Re: [Spacewalk-list] jpackage generic vs repo
On Sun, Aug 09, 2015 at 04:53:45PM -0400, Infused W JC wrote: The instructions use only jpackage-generic. Where as if you go here http://www.jpackage.org/yum.php and download http://www.jpackage.org/jpackage50.repo. You will get the updates enabled as well. Will any of those updates actually update anything on a Spacewalk installation? I agree that updates would likely be nice to have enabled at least for potential security fixes. The repo also has fc, rhel, etc defined, but not enabled as well. Which is not that useful because at least for Fedora, the last repo seems to be for Fedora 14, EOL'd over three years ago. In the past we've hit multiple issues with dependencies when new updates in newer Fedora releases broke stuff for bits that came from jpackage, so we've tried to keep the jpackage footprint at minimum. I just wanted to know why the repo is not part of the instructions. Historical reasons mostly, and not breaking what works. If you are able to verify that having that http://www.jpackage.org/jpackage50.repo does not break things on all platforms, it might be worth considering. -- Jan Pazdziora Senior Principal Software Engineer, Identity Management Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] jpackage generic vs repo
On Thu, Jul 30, 2015 at 07:37:05PM -0400, Infused W JC wrote: I wanted to known why the instructions use just the jpackage generic instead of using the repo. The jpackage repo also had updates. Any thoughts? What do you mean by just the jpackage generic instead of using the repo? The instructions at https://fedorahosted.org/spacewalk/wiki/HowToInstall#JPackageAllsystems define path to the jpackage generic yum repo. -- Jan Pazdziora Senior Principal Software Engineer, Identity Management Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Cobbler Version in 2.3
On Mon, Jun 22, 2015 at 01:52:16PM -0400, Neil Hanlon wrote: Does anyone know if it's possible to run a newer version of cobbler with Spacewalk. and if so, how I might go about doing this? The version shipping with Spacewalk 2.3 is very old, and the cobbler replicate functionality is broken (new classes to sync that don't exist in the spacewalk-provided version). If you install cobbler-epel package, it will pull in whatever is the latest cobbler version in EPEL instead of the cobbler 2.0 shipped in Spacewalk repo. -- Jan Pazdziora Senior Principal Software Engineer, Identity Management Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] add suse 11 sp3 to ipa
On Tue, Jun 09, 2015 at 01:52:44PM +, mohammad sereshki wrote: hiWould you please let me know is it possible to add suse 11 sp3 to IPA? and how it is possible?Regards What exactly do you mean by IPA in this context? -- Jan Pazdziora Senior Principal Software Engineer, Identity Management Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Spacewalk LDAP (Using Quest PAM Authentication)
On Mon, Jan 05, 2015 at 12:09:37PM -0800, Glen Collins wrote: Hi Jan, No, I did not use the IPA documentation. The reason, everything is handled for me using the Question authentication PAM module. All the encryption, kerberos and all that good stuff is done for me. I just followed the documentation on the Satellite product and did the changes to: /etc/rhn/rhnf.conf and added pam_auth_service = rhn-satellite Moved or created what I think is the correct pam configuration and created the file /etc/pam.d/rhn-satellite with those entries. I then restarted everything, created my AD account in SW, checked the PAM checkbox. Created the necessary DG with the appropriate permissions in spacewalk making sure it matched the AD group name as it's displayed. Logged in to SW with my AD account, got in but only very limited persions. The group I gave the permissions too has complete access to SW, Org Admin and SW Admin. So I should see ever menu and option. I don't, just a standard user. So I'm wondering if there is logging in tomcat what I can turn on to see what's being returned. I used quests tools and it does bring back the correct AD group with my ID in it. I'm just wondering how tomcat is doing everything in the backend. But there is no logging other than unable to authenticate if I get my password wrong. I also kind of pieced this together using: http://www.redhat.com/archives/spacewalk-list/2013-July/msg00037.html It's using winbind so I started at step 4. No luck there either. I think the issue is I have the PAM setup incorrect in /etc/pam.d/rhn-satellite, but without any kind of logging it's hard to diagnose. I did try and turn on the actual PAM logging/debugging, but it game not real low level logging. I also looked at someone using centrify: http://liniks.com/?p=253 And that gave me no luck either. Pretty much the same thing. So if anyone has any good ideas it would be appreciated. The external group role mapping (and auto-provisioning of users alike) only works when you use the external authentication. When PAM is used, that part will not work because the PAM stack does not have means to retrieve the additional attributes and group information. -- Jan Pazdziora Principal Software Engineer, Identity Management Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Shibboleth protection for spacewalk web interface
On Fri, Oct 24, 2014 at 05:50:49PM +, Andy Ingham wrote: I'm considering adding Shib authentication to my spacewalk server (to make it an SP within our Duke campus environment). I'm hoping it will be a fairly straightforward setup, but anyone know of any particular gotchas with Shib/spacewalk(or satellite)? You should be able to use mod_auth_mellon and tomcat's tomcatAuthentication=false. Yours, -- Jan Pazdziora Principal Software Engineer, Identity Management Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] fedora 21 and IPA 4.0.3? working for anyone?
On Mon, Sep 29, 2014 at 02:56:48PM -0700, Janelle wrote: Hi, I'm new to IPA - and was trying out the newest version of 4.0.3 with Fedora Server 21 testing -- it continues to die during the install at: Configuring certificate server (pki-tomcatd): Estimated time 3 minutes 30 seconds [1/26]: creating certificate server user [2/26]: configuring certificate server instance [3/26]: stopping certificate server instance to update CS.cfg [4/26]: backing up CS.cfg [5/26]: disabling nonces [6/26]: set up CRL publishing [7/26]: starting certificate server instance --- consistently dies at step 7 and checking install log show: 2014-09-29T21:14:30Z DEBUG wait_for_open_ports: localhost [8080, 8443] [...] Would anyone have any ideas on finding out what is going on here? I see the timeout of 5 minutes - but why waiting on ports that are not part of IPA? I strongly suspect you are hitting https://bugzilla.redhat.com/show_bug.cgi?id=1117673 Is there a particular reason why you want to go with unreleased Fedora? -- Jan Pazdziora Principal Software Engineer, Identity Management Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] taskomatic error
On Tue, Aug 19, 2014 at 12:41:42PM +, Broyles, Michael wrote: Michael, On the Satellite server side, please instruct someone from Red Hat to then make this correction on this thread inside the KB: https://access.redhat.com/solutions/43122 It appears to be the same topic at hand. The problem here is that Satellite will only receive the ability to have those values in /etc/rhn/rhn.conf with the next release. So the solution on the page might be the best solution for Satellite at this point. Many of us use a combination of Satellite and Spacewalk documentations to get the job done. This is one of the cases and times when the difference between those two seems important. -- Jan Pazdziora Principal Software Engineer, Identity Management Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] migrating to postgresql issue
On Mon, May 05, 2014 at 09:51:09AM +0200, Milan Zázrivec wrote: On Friday 02 May 2014 12:29:08 Espinola, Derek - 0663 - MITLL wrote: Hi, I am running spacewalk 2.1 with an oracle db 11.2. As I go through the steps of migrating to postgresql, when making the oracle dump I get an error because it can't read /etc/sysconfig/rhn/schema-dump. This directory is missing on my installation of spacewalk. Anyone have this issue when migrating? Is there a way around this? What does your error look like exactly? error: file /etc/sysconfig/rhn/schema-dump: No such file or directory It comes from that rpm -qf command. Maybe https://fedorahosted.org/spacewalk/wiki/PostgreSQLFromOracle should have spacewalk-dump-schema --raw /tmp/spacewalk-oracle.dump as The dumper command there? The database connect parameters are likely not needed while --raw is. Alternatively, the script could default $raw to 1 if that directory does not exist (== we are on Spacewalk). -- Jan Pazdziora Principal Software Engineer, Identity Management Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Spacewalk with enforced SELINUX
On Wed, Mar 12, 2014 at 03:18:10PM +0100, Pierre Casenove wrote: Hello, I still have one last question on SELINUX context. As /data/satellite, which is my mount point, is a NFS exported filesystem, what do I have to do? - Only set spacewalk_nfs_mountpoint selinux boolean - Set the boolean and mount the filesystem with the context option *mount -t nfs -o context=**system_u:object_r:spacewalk_data_t** server:/shared/foo /mnt/foo* - Run restorecon on /data/satellite? I'm a bit lost on selinux and NFS... Run spacewalk-make-mount-points /data/satellite That should detect that it's a NFS mount (well, it will detect that the ls -lZ /data/satellite shows nfs_t label) and it will set the needed SELinux booleans. -- Jan Pazdziora Principal Software Engineer, Identity Management Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Spacewalk 2.1 Upgrade
On Wed, Feb 26, 2014 at 01:42:44PM -0500, Grant Gainey wrote: - Original Message - I was having a look at some other things and noticed the following: 2.1 isn't *quite* released yet. The doc was updated early to get more eyes on it. In the mean time, upgrading to 2.0 is described at https://fedorahosted.org/spacewalk/wiki/HowToUpgrade20 -- Jan Pazdziora Principal Software Engineer, Identity Management Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Rollback Nightly to stable version of spacewalk.
