[Spacewalk-list] rhn-search fails connection to PostgreSQL POST 2.1 upgrade
Hello List, I have a Spacewalk 2.1 installation that was just upgraded from 2.0 that rhn-search fails to start after the upgrade. I get the following error in the logs. Any ideas as to what could be the issue? rhn-search is running on the same server as tomcat and taskomatic and everything seems to be working fine with those services connecting to our external PostgreSQL database. This is a clean install of 2.0 that was upgraded to 2.1. Everything was working before the upgrade. No errors were seen during the upgarde process everything went really well. Maybe a little too well as it was really fast! :) INFO | jvm 1| 2014/03/07 14:39:34 | WARNING: com.mchange.v2.resourcepool.BasicResourcePool$AcquireTask@5ff54855 -- Acquisition Attempt Failed!!! Clearing pending acquires. While trying to acquire a needed new resource, we failed to succeed more than the maximum number of allowed acquisition attempts (30). Last acquisition attempt exception: INFO | jvm 1| 2014/03/07 14:39:34 | org.postgresql.util.PSQLException: Connection refused. Check that the hostname and port are correct and that the postmaster is accepting TCP/IP connections. INFO | jvm 1| 2014/03/07 14:39:34 | at org.postgresql.core.v3.ConnectionFactoryImpl.openConnectionImpl(ConnectionFactoryImpl.java:207) INFO | jvm 1| 2014/03/07 14:39:34 | at org.postgresql.core.ConnectionFactory.openConnection(ConnectionFactory.java:64) INFO | jvm 1| 2014/03/07 14:39:34 | at org.postgresql.jdbc2.AbstractJdbc2Connection.init(AbstractJdbc2Connection.java:136) INFO | jvm 1| 2014/03/07 14:39:34 | at org.postgresql.jdbc3.AbstractJdbc3Connection.init(AbstractJdbc3Connection.java:29) INFO | jvm 1| 2014/03/07 14:39:34 | at org.postgresql.jdbc3g.AbstractJdbc3gConnection.init(AbstractJdbc3gConnection.java:21) INFO | jvm 1| 2014/03/07 14:39:34 | at org.postgresql.jdbc4.AbstractJdbc4Connection.init(AbstractJdbc4Connection.java:31) INFO | jvm 1| 2014/03/07 14:39:34 | at org.postgresql.jdbc4.Jdbc4Connection.init(Jdbc4Connection.java:24) INFO | jvm 1| 2014/03/07 14:39:34 | at org.postgresql.Driver.makeConnection(Driver.java:410) INFO | jvm 1| 2014/03/07 14:39:34 | at org.postgresql.Driver.connect(Driver.java:280) INFO | jvm 1| 2014/03/07 14:39:34 | at com.mchange.v2.c3p0.DriverManagerDataSource.getConnection(DriverManagerDataSource.java:134) INFO | jvm 1| 2014/03/07 14:39:34 | at com.mchange.v2.c3p0.WrapperConnectionPoolDataSource.getPooledConnection(WrapperConnectionPoolDataSource.java:182) INFO | jvm 1| 2014/03/07 14:39:34 | at com.mchange.v2.c3p0.impl.C3P0PooledConnectionPool$1PooledConnectionResourcePoolManager.acquireResource(C3P0PooledConnectionPool.java:148) INFO | jvm 1| 2014/03/07 14:39:34 | at com.mchange.v2.resourcepool.BasicResourcePool.doAcquire(BasicResourcePool.java:1014) INFO | jvm 1| 2014/03/07 14:39:34 | at com.mchange.v2.resourcepool.BasicResourcePool.access$800(BasicResourcePool.java:32) INFO | jvm 1| 2014/03/07 14:39:34 | at com.mchange.v2.resourcepool.BasicResourcePool$AcquireTask.run(BasicResourcePool.java:1810) INFO | jvm 1| 2014/03/07 14:39:34 | at com.mchange.v2.async.ThreadPoolAsynchronousRunner$PoolThread.run(ThreadPoolAsynchronousRunner.java:547) INFO | jvm 1| 2014/03/07 14:39:34 | Caused by: java.net.ConnectException: Connection refused INFO | jvm 1| 2014/03/07 14:39:34 | at java.net.PlainSocketImpl.socketConnect(Native Method) INFO | jvm 1| 2014/03/07 14:39:34 | at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:327) INFO | jvm 1| 2014/03/07 14:39:34 | at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:193) INFO | jvm 1| 2014/03/07 14:39:34 | at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:180) INFO | jvm 1| 2014/03/07 14:39:34 | at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:385) INFO | jvm 1| 2014/03/07 14:39:34 | at java.net.Socket.connect(Socket.java:546) INFO | jvm 1| 2014/03/07 14:39:34 | at java.net.Socket.connect(Socket.java:495) INFO | jvm 1| 2014/03/07 14:39:34 | at org.postgresql.core.PGStream.init(PGStream.java:60) INFO | jvm 1| 2014/03/07 14:39:34 | at org.postgresql.core.v3.ConnectionFactoryImpl.openConnectionImpl(ConnectionFactoryImpl.java:101) INFO | jvm 1| 2014/03/07 14:39:34 | ... 15 more INFO | jvm 1| 2014/03/07 14:39:34 | Mar 7, 2014 2:39:34 PM com.mchange.v2.resourcepool.BasicResourcePool$AcquireTask run Thank you for your time and have a great day! Regards, Jeremy ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
[Spacewalk-list] DB connections not dropping httpd hitting MaxClient setting
Hello List, I have a Spacewalk install running 2.0 with a postgresql 9.1 DB with about 9000 clients connecting to 21 different proxy servers in our environment. Recently we have started having issues with httpd hitting the MaxClient setting so we adjusted this to 550 which seems to then be met. When we got the MaxClient error about 2300 servers were running a yum install of one package. In the past we haven't deployed to more that 1500 servers but the limit back then was set to 225 so not sure what could be the cause of this issue. In the DB while we get the httpd error I am seeing a lot of stale DB connections regarding updating rhnserverpackage table and neededcache. These stale connections then cause the 600 connection limit to be exhausted. Please let me know if you need any more information on this issue. As I am not really sure what all is needed to troubleshoot this issue. Thank you for your time and have a great day! Regards, Jeremy ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
[Spacewalk-list] Taskomatic service not logging tasks
Hello All, It seems that my Production environment is logging all tasks that are being executed by taskomatic. My Development and Test environments are not logging any tasks. I have checked /usr/share/rhn/classes/log4j.properties and each environment is set with the same settings. Everything else I have checked seems to be the same. Is there any other items I should check to make sure tasks get logged to the rhn_taskomatic_daemon.log. Thank you for your time and have a grate day! Regards, Jeremy ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Proxy Error RHN Proxy error (RHN Proxy systemid has wrong permissions?).
Permissions on the /etc/sysconfig/rhn/systemid file is the cause of the issue. This got changed during an upgrade that went wrong. Must have missed this server when I fixed all the others. Thank you for your time and have a great day! On Wed, Jan 9, 2013 at 3:52 AM, Michael Mraka michael.mr...@redhat.comwrote: Jeremy Davis wrote: % Hello List, % % I just upgraded to 1.8 and one of my proxy servers is generating traceback % emails with the following error. ... % File /usr/share/rhn/proxy/rhnProxyAuth.py, line 77, in __processSystemid % _(RHN Proxy error (RHN Proxy systemid has wrong permissions?). % rhnFault: (1000, 'RHN Proxy error (RHN Proxy systemid has wrong % permissions?). Please contact your system administrator.', 'RHN Proxy % error.') % % I found a bz report that states it is fixed a long time ago. % https://bugzilla.redhat.com/show_bug.cgi?id=483802. Could this be the same % issue or something else? It isn't the same issue. Please check permissions on /etc/sysconfig/rhn/systemid. Should be rw-r root apache. % Thank you for your time and have a great day! % % Regards, % Jeremy Regards, -- Michael Mráka Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
[Spacewalk-list] Errata Import causing Taskomatic to stop processing
Hello List, I have a Spacewalk 1.8 installation with about 8000+ servers connecting to about 21 proxy servers. I was running a sync on the EPEL repository that contains Errata. This Errata was being imported by the spacewalk-repo-sync script. It started around 10:00pm and processed requests up to around 7:30 this morning. After 7:30 it appears that the taskomatic service has hung. The only way to get taskomatic back up and not process the remaining Errata is to Null out the rhnErrataNotificationQueue table. It seems the Notifications are what is causing the taskomatic service to stop processing new requests. Please let me know if there is any other info you need as I am not sure what else to provide. Thank you for your time and have a great day! Regards, Jeremy ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
[Spacewalk-list] PostgreSQL max_connections Setting Question
Hello List, I currently have a Spacewalk 1.8 installation with PostgreSQL 9.1. I am looking at ways to optimize this setup and was looking a the connection setting. In the documentation it states to set the max_connections to 600 ( https://fedorahosted.org/spacewalk/wiki/PostgreSQLServerSetup). Why is that set this way? I have been doing some monitoring of Spacewalk and it hasn't gone above like 200 connections (select count(*) from pg_stat_activity). IIRC Postgres splits resources for each connection you have to PostgreSQL. If these connections actually splits the resources available then that would mean that we are cutting out a lot of resources that could be gained by lowering the max_connections. If the 600 is set high and able to be changed would setting this to like 300 cause any issues? I have about 20 proxy servers with about 8000 machines total connecting to those different 20 proxy servers. Based on those numbers what would your recommendation be for setting PostgreSQL max_connections setting. Thank you for your time and have a great day! Regards, Jeremy ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Exception when calling listLatestUpgradablePackages
Is this issue only for RHEL/CentOS 6 or is it for all versions of Spacewalk running with PostgreSQL (I assume it is for all)? If this is for v5 when will this fix be added to the current Spacewalk 1.8 repos? Thank you for your time and have a great day! Hi Pierre, as it's clearly regression against 1.7, I've backported changes. You can download spacewalk-java-1.8.181-1 packages directly from koji (e.g. http://koji.spacewalkproject.org/koji/buildinfo?buildID=29420 for RHEL/Centos 6). % Hello Pierre, % % this issue has been both introduced nad fixed as a part of % https://bugzilla.redhat.com/show_bug.cgi?id=839960. % (Fixed in % http://git.fedorahosted.org/cgit/spacewalk.git/commit/?id=594781171402e28f85cdcb9fe7e838e35288a505 % . ) ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] spacewalk-postgresql-1.8.6-1.el5.noarch.rpm requires postgresql84-contrib
