How to upgrade Apache, PHP, MySQL?

Question

How to upgrade Apache, PHP, MySQL?

I have a XServe running 10.6.6 that is hosting a bunch of sites. These sites require PHP and MySQL, and are all controlled thru the OSX Server Admin tool.

Our web security team has found that Apache, PHP and MySQL are not the most current versions, and want us to upgrade to be compliant. I've researched everywhere, and can't find an easy solution to do these updates.

Can ANYONE offer any advice, insight or point me in a direction to assist????

Not sure why this has to be so hard.

Thanks!

MacBook Pro 17", iMac 2.8 Ghz Intel Core 2 Duo,iMac 1.25 GHz G4, iMac 450 MHz G3, Mac OS X (10.6.6), iPhone Edge, 3G, 3Gs, 4, AppleTV1st Gen & 2nd Gen, iPod Nano

Posted on Feb 10, 2011 10:32 AM

Reply

Answer 1

AK_Mike

Level 4

1,233 points

Feb 10, 2011 10:48 AM in response to AtomicAgeMedia

The difficulty is due to how the open source packages of PHP, MySQL, and Apache are modified by Apple to integrate with the server installation.

The only sites I know that shed light on these issues are www.afp548,com and http://osx.topicdesk.com/

There may be some stout-hearted individuals out there who have compiled and packaged installers for the items in question but mostly you will be on your own. If you chose to compile the software you will need to be aware of dependencies, file locations, and the possible need to modify LaunchDaemon plists and other config files.

You can pretty much install anything you want, but if the OS does not where the software location it will do no good. Also, if you do get your updated software installed be aware that you may not be able to use Server Admin to control the service any longer.

The websites and any discussion forum for Apache, PHP, and MySQL would also be another place to look as the odds are you are not the first to need an interim update.

You will also want to be sure you have installed all the current OS and security updates. Many times Apple will roll a patch for one or more open source programs into an update.

Good Luck

Reply

Answer 2

Feb 11, 2011 7:47 AM in response to AK_Mike

Yep. I figured these were specific modified installs of the packages. Starting with Apache, the instructions on their site were straight forward, but certain files that they referred to, are not in the version included on the OSX DVD (ie: Apache calling for a modification of the config.nice file, which isn't on my server). As well, other than package installs for PHP (ie: Entropy), the command line instructions look like they'd take forever to execute, and I'm so unfamiliar with Terminal, that I wouldn't be able to troubleshoot if a problem arose.

It's unfortunate, we have 2 XServes online, that we are required to have the latest installs of certain software packages, and there's no easy, straightforward way to execute while retaining the use of the Server Admin app.

Thanks for your reply.. you confirmed what I already thought. With Apple dropping the XServe, I'm sure that nothing will ever be written to allow easy updates that work with OSX. The entire interface that the Server Admin provides, has made it so easy for a person like me (graphic designer) to run our servers... best part of them, being Macs.

Reply

Answer 3

AK_Mike

Level 4

1,233 points

Feb 11, 2011 2:58 PM in response to AtomicAgeMedia

While it is true that Apple has dropped the Xserve, Mac OS X Server software is alive and well and still in development.

The current version is 10.6.6 with 10.6.7 seeded for testing.

It has always been the case with OS X client and server that the majority of the OS used open source software that was modified to Apple's way of thinking.

I would just tell your "web security team" to back off unless they are willing to compile, test, install, and bear full responsibility for whatever updates they have their panties in a twist over.

You have two choices, you install any OS and security updates released by Apple and tell them your server is as updated as it can be or run the risk of cratering your server with a "roll your own" update that you download and compile yourself.

Don't overlook the possibility that if you are successful in applying your own updates you could find that future OS updates and security updates may not be successfully installed because you mucked with the installation and you can no longer administer the server with the Apple server tools.

If the "web security team" refuse to shut up, I recommend you may be forced to spend some $$$ for a consultant or Apple Engineer to develop a solution for you.

http://consultants.apple.com/

http://www.apple.com/support/security/

Reply

Answer 4

Feb 17, 2011 9:28 AM in response to AK_Mike

Thanks for the info. We're requesting a waiver 'til the next security update is released. I have some inside knowledge of Apple fixing certain issues.

I work for a division of the Federal Government, so telling my "security" things like that, just wouldn't play out well. 🙂

Reply