On Wed, Jan 22, 2014 at 10:47:43PM +0530, papinder singh wrote: I am try to implement spacewalk. By mistake I had installed NIGHTLY version of spacewalk on production env. And create all channels, as per my requirement. But didn't connect any system with spacewalk ( I am lucky at that point ). Later I read nightly is for development and research purpose ( no doubt nightly interface is fantastic). So is there any way to rollback to spacewalk stable release without losing same configuration and all channels. There is no easy way to rollback to Spacewalk 2.0. You should be able to export the channels thou, ditch the installation, install Spacewalk 2.0 instead, and import the channels again. By the way, which documentation did you follow? We want to make sure people don't use Spacewalk nightly by mistake. -- Jan Pazdziora Principal Software Engineer, Identity Management Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] SELinux with spacewalk
On Wed, Jan 15, 2014 at 04:53:07PM +0100, Amedeo Salvati wrote: Andy, also if you found somethings goes wrong you can create a new selinux module by executing:cat /var/log/audit/audit.log | audit2allow -M local-spacewalksemodule -i local-spacewalk.ppI found it useful with older release of spacewalk / cobblerbest regardsa The most typicaly source of SELinux-related problems in current Spacewalks (and in the majority of stable software with stable SELinux support, really) is that the labelling is off. Which typically means content is stored in locations where the SELinux policy does not expect it. Rather than audit2allow which will add 'allow's and can thus open access amongs components that are meant to be isolated, I recommend finding the cause of the problems and either place content in more standard locations, or using semanage fcontext + restorecon to inform the policy about the type for your content and labelling it on the filesystem. -- Jan Pazdziora Principal Software Engineer, Identity Management Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] SELinux with spacewalk
On Tue, Jan 14, 2014 at 10:47:18AM +0100, Michael Mraka wrote: If you are talking about https://fedorahosted.org/spacewalk/wiki/Features/SELinux then answerd is no - there's no more recent documentation because since then it just works ;). I just updated that wiki page to that effect. -- Jan Pazdziora Principal Software Engineer, Identity Management Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] SELinux with spacewalk
On Mon, Jan 13, 2014 at 05:44:14PM +, Andy Ingham wrote: Thinking of trying to activate SELinux on my spacewalk server. The info I'm finding on the web is all roughly 3 years old (and multiple spacewalk versions behind current). Is there more recent documentation that I failed to find? I'm currently running spacewalk 1.9, on CentOS 6.5. Using the older documentation, I've got these packages installed: spacewalk-selinux osa-dispatcher-selinux spacewalk-monitoring-selinux [ jabberd-selinux -- NOT INSTALLED; NO LONGER AVAILABLE / NECESSARY?] but but have not done any special tweaking of contexts or local policies. Any particular gotchas I should be on the lookout for? Do you currently have SELinux disabled or permissive? -- Jan Pazdziora Principal Software Engineer, Identity Management Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Spacewalk Upgrade Issue
On Tue, Oct 29, 2013 at 04:05:25PM +, Bedorf, Paul wrote: Hi, so I battled with it further and got some progress... here are my latest steps: 1. I am working on a clone spacewalk server, which I have successfully renamed to spacewalk2.corp.mosaic.com absolutely no issues at this point, I can successfully subscribe new clients to spacewalk2 server, alter their subscriptions channels etc... so my spacewalk 1.8 version at that stage is working 100% fine. But your Spacewalk is not 1.8, it is 1.8 nightly as you said in your initial post: On Wed, Oct 23, 2013 at 03:09:42PM +, Bedorf, Paul wrote: Hi, in our environment we are running the following: spacewalk 1.8 nightly To have any chance of upgrading that Spacewalk installation, you would first need to manually upgrade that database schema from your current 1.8 nightly state to 1.8 GA. -- Jan Pazdziora Principal Software Engineer, Identity Management Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Spacewalk Upgrade Issue
On Fri, Oct 25, 2013 at 03:16:18PM +0200, Jonathan Hoser wrote: when upgrading from sw1.8 to sw2.0, did you actually go through 1.9? (you only stated you followed the todos from howtoupgrade19 -- which only does the upgrade things from sw1.9 to sw2.0) as such, your db-scheme is probably missing some columns added in the 1.9 upgrade: [Thu Oct 24 08:20:32 2013] [error] ProgrammingError: column org_id does not exist (^^ taken from the logs you send) So, give it another go, but FIRST upgrade to 1.9 and then do the upgrade to 2.0. Nope. Spacewalk schema upgrades are specifically written in such a way that if spacewalk-schema-upgrade passes, upgrades across all versions were done. So if you have Spacewalk 1.5 and run spacewalk-schema-upgrade while having 2.0 installed, it will list that it will go 1.5 - 1.6 - 1.7 - 1.8 - 1.9 - 2.0 and it will do all those steps. Typically, even the instructions at the latest current https://fedorahosted.org/spacewalk/wiki/HowToUpgrade can be used to skip multiple versions (thou it is only tested going from the previous version), even if for non-schema things, there might be some additional steps that you need to do, so it's better to at least check all the previous HowToUpgrade* documents leading to the current version to see if something more needs to be done. But schema, that will always do all the needed steps for you, in one run. What will *not* work thou is if you try to upgrade from Spacewalk nightly. Spacewalk nightly is non-released snapshot, not having all the changes that the release will have, and when you upgrade from 1.8 nightly (like the OP did), spacewalk-schema-upgrade will assume it is upgrading from released 1.8 and it will skip all the needed steps going from the unreleased snapshot to 1.8 proper. That's why that column org_id is missing in this case. Without manually inspecting all changes that went to the Spacewalk between that nightly snapshot and 1.8 and re-running (manually) all the needed schema upgrade steps, this installation is not upgradable. -- Jan Pazdziora Principal Software Engineer, Identity Management Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] FW: RHEL Patching Scenario
On Wed, Sep 11, 2013 at 12:21:59PM +0200, Milan Zázrivec wrote: On Wednesday, September 11, 2013 03:36:50 PM Chirag Choudhary wrote: Hi Milan, Those files need to be labeled with spacewalk_data_t . What does this mean ? The SELinux label of those files. Do I change the owner to spacewalk_data_t ? Not the owner. SELinux context (visible with ls -Z for example). You can use chcon -t spacewalk_data_t ... to set the context. Beware, it will not survive restorecon. I recommend semanage fcontext. -- Jan Pazdziora Principal Software Engineer, Identity Management Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] add Spacewalk to a existing Cobbler installation
On Tue, Aug 13, 2013 at 01:08:24PM +0200, FRANK Michael wrote: I have a existing Cobbler installation recently updated to 2.4. Is there a way to install spacewalk on the same server in addition to the existing Cobbler installation? If you just want to use the cobbler from Fedora / EPEL, install the cobbler-epel compatibility package and during Spacewalk server installation, cobbler20 will not be installed. However, please note this is just about installation (making rpm dependencies happy). Spacewalk will not pick up your existing cobbler content. -- Jan Pazdziora Principal Software Engineer, Identity Management Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Can't Create New Channel
On Tue, Jul 30, 2013 at 03:53:30AM -0400, Tomas Lestach wrote: I would say your schema isn't in a very good shape. last_modified column of the rhnChannel table has a 'default' set to current_timestamp: last_modified timestamp with local time zone DEFAULT (current_timestamp) NOT NULL, so, you should not fail on last_modified being null. That's not necessarily true. If the INSERT/UPDATE command specifically sets the column to the NULL value, the DEFAULT will not be used. -- Jan Pazdziora Principal Software Engineer, Identity Management Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Just noticed cobbler was updated in EPEL again to version 2.4
On Tue, Jul 30, 2013 at 10:06:08AM -0400, Paul Robert Marino wrote: hey every one I just noticed cobbler has been updated again in EPEL to cobbler 2.4 my question is was spacewalk ever fixed to work with cobbler 2.2 and if so is there an update guide. Spacewalk was changed to give you the choice of staying with the 2.0 which is known to work or using whatever is in EPEL. The last time I was involved with cobbler, the version in EPEL had SELinux-related issues all by itself. So there was nothing to fix on Spacewalk's side. What exactly does not work if you use the EPEL version? -- Jan Pazdziora Principal Software Engineer, Identity Management Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Keepalive for Database Connections?
On Fri, Jun 07, 2013 at 10:30:21AM +0200, s...@mms-dresden.de wrote: First I tried to set SQLNET.EXPIRE_TIME = 10 in /etc/rhn/tns_admin/osa-dispatcher/sqlnet.ora - which should tell the Oracle Instant Client to use its implemented keepalives procedures. It just doesn't work. As pointed out by Michael, this is server-side thing which allows the server to detect dead connections and release server resources. Then I tried to set appropriate TCP-Keepalive Values in the Linux Kernel (sysctl -w net.ipv4.tcp_keepalive_time=600). But the sockets opened by spacewalk don't use SO_KEEPALIVE - which effectively disables tcp-keepalive. Can someone help me out? I believe you need to specify ENABLE=BROKEN in your tnsnames.ora to enable TCP keepalive. -- Jan Pazdziora Principal Software Engineer, Identity Management Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Script output: hash instead the text
On Mon, Jun 03, 2013 at 03:18:02PM +0200, Michael Mraka wrote: Михаил wrote: % Hello! I have a problem on my spacewalk 1.9 installation without depending on target system: % % When I send a remote command on some target system, the command executes successfully, but the output showed on the web-page looks like some one-line hash: % x544553540a4c696e7578206f62732e72736c2e6c6f632032...many_symbols % % Do anybody knows - what is the reason of this and how to fix it? % Thank you. What's your postgresql version? Could it be possible that you have non-standard bytea_output set? More like different client and server versions (is this an external PostgreSQL server, on different machine?). -- Jan Pazdziora Principal Software Engineer, Identity Management Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Spacewalk 1.9 oracle database installation problem
On Thu, May 30, 2013 at 02:16:36PM -0500, Alvin Johnson wrote: I am doing fresh install of Spacewalk. Having problem with the database population as it is stop on with the below error. Is there a patch for this maybe. insert into rhnPackageSyncBlacklist (package_name_id) * ERROR at line 1: ORA-02291: integrity constraint (SPACEWALK.RHN_PACKAGESYNCBL_PNID_FK) violated - parent key not found You are likely hitting bug in Oracle database. Please contact Oracle support to confirm and obtain fix or workaround if they determine it's indeed the case. -- Jan Pazdziora Principal Software Engineer, Identity Management Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] openssl Transaction Check Error
On Fri, May 10, 2013 at 09:09:53AM +0200, ŚLIPEK Krzysztof wrote: rpm -qa|grep openssl openssl-0.9.8e-22.el5_8.4 openssl-devel-0.9.8e-26.el5_9.1 openssl-devel-0.9.8e-26.el5_9.1 openssl-0.9.8e-26.el5_9.1 openssl-0.9.8e-22.el5_8.4 -- On client are installed: Package Name ArchitectureInstalled openssl-0.9.8e-22.el5_8.4 i68610/24/12 4:23:25 PM CEST openssl-0.9.8e-22.el5_8.4 x86_64 10/24/12 4:23:23 PM CEST openssl-0.9.8e-26.el5_9.1 x86_64 5/8/13 12:34:24 PM CEST This is weird. It looks like your rpm database is corrupted / confused if it thinks it has the same package (in same arch) in two different versions. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] openssl Transaction Check Error
On Wed, May 08, 2013 at 12:13:06PM +0200, ŚLIPEK Krzysztof wrote: I have problem with Errata Update: RHSA-2013:0587:R5-64-1 - Moderate: openssl security update. When I try to apply it on server with RHEL 5.9 x86_64 I've got an error: Client execution returned Error while executing packages action: Transaction Check Error: file /usr/share/man/man1/ca.1ssl.gz from install of openssl-0.9.8e-26.el5_9.1.i686 conflicts with file from package openssl-0.9.8e-22.el5_8.4.x86_64 file /usr/share/man/man1/req.1ssl.gz from install of openssl-0.9.8e-26.el5_9.1.i686 conflicts with file from package openssl-0.9.8e-22.el5_8.4.x86_64 file /usr/share/man/man1/x509.1ssl.gz from install of openssl-0.9.8e-26.el5_9.1.i686 conflicts with file from package openssl-0.9.8e-22.el5_8.4.x86_64 [[6]] (code -1) In my channel rhel-x86_64-server-5 all packages are synced with Red Hat and in this errata are included both versions of package: md5:29c9b10ed28a6b6145d3286e8dff593a openssl-0.9.8e-26.el5_9.1-i686 md5:bb929285d0d9748f570d58fc7893e477 openssl-0.9.8e-26.el5_9.1-x86_64 md5:e2a88e3d44fcd9471c82788a0ed04cb4 openssl-devel-0.9.8e-26.el5_9.1-i386 md5:9f63c7e689ac6102667aad118d5e3a07 openssl-devel-0.9.8e-26.el5_9.1-x86_64 md5:687d923b5994cdf6881b9f4afa93263d openssl-perl-0.9.8e-26.el5_9.1-x86_64 I don't understand why yum tries to install .i686 package and can't resolve dependencies. Could you help me? What does rpm -q openssl return on that client? What packages does the Spacewalk server list for the client? What Spacewalk version is this? -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Backporting BZ948185