My apologizes, I looked at the wrong contrib package for the provides. I thought postgresql84-contrib had the provides for postgresql-contrib but it doesn't as you say. It was the 9.1 postgresql91-contrib package that has the provides. Seems like postgresql84-contrib could be updated to reflect this but that is something that would need to change on RHEL (Which I still recommend changing that package as it is a good standard to use just as the 9.1 package is doing). I will go ahead and use the 84 client packages with 9.1 to start and maybe switch them out after the upgrade. Please disregard this email now as this whole email was relying on postgresql84-contrib having a provides for postgresql-contrib like the postgresq91-contrib package does but it doesn't so my recommendation is null. Not sure how I didn't catch that. Sorry to have wasted your time on this as I thought I checked before I sent this email. Thank you for your time and have a great day! Regards, Jeremy On Wed, Nov 21, 2012 at 1:00 AM, Jan Pazdziora jpazdzi...@redhat.comwrote: On Tue, Nov 20, 2012 at 12:12:17PM -0700, Jeremy Davis wrote: What I am really asking is if we can update the rpm require lines to reflect postgresql-contrib instead of postgresql84-contrib and use the No. There does not seem to be any such thing as postgresql-contrib which would be compatible with postgresql84-server on RHEL 5. The package postgresql84-contrib does not Provide postgresql-contrib. postgresql = 8.4 as the means to make sure we get at least 8.4 when installed via yum. This also seems a lot cleaner than requiring postgresql84-contrib when that package provides postgresql-contrib in the package. The postgresql-contrib in RHEL 5 is version 8.1. 8.1 8.4. If you don't like the Requires list in the spacewalk-postgresql package, just don't use it and install all dependencies manually. to choose which version of PostgreSQL to use, help smash any bugs that are found with different versions, and allow Spacewalk to support newer version more quickly. It is not our plan to support newer versions of PostgreSQL on RHEL 5. If you get it working, fine. We like to stay with the database version provided by the OS. If I can't use 9.1 than I would recommend that you update the wiki or allow me to update the wiki to change the documentation to state that only 8.4 is a solid requirement and that you can't use a newer version. You can just fine, on Fedoras, for example. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
[Spacewalk-list] spacewalk-postgresql-1.8.6-1.el5.noarch.rpm requires postgresql84-contrib
Hello List, I am trying to upgrade to Spacewalk 1.8 and hit a dependency issue with spacewalk-postgresql package. It is requiring postgresql84-contrib when I would like to use the postgresql91-contrib. Is there anyway that I can use the 91 package instead of the 84 package? If I can't use the 9.1 package would using the 84 packages with a 9.1 database going to cause any issues? Thank you for your time and have a great day! Regards, Jeremy ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] spacewalk-postgresql-1.8.6-1.el5.noarch.rpm requires postgresql84-contrib
Hello Jan and All, Sorry I should have given a little background. I converted my Spacewalk Oracle 11G(External DB) solution to Spacewalk PostgreSQL 9.1(External DB) using Spacewalk 1.6 a while back. Now that 1.8 is released I am cleaning things up a little bit as in order to get 1.6 working with postgresql 9.1 I had to use the 84 packages and not 9.1 on the app server. Now that I am cleaning up the packages I would like to use the 9.1 packages as I feel it might clear some issues up that I am seeing or maybe improve the situation a little. (Note: These issues I am talking about seem to be fixed with bug fixes for 1.8 so I don't think these are 9.1 specific issues just would like to rule out any incompatibility issues by using the 9.1 packages with a 9.1 DB instead of 8.4 packages.) Based on the Spacewalk wiki documentation it states the following please make sure the postgresql-contrib = 8.4 (or postgresql84-contrib on RHEL 5 ) is installed on the PostgreSQL server. and PostgreSQL 8.4+ as a database backend. Which leads me to think that I could use a version higher than 8.4. I also obtained a couple of fixes for escape issues that I was having with 9.1. Seeing as how I was obtaining support for 9.1 in the way of bugs being fixed I assumed it would be ok to use 9.1. What I am really asking is if we can update the rpm require lines to reflect postgresql-contrib instead of postgresql84-contrib and use the postgresql = 8.4 as the means to make sure we get at least 8.4 when installed via yum. This also seems a lot cleaner than requiring postgresql84-contrib when that package provides postgresql-contrib in the package. So it would be really easy to change that to require just postgresql-contrib instead of postgresql84-contrib. This would allow users to choose which version of PostgreSQL to use, help smash any bugs that are found with different versions, and allow Spacewalk to support newer version more quickly. If I can't use 9.1 than I would recommend that you update the wiki or allow me to update the wiki to change the documentation to state that only 8.4 is a solid requirement and that you can't use a newer version. Thank you for your time and have a great day! Regards, Jeremy On Tue, Nov 20, 2012 at 10:52 AM, Jan Pazdziora jpazdzi...@redhat.comwrote: On Tue, Nov 20, 2012 at 10:27:16AM -0700, Jeremy Davis wrote: I am trying to upgrade to Spacewalk 1.8 and hit a dependency issue with spacewalk-postgresql package. It is requiring postgresql84-contrib when I would like to use the postgresql91-contrib. I really recommend separating the task of upgrading Spacewalk from the task of attempting to use different version of PostgreSQL than shipped with your version of RHEL/OS. With the later is introduce yet another layer of potential incompatibility to your setup. Is there anyway that I can use the 91 package instead of the 84 package? If I can't use the 9.1 package would using the 84 packages with a 9.1 database going to cause any issues? The contrib package has to match the PostgreSQL server version, really. Is the database server on the same machine as the Spacewalk installation, or is that an external database? -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] 500 error on Snapshot rollback
I am also having the issue of rolling back snapshots and deleting them. I can tag a snapshot but can't roll back. I am running Spacewalk 1.6 with PostgreSQL 9.1. I get the following error in httpd error log when I try to do a rollback. Rollback error: [Wed Oct 17 09:58:07 2012] [error] Execution of /var/www/html/network/systems/details/history/snapshots/rollback.pxt failed at Wed Oct 17 09:58:07 2012: RHN::Exception: Please use DBI functions for transaction handling at /usr/lib64/perl5/vendor_perl/5.8.8/x86_64-linux-thread-multi/DBD/Pg.pm line 190.\n\n Sniglets::Snapshot /usr/lib/perl5/vendor_perl/5.8.8/Sniglets/Snapshot.pm 316 RHN::Exception::throw\n PXT::ApacheHandler /usr/lib/perl5/vendor_perl/5.8.8/PXT/ApacheHandler.pm 493 Sniglets::Snapshot::system_snapshot_rollback_cb\n PXT::ApacheHandler /usr/lib/perl5/vendor_perl/5.8.8/PXT/ApacheHandler.pm 103 PXT::ApacheHandler::pxt_parse_data\n PXT::ApacheHandler /usr/lib/perl5/vendor_perl/5.8.8/PXT/ApacheHandler.pm 103 (eval)\n main -e 0 PXT::ApacheHandler::handler\n main -e 0 (eval) Tag Delete error: [Wed Oct 17 10:03:39 2012] [error] Execution of /var/www/html/network/systems/details/history/snapshots/remove_confirm.pxt failed at Wed Oct 17 10:03:39 2012: Please use DBI functions for transaction handling at /usr/lib64/perl5/vendor_perl/5.8.8/x86_64-linux-thread-multi/DBD/Pg.pm line 190. Regards, Jeremy On Wed, Oct 24, 2012 at 6:01 AM, Jan Hutař jhu...@redhat.com wrote: On Mon, 15 Oct 2012 11:45:46 + Anton Pritchard-Meaker anton.pritchard-mea...@kit-digital.com wrote: Hi, Thanks for the help. I have made this adjustment, but now when I select a Snapshot for rollback it shows as no packages having changed (I upgraded a couple) and triggering a rollback shows the box unsubscribing and then re-subscribing to the channel. I also get a 500 error when trying to Tag a Snapshot. Are these known issues? Hello, tagging a snapshot is a know issue in SW 1.7, fixed in nightly. Do not know about that other issue. Regards, Jan -- Jan Hutar Systems Management QA jhu...@redhat.com Red Hat, Inc. ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
[Spacewalk-list] Internal Server Error Snapshot Rollback - PostgreSQL 9.1 with Spacewalk 1.6
Hello List, I am having a problem with snapshot rollbacks and tag deletes in Spacewalk. Below you will find the errors I am getting for both the rollback and delete. Rollback error: [Wed Oct 17 09:58:07 2012] [error] Execution of /var/www/html/network/systems/details/history/snapshots/rollback.pxt failed at Wed Oct 17 09:58:07 2012: RHN::Exception: Please use DBI functions for transaction handling at /usr/lib64/perl5/vendor_perl/5.8.8/x86_64-linux-thread-multi/DBD/Pg.pm line 190.\n\n Sniglets::Snapshot /usr/lib/perl5/vendor_perl/5.8.8/Sniglets/Snapshot.pm 316 RHN::Exception::throw\n PXT::ApacheHandler /usr/lib/perl5/vendor_perl/5.8.8/PXT/ApacheHandler.pm 493 Sniglets::Snapshot::system_snapshot_rollback_cb\n PXT::ApacheHandler /usr/lib/perl5/vendor_perl/5.8.8/PXT/ApacheHandler.pm 103 PXT::ApacheHandler::pxt_parse_data\n PXT::ApacheHandler /usr/lib/perl5/vendor_perl/5.8.8/PXT/ApacheHandler.pm 103 (eval)\n main -e 0 PXT::ApacheHandler::handler\n main -e 0 (eval) Tag Delete error: [Wed Oct 17 10:03:39 2012] [error] Execution of /var/www/html/network/systems/details/history/snapshots/remove_confirm.pxt failed at Wed Oct 17 10:03:39 2012: Please use DBI functions for transaction handling at /usr/lib64/perl5/vendor_perl/5.8.8/x86_64-linux-thread-multi/DBD/Pg.pm line 190. Any ideas as to what could be the cause of this issue? ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] How to set Spacewalk server as yum server
