very long) TODO

Laptop:  Fedora 38 + rpmfusion + remi (SCL only)
x86_64 builder: Fedora 39 + rpmfusion + remi-test
aarch64 builder: RHEL 9 with EPEL
Hosting Server: CentOS 8 Stream with EPEL, rpmfusion, remi

Remi's Website

  • Remi
  • Remi
  • Administrateur
  • Offline
  • From: Champagne...
  • Registered: 2009-04-28
  • Posts: 3,836

Re: set allow_url_fopen for glpi-fusioninventory server

Done, see http://blog.famillecollet.com/post/2013 … 84.2#c5265

Laptop:  Fedora 38 + rpmfusion + remi (SCL only)
x86_64 builder: Fedora 39 + rpmfusion + remi-test
aarch64 builder: RHEL 9 with EPEL
Hosting Server: CentOS 8 Stream with EPEL, rpmfusion, remi

Remi's Website

  • Registered: 2013-12-13
  • Posts: 4

Re: set allow_url_fopen for glpi-fusioninventory server

Tested now, no problems so far, but I had to adjust again allow_url_fopen to the entire /usr/share/glpi directory. When it's restricted to /usr/share/glpi/plugins/fusioninventory, the message 'PHP allow_url_fopen is off, can't wake agent to do inventory' appears when forcing inventory.

  • Remi
  • Remi
  • Administrateur
  • Offline
  • From: Champagne...
  • Registered: 2009-04-28
  • Posts: 3,836

Re: set allow_url_fopen for glpi-fusioninventory server

I don't understand.....
Will need to ask the plugin dev.

Laptop:  Fedora 38 + rpmfusion + remi (SCL only)
x86_64 builder: Fedora 39 + rpmfusion + remi-test
aarch64 builder: RHEL 9 with EPEL
Hosting Server: CentOS 8 Stream with EPEL, rpmfusion, remi

Remi's Website

  • Remi
  • Remi
  • Administrateur
  • Offline
  • From: Champagne...
  • Registered: 2009-04-28
  • Posts: 3,836

Re: set allow_url_fopen for glpi-fusioninventory server

Dans la prochaine version, on pourra virer cette directive
=> http://forge.fusioninventory.org/issues/2397

Laptop:  Fedora 38 + rpmfusion + remi (SCL only)
x86_64 builder: Fedora 39 + rpmfusion + remi-test
aarch64 builder: RHEL 9 with EPEL
Hosting Server: CentOS 8 Stream with EPEL, rpmfusion, remi

Remi's Website