On Mon, May 06, 2013 at 12:17:30PM +0200, Pierre Casenove wrote: Hello list, BZ 948185 has been corrected in nightly. I would like to backport the fix to my spacewalk 1.9 installation. The problem is that I can't find SystemHandler file which has to be corrected. https://git.fedorahosted.org/cgit/spacewalk.git/commit/?id=67c0b675d6131d594c492c215087b3f150a09d35 says it's java/code/src/com/redhat/rhn/frontend/xmlrpc/system/SystemHandler.java -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] SSL cert need reconfig after update
On Tue, Apr 30, 2013 at 02:37:18AM +, Butcher, Nathan wrote: Hi, I just updated to 1.9 from 1.7 (1.8 inclusive). I think one of the options during configuration update knocked out my initial SSL configuration for tomcat. How can I revert it back to how it was? My browser client is upset with the post-update non-trusted cert. Can you explain in more depth what seems to be the problem, including some error messages? Spacewalk knowingly does not configure any SSL for tomcat -- the SSL is handled by the Apache frontend. So -- did you have something specifically set in tomcat, or are you talking about https access to Spacewalk's WebUI in general ... -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] 1.9 and Unicode
On Mon, Apr 29, 2013 at 08:48:22PM -0400, Ciro Iriarte wrote: [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] File /usr/lib/python2.6/site-packages/spacewalk/common/rhnTB.py, line 150, in Traceback [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] ostream.write(%s\\n % exc.getvalue().encode('utf-8')) [...] Hi!, I'm seeing the same error... [Mon Apr 29 20:45:34 2013] [error] [client 10.1.20.201] File /usr/lib/python2.6/site-packages/spacewalk/common/rhnTB.py, line 150, in Traceback [Mon Apr 29 20:45:34 2013] [error] [client 10.1.20.201] ostream.write(%s\\n % exc.getvalue().encode('utf-8')) That's weird. Did you restart httpd? Because the original error line was 150 and the current line seems to be 150 even if the patch --- /usr/lib/python2.6/site-packages/spacewalk/common/rhnTB.py.orig 2013-04-29 19:56:51.387243659 -0400 +++ /usr/lib/python2.6/site-packages/spacewalk/common/rhnTB.py 2013-04-29 19:57:57.986933719 -0400 @@ -148,6 +148,11 @@ def Traceback(method = None, req = None, # we always log it somewhere if ostream: ostream.write(%s\n % exc.getvalue().encode('utf-8')) + the_value = exc.getvalue() + if isinstance(the_value, unicode): + ostream.write(%s\n % exc.getvalue().encode('utf-8')) + else: + ostream.write(%s\n % exc.getvalue()) if mail: # print the stack frames for the mail we send out should have moved it to line 152. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] 1.9 and Unicode
On Sun, Apr 28, 2013 at 05:47:28PM -0400, Ciro Iriarte wrote: Hi!, I've succesfully installed Spacewalk 1.8 in the past, but for a new installation of 1.9 I'm seeing an error that seems related to Unicode. I get this trying to add a client with: -- rhnreg_ks --serverUrl=http://server/XMLRPC --activationkey=1-centos6 -- --- [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] mod_wsgi (pid=2474): Exception occurred processing WSGI script '/usr/share/rhn/wsgi/xmlrpc.py'. [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] Traceback (most recent call last): [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] File /usr/share/rhn/wsgi/xmlrpc.py, line 22, in application [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] return wsgiHandler.handle(environ, start_response, xmlrpc, server.xmlrpc) [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] File /usr/share/rhn/wsgi/wsgiHandler.py, line 45, in handle [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] ret = appServ(req) [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] File /usr/lib/python2.6/site-packages/spacewalk/server/apacheHandler.py, line 196, in handler [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] ret = self._req_processor.process() [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] File /usr/lib/python2.6/site-packages/spacewalk/server/apacheRequest.py, line 476, in process [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] return self.call_function(method, params) [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] File /usr/lib/python2.6/site-packages/spacewalk/server/apacheRequest.py, line 174, in call_function [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] Traceback(method, self.req, severity=unhandled) [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] File /usr/lib/python2.6/site-packages/spacewalk/common/rhnTB.py, line 150, in Traceback [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] ostream.write(%s\\n % exc.getvalue().encode('utf-8')) [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] File /usr/lib64/python2.6/StringIO.py, line 270, in getvalue [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] self.buf += ''.join(self.buflist) [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] UnicodeDecodeError: 'ascii' codec can't decode byte 0xc3 in position 48: ordinal not in range(128) If you run that rhnreg_ks with a --nohardware or --nopackages option -- does the error go away? -- Jan Pazdziora | adelton at #satellite*, #brno Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] 1.9 and Unicode
On Mon, Apr 29, 2013 at 04:21:20PM +0200, Jan Pazdziora wrote: On Sun, Apr 28, 2013 at 05:47:28PM -0400, Ciro Iriarte wrote: Hi!, I've succesfully installed Spacewalk 1.8 in the past, but for a new installation of 1.9 I'm seeing an error that seems related to Unicode. I get this trying to add a client with: -- rhnreg_ks --serverUrl=http://server/XMLRPC --activationkey=1-centos6 -- --- [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] mod_wsgi (pid=2474): Exception occurred processing WSGI script '/usr/share/rhn/wsgi/xmlrpc.py'. [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] Traceback (most recent call last): [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] File /usr/share/rhn/wsgi/xmlrpc.py, line 22, in application [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] return wsgiHandler.handle(environ, start_response, xmlrpc, server.xmlrpc) [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] File /usr/share/rhn/wsgi/wsgiHandler.py, line 45, in handle [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] ret = appServ(req) [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] File /usr/lib/python2.6/site-packages/spacewalk/server/apacheHandler.py, line 196, in handler [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] ret = self._req_processor.process() [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] File /usr/lib/python2.6/site-packages/spacewalk/server/apacheRequest.py, line 476, in process [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] return self.call_function(method, params) [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] File /usr/lib/python2.6/site-packages/spacewalk/server/apacheRequest.py, line 174, in call_function [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] Traceback(method, self.req, severity=unhandled) [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] File /usr/lib/python2.6/site-packages/spacewalk/common/rhnTB.py, line 150, in Traceback [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] ostream.write(%s\\n % exc.getvalue().encode('utf-8')) [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] File /usr/lib64/python2.6/StringIO.py, line 270, in getvalue [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] self.buf += ''.join(self.buflist) [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] UnicodeDecodeError: 'ascii' codec can't decode byte 0xc3 in position 48: ordinal not in range(128) If you run that rhnreg_ks with a --nohardware or --nopackages option -- does the error go away? If you apply the following patch to your /usr/lib/python2.6/site-packages/spacewalk/common/rhnTB.py and restart httpd -- does it address the issue for you? diff --git a/backend/common/rhnTB.py b/backend/common/rhnTB.py index 7c0d5e7..6868d6e 100644 --- a/backend/common/rhnTB.py +++ b/backend/common/rhnTB.py @@ -147,7 +147,11 @@ def Traceback(method = None, req = None, mail = 1, ostream = sys.stderr, # we always log it somewhere if ostream: -ostream.write(%s\n % exc.getvalue().encode('utf-8')) +the_value = exc.getvalue() +if isinstance(the_value): +ostream.write(%s\n % exc.getvalue().encode('utf-8')) +else: +ostream.write(%s\n % exc.getvalue()) if mail: # print the stack frames for the mail we send out -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] 1.9 and Unicode
On Mon, Apr 29, 2013 at 04:38:16PM +0200, Jan Pazdziora wrote: On Mon, Apr 29, 2013 at 04:21:20PM +0200, Jan Pazdziora wrote: On Sun, Apr 28, 2013 at 05:47:28PM -0400, Ciro Iriarte wrote: Hi!, I've succesfully installed Spacewalk 1.8 in the past, but for a new installation of 1.9 I'm seeing an error that seems related to Unicode. I get this trying to add a client with: -- rhnreg_ks --serverUrl=http://server/XMLRPC --activationkey=1-centos6 -- --- [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] mod_wsgi (pid=2474): Exception occurred processing WSGI script '/usr/share/rhn/wsgi/xmlrpc.py'. [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] Traceback (most recent call last): [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] File /usr/share/rhn/wsgi/xmlrpc.py, line 22, in application [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] return wsgiHandler.handle(environ, start_response, xmlrpc, server.xmlrpc) [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] File /usr/share/rhn/wsgi/wsgiHandler.py, line 45, in handle [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] ret = appServ(req) [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] File /usr/lib/python2.6/site-packages/spacewalk/server/apacheHandler.py, line 196, in handler [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] ret = self._req_processor.process() [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] File /usr/lib/python2.6/site-packages/spacewalk/server/apacheRequest.py, line 476, in process [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] return self.call_function(method, params) [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] File /usr/lib/python2.6/site-packages/spacewalk/server/apacheRequest.py, line 174, in call_function [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] Traceback(method, self.req, severity=unhandled) [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] File /usr/lib/python2.6/site-packages/spacewalk/common/rhnTB.py, line 150, in Traceback [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] ostream.write(%s\\n % exc.getvalue().encode('utf-8')) [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] File /usr/lib64/python2.6/StringIO.py, line 270, in getvalue [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] self.buf += ''.join(self.buflist) [Sun Apr 28 17:42:46 2013] [error] [client 10.1.20.201] UnicodeDecodeError: 'ascii' codec can't decode byte 0xc3 in position 48: ordinal not in range(128) If you run that rhnreg_ks with a --nohardware or --nopackages option -- does the error go away? If you apply the following patch to your /usr/lib/python2.6/site-packages/spacewalk/common/rhnTB.py and restart httpd -- does it address the issue for you? diff --git a/backend/common/rhnTB.py b/backend/common/rhnTB.py index 7c0d5e7..6868d6e 100644 --- a/backend/common/rhnTB.py +++ b/backend/common/rhnTB.py @@ -147,7 +147,11 @@ def Traceback(method = None, req = None, mail = 1, ostream = sys.stderr, # we always log it somewhere if ostream: -ostream.write(%s\n % exc.getvalue().encode('utf-8')) +the_value = exc.getvalue() +if isinstance(the_value): +ostream.write(%s\n % exc.getvalue().encode('utf-8')) +else: +ostream.write(%s\n % exc.getvalue()) if mail: # print the stack frames for the mail we send out Oops, the correct patch to try would be: diff --git a/backend/common/rhnTB.py b/backend/common/rhnTB.py index 7c0d5e7..d891ab0 100644 --- a/backend/common/rhnTB.py +++ b/backend/common/rhnTB.py @@ -147,7 +147,11 @@ def Traceback(method = None, req = None, mail = 1, ostream = sys.stderr, # we always log it somewhere if ostream: -ostream.write(%s\n % exc.getvalue().encode('utf-8')) +the_value = exc.getvalue() +if isinstance(the_value, unicode): +ostream.write(%s\n % exc.getvalue().encode('utf-8')) +else: +ostream.write(%s\n % exc.getvalue()) if mail: # print the stack frames for the mail we send out -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] how do I clear spacewalk's repo-sync cache?
On Mon, Apr 29, 2013 at 03:00:31PM +, Andy Ingham wrote: Hello -- I'm trying to do a repo-sync and it is failing because the *-primary.sqlite.bz2 (and other files) changed on the mirror yesterday. Even after manually deleting /var/cache/rhn/reposync/epel6-centos6-x86_64 I continue to get the same error (see below), and spacewalk repopulates that cache directory with the OLD references. Is it possible you use a caching HTTP proxy (possibly a transparent one) that gives you the stale data? If you do GET 'http://archive.linux.duke.edu/pub/epel/6/x86_64/repodata/repomd.xml' | grep primary.sqlite do you see the correct content? -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Is the wiki down?