Hello, Why not use the same urls that are used for the kickstart configuration. There are URLs that you can use as baseurls for a yum configuration. I am currently using them in my environment for servers that are unable to join Spacewalk for what ever reason. Works really well and doesn't require any management or any additional commands other than updating the distro trees when a new version is released (CentOS Major versions like 5.7 to 5.8). All packages that are available from Spacewalk are available to these URLs without any other need for external applications to update. On Tue, Oct 16, 2012 at 2:39 PM, Paul Robert Marino prmari...@gmail.comwrote: Under the hood mrepo runs createrepo for you On Oct 16, 2012 3:35 PM, fn...@yahoo.com wrote: Hi, I believe that this is a good subject, but haven't found related info yet online about it. Sorry if the subject has already been discussed in this great mailing list before. I'd like to set our Spacewalk server as a Yum server, so clients can use yum command to install/upgrade single package. The Spacewalk server has been working well. Here is what I did on the client: spacewalkclient# cat /etc/yum.repos.d/spacewalk-client.repo [spacewalk-client] name=Spacewalk Client Tools baseurl= http://spacewalkserver.ourdomain.com/mrepo/rhel_5_server-x86_64/RPMS.updates #gpgkey=http://spacewalk.redhat.com/yum/RPM-GPG-KEY-spacewalk-2012 enabled=1 gpgcheck=0 What else do I need to do to implement the job? I think I don't need to run 'createrepo' command since repodata sub-directories have already been created by the spacewalk-mrepo sync process. Thank you! nz ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] script to create webserver accessible repo of packages under Spacewalk channels
Hello All, I have been watching this email for just a little bit and thought I would provide a little information that might be of some help. Spacewalk provides yum repositories based on the kickstart configuration. While configuring a kickstart file in Spacewalk it provides urls that are used during the install process for systems. These same urls can be used for systems that are not joined to Spacewalk. These urls use the same packages and repodata used in your Spacewalk channels except for the base channel (os in CentOS terms). Below you will find an example of a yum client .repo config that uses these kickstart urls. This config is setup with the following structure: centos-production-base-v5-64bit (Base channel) = syncs with http://centos.public.mirror/CentOS/5/os/x86_64/http://ftp.linux.ncsu.edu/pub/CentOS/5/os/x86_64/ . centos-production-updates-v5-64bit (Child channel of base above) = syncs with http://centos.public.mirror/CentOS/5/updates/x86_64/http://ftp.linux.ncsu.edu/pub/CentOS/5/os/x86_64/ . centos-production-extras-v5-64bit (Child channel of base above)= syncs with http://centos.public.mirror/CentOS/5/extras/x86_64/http://ftp.linux.ncsu.edu/pub/CentOS/5/os/x86_64/ . spacewalk-client-prod-v5-64bit (Child channel of base above) = syncs with Spacewalk client repository. spacewalk-epel-prod-v5-64bit (Child channel of base above) = syncs with EPEL repository for v5 64bit. NOTE: These URLs do not work when going to the URL with a browser as you will need to ask for a certain file just like yum would do in order to pull stuff via the browser. NOTE 2: I have a Development and Test environment configured inside the same Spacewalk install. This is done by having base channels setup as above by changing the production to either dev or test and also changing the arch and version(64bit and v5) to the correct arch and version (I currently have v4, v5, and v6 with 32bit and 64bit). [spacewalk-base] name=Spacewalk base baseurl=http://proxy_FQDN/ks/dist/centos-production-base-v5-64bit enabled=1 [spacewalk-updates] name=Spacewalk updates baseurl= http://proxy_FQDN/ks/dist/child/centos-production-updates-v5-64bit/centos-production-base-v5-64bit enabled=1 [spacewalk-extras] name=Spacewalk extras baseurl= http://proxy_FQDN/ks/dist/child/centos-production-extras-v5-64bit/centos-production-base-v5-64bit enabled=1 [spacewalk-client] name=Spacewalk client baseurl= http://proxy_FQDN/ks/dist/child/spacewalk-client-prod-v5-64bit/centos-production-base-v5-64bit enabled=1 [spacewalk-epel] name=Spacewalk epel baseurl= http://proxy_FQDN/ks/dist/child/spacewalk-epel-prod-v5-64bit/centos-production-base-v5-64bit enabled=1 On Tue, Sep 4, 2012 at 10:43 AM, Boyd, Robert robert.b...@peoplefluent.comwrote: Matthew, At the remote sites I'm using Spacewalk Proxy Servers. How can/will this script work with those? Should I use reposync+createrepo to build mirrors on the Proxy servers? Or is there another way? Most of my clients won't have direct access to the master due to network and firewall restrictions. Robert -Original Message- From: spacewalk-list-boun...@redhat.com [mailto: spacewalk-list-boun...@redhat.com] On Behalf Of Matthew Patton Sent: Saturday, September 01, 2012 3:23 AM To: spacewalk-list@redhat.com Subject: Re: [Spacewalk-list] script to create webserver accessible repo of packages under Spacewalk channels On Mon, 27 Aug 2012 19:46:59 -0400, Matthew Patton mpat...@inforelay.com wrote: On https://fedorahosted.org/spacewalk/wiki/BrainBox there is a requst for: quote Allow a channel to be available as a raw yum repo. This would work for building tools like mock. I often have to keep rpms around in 2 spots so I can perform mock biulds. Please, please fix this. --stahnma Seconded, it would also make migration, manual changes easier? An export as yum repo hierarchy button somewhere? and would help with Koji integration. -- Phil /quote I apologize to the list for the pitiful effort of my previous post. Turns out Satellite generates repodata for each channel and stuffs it into /var/cache/rhn/repodata. So I wrote a vastly better script that extracts the information and symlinks into the hierarchy Satellite maintains. This obviates the need to spend 2x on disk space or maintain a separate repository. If you should have a 'mrepo' configuration that is uploaded into Satellite, this script can be trivially extended to remove the original RPM and symlink into the Satellite's copy. Please note the script just takes the first match should there be an exact filename match. It also doesn't deal with EPOCH but it appears Satellite does it's own housecleaning in that regard. If you write a yum repo file and put it somewhere that Apache can access it, and likewise symlink into /var/cache/rhn/repodata, any remote yum client can take full advantage of the Satellite channels without having to join. This is particularly useful when you want to install the
Re: [Spacewalk-list] script to create webserver accessible repo of packages under Spacewalk channels
Hello Robert, You would actually not need to create kickstart profiles instead you would need to create a distribution tree and then create a distribution for each arch and version. If you have other environments you would need to create each arch and version for each environment (environment=Production,Test,Development). Please see https://fedorahosted.org/spacewalk/wiki/HowToKickstartCobbler for creation of these distributions. One note is that for the kickstart stuff to actually work you don't need to full .iso for the tree. The only things that you need is the images directory and the repodata directory under the OS directory for CentOS. The only time when the distribution tree needs to be updated is when you upgrade to a new major release of CentOS. So if you have 5.7 installed and want to upgrade to 5.8 you just update the images and repodata directories with the 5.8 data. Then sync 5.8 packages to the channels the distribution is assigned to and you are done. This way I don't have sub-channels for each major release and everything works just fine and clean. On Tue, Sep 4, 2012 at 12:14 PM, Boyd, Robert robert.b...@peoplefluent.comwrote: Jeremy, ** ** This looks very promising for my situation. On the down side though I am completely unfamiliar with building a kickstart file in Spacewalk. I’ve done a tiny bit of work with Cobbler in recent months. How involved is it to put together kickstart(s) that would cover the range of OSes and architectures that I have ( CentOS 4(32 and 64 bit), RHEL4(32 64), CentOS 5(32 64), RHEL5(32 64), RHEL6(64)) ? Is it possible to build 1 kickstart to rule them all? Or 1 kickstart per major release? Or am I going to have to create a separate kickstart for each release-architecture pair? ** ** Thanks, Robert ** ** *From:* spacewalk-list-boun...@redhat.com [mailto: spacewalk-list-boun...@redhat.com] *On Behalf Of *Jeremy Davis *Sent:* Tuesday, September 04, 2012 1:41 PM *To:* spacewalk-list@redhat.com *Subject:* Re: [Spacewalk-list] script to create webserver accessible repo of packages under Spacewalk channels ** ** Hello All, ** ** I have been watching this email for just a little bit and thought I would provide a little information that might be of some help. Spacewalk provides yum repositories based on the kickstart configuration. While configuring a kickstart file in Spacewalk it provides urls that are used during the install process for systems. These same urls can be used for systems that are not joined to Spacewalk. These urls use the same packages and repodata used in your Spacewalk channels except for the base channel (os in CentOS terms). Below you will find an example of a yum client .repo config that uses these kickstart urls. ** ** This config is setup with the following structure: centos-production-base-v5-64bit (Base channel) = syncs with http://centos.public.mirror/CentOS/5/os/x86_64/http://ftp.linux.ncsu.edu/pub/CentOS/5/os/x86_64/ . centos-production-updates-v5-64bit (Child channel of base above) = syncs with http://centos.public.mirror/CentOS/5/updates/x86_64/http://ftp.linux.ncsu.edu/pub/CentOS/5/os/x86_64/ . centos-production-extras-v5-64bit (Child channel of base above)= syncs with http://centos.public.mirror/CentOS/5/extras/x86_64/http://ftp.linux.ncsu.edu/pub/CentOS/5/os/x86_64/ . spacewalk-client-prod-v5-64bit (Child channel of base above) = syncs with Spacewalk client repository. spacewalk-epel-prod-v5-64bit (Child channel of base above) = syncs with EPEL repository for v5 64bit. ** ** NOTE: These URLs do not work when going to the URL with a browser as you will need to ask for a certain file just like yum would do in order to pull stuff via the browser. NOTE 2: I have a Development and Test environment configured inside the same Spacewalk install. This is done by having base channels setup as above by changing the production to either dev or test and also changing the arch and version(64bit and v5) to the correct arch and version (I currently have v4, v5, and v6 with 32bit and 64bit). ** ** [spacewalk-base] name=Spacewalk base baseurl=http://proxy_FQDN/ks/dist/centos-production-base-v5-64bit enabled=1 ** ** [spacewalk-updates] name=Spacewalk updates baseurl= http://proxy_FQDN/ks/dist/child/centos-production-updates-v5-64bit/centos-production-base-v5-64bit enabled=1 ** ** [spacewalk-extras] name=Spacewalk extras baseurl= http://proxy_FQDN/ks/dist/child/centos-production-extras-v5-64bit/centos-production-base-v5-64bit enabled=1 ** ** [spacewalk-client] name=Spacewalk client baseurl= http://proxy_FQDN/ks/dist/child/spacewalk-client-prod-v5-64bit/centos-production-base-v5-64bit enabled=1 ** ** [spacewalk-epel] name=Spacewalk epel baseurl= http://proxy_FQDN/ks
Re: [Spacewalk-list] use-case for multiple repositories associated with a single channel?
