[Spacewalk-list] migrate spacewalk server 2.4 from on premise server to AWS instance

2017-02-02 Thread Yu, Matthew 
Hi,

I would like to migrate my spacewalk 2.4 to a new AWS instance (same CentOS 7.3 
64 bit)  with different server name  and same version of spacewalk 2.4.
The current setup is the spacewalk server is connected to an another satellite 
server which hosts all the Local mirror Red Hat repositories.

I have followed the below steps and run into some issue with the ssl error for 
osa-dispather.log and my clients don't check in with the spacewalk server.

Is this a complete list of thing for migrating the spacewalk server ?  Thanks.

var/log/rhn/osa-dispatcher.log

2017/01/31 21:32:25 -04:00 8037 0.0.0.0: osad/jabber_lib.connect('ERROR', 
'Traceback (most recent call last):\n  File "/usr/
share/rhn/osad/jabber_lib.py", line 642, in connect\n
ssl.do_handshake()\nError: [(\'SSL routines\', \'SSL3_GET_SERVER_CE
RTIFICATE\', \'certificate verify failed\')]\n')


Below is my steps.

Installation step:


Part I
Backup the DB on the source server. '

db-control online-backup /db_dump/postgresql-bk-1-31-2107

part II:

1. install Centos 7
2. install new spacewalk 2.4 and

yum install spacewalk-setup-postgresql

yum install spacewalk-postgresql

spacewalk-setup --disconnected

3. Restore and upgrade the db schema
==> Go to the target Server
=> db-control restore /var/satellite/postgresql-bk-1-31-2107
=> spacewalk-schema-upgrade

4. Restore /var/satellite & ~nocpulse/.ssh/nocpulse-identity* (with permissions 
& selinux)


> 4a. If you're keeping your original hostname:

  # Restore /root/ssl-build and rebuild the RPM with previous certificates:

> * Restore content of /root/ssl-build
> * cd /root
> * rhn-ssl-tool --gen-server --rpm-only

  # Now you have to install the RPM with your certs (previous command will tell
you its exact path):

> * rpm -Uvh /root/ssl-build//rhn-org-httpd-ssl-key-pair-
> .noarch.rpm

  # And now you have to deploy the original CA cert:

> * rhn-deploy-ca-cert.pl \
> --source-dir=/root/ssl-build \
> --target-dir=/var/www/html/pub/
>
>
> 4b. If you're switching to a new hostname:
>
> * rhn-ssl-dbstore -vvv --ca-cert=/root/ssl-build/RHN-ORG-TRUSTED-SSL-CERT
> * spacewalk-hostname-rename 

__
Confidentiality Notice:  The information contained in this e-mail and any 
attachment(s) is confidential and for the use of the addressee(s) only.  If you 
are not the intended recipient of this e-mail, do not duplicate or redistribute 
it by any means.  Please delete this e-mail and any attachment(s) and notify us 
immediately.  Unauthorized use, reliance, disclosure or copying of the contents 
of this e-mail and any attachment(s), or any similar action, is strictly 
prohibited.  Fitch Ratings reserves the right, to the extent permitted by 
applicable law, to retain, monitor and intercept e-mail messages both to and 
from its systems.

This e-mail has been scanned by the MessageLabs Email Security System.  For 
more information, please visit http://www.messagelabs.com/email.
_
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list

Re: [Spacewalk-list] Trying to activate my cert

2017-02-02 Thread Boyd, Robert 
There is no –rhn-cert option for that command.  Don’t specify it on that 
command.  Why are you trying to do this step anyway?  Did you do the normal 
install and startup?  This is normally done by the  spacewalk-setup.