On Fri, Apr 26, 2013 at 07:08:42PM +, Jim Miller wrote: Is the spacewalk wiki down or is it just me? User Documentation User documentation for Spacewalk is available in the Spacewalk wikihttp://spacewalk.fedorahosted.org: * Spacewalk Wiki User Documentationhttps://fedorahosted.org/spacewalk/wiki/UserDocs The fedorahosted.org seems to be back up. Sorry about the inconvenience. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] odd web problem after 1.9 upgrade
On Fri, Apr 26, 2013 at 03:47:52PM -0600, Nathan Duehr wrote: Have a strange little web problem after an upgrade from 1.8 to 1.9. The Overview screen is now blank other than the framing with the window header and the menu on the left side. The center is not rendering. Been poking through httpd and tomcat logs, but haven't really seen an error or reason yet. Anyone ever run into this? I have some AJP errors that say AJP is not allowing connections from localhost but other than that, and those don't look to be the root-cause of this problem, haven't really figured out much yet. Still looking... What OS is this? The content of that Overview page is rendered using AJAX and dwr component which we upgraded for Spacewalk 1.9. So this could be related and I'd start with those ajp errors. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Error uploading to channel
On Mon, Apr 22, 2013 at 04:06:42PM +, Gomes, Rich wrote: I have a server having issues uploading packages, I get the error below: ERROR: unhandled exception occurred: (getServer() got an unexpected keyword argument 'serverOverride'). Where do you get the error? What is the exact command / action you do and where exactly do you see this error (log file, terminal, mail)? Is there only this one line or is there some traceback there as well? -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Getting errors when connecting to the API
On Mon, Apr 22, 2013 at 06:15:51PM +0100, Mathew Snyder wrote: I'm trying to connect to the API for our Satellite server. According to everything I've read it should be at https://satellite.example.com/rpc/api. I've tried this using both Ruby and Perl and have received one of two errors repeatedly. The first is 404 Not Found and the other is Connection refused. I'm not entirely sure how I'm supposed to connect with the xmlrpc/client gem in Ruby. This is my code: #!/usr/bin/ruby require xmlrpc/client host = https://10.153.156.10; hostpath = https://10.153.156.10/rpc/api; path = rpc/api username = ecapsupport pass = r310ADed params = { host = https://REDACTED;, path = rpc/api, port = 443, proxy_host = , proxy_port = , user = REDACTED, password = REDACTED, use_ssl = true, timeout = 300, } client = XMLRPC::Client.new3(params) client.instance_variable_get(:@http).instance_variable_set(:@verify_mode, OpenSSL::SSL::VERIFY_NONE) session = client.call('auth.login', username, pass) Reading http://www.ruby-doc.org/stdlib-2.0/libdoc/xmlrpc/rdoc/XMLRPC/Client.html#method-c-new3 makes me believe that the host is the FQDN of the host, not the protocol://FQDN. Thus, ruby -e 'require xmlrpc/client; client = XMLRPC::Client.new3({ host = machine.example.com, path = /rpc/api }); sys_ver = client.call(api.systemVersion); puts sys_ver;' 5.5.0 works just fine for me. Reading the same page reveals that XMLRPC::Client.new_from_uri(http://machine.example.com/rpc/api;); works as well, should you prefer to work with URIs. And with the VERIFY_NONE mode, it even works with https. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] SEVERE: Can't find free port 8009 8019
On Thu, Apr 11, 2013 at 02:19:11PM -0500, john miller wrote: I had the same issue on 1.7. It only got duplicated 8 to 10 times though. Is there a reason why this happens or a way I can prevent it from happening? I've now committed 896efd01808f20386aaafc0c697408258255c881 to Spacewalk master which should prevent it from hapenning in the future. Thank you for reporting the problem, -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Missing Dependency: openscap-utils = 0.9.2 is needed by package spacewalk-oscap-0.0.13-1.el5
On Thu, Mar 21, 2013 at 03:02:13PM +0100, Steve Meier wrote: after upgrading from Spacewalk 1.8 to 1.9 on CentOS 5 (x86_64) I have noticed a dependency problem. [root@spacewalk ~]# yum update spacewalk-oscap Loaded plugins: fastestmirror, rhnplugin, security This system is receiving updates from RHN Classic or RHN Satellite. Loading mirror speeds from cached hostfile * base: mirror.simwood.com * epel: mirror.bytemark.co.uk * extras: mirror.simwood.com * updates: mirror.simwood.com Skipping security plugin, no data Setting up Update Process Resolving Dependencies Skipping security plugin, no data -- Running transaction check --- Package spacewalk-oscap.noarch 0:0.0.13-1.el5 set to be updated -- Processing Dependency: openscap-utils = 0.9.2 for package: spacewalk-oscap -- Finished Dependency Resolution spacewalk-oscap-0.0.13-1.el5.noarch from spacewalk-client has depsolving problems -- Missing Dependency: openscap-utils = 0.9.2 is needed by package spacewalk-oscap-0.0.13-1.el5.noarch (spacewalk-client) Error: Missing Dependency: openscap-utils = 0.9.2 is needed by package spacewalk-oscap-0.0.13-1.el5.noarch (spacewalk-client) You could try using --skip-broken to work around the problem You could try running: package-cleanup --problems package-cleanup --dupes rpm -Va --nofiles --nodigest As far as I can see CentOS 5 only provides openscap-utils 0.8.0, 0.9.2 is only available on CentOS 6. Is this a known problem or am I doing something wrong? Can you take spacewalk-oscap-0.0.14-1.el5.noarch.rpm from http://yum.spacewalkproject.org/nightly-client/RHEL/5/i386/ ? It has the rpm dependencies fixed. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] coreutils don't update properly via spacewalk
On Thu, Apr 11, 2013 at 02:42:48PM +, Andy Ingham wrote: I certainly see from that log entry that it is unhappy about the baseurl for CentOS-Base, but my reading of the comments for that file (/etc/yum.repos.d/CentOS-Base.repo), indicate that I WANT the baseurl commented out: # The mirror system uses the connecting IP address of the client and the # update status of each mirror to pick mirrors that are updated to and # geographically close to the client. You should use this for CentOS updates # unless you are manually picking other mirrors. # # If the mirrorlist= does not work for you, as a fall back you can try the # remarked out baseurl= line instead. So what's your exact /etc/yum.repos.d/CentOS-Base.repo content? OR: Is it the case that for spacewalk-managed clients, there is no need for ANYTHING in /etc/yum.repos.d/ UNLESS it is a repo that spacewalk DOESN'T manage? Exactly. You either have the repo configured in /etc/yum.repos.d, or as a channel for your system profile in Spacewalk. Not both. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] coreutils don't update properly via spacewalk
On Tue, Apr 09, 2013 at 05:37:24PM +, Andy Ingham wrote: Jan -- These are CentOS 6.4 servers (upgraded from 6.3 within the last few weeks) they only had a few packages that needed updating today, chief among them the coreutils and coreutils-libs packages. Spacewalk server is at version 1.8 rhn-client-tools is 1.8.26-1.el6 (systematically updated across the plant right after the spacewalk server upgrade) I'm scheduling updates via the Spacewalk GUI, and they fail with (the ever present) Fatal error in Python code occurred [[6]]. What is in /var/log/up2date on the client when this error shows up in WebUI? -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] coreutils don't update properly via spacewalk
On Wed, Apr 10, 2013 at 03:41:50PM +, Andy Ingham wrote: Jan -- The following is repeated 4 times at 20 second intervals within that log on a sample host: [Tue Apr 9 09:25:52 2013] up2date Traceback (most recent call last): File /usr/sbin/rhn_check, line 385, in __run_action (status, message, data) = CheckCli.__do_call(method, params, kwargs) File /usr/sbin/rhn_check, line 377, in __do_call method = getMethod.getMethod(method, /usr/share/rhn/, actions) [...] File /usr/lib/python2.6/site-packages/yum/yumRepo.py, line 662, in _baseurlSetup self.check() File /usr/lib/python2.6/site-packages/yum/yumRepo.py, line 426, in check 'Cannot find a valid baseurl for repo: %s' % self.id class 'yum.Errors.RepoError': Cannot find a valid baseurl for repo: base So, may we assume that your yum is misconfigured and that you have something in /etc/yum.repos.d called base which does not have the baseurl set? -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] coreutils don't update properly via spacewalk
On Tue, Apr 09, 2013 at 01:47:15PM +, Andy Ingham wrote: Looking for a sanity check here. Certain packages won't update properly via spacewalk UNTIL coreutils is updated on that client. The problem is that I'm unable to get the coreutils packages THEMSELVES to update via spacewalk. So, I find myself having to connect to each client individually to yum update coreutils. At that point, I'm having success pushing updates to the clients that failed previously. Of course, given those steps, I've not saved any time since I've already had to connect to each client. Am I missing something about how to avoid this? Can you be more specific about the exact OS you're using, Spacewalk server version, RHN client tools version, as well as the exact commands you run and the output you get? -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] spacewalk-setup seems to be hanging
On Thu, Apr 04, 2013 at 09:09:46AM -0400, Espinola, Derek - 0663 - MITLL wrote: I am currently in the process of upgrading spacewalk 1.8 to 1.9 on rhel6.4. At the stage of upgrading the spacewalk configuration, it seems to be hanging ( about 40mins now) at Performing initial configuration: spacewalk-setup --disconnected --external-db --upgrade * Setting up Oracle environment. * Setting up database. ** Database: Setting up database connection for Oracle backend. Database service name (SID)? Username? ### Password? ** Database: Testing database connection. ** Database: Populating database. ** Database: Skipping database population. * Setting up users and groups. ** GPG: Initializing GPG and importing key. * Performing initial configuration. Looking at the rhn_installation .log, shows the following: …. ….disconnected /var/lib/rhn/rhn-satellite-prep/etc/rhn/rhn.conf.orig /var/lib/rhn/rhn-satellite-prep/etc/rhn/rhn.conf /var/lib/rhn/rhn-satellite-prep/etc/rhn/cluster.ini /var/lib/rhn/rhn-satellite-prep/etc - /etc /var/lib/rhn/rhn-satellite-prep/etc/rhn - /etc/rhn /var/lib/rhn/rhn-satellite-prep/etc/rhn/rhn.conf - /etc/rhn/rhn.conf * Making backup of /etc/rhn/rhn.conf to /etc/sysconfig/rhn/backup-2013-04-04-07:19/etc/rhn/rhn.conf /var/lib/rhn/rhn-satellite-prep/etc/rhn/cluster.ini - /etc/rhn/cluster.ini * Making backup of /etc/rhn/cluster.ini to /etc/sysconfig/rhn/backup-2013-04-04-07:19/etc/rhn/cluster.ini Not exactly sure what is holding it up. Any ideas? What do strace and lsof show for that spacewalk-setup process? -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Provisioning launching i686 QEMU guests instead of KVM?