Hello Matthew, I use the following for my channels. centos-production-v6-64bit-base = CentOS OS repo centos-production-v6-64bit-updates (child of centos-production-v6-64bit-base) = CentOS Updates repo centos-production-v6-64bit-extras (child of centos-production-v6-64bit-base) = CentOS Extras repo spacewalk-client-v6-64bit (child of centos-production-v6-64bit-base) = Spacewalk Client repo. This configuration allows me to have the current version of CentOS that is released as I use the url http://mirror.centos.org/centos/6/ and not http://mirror.centos.org/centos/6.3/ as this allows me to update to major revisions quickly without having to change anything. I have not tried two repositories connected to one channel but I think it might work. I feel using the base channel for the OS and updates channel as a child channel allow me more control over the packages that get installed on my systems and keeps separation of the packages in their perspective channels/repos. Basically I just mirrored what a client configuration would look like on a system using yum. When you run a yum command you can see what channels are subscribed and be able to troubleshoot which channel is having issues. You will also be able to exclude packages based on the channel as with one channel for all repositories you wouldn't be able to exclude say kernel from updates as the config you would have to setup would exclude kernel from all repos as it is only one channel. On Tue, Sep 4, 2012 at 3:46 PM, Matthew Patton mpat...@inforelay.comwrote: I can readily imagine the converse; a single repository being a component of many channels. But (potentially) different repos being part of the same channel? Or am I think about Channels all wrong? Should I just define say a centos6 channel and associate the 'base', 'update', 'extras', 'contrib', 'spacewalk client' repositories to it? I've never seen that in real life or in an example. They've always been broken out into individual channels and made into a hierarchy of channels. -- Cloud Services Architect, Senior System Administrator InfoRelay Online Systems (www.inforelay.com) __**_ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/**mailman/listinfo/spacewalk-**listhttps://www.redhat.com/mailman/listinfo/spacewalk-list ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] script to create webserver accessible repo of packages under Spacewalk channels
Hello Matthew, The url I provided is actually showing the base channel and the sub-channel for v5 64bit. The v5 and 64bit is part of the channel name. So to use a different example. Say you had a base channel with the name centos6 that was configured as a 64bit channel and then had a sub-channel as updates then you could write the url as follows. Note that the centos6 is set in the URL to tell Spacewalk to look under the centos6 base channel for the updates channel. http://Spacewalk app server or proxy server FQDN/dist/child/updates/centos6/ You can use this url to pull packages. All you would need to do is add getPackage/full rpm package name including version and arch.rpm. This would be the same as if yum was calling for the package as it would know the version, release, and arch it was needing to install. The repodata yum uses is generated by Spacewalk so there is no need to create any additional scripts or anything like that in order to pull packages from Spacewalk or provide this config to a client for use with yum. On Tue, Sep 4, 2012 at 3:13 PM, Matthew Patton mpat...@inforelay.comwrote: On Tue, 04 Sep 2012 13:41:03 -0400, Jeremy Davis jdavis4...@gmail.com wrote: baseurl= http://proxy_FQDN/ks/dist/**child/spacewalk-client-prod-** v5-64bit/centos-production-**base-v5-64bithttp://proxy_FQDN/ks/dist/child/spacewalk-client-prod-v5-64bit/centos-production-base-v5-64bit maybe this can be addressed in 1.8+ or whatever but it's really quite asinine to have to use child and I think I even saw an example of child/child somewhere. the URL should be properly written http://proxy/ks/dist/dist name/sub-channel/sub-sub-**channel/pkg though to be frank, this artificial distinction between distname and base channel is pointless and a source of aggravation if not confusion I would wager. If I have channels defined, why do I need a Distribution for the getPackage API call to even work? I should be able to do: http://space/rhn/common/**DownloadFile.do?url=chan/**pkgname WITHOUT having to specify the entire version string and arch. If there are multiple matches (versions and/or arch) then spit back a simple 'index.html' with them listed as hyperlinks. Even in the pathological case if I omit pkgname I should expect to see the full listing. Now maybe we don't want to do that because of the processing overhead (eg. 7000+ packages in EPEL6) and instead return a 4xx code. I can live with that. -- Cloud Services Architect, Senior System Administrator InfoRelay Online Systems (www.inforelay.com) __**_ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/**mailman/listinfo/spacewalk-**listhttps://www.redhat.com/mailman/listinfo/spacewalk-list ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
[Spacewalk-list] Client Hostname Change Issue
Hello List, I have a few clients connected to a Spacewalk 1.6 installation with a Spacewalk Proxy server. I changed the hostname on the client server and ran a hardware refresh. This updates all entries of the hostname except for the system name(web ui) and profile name (in systemid on the client). Is there any way that when I run a hardware refresh that it could also update these two items? If I remember correctly I saw this actually working the way I would like back in 1.2 but it has been a while and I could be mistaken. Thank you for your time and have a great day! Regards, Jeremy ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Client Hostname Change Issue
Thank you for the reply! I should have put in my initial email that I am aware of how to change it manually or create a script to do the change via spacecmd or API. Just to clarify I just thought there was a way to do this just by running a hardware refresh which does update all other areas of Spacewalk except the two items I mentioned. I personally think this is a bug and should be fixed to have the hardware refresh update everything instead of having to run another command to update two items which should be changed anyway during the hardware refresh. IMHO please correct me if I am off base in that thinking :) On Fri, Jul 27, 2012 at 2:24 PM, Wojtak, Greg (Superfly) gregwoj...@quickenloans.com wrote: In my experience, I have had to have been running spacecmd system_rename spacewalk_id new_hostname in addition to rhn-profile-sync Greg Wojtak Sr. Unix Systems Engineer Office: (313) 373-4306 Cell: (734) 718-8472 From: Jeremy Davis jdavis4...@gmail.commailto:jdavis4...@gmail.com Reply-To: spacewalk-list@redhat.commailto:spacewalk-list@redhat.com spacewalk-list@redhat.commailto:spacewalk-list@redhat.com Date: Friday, July 27, 2012 3:53 PM To: Spacewalk List spacewalk-list@redhat.commailto: spacewalk-list@redhat.com Subject: [Spacewalk-list] Client Hostname Change Issue Hello List, I have a few clients connected to a Spacewalk 1.6 installation with a Spacewalk Proxy server. I changed the hostname on the client server and ran a hardware refresh. This updates all entries of the hostname except for the system name(web ui) and profile name (in systemid on the client). Is there any way that when I run a hardware refresh that it could also update these two items? If I remember correctly I saw this actually working the way I would like back in 1.2 but it has been a while and I could be mistaken. Thank you for your time and have a great day! Regards, Jeremy ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] API call system.scheduleScriptRun Error
Hello Milan and List, I was being stupid there for a few. I had the output of systemgroup.listActiveSystemsInGroup going to @PROXY_SERVERS instead of $PROXY_SERVERS. I then had @PROXY_SERVERS instead of @$PROXY_SERVERS in the system.scheduleScriptRun API call. After changing that everything started to work. Sorry about the waste of time on this. I should have caught that sooner. Thank you Milan for your help. It forced me to have another look at the script. Thank you for your time and have a great day! On Wed, May 30, 2012 at 10:59 AM, Milan Zazrivec mzazri...@redhat.comwrote: Hello Milan, I used the systemgroup.listActiveSystemsInGroup and assigned the output to an array. Based on the documentation of the systemgroup.listActiveSystemsInGroup that it provides you an array of integers of system ids. Is this correct or do I need to change a couple of thing. I am using perl for this script. Hard to tell like this. What does your code look like (or the relevant / important part of it)? -MZ On Wed, May 30, 2012 at 12:39 AM, Milan Zazrivec mzazri...@redhat.comwrote: Hello List, I am trying to use the system.scheduleScriptRun API call that takes an array of Spacewalk system IDs (obtained by the api call systemgroup.listActiveSystemsInGroup) to run a script on some servers. I get the following error when I call the API to run. CALL: system.scheduleScriptRun(78649xba40408a720cb82ea3d3de7ab3a8398e, [[110065], [110285]], root, root, 60, #!/bin/sh removed for security, Tue May 29 15:02:34 MST 2012) CALLER: (removed for security) TIME: 0.006 seconds redstone.xmlrpc.XmlRpcFault: unhandled internal exception: redstone.xmlrpc.XmlRpcArray cannot be cast to java.lang.Integer Shouldn't the second function argument (array of System IDs of the servers to run the script on) be an array of integers? What you're showing above would lead me to believe you're passing the function an array of arrays. -Milan Zázrivec at com.redhat.rhn.frontend.xmlrpc.BaseHandler.invoke(BaseHandler.java:131) at redstone.xmlrpc.XmlRpcDispatcher.dispatch(XmlRpcDispatcher.java:123) at com.redhat.rhn.frontend.xmlrpc.RhnXmlRpcServer.execute(RhnXmlRpcServer.ja va :54) at com.redhat.rhn.frontend.xmlrpc.XmlRpcServlet.doPost(XmlRpcServlet.java:16 2) at javax.servlet.http.HttpServlet.service(HttpServlet.java:710) at javax.servlet.http.HttpServlet.service(HttpServlet.java:803) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Applicat io nFilterChain.java:269) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilte rC hain.java:188) at com.opensymphony.module.sitemesh.filter.PageFilter.parsePage(PageFilter.j av a:142) at com.opensymphony.module.sitemesh.filter.PageFilter.doFilter(PageFilter.ja va :58) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Applicat io nFilterChain.java:215) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilte rC hain.java:188) at com.redhat.rhn.frontend.servlets.LocalizedEnvironmentFilter.doFilter(Loca li zedEnvironmentFilter.java:67) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Applicat io nFilterChain.java:215) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilte rC hain.java:188) at com.redhat.rhn.frontend.servlets.EnvironmentFilter.doFilter(EnvironmentFi lt er.java:108) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Applicat io nFilterChain.java:215) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilte rC hain.java:188) at com.redhat.rhn.frontend.servlets.SessionFilter.doFilter(SessionFilter.java: 55) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Applicat io nFilterChain.java:215) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilte rC hain.java:188) at com.redhat.rhn.frontend.servlets.SetCharacterEncodingFilter.doFilter(SetC ha racterEncodingFilter.java:97) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Applicat io nFilterChain.java:215) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilte rC hain.java:188) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve .j ava:210) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve .j ava:172) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java: 12 7) at
