Author Topic: MBG - how to update  (Read 9234 times)

Offline DevAudio

  • Contributer
  • *
  • Posts: 7
  • Karma: +0/-0
    • View Profile
MBG - how to update
« on: November 22, 2011, 04:53:27 PM »
So I have an old MBG VM that needs to be updated. I've searched the forum, but I'm not finding anything, I can't find any setting in the web interface, and the package manager (YUM) isn't configured with any repositories.

What is the procedure for updating one of these?

Thanks for your time!


Offline martyn

  • Hero Member
  • *****
  • Posts: 688
  • Country: au
  • Karma: +10/-0
    • View Profile
Re: MBG - how to update
« Reply #1 on: November 23, 2011, 04:58:02 PM »
You should definately not be updating via yum as if you managed to you would end up with an unsupported server.
You need to upgrade via the blades pages on the MBG web interface.

What version are you currently running and do you have current software assurance though?

Offline DevAudio

  • Contributer
  • *
  • Posts: 7
  • Karma: +0/-0
    • View Profile
Re: MBG - how to update
« Reply #2 on: November 23, 2011, 05:42:28 PM »
I never looked under blades. Very non-intuitive interface decision by Mitel there. Found the updates section. That was what was needed! Thank you very much!

Offline martyn

  • Hero Member
  • *****
  • Posts: 688
  • Country: au
  • Karma: +10/-0
    • View Profile
Re: MBG - how to update
« Reply #3 on: November 23, 2011, 05:53:47 PM »
No worries.

It isn't actually designed by Mitel though. MSL is built on an SME server base, so they are just utilising what is already there.

If you get stuck with other questions that might be OS specific, I always find that doing a quick search on SME server will provide an answer, otherwise asking here also works as well.  :)

Offline DevAudio

  • Contributer
  • *
  • Posts: 7
  • Karma: +0/-0
    • View Profile
Re: MBG - how to update
« Reply #4 on: November 29, 2011, 12:45:59 PM »
I updated the MBG successfully, but even after installing the latest available updates, the purpose of the update is unresolved. The MBG VMware virtual appliance uses an older (2.2.3 - released late 2010) version of Apache that is vulnerable to a DoS attack that can overload the CPU.

Having said that, apache has a workaround that involves modifying it's configuration file, which SME Linux supports. The question is will making a mod to a config file render the MBG unsupported?

The server is running Mitel Standard Linux 9.3.8.0 and V7.0.12.0 of the MBG application.

Any thoughts/help on this?

Offline ralph

  • Mitel Forums Admin
  • Hero Member
  • *****
  • Posts: 5767
  • Country: us
  • Karma: +469/-0
  • Published Author: http://amzn.to/2dcYSY5
    • View Profile
Re: MBG - how to update
« Reply #5 on: November 30, 2011, 05:53:43 AM »
Quote
The question is will making a mod to a config file render the MBG unsupported?]The question is will making a mod to a config file render the MBG unsupported?

Here's my opinion:
Yes and No.

Yes it will render it unsupported.
No - they wouldn't know.   Don't ask - don't tell.

I've never been asked what ver of appache I'm using.   No one has ever looked.
But, if they look (very doubtful) then, depending on the engineer on the support call, they'll just tell you to re-install it and call back if you still have a problem.

If it works then you don't need support.

Ralph
« Last Edit: April 23, 2014, 01:40:14 PM by ralph »

Offline DevAudio

  • Contributer
  • *
  • Posts: 7
  • Karma: +0/-0
    • View Profile
Re: MBG - how to update
« Reply #6 on: November 30, 2011, 09:16:00 AM »
Thank you Ralph. Rather than update Apache, I just added a line to the SME Linux template that controls /etc/httpd/conf/httpd.conf that turns off the legacy feature designed to support IE 3 and Netscape 3(!!!) and that negates the vulnerability without risking having the Mitel package updater break during the next update cycle, etc.

For any other admin out there that is interested in securing thier MBG (and by extension the VMware host if you're using a virtual appliance) against script-kiddies wielding ApacheKiller:
You can't edit the config file directly or it will just get overwritten at next boot. Google about how SME linux uses templates to create these config files and how to modify the template. All you're trying to do is get the following line added anywhere into the httpd.conf file:
RequestHeader unset Request-Range

Offline bluewhite4

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 1041
  • Country: us
  • Karma: +20/-0
    • View Profile
Re: MBG - how to update
« Reply #7 on: November 30, 2011, 09:53:46 AM »
Not to highjack your thread, but I thought MBG was unsupported as a vm anyway? Thus why a vMAS has to have a separate physical MBG server to run teleworkers.

Offline DevAudio

  • Contributer
  • *
  • Posts: 7
  • Karma: +0/-0
    • View Profile
Re: MBG - how to update
« Reply #8 on: November 30, 2011, 10:02:41 AM »
You could be right; I have no idea. You're dealing with an engineer who has inherited a network and is still trying to absorb the details of his new environment.

Having said that, I'd imagine that supported or not, the vulnerability would remain - unless the physical MBGs get different software and the Apache version is 2.3.21 or greater (which is a very recent release) they're still vulnerable to ApacheKiller, Metaspl0it, etc.  :-\

Offline martyn

  • Hero Member
  • *****
  • Posts: 688
  • Country: au
  • Karma: +10/-0
    • View Profile
Re: MBG - how to update
« Reply #9 on: November 30, 2011, 05:20:11 PM »
vMBG is supported, and is published by Mitel just the same as vMCD, vUCA, and vMAS is! OVA files are available to download for all of them.

There are restrictions around how it can be run, but it is supported and runs just as well virtualised as it does on a physical server.

Offline bluewhite4

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 1041
  • Country: us
  • Karma: +20/-0
    • View Profile
Re: MBG - how to update
« Reply #10 on: November 30, 2011, 05:30:16 PM »
vMBG is supported, and is published by Mitel just the same as vMCD, vUCA, and vMAS is! OVA files are available to download for all of them.

There are restrictions around how it can be run, but it is supported and runs just as well virtualised as it does on a physical server.

Sorry, yes I see that. I spoke without looking, thus why I phrased it as a question. I knew that teleworkers could not be offered of a vMAS, as it is only LAN mode, so incorrectly assumed that was a MBG limitation as well.


 

Sitemap 1 2 3 4 5 6 7 8 9 10