On Tue, Mar 26, 2013 at 06:12:41PM -0400, Michael Morgan wrote: Hello, I have an Spacewalk 1.9/Postgres server running on Scientific Linux 6.3. I just deployed two new virtualization hosts with Xeon E5-2630L CPUs also running SL 6.3 with the SW 1.9 client packages. When I try to provision guests on these new servers using an existing KVM kickstart profile they're being created as raw QEMU i686 guests and immediately fail. The necessary CPU flags are available and I can manually create KVM x86_64 guests directly on the servers. The Virtualization Platform entitlement is enabled as well, the rhn-virtualization-host package is installed, and SELinux is set permissive currently. I can see from the client server that virt-install is being called to start without KVM enabled but I'm not really sure where to go next. Is this instance of bug https://bugzilla.redhat.com/show_bug.cgi?id=928678 ? -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] OS Update causes issue with Spacewalk
On Thu, Mar 28, 2013 at 09:29:25PM +, Sam Sen wrote: Upgraded my hosts (including newer kernel) and now the clients can't communicate with Spacewalk. Did you upgrade the clients, the OS on the Spacewalk server, the Spacewalk server (the software), or all of them? Your account does not have access to any channels matching (release='5Server', arch='x86_64-redhat-linux') I'm able to re-register the host with Spacewalk and all is well. However, I have to do this with all my hosts and not to mention I need to do this after every system upgrade?! When do you get this message (what operation, exactly)? Because this error should only be thrown exactly upon registration of the client. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Pushing gpg keys in 1.9
On Tue, Mar 12, 2013 at 04:03:32PM -0400, John Pittman wrote: After upgrading my Spacewalk 1.8 system to 1.9 (and Centos 6.4), my kickstarts no longer push the gpg keys assigned to each profile. After a kickstart finishes, I receive NOKEY errors on any package installs from the assigned channels (such as EPEL, spacewalk-client for osad, vmware-tools, etc) I do not see anything in the current kickstart file that pushes the keys down, but all of this worked fine on 1.8. The keys are imported in the GPG and SSL list and assigned to the kickstart profile as appropriate. After manually importing the keys all is well. Thoughts on where to start troubleshooting? I believe you are hitting bug https://bugzilla.redhat.com/show_bug.cgi?id=920292 which was fixed in Spacewalk nightly and we plan to release updated 1.9 packages as soon as people confirm that the issue is indeed resolved in nightly. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Postgres connection issues with Spacewalk 1.9
On Tue, Mar 12, 2013 at 05:52:46PM +, Coffman, Anthony J wrote: I applied the patch and rebooted to start things from a clean slate. The patch doesn't seem to fix the issue. The Postgres DB idle connections are still rising to more than 1000 very rapidly and staying high even after the Spacewalk client activity is halting. The one change I do notice is that they seem to decline very rapidly down to about 300 after the Spacewalk client activity ends. Before the patch they would stay higher even after the activity had stopped. Alright, here's an additional patch: http://git.fedorahosted.org/cgit/spacewalk.git/commit/?id=650885cfb32d97ea93928fbc511a1c7f7935f10e -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Cobbler Packages - Why 2?
On Mon, Mar 11, 2013 at 11:05:45PM +, Tom Brown wrote: Why are there 2 different cobbler packages in spacewalk - cobbler-2 and cobbler20 ? Actually, Spacewalk ships three packages: cobbler20 cobbler2 cobbler-epel The cobbler20 and cobbler2 are always installed together -- it's just an rpm packaging issue to allow seamless upgrade from older versions. The package cobbler2 has no content. There is no cobbler-2 in Spacewalk repos. If you want to install cobbler 2.2+ found in EPEL and Fedora, you have to install the package cobbler-epel and it will pull in the newer packages. Again, it's just an rpm packaging issue, cobbler-epel does not have any content. What is special about this/them compared to the standard cobbler They just work, especially with SELinux in enforcing mode. - i am having ks rendering issues that only show up when using these cobbler versions, if i replace them with a 'standard' cobbler-2 all is fine. Not sure what the cobbler-2 package is -- if you mean cobbler 2.2+ from Fedora or EPEL -- if it works for you, just use that version. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] trick to doing CentOS 6.3 6.4 update via spacewalk?
On Mon, Mar 11, 2013 at 07:02:50PM +, Andy Ingham wrote: Friendly list -- Now that CentOS 6.4 is available, I have 40+ servers that I'd like to update from 6.3 6.4. I just finished bringing all the (spacewalk-managed) servers up to date with osad, rhn-check, rhn-client-tools, rhn-setup, rhnlib, etc. (I'm at version 1.8 still.) Scheduling the update via spacewalk results in a failure, though. Is the failure manifested somehow, perhaps by an error message which could help the audience help you to figure out what is wrong? -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Postgres connection issues with Spacewalk 1.9
On Tue, Mar 12, 2013 at 02:24:11PM +0100, Jan Pazdziora wrote: Could you please apply patch from http://git.fedorahosted.org/cgit/spacewalk.git/commit/?id=00c5e9d460d71c7707393764563e228848bef17f to your driver_postgresql.py to see if it addresses the issue for you? Afterwards, httpd needs to be restarted for the change to take effect. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Postgres connection issues with Spacewalk 1.9
On Mon, Mar 11, 2013 at 03:21:08PM +, Coffman, Anthony J wrote: Is anybody else seeing 500 errors on 1.9? We've had ridiculous numbers (300-400) of Postgres IDLE connections since the 1.7 release but it seems they've reach new heights in Spacewalk 1.9. I just ran a package refresh on 30 DEV systems and the Postgres connection count got up to around 1000 before things completely fell apart. Could you please apply patch from http://git.fedorahosted.org/cgit/spacewalk.git/commit/?id=00c5e9d460d71c7707393764563e228848bef17f to your driver_postgresql.py to see if it addresses the issue for you? -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Cobbler Packages - Why 2?
On Tue, Mar 12, 2013 at 02:32:33PM +, Tom Brown wrote: so for clarity - if i wish to use a non spacewalk provided cobbler i can install cobbler-epel and during an upgrade cobbler wont get touched? Exactly. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] (U) Certificate not found 'Server-Cert' spacewalk 1.8 on Centos 6.3
On Tue, Feb 26, 2013 at 08:45:00AM -0600, Casey Pogue wrote: I installed spacewalk 1.8 on a fresh Centos 6.3 box. I followed the directions from here https://fedorahosted.org/spacewalk/wiki/HowToInstall. After running spacewalk-setup --disconnected httpd will not start. I get the following in /var/log/https/error.log Certificate not found: 'Server-cert'. It looks like the certs were generated. I didn't see any errors during cert generation. Googling for the error message suggests it comes from mod_nss. Spacewalk does not require not configure mod_nss so I assume this somehow got installed on your machine prior to installing Spacewalk. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Error connecting to spacewalk for yum udpates
On Mon, Feb 25, 2013 at 04:14:39PM -0500, Bentley, Dain wrote: Hello all, I followed the tutuorial (spacewalk-embded-postgres) on the wiki and sucessfully got spacewalk running. I have added one node and I'm haing issues getting updates to work. After I installed the spacewalk utils and ran repo sync I've updated the repos. Next I installed the client packages on a node and successfully registered the node and spacewalk sees it just fine. When I run yum update I see the following error: Error: Cannot retrieve repository metadata (repomd.xml) for repository: centos6-x86_64. Please verify its path and try again Now the hostname is configured for the spacewalk server, but I see the following in /var/log/httpd/acess_log: [25/Feb/2013:16:06:51 -0500] POST /XMLRPC HTTP/1.1 200 2403 - rhn.rpclib.py/2.5.55-1.el6 xx.xx.xx.xx - - [25/Feb/2013:16:06:51 -0500] GET /XMLRPC/GET-REQ/centos6-x86_64/repodata/repomd.xml HTTP/1.1 404 - - rhn.rpclib.py/2.5.55-1.el6 Funny thing is when I log into the web interface it shows updates need to be applied to the client node so I know something is working properly. cat rhn_server_xmlrpc.log shows the client accessing the server: 2013/02/25 16:06:51 -04:00 22554 xx.xx.xx.xx: xmlrpc/up2date.login(11,) ANd I saw this in the taskomatic log but it's from last night when I rebooted the server: Caused by: org.quartz.SchedulerConfigException: Failure occured during job recovery. [See nested exception: org.quartz.JobPersistenceException: Couldn't recover jobs: End time cannot be before start time [See nested exception: java.lang.IllegalArgumentException: End time cannot be before start time]] This seems to be the root of your problem -- the repodata for the channel did not get generated because the quartz which is doing the work god confused by some time shifts. Did something strange time-wise happen on your machine? -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] : in API Package Searches
On Mon, Feb 25, 2013 at 02:38:56PM +, Anton Pritchard-Meaker wrote: Hi, I get these in some of the packages returned by the comparePackages call. I believe it's Spacewalk's way of saying what epoch the package has set. But the :2 is not actually contained in the rpm file name. So for search, just omit it. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Errata search by CVE fails
On Wed, Jan 23, 2013 at 09:02:57PM +0100, Pierre Casenove wrote: Hello list, I'm using spacewalk 1.8 on a rhel 5 server. I've been trying to search an errata by CVE. In the search field, I put the name of the CVE (for example CVE-2012-0611) and select Search by CVE but it fails with error could not execute query. In the catalina.out file, I've got the following error: 2013-01-23 16:32:27,138 [TP-Processor8] WARN com.redhat.rhn.frontend.action.errata.ErrataSearchAction - Performing errata search redstone.xmlrpc.XmlRpcFault: redstone.xmlrpc.XmlRpcFault: --- The error occurred in com/redhat/satellite/search/db/errata_handler.xml. --- The error occurred while applying a parameter map. --- Check the listErrataByCVE-InlineParameterMap. --- Check the statement (query failed). --- Cause: org.postgresql.util.PSQLException: ERROR: operator does not exist: numeric = character varying Is this a known issue? It's now been fixed in Spacewalk master via bug https://bugzilla.redhat.com/show_bug.cgi?id=905872 -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Package upgrade fails
On Thu, Jan 24, 2013 at 04:10:05PM +0100, Pietro Leone Pola Falletti di Villafalletto wrote: Hallo, I have these errors when I try tu upgrade a package on SLES11SP@ and CentOS6: spacecmd {SSM:0} system_upgradepackage test-sw-sles11sp2 * ERROR: redstone.xmlrpc.XmlRpcFault: unhandled internal exception: ERROR: schema sp does not exist spacecmd {SSM:0} system_upgradepackage pfdevsolr02 * ERROR: redstone.xmlrpc.XmlRpcFault: unhandled internal exception: ERROR: schema sp does not exist Any idea? I assume this is Spacewalk 1.8 and you are hitting the issue discussed at https://www.redhat.com/archives/spacewalk-list/2012-December/msg00052.html Reading the thread, upgraded packages were released to the Spacewalk 1.8 repo. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] RHNSD silently failing on current Fedora17?