Re: [Spacewalk-list] Invalid entitlement error - 1.6 with activationkey.create API call
On Wed, May 9, 2012 at 10:08 AM, Milan Zazrivec mzazri...@redhat.comwrote: On Friday 04 May 2012 18:40:11 Jeremy Davis wrote: Hello List, I recently upgraded to 1.6 and it seems once I did this I am unable to creation new activation keys using the API. I get the following error logs in the /var/log/rhn/rhn_web_api.log. Any ideas as to what is causing this error? I am using perl with the Frontier::Client as given in the example for perl scirpt using the API in the help section of Spacewalk. [2012-05-04 09:31:31,091] ERROR - REQUESTED FROM: 172.19.65.71 CALL: activationkey.create(8068925xf9968a1ceae350e2b98b16bf0b968dec, removed for security, removed for security, removed for security, [monitoring_entitled, provisioning_entitled], false) CALLER: (removed for security) TIME: 0.028 seconds redstone.xmlrpc.XmlRpcFault: Invalid entitlement at com.redhat.rhn.frontend.xmlrpc.BaseHandler.invoke(BaseHandler.java:124) at redstone.xmlrpc.XmlRpcDispatcher.dispatch(XmlRpcDispatcher.java:123) at com.redhat.rhn.frontend.xmlrpc.RhnXmlRpcServer.execute(RhnXmlRpcServer.java :54) at com.redhat.rhn.frontend.xmlrpc.XmlRpcServlet.doPost(XmlRpcServlet.java:162) at javax.servlet.http.HttpServlet.service(HttpServlet.java:710) at javax.servlet.http.HttpServlet.service(HttpServlet.java:803) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Applicatio nFilterChain.java:269) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterC hain.java:188) at com.opensymphony.module.sitemesh.filter.PageFilter.parsePage(PageFilter.jav a:142) at com.opensymphony.module.sitemesh.filter.PageFilter.doFilter(PageFilter.java :58) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Applicatio nFilterChain.java:215) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterC hain.java:188) at com.redhat.rhn.frontend.servlets.LocalizedEnvironmentFilter.doFilter(Locali zedEnvironmentFilter.java:67) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Applicatio nFilterChain.java:215) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterC hain.java:188) at com.redhat.rhn.frontend.servlets.EnvironmentFilter.doFilter(EnvironmentFilt er.java:108) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Applicatio nFilterChain.java:215) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterC hain.java:188) at com.redhat.rhn.frontend.servlets.SessionFilter.doFilter(SessionFilter.java: 55) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Applicatio nFilterChain.java:215) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterC hain.java:188) at com.redhat.rhn.frontend.servlets.SetCharacterEncodingFilter.doFilter(SetCha racterEncodingFilter.java:97) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Applicatio nFilterChain.java:215) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterC hain.java:188) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.j ava:210) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.j ava:172) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:12 7) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:11 7) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.jav a:108) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:151) at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:200) at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:291) at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:775) at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:704 ) at org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.jav a:897) at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.ja va:685) at java.lang.Thread.run(Thread.java:679) Thank you for your time and have a great day! Just by reading our code, I'm unable to tell why you would -- in your particular case -- get the exception you're seeing. Could you please: 1. run the problematic api again 2. capture the whole output from catalina.out while doing step 1 (what we see above is not the whole traceback) 3. paste the traceback here ? Thank you -MZ Thank you Milian for your reply. I feel really bad now. I went to try another API call without changing a thing and it works now. The only thing I did was tail -f the catalina.out log and everything just worked. I am not sure how this happened I have not touched it for a couple of days as I
Re: [Spacewalk-list] Invalid entitlement error - 1.6 with activationkey.create API call
Hello List, Does anyone have any ideas as to why I am getting the errors listed below? Thank you for your time and have a great day! Regards, Jeremy On Fri, May 4, 2012 at 10:40 AM, Jeremy Davis jdavis4...@gmail.com wrote: Hello List, I recently upgraded to 1.6 and it seems once I did this I am unable to creation new activation keys using the API. I get the following error logs in the /var/log/rhn/rhn_web_api.log. Any ideas as to what is causing this error? I am using perl with the Frontier::Client as given in the example for perl scirpt using the API in the help section of Spacewalk. [2012-05-04 09:31:31,091] ERROR - REQUESTED FROM: 172.19.65.71 CALL: activationkey.create(8068925xf9968a1ceae350e2b98b16bf0b968dec, removed for security, removed for security, removed for security, [monitoring_entitled, provisioning_entitled], false) CALLER: (removed for security) TIME: 0.028 seconds redstone.xmlrpc.XmlRpcFault: Invalid entitlement at com.redhat.rhn.frontend.xmlrpc.BaseHandler.invoke(BaseHandler.java:124) at redstone.xmlrpc.XmlRpcDispatcher.dispatch(XmlRpcDispatcher.java:123) at com.redhat.rhn.frontend.xmlrpc.RhnXmlRpcServer.execute(RhnXmlRpcServer.java:54) at com.redhat.rhn.frontend.xmlrpc.XmlRpcServlet.doPost(XmlRpcServlet.java:162) at javax.servlet.http.HttpServlet.service(HttpServlet.java:710) at javax.servlet.http.HttpServlet.service(HttpServlet.java:803) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:269) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188) at com.opensymphony.module.sitemesh.filter.PageFilter.parsePage(PageFilter.java:142) at com.opensymphony.module.sitemesh.filter.PageFilter.doFilter(PageFilter.java:58) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188) at com.redhat.rhn.frontend.servlets.LocalizedEnvironmentFilter.doFilter(LocalizedEnvironmentFilter.java:67) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188) at com.redhat.rhn.frontend.servlets.EnvironmentFilter.doFilter(EnvironmentFilter.java:108) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188) at com.redhat.rhn.frontend.servlets.SessionFilter.doFilter(SessionFilter.java:55) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188) at com.redhat.rhn.frontend.servlets.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:97) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:210) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:172) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:108) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:151) at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:200) at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:291) at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:775) at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:704) at org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:897) at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:685) at java.lang.Thread.run(Thread.java:679) Thank you for your time and have a great day! Regards, Jeremy ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] New CentOS Errata Tool for Spacewalk
On Sat, Apr 14, 2012 at 7:37 AM, Steve Meier em...@steve-meier.de wrote: Dear Spacewalk-Users, I would like to introduce yet another tool to import CentOS Errata information into your Spacewalk Server. You can find it here - http://cefs.steve-meier.de It is written in Perl and CentOS Errata are provided in an XML file available for download. Errata are created via the API and can be published either automatically or manually. Let me know if you have any questions or feedback. Thank you! Kind regards, Steve Meier Hello Steve, Thank you for the tool. I have a couple of questions. I see that an XML file is available for download. How does that file get updated? Also I have multiple base channels. These base channels are for each environment we have (Dev, Test, Prod). If I use your tool would it be able to assign Errata to all of these channels? Also with these base channels we are on a cycle where each week they get updated so some channels might have newer packages in them than others. Can your script deal with that as well by assigning Errata that is already added into another channel? Thank you for your time and have a great day! Regards, Jeremy ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] CA Signed SSL Certificate Install Problems v1.6
On Sat, Feb 25, 2012 at 10:33 AM, Jeremy Davis jdavis4...@gmail.com wrote:
Hello List,
I am trying to install a CA signed SSL certificate and having problems
with osa-dispatcher verifying the certificate. I am getting the following
error while restart osa-dispatcher service.
Starting osa-dispatcher: RHN 10059 2011/07/29 09:44:48 -07:00: ('Traceback
caught:',)
RHN 10059 2011/07/29 09:44:48 -07:00: ('Traceback (most recent call
last):\n
File /usr/share/rhn/osad/jabber_lib.py, line 610, in connect\n
ssl.do_handshake()\nError: [(\'SSL routines\',
\'SSL3_GET_SERVER_CERTIFICATE\',
\'certificate verify failed\')]\n',)
I have the following configuration in my /etc/rhn/rhn.conf file:
osa-dispatcher.osa_ssl_cert = /var/www/html/pub/RHN-ORG-TRUSTED-SSL-CERT
server.satellite.ca_chain = /usr/share/rhn/RHNS-CA-CERT
On my clients I have the following setup:
in /etc/sysconfig/rhn/osad.conf
osa_ssl_cert = /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT
/etc/sysconfig/rhn/up2date
sslCACert[comment]=The CA cert used to verify the ssl server
sslCACert=/usr/share/rhn/RHNS-CA-CERT
Now, when I received my signed certificate I received 4 files.
.csr .crt .key and CA_bundle.crt
The steps I used to configure Spacewalk to use the signed cert is as
follows:
openssl x509 -in Signed-cert.crt -text /root/ssl-build/removed for
security/server.crt
/bin/cp -f /root/swkeys/removed for security/Signed-cert.csr
/root/ssl-build/removed for security/server.csr
/bin/cp -f /root/swkeys/removed for security/Signed-cert.key
/root/ssl-build/removed for security/server.key
cat /root/ssl-build/removed for security/server.crt
/root/ssl-build/removed for security/server.key /root/ssl-build/removed
for security/server.pem
cd /root/
rhn-ssl-tool --gen-server --set-hostname=removed for security.intranet.gdg
--rpm-only
rpm -qa | grep rhn-org
rpm -e rhn-org-httpd-ssl-key-pair-removed for security.dev-1.0-8
rpm -Fvh ./ssl-build/removed for
security/rhn-org-httpd-ssl-key-pair-removed for security-1.0-9.noarch.rpm
/bin/cp -f ./ssl-build/removed for security/server.pem
/etc/pki/spacewalk/jabberd/server.pem
openssl x509 -in /root/swkeys/removed for security/Signed-cert.crt -text
/root/ssl-build/RHN-ORG-TRUSTED-SSL-CERT
openssl x509 -in /root/swkeys/removed for security/CA_bundle.crt -text
/usr/share/rhn/RHNS-CA-CERT
rhn-ssl-tool --gen-ca --rpm-only
/bin/cp -f /root/ssl-build/RHN-ORG-TRUSTED-SSL-CERT
/var/www/html/pub/RHN-ORG-TRUSTED-SSL-CERT
spacewalk-service start
Spacewalk-Proxy:
wget -O /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT http://removed for
security/pub/RHN-ORG-TRUSTED-SSL-CERT
With the above steps do you see anything that I am doing wrong that I can
change to get this working. It seems to me that the
RHN-ORG-TRUSTED-SSL-CERT should be my signed cert and have RHNS-CA-CERT by
my CA_bundle to verify it. Thank you in advance for your help in this and
thank you for your time.
Regards,
Jeremy
I thought I would resend thus as I sent it over the weekend where everyone
was not looking at your email. Any ideas as to what I am doing wrong or how
to resolve this issue?