Robert

Robert Boyd
Sr. Systems Engineer
PeopleFluent
p. 919-645-2972 | c. 919-306-4681
e. robert.b...@peoplefluent.com

[http://mktg.peoplefluent.com/rs/peopleclick/images/140410_PF4colorLOGOx150.png]
Click here to experience the power of the new 
PeopleFluent Mirror Suite ™
Visit: www.peoplefluent.com | Read: PeopleFluent 
Blog | Follow: 
@PeopleFluent



From: spacewalk-list-boun...@redhat.com 
[mailto:spacewalk-list-boun...@redhat.com] On Behalf Of Eric Korth
Sent: Thursday, February 02, 2017 1:46 PM
To: spacewalk-list@redhat.com
Subject: [Spacewalk-list] Trying to activate my cert

Hello,
When issuing the below command. I get the following:

rhn-satellite-activate --disconnected 
--rhn-cert=/usr/share/spacewalk/setup/spacewalk-public.cert
Usage: rhn-satellite-activate [options]

rhn-satellite-activate: error: no such option: --rhn-cert

This is a brand new install.

Any ideas?

Thank you very much in advance!
Eric Korth
Sr. Systems Administrator
404-367-1992   direct
770-354-1450   mobile
eric.ko...@greenskycredit.com
www.greensky.com
[http://www.greenskycredit.com/images/gs-logo-new-tm-small.jpg]
This email contains information from GreenSky, LLC which may be confidential 
and privileged. The information is intended to be for the use of the 
individual(s) named above. If you are not the intended recipient, please be 
aware that any disclosure, copying, distribution or use of this email and its 
contents is prohibited. If you have received this email in error, please delete 
it and notify us by e-mail immediately.

LICENSES:NMLS #1416362; CT SLC-1416362; NJ MT #1501607 C22
___
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list

[Spacewalk-list] Trying to activate my cert

2017-02-02 Thread Eric Korth 
Hello,
When issuing the below command. I get the following:

rhn-satellite-activate --disconnected 
--rhn-cert=/usr/share/spacewalk/setup/spacewalk-public.cert
Usage: rhn-satellite-activate [options]

rhn-satellite-activate: error: no such option: --rhn-cert

This is a brand new install.

Any ideas?

Thank you very much in advance!


Eric Korth

Sr. Systems Administrator

404-367-1992

770-354-1450

eric.ko...@greenskycredit.com


GreenSky 

This email contains information from GreenSky, LLC which may be confidential 
and privileged. The information is intended to be for the use of the 
individual(s) named above. If you are not the intended recipient, please be 
aware that any disclosure, copying, distribution or use of this email and its 
contents is prohibited. If you have received this email in error, please delete 
it and notify us by e-mail immediately.

LICENSES: NMLS #1416362; CT SLC-1416362; NJ MT #1501607 C22

___
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list

Re: [Spacewalk-list] Spacewalk 2.2 PAM module NOT found !!!

2017-02-02 Thread Michael Hamrich 
unsubscribe

On Tue, Jan 31, 2017 at 12:51 PM, Rose Dowson 
wrote:

> Hi,
>
>  Yes, I edited the /etc/rhn/rhn.conf fileI added* pam_auth_service=
> system_auth*
>  and I restarted Spacewalk, but I haven't a checkbox PAM enabled :(
>
> Thank you for the help.
>
> Best Regards,
>
> 2017-01-31 16:47 GMT+01:00 Sebastian Meyer :
>
>> Hi,
>>
>> you created the PAM file, edited the /etc/rhn/rhn.conf file and
>> restarted Spacewalk?
>>
>> If you did all that, I'm not sure why that field would be disabled.
>>
>> Regards
>> Sebastian
>>
>> On 30.01.2017 16:55, Rose Dowson wrote:
>> > Hi,
>> >
>> >   I have the same problem. I did all the configuration but when I want
>> to
>> > create a user like this :
>> >
>> > "To enable a user to authenticate against PAM, select the checkbox
>> > labeled *Pluggable
>> > Authentication Modules (PAM)*. It is positioned below the password and
>> > password confirmation fields on the *Create User* page"
>> >
>> > I haven't
>> >
>> > *checkbox labeled Pluggable Authentication Modules (PAM).*
>> > So what should I do to activate this?
>> >
>> > Thank you for the help.
>> >
>> > Best Regards,
>> >
>> > 2017-01-30 13:37 GMT+01:00 Sebastian Meyer :
>> >
>> >> Hi,
>> >>
>> >> PAM authentication is documented in the Red Hat documents for
>> Satellite:
>> >> https://access.redhat.com/documentation/en-US/Red_Hat_Satell
>> ite/5.6/html/
>> >> Installation_Guide/sect-Installation_Guide-Maintenance-
>> Implementing_PAM_
>> >> Authentication.html
>> >>
>> >> Regards,
>> >> Sebastian
>> >>
>> >> On 29.01.2017 14:54, KHOUILDI Arij wrote:
>> >>> Hi,
>> >>>
>> >>>   I have installed spacewalk 2.2 and I want to have the authentication
>> >> via PAM. I did all the configuration but, when I want to create new
>> user
>> >> and check PAM I haven't this option.
>> >>> I didn't know what is the problem.
>> >>> Please see the attached files.
>> >>>
>> >>>
>> >>> Thank you for the help.
>> >>>
>> >>> Best Regards,
>> >>>
>> >>> Arij Khouildi
>> >>> Ingénieur Système
>> >>> Sagemcom Software & Technologies
>> >>> 34, Avenue de Paris Mégrine 2033
>> >>> Mobile: (+216) 58 58 25 56
>> >>> Email: arij.khoui...@sagemcom.com
>> >>>
>> >>>
>> >>> " Ce courriel et les documents qui lui sont joints peuvent contenir
>> des
>> >>> informations confidentielles ou ayant un caractère privé.
>> >>> S'ils ne vous sont pas destinés nous vous signalons qu'il est
>> >> strictement interdit de les
>> >>> divulguer, de les reproduire ou d'en utiliser de quelque manière que
>> ce
>> >>> soit le contenu. Si ce message vous a été transmis par erreur, merci
>> d'en
>> >>> informer l'expéditeur et de supprimer immédiatement de votre système
>> >>> informatique ce courriel ainsi que tous les documents qui y sont
>> >> attachés"
>> >>>
>> >>>**
>> >>>
>> >>> " This e-mail and any attached documents may contain confidential or
>> >>> proprietary information. If you are not the intended recipient, you
>> are
>> >>> notified that any dissemination, copying of this e-mail and any
>> >> attachments
>> >>> thereto or use of their contents by any means whatsoever is strictly
>> >>> prohibited. If you have received this e-mail in error, please advise
>> the
>> >>> sender immediately and delete this e-mail and all attached documents
>> >>> from your computer system."
>> >>> #
>> >>>
>> >>>
>> >>>
>> >>>
>> >>> ___
>> >>> Spacewalk-list mailing list
>> >>> Spacewalk-list@redhat.com
>> >>> https://www.redhat.com/mailman/listinfo/spacewalk-list
>> >>>
>> >>
>> >> --
>> >> Sebastian Meyer
>> >> Linux Consultant & Trainer
>> >> Mail: me...@b1-systems.de
>> >>
>> >> B1 Systems GmbH
>> >> Osterfeldstraße 7 / 85088 Vohburg / http://www.b1-systems.de
>> >> GF: Ralph Dehner / Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537
>> >>
>> >> ___
>> >> Spacewalk-list mailing list
>> >> Spacewalk-list@redhat.com
>> >> https://www.redhat.com/mailman/listinfo/spacewalk-list
>> >
>> >
>> >
>> > ___
>> > Spacewalk-list mailing list
>> > Spacewalk-list@redhat.com
>> > https://www.redhat.com/mailman/listinfo/spacewalk-list
>> >
>>
>> --
>> Sebastian Meyer
>> Linux Consultant & Trainer
>> Mail: me...@b1-systems.de
>>
>> B1 Systems GmbH
>> Osterfeldstraße 7 / 85088 Vohburg / http://www.b1-systems.de
>> GF: Ralph Dehner / Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537
>>
>> ___
>> Spacewalk-list mailing list
>> Spacewalk-list@redhat.com
>> https://www.redhat.com/mailman/listinfo/spacewalk-list
>>
>
>
> ___
> Spacewalk-list mailing list
> Spacewalk-list@redhat.com
> https://www.redhat.com/mailman/listinfo/spacewalk-list
>



-- 
Michael Hamrich
Linux Engineer & Field Marshal for Pergoies
CoolWebdesign, llc.
V