On Mon, Jan 28, 2013 at 10:56:26AM +0100, Jonathan Hoser wrote: I'm facing a puzzling issue: On recent installs of a fully up-to-date Fedora17 systems the rhnsd deamon silently fails. I activate it using #systemctl enable rhnsd.service ln -s '/usr/lib/systemd/system/rhnsd.service' '/etc/systemd/system/multi-user.target.wants/rhnsd.service' followed by a # systemctl start rhnsd.service however: # systemctl status rhnsd.service rhnsd.service - Red Hat Network Server daemon Loaded: loaded (/usr/lib/systemd/system/rhnsd.service; enabled) Active: inactive (dead) since Mon, 28 Jan 2013 10:49:11 +0100; 4s ago Process: 28336 ExecStart=/usr/sbin/rhnsd (code=exited, status=0/SUCCESS) CGroup: name=systemd:/system/rhnsd.service There's no entry in /var/log/messages or anywhere, if I start it from non-service environment (i.e. just running rhnsd) it will run fine, rerunning 'systemctl start rhnsd.service' afterwards a couple of times, will make systemctl pick up on the running rhnsd and list it as running. Does anyone have a clue about what might be going on? Or steps for me to take to debug the issue? Could you please check if applying patch --- a/rhnsd.service +++ b/rhnsd.service @@ -3,6 +3,7 @@ Description=Red Hat Network Server daemon After=syslog.target network.target auditd.service [Service] +Type=forking PIDFile=/var/run/rhnsd.pid ExecStart=/usr/sbin/rhnsd ExecReload=/bin/kill -HUP $MAINPID fixes the problem? -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] : in API Package Searches
On Mon, Jan 28, 2013 at 10:04:05AM +, Anton Pritchard-Meaker wrote: Hi, Please can someone check the log entries below generated when calling the packages.search.name and packages.search.advanced API functions? I looks like the : in libogg-1.1.3-3.el5:2.x86_64 seems to cause some problems. I'm working with the RHEL5 repo for this. Is it a potential bug? Apologies in advance if it's been filed already, but I couldn't see it. The colon has a special meaning in the search engine Spacewalk uses. However, rpm names generally do not contain colons. Are you really sure there should be a colon there? -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Random error 256 using spacewalk-repo-sync
On Mon, Jan 28, 2013 at 05:55:12PM +, Paul Brunck wrote: I have install ISOs mounted locally, which I used the rhnpush command to add to spacewalk channels, but then during the sync some files fail with a vague error. I do not see this error on files I sync to an http address. Is anyone aware of cause or solution? What does running spacewalk-data-fsck on the Spacewalk server report? -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Problem with sync to Mirror
On Thu, Jan 31, 2013 at 03:46:53PM +0100, Frosch Martin wrote: Hallo, Does sombody have an idea. What can be the problem that repo creation is canceled by taskomatic process? [...] The message INFO | jvm 1| 2013/01/31 15:36:01 | 2013-01-31 15:36:00,954 [Thread-69] WARN com.redhat.rhn.taskomatic.task.repomd.RepositoryWriter - No repo will be generated for channel centos-6-base-x86_64 can mean that you did not set any checksum type for the channel, so the repo generation code does not know what checksum to use in the yum metadata. You might want to check the channel setting. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Random error 256 using spacewalk-repo-sync
On Mon, Jan 28, 2013 at 05:55:12PM +, Paul Brunck wrote: I have install ISOs mounted locally, which I used the rhnpush command to add to spacewalk channels, but then during the sync some files fail with a vague error. I do not see this error on files I sync to an http address. Is anyone aware of cause or solution? A short snippet of the error: 7572/8326 : bcfg2-web-1.2.1-1.el6-0.noarch 7573/8326 : dinotrace-9.4c-1.el6-0.x86_64 failure: dinotrace-9.4c-1.el6.x86_64.rpm from rhel-63-x86_64-dvd-kstools: [Errno 256] No more mirrors to try. Can you be more specific about the exact steps that you did? You mention rhnpush but you also mention spacewalk-repo-sync ... -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Internal Server Error when viewing config channels in UI
On Wed, Jan 30, 2013 at 05:30:29PM -0500, Mullis, Josh (CCI-Atlanta) wrote: Hello, I am getting this exception error when trying to view certain config channels inside the spacewalk UI (https://spacewalk /rhn/configuration/ChannelOverview.do?ccid=blah) I have not been able to identify a difference between channels that will display and those that return error. However, I am able to interact with the files via API and rhncfg utilities. Running spacewalk v1.5. What is specific about the config channels that give the problems and those that work alright? -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] tito build of spacewalk git sources
On Wed, Feb 13, 2013 at 10:57:16AM -0600, genanr wrote: Thanks, I will try to follow the steps you mentioned. Now, for my new question: How do I go about building all the support files in the spec-tree directory? Do I need to download the files specified in the spec file and run tito? Where do I put the source files that I download? What is you method of doing this? The easiest thing is to just put .spec to SPECS/, the rest of the files (patches) and the Source0 referenced from .spec to SOURCES/ and do rpmbuild -ba. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] created account, instantly kicked out...
On Tue, Feb 19, 2013 at 03:02:30AM -0500, ray brunkow wrote: On Tue, Feb 19, 2013 at 2:49 AM, Michael Mraka michael.mr...@redhat.comwrote: hmm i might have found something: [ray@centos ~]$ hostname centos.ssmahome the reason i post that as when i was looking in /var/log/httpd/ssl_error_log i found the following: [Sun Feb 17 14:31:01 2013] [warn] RSA server certificate CommonName (CN) `centos.ssmahome' does NOT match server name!? [Sun Feb 17 14:31:01 2013] [warn] RSA server certificate CommonName (CN) `centos.ssmahome' does NOT match server name!? [Sun Feb 17 14:38:36 2013] [warn] RSA server certificate CommonName (CN) `centos.ssmahome' does NOT match server name!? [Sun Feb 17 14:38:37 2013] [warn] RSA server certificate CommonName (CN) `centos.ssmahome' does NOT match server name!? so did i goof someplace? So what is the server name configured in your Apache configuration. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Client wants to install package that does no longer exist in Spacewalk 1.7
On Thu, Feb 21, 2013 at 11:56:24AM +0100, Jens Neu wrote: Dear list, I have some weird behaviour on Spacewalk 1.7 (1.7.3-1.el5): I build my own java-1.7.0-oracle packages for Centos 6 (based on jpp spec files), so far so good. Current is 1.7.0.7-2. Then: - build 1.7.0.13-2, pushed it to Spacewalk, all good - clients can update to 1.7.0.13-2, all good - build 1.7.0.15-2, pushed it to Spacewalk, all _seems_ good, then the trouble starts - client does not see the u15 as an upgrade What is the status of the repodata generation of the channel to which you pushed the new channel? -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Problem upgrading from 1.7 to 1.8
On Wed, Feb 20, 2013 at 11:39:40AM -0800, Optimus wrote: I am following the instructions at https://fedorahosted.org/spacewalk/wiki/HowToUpgrade to upgrade my Spacewalk 1.7 to version 1.8. I went through all the steps and it seemed to go fine, but when I restart my Spacewalk server and login to the web interface it still shows version 1.7 on the bottom of page. I did notice that at the step where I ran the command /usr/bin/spacewalk-schema-upgrade it says Your database schema already matches the schema package version [spacewalk-schema-1.7.55-1]. I would hate to have to do a new install from scratch to get to 1.8. Can someone point me in the right direction to upgrade to 1.8? Thanks. If the WebUI says 1.7 and spacewalk-schema-upgrade says your schema package version is 1.7, then I'm pretty sure you missed some of the steps -- either you did not run yum upgrade, or you did not switch your yum repo configuration to point to 1.7, or something similar. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Spacewalk 1.7 CPU Maxed out by postgresql (8.4)
On Tue, Jan 08, 2013 at 11:44:04AM -0500, Boyd, Robert wrote: Sometime this morning my spacewalk server pegged 100% on cpu utilization and has been staying there ever since. I tried a reboot, and just for grins updated errata/packages on the server. After rebooting it's still pegging the cpu usage with this process: postgres 2888 77.7 1.3 470128 53708 ?Rs 10:35 52:05 postgres: spaceuser spaceschema 127.0.0.1(46206) SELECT I am able to use the Spacewalk admin website without any problem other than a bit of slow response. How can I discover what is causing this (and hopefully fix it)? Try select * from pg_stat_activity; to see what select is causing the trouble and whether it's one select which is taking many minutes or a stream of selects.. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Spacewalk keeps sending out errata notifications after each reposync
On Thu, Nov 22, 2012 at 08:45:28AM +0100, Gerald Vogt wrote: I have a spacewalk 1.8 server with syncs to the EPEL5 repositories. I sync every four hours and after each sync spacewalk sends out the same errata notifications for updates on some of our clients. For example, I get a notification e-mail of errata FEDORA-EPEL-2012-13346 ever four hours. I've filed a bugzilla https://bugzilla.redhat.com/show_bug.cgi?id=913032 for this issue now. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Testing spacewalk systems management software
On Wed, Feb 06, 2013 at 11:25:10PM +0530, Kaushal Shriyan wrote: Hi, I have setup Spacewalk systems management software in my LAN segment. Not sure how do i test spacewalk server and the client machines to talk to spacewalk server if there are any new patches or updates or errata being available. Please help me understand the difference between update and errata. Update is a new version (release) of package. Errata is a metadata on top of some rpms version (releases), grouping it together, adding some more information. When you apply an errata, on the client new package versions get installed (upgraded). -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Issues viewing Solaris patches in Spacewalk
On Wed, Jan 30, 2013 at 03:20:32PM -0500, Stephen Herr wrote: Unfortunately I don't have a Solaris system I can register to try to reproduce this with, but it looks to me like this sub query is returning more than one row when it should be returning either one or zero rows: select spt.name from rhnSolarisPatchType spt, rhnSolarisPatch RSP, rhnPackage p where RSP.package_id = p.id and P.name_id = SP.name_id and P.evr_id = SP.evr_id and P.package_arch_id = SP.package_arch_id and RSP.patch_type = spt.id I don't know *why* that query is returning more than one row. I would think there should only be a single Solaris Patch that corresponds with a given package name / epoch / version / release / arch combination, right? There is no referential integrity I can see which would enforce that restriction. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Debian Repository Sync
On Mon, Feb 04, 2013 at 04:21:35PM +0100, Steve Meier wrote: Dear all, I just started playing with the Debian support in Spacewalk and the first hurdle I had to tackle was that spacewalk-repo-sync does (not yet?) handle Debian repositories. After coming up short on Google I used yesterdays Superbowl Blackout to hack a quick repository sync script for Debian. I have just uploaded this to GitHub so that anybody who is interested can play with it. Here is the URL: https://github.com/stevemeier/spacewalk-debian-sync/blob/master/spacewalk-debian-sync.pl Are there any plans for adding Debian support to spacewalk-repo-sync soon? Not unless it's contributed by community. The code which implements the yum repos for spacewalk-repo-sync is at ./backend/satellite_tools/repo_plugins/yum_src.py I suggest you create something like ./backend/satellite_tools/repo_plugins/debian_src.py and put the logic in there. Then it should just be a matter of creating the repo with the debian type and this plugin would kick in. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Problem Setting Up Spacewalk 1.8 with embedded Oracle DB
On Mon, Jan 21, 2013 at 04:53:10PM -0500, li...@alderfamily.org wrote: Subject: Re: [Spacewalk-list] Problem Setting Up Spacewalk 1.8 with embedded Oracle DB There is no such thing as an embedded Oracle database with Spacewalk. I am running into a problem. I have installed Spacewalk and Satellite numerous times and never run into this. It appears that the install-db.sh script is trying to source the oraenv, but I don't have an oraenv in the path. I haven't had to specify/change my path previously so it's a bit concerning. Suggestions? root@mater-linux-7:~ # spacewalk-setup --disconnected Please use spacewalk-setup --disconnected --external-db -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] [CentOS] openscad available?
On Mon, Jan 21, 2013 at 05:08:03PM -0500, Mark LaPierre wrote: On 01/21/2013 04:15 PM, Nathan Duehr wrote: On Jan 18, 2013, at 9:43 AM, Mark LaPierremarklap...@aol.com wrote: Does anyone know if there is a repo that has openscad for CentOS? rpmfind.net doesn't turn up anything. The openscad wiki page says, As of 2013, prebuilt OpenSCAD packages are available on many recent Linux and BSD distributions, including Debian, Ubuntu, Fedora, Arch, and NetBSD. Check your system's package manager for details. I though that maybe CentOS might have one too. I'll try building it from source if not, but I've seldom had success with that course of action. Most times the build fails for missing dependencies which just are not available for CentOS, or it fails to find them even when they are installed. Mark, There's been a bunch of talk about this package on the Spacewalk list lately... I forget if they've packaged it or were just supporting it. Might check there. Nate ___ CentOS mailing list cen...@centos.org http://lists.centos.org/mailman/listinfo/centos Hey All, Is there an openscad .rpm available for RHEL 6? I've done a fair amount of Googling but have not found such a file. I'm affraid Nate is confusing openscad and openscap. The openscad was never mentioned on this mailing list nor is a part of Spacewalk. Sorry. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Support for Fedora 18 clients using Spacewalk 1.8?