___
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list
[Spacewalk-list] CA Signed SSL Certificate Install Problems v1.6
Hello List,
I am trying to install a CA signed SSL certificate and having problems with
osa-dispatcher verifying the certificate. I am getting the following error
while restart osa-dispatcher service.
Starting osa-dispatcher: RHN 10059 2011/07/29 09:44:48 -07:00: ('Traceback
caught:',)
RHN 10059 2011/07/29 09:44:48 -07:00: ('Traceback (most recent call
last):\n
File /usr/share/rhn/osad/jabber_lib.py, line 610, in connect\n
ssl.do_handshake()\nError: [(\'SSL routines\',
\'SSL3_GET_SERVER_CERTIFICATE\',
\'certificate verify failed\')]\n',)
I have the following configuration in my /etc/rhn/rhn.conf file:
osa-dispatcher.osa_ssl_cert = /var/www/html/pub/RHN-ORG-TRUSTED-SSL-CERT
server.satellite.ca_chain = /usr/share/rhn/RHNS-CA-CERT
On my clients I have the following setup:
in /etc/sysconfig/rhn/osad.conf
osa_ssl_cert = /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT
/etc/sysconfig/rhn/up2date
sslCACert[comment]=The CA cert used to verify the ssl server
sslCACert=/usr/share/rhn/RHNS-CA-CERT
Now, when I received my signed certificate I received 4 files.
.csr .crt .key and CA_bundle.crt
The steps I used to configure Spacewalk to use the signed cert is as
follows:
openssl x509 -in Signed-cert.crt -text /root/ssl-build/removed for
security/server.crt
/bin/cp -f /root/swkeys/removed for security/Signed-cert.csr
/root/ssl-build/removed for security/server.csr
/bin/cp -f /root/swkeys/removed for security/Signed-cert.key
/root/ssl-build/removed for security/server.key
cat /root/ssl-build/removed for security/server.crt /root/ssl-build/removed
for security/server.key /root/ssl-build/removed for security/server.pem
cd /root/
rhn-ssl-tool --gen-server --set-hostname=removed for security.intranet.gdg
--rpm-only
rpm -qa | grep rhn-org
rpm -e rhn-org-httpd-ssl-key-pair-removed for security.dev-1.0-8
rpm -Fvh ./ssl-build/removed for
security/rhn-org-httpd-ssl-key-pair-removed for security-1.0-9.noarch.rpm
/bin/cp -f ./ssl-build/removed for security/server.pem
/etc/pki/spacewalk/jabberd/server.pem
openssl x509 -in /root/swkeys/removed for security/Signed-cert.crt -text
/root/ssl-build/RHN-ORG-TRUSTED-SSL-CERT
openssl x509 -in /root/swkeys/removed for security/CA_bundle.crt -text
/usr/share/rhn/RHNS-CA-CERT
rhn-ssl-tool --gen-ca --rpm-only
/bin/cp -f /root/ssl-build/RHN-ORG-TRUSTED-SSL-CERT
/var/www/html/pub/RHN-ORG-TRUSTED-SSL-CERT
spacewalk-service start
Spacewalk-Proxy:
wget -O /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT http://removed for
security/pub/RHN-ORG-TRUSTED-SSL-CERT
With the above steps do you see anything that I am doing wrong that I can
change to get this working. It seems to me that the
RHN-ORG-TRUSTED-SSL-CERT should be my signed cert and have RHNS-CA-CERT by
my CA_bundle to verify it. Thank you in advance for your help in this and
thank you for your time.
Regards,
Jeremy
___
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] osad not working with Spacewalk proxy server
Yes the CN needs to be that of the proxy server that is listed in /etc/sysconfig/rhn/up2date file. This Cert should be at location http://spacewalkproxy01.dc.company.com/pub/RHN-ORG-TRUSTED-SSL-CERT On 02/17/2012 09:18 AM, Sean Carolan wrote: On Thu, Feb 16, 2012 at 6:47 PM, Jeremy Davisjdavis4...@gmail.com wrote: Yes, that is the correct cert. You also need to make sure you download that cert to the client and change the /etc/sysconfig/rhn/osad.conf to point to that downloaded cert from the proxy server. Ok, so here are the troubleshooting steps I've taken. * Stop the proxy services * Moved /var/www/html/pub/RHN-ORG-TRUSTED-SSL-CERT to RHN-ORG-TRUSTED-SSL-CERT.backup * Re-ran configure-proxy.sh using the following answers file (names changed to protect the innocent): VERSION=1.6 RHN_PARENT=spacewalk02.company.com TRACEBACK_EMAIL=adm...@company.com USE_SSL=Y CA_CHAIN=/usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT HTTP_PROXY= SSL_ORG=Some obscure gaming company SSL_ORGUNIT=spacewalkproxy01.dc.company.com SSL_COMMON=spacewalkproxy01.dc.company.com SSL_CITY=Austin SSL_STATE=Texas SSL_COUNTRY=US SSL_EMAIL=adm...@company.com INSTALL_MONITORING=n POPULATE_CONFIG_CHANNEL=n A brand-spanking new cert was created in /var/www/html/pub, but the OU and CN in the certificate are for RHN_PARENT, or spacewalk02.company.com which is the main app server. Should this be spacewalkproxy01.dc.company.com instead? My theory is that the ssl cert may be failing because it has the wrong name in it... ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list -- Thank you, Jeremy Davis, GCIH ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Kickstart CentOS 6 Fail Spacewalk
An update to this issue is if I use repodata generated from a local yum repository it works just fine. One other note I would like to add is that my CentOS 5 installs work just fine with the repodata pulled from /var/cache/rhn/repodata/. One other issue I have seen with 1.6 is with CentOS 5 kickstarts are displaying a message about kmod kernel is not needed. Any ideas as to the cause of this issue? On Fri, Feb 3, 2012 at 1:54 PM, Jeremy Davis jdavis4...@gmail.com wrote: Hello All, I have been trying to install CentOS 6 using Spacewalk 1.6 kickstart functionality. I have copied over the images directory in to a local directory and created the distribution tree. I then copied the repodata from /var/cache/rhn/repodata/ for the v6 64bit base (os) channel I have created in Spacewalk. Once I have that I then copy the comps.xml file from a yum repository of CentOS 6 and add the configuration to repomd.xml. I then try the install. It starts to perform the installation and then right when it starts to install packages I get the following Traceback error on the machine that is being installed. Error: CRITICAL: anaconda exception report: Traceback (most recent call first): File /usr/lib/anaconda/yuminstall.py, line 220, in callback self.progress.set_fraction(float(self.doneSize / self.totalSize)) ZeroDivisionError: float division Any ideas as to what this could be? Thank you for your time and have a great day! Regards, Jeremy ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
[Spacewalk-list] spacewalk-repo-sync taking over a minute to report no updates needed
Hello List, I have a Spacewalk 1.6 installation that has channels with over 2000+ packages in them. With these packages the initial sync completes and all packages are in Spacewalk. When I perform additional syncs to determine if there are any new packages the sync takes over a minute to report that there are no new packages to sync. For example I have a channel with 2764 packages. The total time that is displayed on this sync was 0:01:08. This to me seems like a really long time just to report there are no updates. Is there any way to speed this sync up? Thank you for your time and have a great day! Regards, Jeremy ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
[Spacewalk-list] Unable to manage system groups as a normal user (set as admin of a group)
Hello All, I have a test Spacewalk 1.6 installation setup and trying to manage servers that I have been given admin rights to a user of two groups. I would like to use SSM to manage what servers (Which I already have permissions to manage) are in a certain group. These groups have the user that I am using set as an admin. Why am I unable to manage these groups within SSM or even in the system details package when I have admin over those groups? The only way I can move servers to different groups is if I have group admin option set but I then can see all groups which I do not want to see. I would think that if you add a user to be an admin of that group you would be able to remove or add servers to that group (if you are admin of that server set via spacewalk). Any ideas would be greatly appreciated. Thank you for your time and have a great day! Thanks, Jeremy ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
[Spacewalk-list] Spacewalk Logo Usage Permissions
Hello Spacewalk List, Who would I contact to get permissions to use the Spacewalk Logo for a shirt that my company would like to create for our team that manages Spacewalk? Any assistance you could provide would be greatly appreciated. Regards, Jeremy ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
[Spacewalk-list] User of Individual Group Unable to Add Servers to Group
Hello Spacewalk List, I have users that are setup as admin of certain groups. These groups have servers in them. I would like for the user to be able to move servers from one group to another or just add the system to the new group. These users have admin on the groups where the servers are in and going to. It seems that I have permission issues when I try to do this. Is there anyway that we could allow individual user admins of groups to be able to manage their group memberships? Thank you for your time and have a great day! Regards, Jeremy ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] OSAD Problem with client/proxy
Hello List/Mirek, Determined the solution to the issue I was having with that proxy server. It turns out it was a DNS issue. Updated DNS and everything is working as it should. Thank you for your help. On Fri, Sep 23, 2011 at 9:18 AM, Jeremy Davis jdavis4...@gmail.com wrote: I am able to get to the ports on the proxy from the client. I performed a tcpdump and the communication seems to be going just fine. No errors in /var/log/messages where the jabber logs are being sent. It appears to be working as it should but in the web ui it doesn't show online and the client will not pick up instant actions. I also performed an rhn_check -vv and no errors were displayed. Everything looks normal by what I can see but still have this issue. 2011/9/23 Miroslav Suchý msu...@redhat.com On 09/22/2011 06:46 PM, Jeremy Davis wrote: Hello Mirek, Thank you for the reply. An rhn_check works fine. I do not see any issues there. Actions get picked up within an hour as set for the rhnsd service. It seems the issue is with the osad service. I turned up debug and restart the osad service and I see no errors. I see that it tries to register and actually does register as I see the registration on the proxy server. Now when I look in Spacewalk the osa status shows offline even after a ping. This is only happening on one proxy server ( I have about 14 proxy servers). All other proxy servers appear to be working fine. Any idea as to what could be the problem? I can also provide any logs that you may want to look at. Osad is not working. Can you telnet to jabberd port from that proxy. Is that anything related in jabberd and osa/osad logs? -- Miroslav Suchy Red Hat Satellite Engineering ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list -- Kind regards, Jeremy Davis, GCIH -- Kind regards, Jeremy Davis, GCIH ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] OSAD Problem with client/proxy