On Mon, Jan 21, 2013 at 10:32:21AM +0100, Miroslav Suchy wrote: On 19.1.2013 03:28, Jon Miller wrote: I tried looking for available client download URLs but was unsuccessful. What is the current timeline for making those packages available? Spacewalk client is already part of Fedora. So it is already available there (and also in rawhide). Just do: yum groupinstall 'Spacewalk Client' Nightly client repos are now available for Fedora 18 as well: http://yum.spacewalkproject.org/nightly-client/Fedora/18/ -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Database problems upgrading Spacewalk 1.7 - 1.8
On Fri, Jan 18, 2013 at 02:46:58PM +0100, Jonathan Hoser wrote: Yepp it does: -bash-4.2$ psql spaceschema psql (9.1.7) Type help for help. spaceschema=# select * from dual; dummy --- X X (2 rows) spaceschema=# And here I read that dual was just created for compatibility with Oracle... Yes. And if it has two records it it, your Spacewalk is completely broken. You really should investigate how to second record got to that table. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Database problems upgrading Spacewalk 1.7 - 1.8
On Thu, Jan 17, 2013 at 12:49:51PM +0100, Jonathan Hoser wrote: Hi all, I'm finally upgrading to 1.8 and have managed 1.7 (from 1.6), but am now baffled by issues from the schema-upgrade: My Spacewalk is running on Fedora16 and PostgreSQL 9.1.7 From the subset of spacewalk-schema-1.7-to-spacewalk-schema-1.8/142-suse-package-keys.sql There are the following inserts that fail: insert into rhnPackageKey (id, key_id, key_type_id, provider_id) (select sequence_nextval('rhn_pkey_id_seq'), 'e3a5c360307e3d54', lookup_package_key_type('gpg'), lookup_package_provider('Suse') from dual where not exists (select 1 from rhnPackageKey where key_id = 'e3a5c360307e3d54')); (right below are another 2 inserts very similar) Now the problem I am facing is the fact that running that query gets me an ERROR: duplicate key value violates unique constraint rhn_pkey_keyid_uq DETAIL: Key (key_id)=(e3a5c360307e3d54) already exists. dissecting the query, I find that the select delivers two rows: spaceschema=# select sequence_nextval('rhn_pkey_id_seq'), 'e3a5c360307e3d54', lookup_package_key_type('gpg'), lookup_package_provider('Suse') from dual where not exists (select 1 from rhnPackageKey where key_id = 'e3a5c360307e3d54'); sequence_nextval | ?column? | lookup_package_key_type | lookup_package_provider --+--+-+- 135 | e3a5c360307e3d54 | 100 | 104 136 | e3a5c360307e3d54 | 100 | 104 (2 rows) which of course - when trying to be inserted - causes the duplicate key issues. But why do I get two rows? The last sub-select is select 1 from rhnPackageKey where key_id = 'e3a5c360307e3d54' which returns 0 rows. Could anyone shed a bit of light on this for me? Right now I'm quite baffled about the how, why and so on - but maybe I'm missing something. Does does select * from dual; return? -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Problems installing Spacewalk 1.8 on CentOS 6.3
On Tue, Jan 15, 2013 at 02:19:10PM -0500, Paul Raines wrote: I should add I have found /var/lib/tomcat6/webapps/rhn/WEB-INF/lib/antlr.jar which is a symlink to /usr/share/java/antlr.jar which is a symlink to /usr/share/java/antlr-2.7.7.jar and it appears to be normal jar file as I can run 'jar tf' on it. Permissions seem fine on it. I also see in the catalina.out failures to access jta.jar. /var/lib/tomcat6/webapps/rhn/WEB-INF/lib/jta.jar is a symlink to /usr/share/java/jta.jar and that DOES NOT exist. On my installation, there is # ls -la /usr/share/java/jta.jar lrwxrwxrwx. 1 root root 21 Jan 15 15:55 /usr/share/java/jta.jar - /etc/alternatives/jta # rpm -qf /usr/share/java/jta.jar geronimo-jta-1.1-api-1.2-13.jpp5.noarch # -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Problems installing Spacewalk 1.8 on CentOS 6.3
On Tue, Jan 15, 2013 at 01:56:58PM -0500, Paul Raines wrote: I don't understand what you mean by antlr madness that got pulled into my system. All I see is that antlr from CentOS itself got You system has ant-antlr.x86_64 plus antlr.x86_64. My system has antlr.x86_64 only. Not sure whether it affects anything but it seems nonstandard. installed instead of the one from jpackage repo. You seem to be using the RHEL6 version of What makes you think that antlr should have gotten installed from jpackage? [root@spacewalk ~]# rpm -ql antlr | grep jar /usr/share/java/antlr-2.7.7.jar /usr/share/java/antlr.jar Is that not where they are supposed to be? It is. I have no idea what /WEB-INF/ is. It is certainly not a directory on my filesystem. I have very little java internal knowledge. # locate WEB-INF | grep WEB-INF$ /var/lib/tomcat6/webapps/rhn/WEB-INF # -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Problems installing Spacewalk 1.8 on CentOS 6.3
On Wed, Jan 16, 2013 at 11:21:15AM -0500, Paul Raines wrote: I did yum install geronimo-jta-1.1-api.noarch /usr/sbin/spacewalk-service restart and now it seems to be working (at least going to the web site now gives me the Create Spacewalk Administrator page). SO I guess there is some dependency missing since it was not installed when I did a 'yum install spacewalk-postgresql' The geronimo-jta-1.1-api is providing jta which is required by spacewalk-java. So the question is -- what got installed on your machine instead of geronimo-jta-1.1-api to meet that jta dependency? -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Problems installing Spacewalk 1.8 on CentOS 6.3
On Tue, Jan 15, 2013 at 12:05:17PM -0500, Paul Raines wrote: We are trying to install Spacewalk 1.8 on a freshly installed CentOS 6.3 VM following the directions at https://fedorahosted.org/spacewalk/wiki/HowToInstall We first ran into lots of problems related to PostgreSQL. We created a spacewalk user in Postgresql along with a spacewalkdb database.The spacewalk-setup would simply fail with Could not populate database.. Finally figured out where postgresql was putting its log file and found in it the line ERROR: permission denied for language c After googling that I figured out I had to do ALTER ROLE spacewalk SUPERUSER; to get past that error. After trying the setup again, it failed again with ERROR: language plpgsql does not exist So then I did a createlang plpgsql spacewalkdb to fix that. Setup failed again because the database was half made and I had to rerun with the --clear-db flag. At that point I got past all my Postgresql troubles. But the above should really be added to the webpage in the PostgreSQL Pre-Requisites section. It's already on the https://fedorahosted.org/spacewalk/wiki/PostgreSQLServerSetup page but I've added a short note to the https://fedorahosted.org/spacewalk/wiki/HowToInstall#PostgreSQLPre-Requisites section as well. Anyway, the setup got to Restarting services. and sat there thinking for a long, long time before finallying failing with: Tomcat failed to start properly or the installer ran out of tries. Please check /var/log/tomcat*/catalina.out for errors. So in that file I find: SEVERE: Error deploying web application directory rhn java.lang.IllegalStateException: ContainerBase.addChild: start: LifecycleException: start: : java.io.IOException: Failed to access resource /WEB-INF/lib/antlr.jar I am pretty much at a total loss to figure out this one. One thing I can guess is that the 'antlr' spacewalk wants/expects to be installed is not installed because of what this 'yum list' results shows to me Installed Packages ant-antlr.x86_641.7.1-13.el6 @anaconda-CentOS-201207061011.x86_64/6.3 antlr.x86_642.7.7-6.5.el6 @anaconda-CentOS-201207061011.x86_64/6.3 Available Packages ant-antlr.noarch1.7.1-7.jpp5 jpackage-generic antlr.noarch2.7.6-6.jpp5 jpackage-generic antlr-javadoc.noarch2.7.6-6.jpp5 jpackage-generic antlr-javadoc.x86_642.7.7-6.5.el6 base antlr-jedit.noarch 2.7.6-6.jpp5 jpackage-generic antlr-manual.noarch 2.7.6-6.jpp5 jpackage-generic antlr-manual.x86_64 2.7.7-6.5.el6 base antlr-repolib.noarch2.7.6-6.jpp5 jpackage-generic jakarta-commons-jelly-tags-antlr.noarch 1.0-6.jpp5jpackage-generic maven-plugin-antlr.noarch 1.1-7.jpp5jpackage-generic mojo-maven2-plugin-antlr.noarch 17-5.jpp5 jpackage-generic Looks like some newer version from the CentOS repo itself is installed rather than the one from the jpackage repo. Any suggestions on what really is wrong and how to fix it? On my RHEL 6.4 (not CentOS but it should not matter for the purpose of this case), I have # rpm -qa | grep antlr | sort antlr-2.7.7-6.5.el6.x86_64 -- package installed from the RHEL, the only package. Please check your yum installation log to see why the antlr madness got pulled in into your system. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Problems installing Spacewalk 1.8 on CentOS 6.3
On Tue, Jan 15, 2013 at 09:28:52AM -0800, Jon Miller wrote: This may be a shot in the dark but having just gone through installing Spacewalk 1.8 on a RHEL6.3 machine, I found I had to adjust the permissions on the following files/directory: chmod 755 /etc/rhn chmod 644 /etc/rhn/rhn.conf chmod 644 /etc/rhn/cluster.ini chmod 644 /usr/share/rhn/config-defaults/rhn_web.conf This should by no means be needed. I have a Spacewalk running just fine with the permissions as provided by rpms. Plus we were specifically restricting the access in the past as part of addressing some security concerns (database passwords are there). Could you please provide more insight (ideally new thread or bugzilla) what issues exactly you've hit and what errors you got, so that someone can investigate? -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] creating software.freivald.com.repo
On Thu, Jan 10, 2013 at 03:07:21PM -0800, J.W. slone wrote: I am building new centos 5.7 workstaion with spacewalk. I am not able to install qt4-devel through my channel because qt4-devel requires software.freivald.com.repo. I've downloaded http://vault.centos.org/5.7/os/i386/CentOS/qt4-devel-4.2.1-1.i386.rpm and run rpm -qp --requires qt4-devel-4.2.1-1.i386.rpm | grep repo and I don't see any such Requires on rpm level. Can you elaborate on the qt4-devel requires software.freivald.com.repo? -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Selinux enforcing breaks rhnmd
On Thu, Nov 08, 2012 at 01:19:29PM +, James Hogarth wrote: Hi, I decided to try and make use of monitoring in Spacewalk... I'm not sure when this might not have worked from (an old 1.7 instance behaves this way and my new 1.8 does as well) but with selinux enforcing I'm getting an AVC stopping rhnmd from working properly... On start it shows: service rhnmd restart Stopping rhnmd:[ OK ] Starting rhnmd:Could not load host key: /var/lib/nocpulse/.ssh/nocpulse-identity The spacewalk-monitoring-selinux-1.9.1-1 has a fix for this problem. You can pick it up from https://koji.spacewalkproject.org/koji/packageinfo?packageID=6951 or from Spacewalk nightly repo in about three hours. We'd appreciate a note if it addresses the issue for you. Thanks for reporting it. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Custom System Info during kickstart?