Hello Greg, In my situation I have a proxy server that is in a location that is not connected to our main DNS servers (in a separated network/environment). I had to update the DNS in that location to reflect the A record I have configured for my application server that is in a different network. Once I updated this information osad started working. I did have to restart the services on the proxy and client (remove the osad-auth.conf when you restart osad) to get it working. Adding a host entry to the proxy server for the application server didn't work it had to be an A record (seems to be SSL verification that was the cause). When I added this configuration the jabber logs showed the following which was different to what it was seeing during when it wasn't working. Sep 29 10:59:23 p1plswpxyars01 jabberd/s2s[11641]: hostname application server removed for security lookup for hostname application server removed for security returned 1 result (ttl 86400) Sep 29 10:59:23 p1plswpxyars01 jabberd/s2s[11641]: [8] [IP of app server removed for security, port=5269] outgoing connection for 'hostname application server removed for security' Sep 29 10:59:23 p1plswpxyars01 jabberd/s2s[11641]: [8] [IP of app server removed for security, port=5269] sending dialback auth request for route 'hostname proxy server removed for security/hostname application server removed for security' Sep 29 10:59:23 p1plswpxyars01 jabberd/s2s[11641]: [9] [IP of app server removed for security, port=42619] incoming connection Sep 29 10:59:23 p1plswpxyars01 jabberd/s2s[11641]: [9] [IP of app server removed for security, port=42619] incoming stream online (id ) Sep 29 10:59:23 p1plswpxyars01 jabberd/s2s[11641]: [9] [IP of app server removed for security, port=42619] received dialback auth request for route 'hostname proxy server removed for security/hostname application server removed for security' Sep 29 10:59:23 p1plswpxyars01 jabberd/s2s[11641]: [9] [IP of app server removed for security, port=42619] incoming route 'hostname proxy server removed for security/hostname application server removed for security' is now valid Sep 29 10:59:23 p1plswpxyars01 jabberd/s2s[11641]: [9] [IP of app server removed for security, port=42619] checking dialback verification from hostname application server removed for security: sending valid Sep 29 10:59:24 p1plswpxyars01 jabberd/s2s[11641]: [8] [IP of app server removed for security, port=5269] outgoing route 'hostname proxy server removed for security/hostname application server removed for security' is now valid 2011/9/29 Wojtak, Greg gregwoj...@quickenloans.com It looks like I am getting a similar problem (now that I know what to look for in the logs): grep dns /var/log/messages Sep 29 15:05:39 spacewalk jabberd/s2s[20819]: dns lookup for spacewalk-proxy failed I modified my resolv.conf's search option to include the domain that spacewalk-proxy is in and am able to resolve the shortname from command line with host or nslookup. I am still getting this error. I noticed in the jabberd documentation that there is a reference to /usr/bin/resolver and /etc/jabberd/resolver.xml. I don't have either of these files, nor does a yum provides /usr/bin/resolver return anything. Is this supposed to be there? I have the following line in my s2s.xml: resolverresolver/resolver Should that be changed to something else? Thanks! Greg From: Jeremy Davis jdavis4...@gmail.commailto:jdavis4...@gmail.com Reply-To: spacewalk-list@redhat.commailto:spacewalk-list@redhat.com Date: Thu, 29 Sep 2011 12:14:14 -0600 To: spacewalk-list@redhat.commailto:spacewalk-list@redhat.com Subject: Re: [Spacewalk-list] OSAD Problem with client/proxy Hello List/Mirek, Determined the solution to the issue I was having with that proxy server. It turns out it was a DNS issue. Updated DNS and everything is working as it should. Thank you for your help. On Fri, Sep 23, 2011 at 9:18 AM, Jeremy Davis jdavis4...@gmail.com mailto:jdavis4...@gmail.com wrote: I am able to get to the ports on the proxy from the client. I performed a tcpdump and the communication seems to be going just fine. No errors in /var/log/messages where the jabber logs are being sent. It appears to be working as it should but in the web ui it doesn't show online and the client will not pick up instant actions. I also performed an rhn_check -vv and no errors were displayed. Everything looks normal by what I can see but still have this issue. 2011/9/23 Miroslav Suchý msu...@redhat.commailto:msu...@redhat.com On 09/22/2011 06:46 PM, Jeremy Davis wrote: Hello Mirek, Thank you for the reply. An rhn_check works fine. I do not see any issues there. Actions get picked up within an hour as set for the rhnsd service. It seems the issue is with the osad service. I turned up debug and restart the osad service and I see no errors. I see that it tries to register and actually does register as I see the registration on the proxy
Re: [Spacewalk-list] OSAD Problem with client/proxy
Hello Mirek, Thank you for the reply. An rhn_check works fine. I do not see any issues there. Actions get picked up within an hour as set for the rhnsd service. It seems the issue is with the osad service. I turned up debug and restart the osad service and I see no errors. I see that it tries to register and actually does register as I see the registration on the proxy server. Now when I look in Spacewalk the osa status shows offline even after a ping. This is only happening on one proxy server ( I have about 14 proxy servers). All other proxy servers appear to be working fine. Any idea as to what could be the problem? I can also provide any logs that you may want to look at. Thanks, Jeremy On Tue, Sep 20, 2011 at 11:53 PM, Miroslav Suchy msu...@redhat.com wrote: Dne 20.9.2011 23:35, Jeremy Davis napsal(a): Hello List, I have a proxy solution setup where the majority of my clients are working as expected to all proxies except one proxy server. All clients connected to this proxy server are not showing online and are unable to receive actions. I have turned up the debug level on the client and it appears to have connected and is registered. I see on the proxy server that the connection is established. Not sure whats going on here. Is there any thing I could try or maybe provide more information on in order to troubleshoot this issue? This is a Spacewalk 1.4 installation. If it register through Proxy, then everything should be correct. If your machines just does not show online on Spacewalk, then the problem is in rhnsd or osad (you have to have one of these service runinning) which just periodicaly run rhn_check. Try to run rhn_check -vv on one of these machines manualy and see what is going there. Mirek __**_ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/**mailman/listinfo/spacewalk-**listhttps://www.redhat.com/mailman/listinfo/spacewalk-list -- Kind regards, Jeremy Davis, GCIH ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
[Spacewalk-list] OSAD Problem with client/proxy
Hello List, I have a proxy solution setup where the majority of my clients are working as expected to all proxies except one proxy server. All clients connected to this proxy server are not showing online and are unable to receive actions. I have turned up the debug level on the client and it appears to have connected and is registered. I see on the proxy server that the connection is established. Not sure whats going on here. Is there any thing I could try or maybe provide more information on in order to troubleshoot this issue? This is a Spacewalk 1.4 installation. Regards, Jeremy ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Linking to System Upgrade package List Error
Hello Jan, Thank you for the reply. Is there a patch I could apply to a 1.4 system to resolve this issue? On Sep 15, 2011, at 6:23 AM, Jan Pazdziora jpazdzi...@redhat.com wrote: On Thu, Sep 15, 2011 at 01:59:30PM +0200, Jan Pazdziora wrote: On Thu, Sep 08, 2011 at 03:55:19PM -0600, Jeremy Davis wrote: Hello List, I am trying to link to the Upgrade package list page within Spacewalk for an individual system using the following link. After it gives the error if you were to refresh the browser it takes you to the correct link. https://hostname remove/rhn/systems/details/packages/UpgradableList.do?sid=110166https://spacewalkdev.intranet.gdg/rhn/systems/details/packages/UpgradableList.do?sid=110166 When I click this link from another webpage it brings me to the system overview page and generates the follow error in the tomcat logs. 2011-09-08 14:48:55,711 [TP-Processor5] FATAL com.redhat.rhn.frontend.servlets.AuthFilter - Referrer (swreporting.intranet.gdg) for url /systems/details/packages/UpgradableList.do does not match. Redirecting to /rhn/YourRhn.do. Is there anyway to get Spacewalk to allow you to continue to the correct link without giving this error or redirecting. I wonder if enabling mod_asis on your Spacewalk and then creating /var/www/html/pub/upgradable_packages_for_xxx.asis: Status: 301 Location: https://hostname/rhn/systems/details/packages/UpgradableList.do?sid=110166 and linking to https://hostname/pub/upgradable_packages_for_xxx would do the trick? Anyway, I've now removed the referer check from Spacewalk master because we now have full CSRF handling to replace it. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] API with Proxy server returns error
Jan, I pulled a tcpdump from the client to the proxy server. It seems that the proxy server sends a bunch of resets while it is pulling information. Other than that I am not sure what else I can look at. On Thu, Sep 8, 2011 at 9:51 AM, Jeremy Davis jdavis4...@gmail.com wrote: This is a Spacewlak proxy that I am using. It only happens on a few API calls. Others work just fine. I will run the tcpdump and see what I can find. On Tue, Aug 30, 2011 at 3:20 AM, Jan Pazdziora jpazdzi...@redhat.comwrote: On Mon, Aug 29, 2011 at 07:10:12AM -0600, Jeremy Davis wrote: Hello Jan, Thank you for the return email. This is on Spacewalk 1.4 with Centos 5.6. Then I don't have any leads. What kind of proxy is this -- HTTP proxy or Spacewalk proxy? Can you use HTTP (not HTTPS) and tcpdump the response (both on the client -- proxy and proxy -- Spacewalk connections) to see what it looks like exactly? -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list -- Kind regards, Jeremy Davis, GCIH -- Kind regards, Jeremy Davis, GCIH ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] API with Proxy server returns error
This is a Spacewlak proxy that I am using. It only happens on a few API calls. Others work just fine. I will run the tcpdump and see what I can find. On Tue, Aug 30, 2011 at 3:20 AM, Jan Pazdziora jpazdzi...@redhat.comwrote: On Mon, Aug 29, 2011 at 07:10:12AM -0600, Jeremy Davis wrote: Hello Jan, Thank you for the return email. This is on Spacewalk 1.4 with Centos 5.6. Then I don't have any leads. What kind of proxy is this -- HTTP proxy or Spacewalk proxy? Can you use HTTP (not HTTPS) and tcpdump the response (both on the client -- proxy and proxy -- Spacewalk connections) to see what it looks like exactly? -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list -- Kind regards, Jeremy Davis, GCIH ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
[Spacewalk-list] Linking to System Upgrade package List Error
Hello List, I am trying to link to the Upgrade package list page within Spacewalk for an individual system using the following link. After it gives the error if you were to refresh the browser it takes you to the correct link. https://hostname remove/rhn/systems/details/packages/UpgradableList.do?sid=110166https://spacewalkdev.intranet.gdg/rhn/systems/details/packages/UpgradableList.do?sid=110166 When I click this link from another webpage it brings me to the system overview page and generates the follow error in the tomcat logs. 2011-09-08 14:48:55,711 [TP-Processor5] FATAL com.redhat.rhn.frontend.servlets.AuthFilter - Referrer (swreporting.intranet.gdg) for url /systems/details/packages/UpgradableList.do does not match. Redirecting to /rhn/YourRhn.do. Is there anyway to get Spacewalk to allow you to continue to the correct link without giving this error or redirecting. -- Kind regards, Jeremy ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Repo Sync speed problem
On Tue, Aug 30, 2011 at 8:12 AM, Jan Pazdziora jpazdzi...@redhat.comwrote: On Mon, Aug 22, 2011 at 09:44:21AM -0600, Jeremy Davis wrote: It appears to be the Spacewalk-repo-sync and Java applications that are Taskomatic or tomcat? It appears to be taskomatic and not tomcat but Spacewalk-repo-sync is taking up most of the CPU time. -- Kind regards, Jeremy Davis, GCIH ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] API with Proxy server returns error
Hello Jan,
Thank you for the return email. This is on Spacewalk 1.4 with Centos 5.6.