On Tue, Dec 11, 2012 at 10:24:12AM -0500, Giovanni Torres wrote: I am aware that after a system is registered to spacewalk, I am able to set Custom System Info for a machine via the Web UI or from the command line via a small python script. Is there a way to set custom system info for machines during the kickstart process? You can put the same small python script invocation (or rhn-custom-info) to post in your kickstart. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Error from koan on create attempt of KVM VM
On Fri, Dec 14, 2012 at 01:23:04PM +, Matt Willsher wrote: I posted the same message to the cobbler list. It appears this problem is due to a mismatch between spacewalk's cobbler EPEL's koan. In particular, in 2.2.3, the bonding field was change to interface_type, in order to support bridges. This appears to be cobber 2.0.11. Is there a place where matched version of koan can be downloaded? You can get it from http://koji.spacewalkproject.org/koji/packageinfo?packageID=7055 I general though I'd expect new koans to work find with older cobblers, so you might want to work with cobbler upstream to make koan not choke on old cobbler's output. Yours, -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] web traceback chromium problems
On Thu, Dec 27, 2012 at 04:27:11PM -0300, Juan Pablo Roig wrote: Hi All, we are having problems using spacewalk 1.8.6 with chromium, for any reasons chromium is duplicatin some request eithout any parameters, example, whe i try to get this url from chromium: https://spacewalk.corp.globant.com/network/systems/details/history/pending.pxt?sid=110001upper=1lower=1 in apache logs i see: [27/Dec/2012:16:26:17 -0300] 10.30.2.2 TLSv1 DHE-RSA-AES256-SHA GET /network/systems/details/history/pending.pxt?sid=110001upper=1lower=1 HTTP/1.1 12373 [27/Dec/2012:16:26:17 -0300] 10.30.2.2 TLSv1 DHE-RSA-AES256-SHA GET /network/systems/details/history/pending.pxt HTTP/1.1 5787 but if i try the same url from firefox i only see the first request. Any ideas? What's in the ssl_access_log? What is the status code? Is there anything like 302 (instead of 200) which would suggest that Spacewalk actually tells your browser to go to the other URL? -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] can't add systems to SSM from Schedule tab
On Fri, Nov 23, 2012 at 10:15:16AM -0500, Giovanni Torres wrote: Spacewalk 1.7. Did this change in 1.8? Nope. I think what happens here is -- the list is a list of actions, so when you select them (to Unschedule Action), you select actions, not systems. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Login Logs Spacewalk 1.8
On Wed, Jan 02, 2013 at 01:11:14PM +, SANCHEZ Alvin wrote: Hi (and happy new year) everyone, I know that this didn't work with 1.1 version but Is there a log file with Spacewalk 1.8 that shows all the connection to the WebUI ? The /var/log/httpd/(ssl_)access_log was present even on Spacewalk 1.1. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Oracle to postgresql
On Thu, Jan 03, 2013 at 02:24:02PM +0800, Colin Coe wrote: Hi all I'm in the process of doing $SUBJECT migration. The Oracle DB is currently on a separate box and I'm following https://fedorahosted.org/spacewalk/wiki/PostgreSQLFromOracle with the postgres server on the spacewalk server. After configuring the postgres side, I get: spacewalk-dump-schema --db=//spacewalk.server.com/spacedb --user=user --password=password| PGPASSWORD=spacepw psql -h localhost -U spaceuser spaceschema ERROR: relation pxtsessions does not exist SIGPIPE received. Any ideas on this? Are you sure you did run spacewalk-setup --db-only for the PostgreSQL setup? -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] postgresql84-contrib conflict with PGDG postgresql-contrib.8.4
On Tue, Dec 18, 2012 at 01:53:27PM -0500, Matt Warren wrote: https://www.redhat.com/archives/spacewalk-list/2012-November/msg00146.html Basically: if you don't like the Requires list in the spacewalk-postgresql package, just don't use it and install all dependencies manually. I'd read that message but found install all dependencies manually left me with questions. And rightly so. ;-) You'd be on your own. If we add new dependency in the future, you'll need to catch that during upgrade. Primarily, What is the best root package of a dependency tree to get a non-db-specific install? spacewalk-base? That would be spacewalk-common. Are there aspects (scripts, commands) of system setup using Postgres that I'd then be missing? The package spacewalk-postgresql contains only one file, defining the db-backend value for spacewalk-setup. If you pass that value in manually, you should be good to go. Other than this one file the package is just a list of package dependencies. Another thing that you possibly could do is to create your own rpm postgresql84-contrib with some high epoch which would just require that postgresql-contrib-8.4 from the PostgreSQL repository -- that way the dependency chain would be closed and you (possibly) could continue to use spacewalk-postgresql. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] postgresql84-contrib conflict with PGDG postgresql-contrib.8.4
On Mon, Dec 17, 2012 at 03:35:54PM -0500, Matt Warren wrote: We use PostgreSQL for other backends and have been installing via the PGDG yum for more timely updates. When yum install spacewalk-postgresql is run I get conflicts with the PGDG packages already installed. Is there any way to override this behavior? Or workaround to do a non-db-specific install because I have all the postgresql bits installed already? https://www.redhat.com/archives/spacewalk-list/2012-November/msg00146.html Basically: if you don't like the Requires list in the spacewalk-postgresql package, just don't use it and install all dependencies manually. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] RHN Traceback emails from Spacewalk server after client upgrade
On Fri, Dec 14, 2012 at 11:18:43AM +0100, fa...@gmx.us wrote: Hi. After client upgrade and subsequent reboot I started to receive RHN Traceback emails from server regarding upgraded clients with the following error: === While running 'get_server_capability': caught class 'spacewalk.server.apacheRequest.UnknownXML' : Invalid request received (method 'get_server_capability' doesn't have a class and function). Exception Handler Information Traceback (most recent call last): File /usr/lib/python2.6/site-packages/spacewalk/server/apacheRequest.py, line 120, in call_function func = self.method_ref(method) File /usr/lib/python2.6/site-packages/spacewalk/server/apacheRequest.py, line 422, in method_ref classname, funcname = string.split(method, '.', 1) UnknownXML: Invalid request received (method 'get_server_capability' doesn't have a class and function). === What does it mean exactly and how to correct it? What is in the Apache access and error logs, what client is that exactly? What server and client versions are there? -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Updated rhncfg in the works? (BZ#879299 / RHBA-2012:1552-1)
On Fri, Dec 14, 2012 at 11:21:19AM +0100, Patrick Hurrelmann wrote: Just curious, what is the general policy for bugfixes in Spacewalk? I see some rpms were updated, but as you said others will not? We don't have a policy per se. We are more likely to respin packages for regressions that affect multiple users, in packages where it's not that easy to patch the code on the disk (compiled stuff like Java). Of course, respinning packages requires someone to do the work and we need to balance that effort against other tasks, like new features or fixing more bugs or documentation improvements. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] automatically adding GPG keys to a host
On Mon, Dec 10, 2012 at 09:30:12PM +, Snyder, Chris wrote: I want to be able to take a host that is alredy registered to Spacewalk and add a new software channel to it and then have the related GPG key automatically installed on the host. I'd really like this to NOT involve any human interaction at all, but it always seems to involve a human having to add the GPG key to the host manually somehow. Here's what I'm currently trying: I've got an (unsigned) RPM which drops various GPG keys into /etc/pki/rpm-gpg on my hosts. (This seemed the simplest way to be able to add/update keys in the future on my hosts, but I'm not glued to this idea.) Next, I configured my Spacewalk software channels to use the GPG keys from that RPM, setting location as 'file:///etc/pki/rpm-gpg/blah'. Once I enable this software channel for a host, I would expect that when I push packages to my host from Spacewalk, the needed channel GPG key would automatically be added to the RPM keyring on the host. That doesn't seem to be happening. After scheduling some package to be installed on the host, I run 'rhn_check -vv' (on the host) and I see the following error: D: keyurl = file:///etc/pki/rpm-gpg/RPMfile:///\\etc\pki\rpm-gpg\%3cRPM KEY FILE, isn't a known Red Hat key, so this will not be imported. Manually import this key or set gpgcheck=0 in the RHN yum plugin configuration file (This tells me that it is finding the correct GPG file as configured in the software channel, but it just doesn't like my key because I'm not Red Hat.) I don't want to re configure my hosts to disable gpgcheck, and I can't find any way through Spacewalk to do the equivalent of 'yum -y' (to auto-accept the key when prompted), so unless I'm really doing something wrong here, it doesn't look like I can simply add a host to a software channel and start pushing packages until a human goes to the host and either runs 'rpm -import gpg file' or some variation on 'yum -y install some package from target channel'. You can run remote command to do yum -y or rpm --import. For the remote command, the remote command execution obviously has to be enabled on the clients. Other than that, you are actually hitting an important security feature of the setup -- unless configured on the client, the client will prevent you from installing unverified packages or run random code. The generic advice would be to generate your GPG key and import it either during kickstart or while doing rhn_register, to lay the groundwork for pushing stuff out using your packages, signed with your key. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] heirloom-pkgtools not compiled anymore
On Tue, Nov 27, 2012 at 02:42:14PM +0100, Pierre Casenove wrote: Thanks, i'll give it a try asap The package is now in nightly yum repos on all OSes. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Problem subscribing client to a channel
On Tue, Nov 27, 2012 at 01:48:26PM -0500, Alex wrote: so I've set up a new channel with label vmware-tools-i386-rhel6. however, when trying to subscribe client to a channel, i'm getting the following message: # spacewalk-channel --add -c vmware-tools-i386-rhel6 --user username --password password Error communicating with server. The message was: Error Message: Server already subscribed to 105 Error Class Code: 38 Error Class Info: The system is already subscribed to the specified channel. Explanation: An error has occurred while processing your request. If this problem persists please enter a bug report at bugzilla.redhat.com. If you choose to submit the bug report, please be sure to include details of what you were trying to do when this error occurred and details on how to reproduce this problem. even though in spacewalk GUI it shows that no clients are assigned to the channel. what could be a problem here? I assume that the channel 105 is some other base channel, and vmware-tools-i386-rhel6 is a base channel. So the error message tells you that you cannot add the vmware-tools-i386-rhel6 channel because it's not a child channel of that channel 105. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] up2date issues
On Sun, Dec 09, 2012 at 04:54:36PM -0500, William Muriithi wrote: Why do we have configuration under up2date though, while redhat have long dumped up2date for yum? Not important, just curious. Historical reasons. ;-) -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Differences exist in a file that is not readable by all. Re-deployment of configuration file is recommended. on configuration file comparsion
On Fri, Dec 07, 2012 at 12:37:24PM +0100, Mstyslav Brovko wrote: Hi All, I've updated my Spacewalk recently and was quite disappointed, that now I'm not able to diff my files, which are not available for others. Instead of diff I have the following message: Differences exist in a file that is not readable by all. Re-deployment of configuration file is recommended. It's very good from the security point of view, but shouldn't be there some option to disable this kind of protection, or make it more flexible? The option was added as part of bugzilla https://bugzilla.redhat.com/show_bug.cgi?id=878216 You can use the rhncfg* packages from Spacewalk nightly yum repos with the change. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list