On Aug 29, 2011, at 3:52 AM, Jan Pazdziora jpazdzi...@redhat.com wrote:
On Tue, Aug 23, 2011 at 03:58:49PM -0600, Jeremy Davis wrote:
Hello List,
I have a working Perl script that when used on the main application server
of Spacewalk it works fine. When I change the host to a Proxy server it
gives the following error.
500 Bad chunk-size in HTTP response: ?xml version=1.0
encoding=UTF-8?methodResponseparamsparamvaluearraydatavaluestructmembernameid/namevaluei4110545/i4/value/member
Any idea as to how I can resolve this issue?
The calls I am making are as follows:
Host, username and password is given within the same script. Just removed it
for security reasons.
my $client = new Frontier::Client(url = https://$HOST/rpc/api;);
my $session = $client-call('auth.login',$user, $pass);
my $allsystems = $client-call('system.listSystems', $session);
foreach my $system (@$allsystems) {
my $systemname = $system-{'name'};
my $systemid = $system-{'id'};
print $systemname and $systemid \n;
}
Is this RHEL 6 Spacewalk? Is this Spacewalk nightly?
--
Jan Pazdziora
Principal Software Engineer, Satellite Engineering, Red Hat
___
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list
___
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list
[Spacewalk-list] Error During Remote Command
Hello List, We are updating some password hashes on our servers using Spacewalk and for some reason I started receiving traceback error logs when performing remote commands on the servers. The following is a SQL error from the Traceback. If you need the full traceback let me know I will need to remove all company related information which might take some time :). SQL Error generated: (1400, 'ORA-01400: cannot insert NULL into (SPACEWALK.RHNSERVERACTIONSCRIPTRESULT.START_DATE)\n', insert into rhnServerActionScriptResult ( server_id, action_script_id, output, start_date, stop_date, return_code ) values ( :server_id, (select ascript.idfrom rhnActionScript ascript where ascript.action_id = :action_id), empty_blob(), TO_DATE(:process_start, '-MM-DD HH24:MI:SS'), TO_DATE(:process_end, '-MM-DD HH24:MI:SS'), :return_code) returning output into :output_blob) Any ideas as to what is going on here? -- Thanks, Jeremy ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] API with Proxy server returns error
Hello List,
Any ideas as to how to resolve this issue?
On Tue, Aug 23, 2011 at 3:58 PM, Jeremy Davis jdavis4...@gmail.com wrote:
Hello List,
I have a working Perl script that when used on the main application server
of Spacewalk it works fine. When I change the host to a Proxy server it
gives the following error.
500 Bad chunk-size in HTTP response: ?xml version=1.0
encoding=UTF-8?methodResponseparamsparamvaluearraydatavaluestructmembernameid/namevaluei4110545/i4/value/member
Any idea as to how I can resolve this issue?
The calls I am making are as follows:
Host, username and password is given within the same script. Just removed
it for security reasons.
my $client = new Frontier::Client(url = https://$HOST/rpc/api;);
my $session = $client-call('auth.login',$user, $pass);
my $allsystems = $client-call('system.listSystems', $session);
foreach my $system (@$allsystems) {
my $systemname = $system-{'name'};
my $systemid = $system-{'id'};
print $systemname and $systemid \n;
}
--
Kind regards,
Jeremy Davis, GCIH
--
Kind regards,
Jeremy Davis, GCIH
___
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] 500 Internal Server Error - Group Admin Page
Hello Michael, Thank you this worked! I am now able to change group admins. On Wed, Aug 24, 2011 at 1:54 AM, Michael Mraka michael.mr...@redhat.comwrote: Jeremy Davis wrote: % Hello List, % % I am getting the following error when trying to add admins to groups within % Spacewalk. I can add the users to the groups via the user management area % but not from the Admins page within the group. When I click submit after % selecting users I get an 500 Internal Server Error. Any ideas you may have % to resolve this issue would be greatly appreciated. % % The following exception occurred while executing this request: % POST /network/systems/groups/admin_list.pxt HTTP/1.1 (from browser) % /network/systems/groups/admin_list.pxt (from Apache) Hi Jeremy, ... % Error message: % RHN::Exception: DBD::Oracle::db selectall_arrayref failed: ORA-00911: % invalid character (DBD ERROR: error possibly near * indicator at char 425 % in ' select usgp.server_group_id, usgp.user_id ... % )*; it looks like forgotten semicolon after some postgresql changes. I've fixed the query in spacewalk nightly (spacewalk-base-1.6.17-1). You may also manually apply the folowing patch to your system: http://git.fedorahosted.org/git/?p=spacewalk.git;a=commitdiff;h=cde1c64c0a0fc62615347109699c4a798d9d8a9f Regards, -- Michael Mráka Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Installed Systems within Package page - 500 Internal Server Error
Hello Michael, Thank you this worked. I am not able to list Installed Systems for a package. On Wed, Aug 24, 2011 at 2:15 AM, Michael Mraka michael.mr...@redhat.comwrote: Jeremy Davis wrote: % Yes, I am sorry I forgot to put that I am running 1.4. Thanks for the update % on this issue. Do you by chance have the code that resolved it? I am not % sure I will be able to upgrade to 1.5 for a few months. Hi Jeremy, it should be this one: http://git.fedorahosted.org/git/?p=spacewalk.git;a=commitdiff;h=4aadef0fdfc48ee8a94e00fe440d16bdcbee3933 Regards, -- Michael Mráka Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
[Spacewalk-list] 500 Internal Server Error - Group Admin Page
Hello List, I am getting the following error when trying to add admins to groups within Spacewalk. I can add the users to the groups via the user management area but not from the Admins page within the group. When I click submit after selecting users I get an 500 Internal Server Error. Any ideas you may have to resolve this issue would be greatly appreciated. The following exception occurred while executing this request: POST /network/systems/groups/admin_list.pxt HTTP/1.1 (from browser) /network/systems/groups/admin_list.pxt (from Apache) Date: Tue Aug 23 08:19:02 2011 Headers: Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Cache-Control: max-age=0 Connection: keep-alive Content-Length: 1089 Content-Type: application/x-www-form-urlencoded Cookie: pxt-session-cookie=194278x53700a92f83c93ab6de74fd0855c4710 Host: spacewalk.intranet.gdg Origin: https://spacewalk.intranet.gdg Referer: https://spacewalk.intranet.gdg/network/systems/groups/admin_list.pxt?sgid=10 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1 Form variables: alphabar_column = first_lower = 1 first_upper = 500 formvars = sgid formvars = sgid last_lower = 1 last_upper = 73 list_action_label_update_system_group_membership = Update list_action_url_update_system_group_membership = list_mode = group_admins lower = 1 next_lower = 1 next_upper = 73 prev_lower = 1 prev_upper = 500 pxt:trap = rhn:user_list_cb sgid = 10 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 sguid = 86 upper = 73 user_253_is_admin = 1 user_295_is_admin = 1 User Information: User jddavis (id 2, org_id 1) Error notes: (none) Initial Request: Yes Error message: RHN::Exception: DBD::Oracle::db selectall_arrayref failed: ORA-00911: invalid character (DBD ERROR: error possibly near * indicator at char 425 in ' select usgp.server_group_id, usgp.user_id from rhnUserServerGroupPerms usgp where usgp.user_id = :p1 and usgp.server_group_id = :p2 and exists ( select 1 from rhnServerGroup sg, web_contact wc where wc.id = usgp.user_id and sg.id = usgp.server_group_id and sg.org_id = wc.org_id )*; ') [for Statement select usgp.server_group_id, usgp.user_id from rhnUserServerGroupPerms usgp where usgp.user_id = ? and usgp.server_group_id = ? and exists ( select 1 from rhnServerGroup sg, web_contact wc where wc.id = usgp.user_id and sg.id = usgp.server_group_id and sg.org_id = wc.org_id ); ] RHN::DB /usr/lib/perl5/vendor_perl/5.8.8/RHN/DB.pm http://db.pm/ 228 RHN::Exception::DB::throw RHN::DB::User /usr/lib/perl5/vendor_perl/5.8.8/RHN/DB/User.pmhttp://user.pm/ 1687 RHN::DB::handle_error Sniglets::ListView::UserList /usr/lib/perl5/vendor_perl/5.8.8/Sniglets/ListView/UserList.pmhttp://userlist.pm/ 175 RHN::DB::User::revoke_servergroup_permission Sniglets::ListView::List /usr/lib/perl5/vendor_perl/5.8.8/Sniglets/ListView/ List.pm http://list.pm/ 374 Sniglets::ListView::UserList::group_admin_cb Sniglets::Lists /usr/lib/perl5/vendor_perl/5.8.8/Sniglets/Lists.pmhttp://lists.pm/ 135 Sniglets::ListView::List::callback PXT::ApacheHandler /usr/lib/perl5/vendor_perl/5.8.8/PXT/ApacheHandler.pmhttp://apachehandler.pm/ 513 Sniglets::Lists::listview_cb PXT::ApacheHandler /usr/lib/perl5/vendor_perl/5.8.8/PXT/ApacheHandler.pmhttp://apachehandler.pm/ 117 PXT::ApacheHandler::pxt_parse_data PXT::ApacheHandler /usr/lib/perl5/vendor_perl/5.8.8/PXT/ApacheHandler.pmhttp://apachehandler.pm/ 117 (eval) main -e 0 PXT::ApacheHandler::handler main -e 0 (eval) Thanks, Jeremy ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
[Spacewalk-list] Installed Systems within Package page - 500 Internal Server Error
Hello List, I have another issue as well. It seems that when I am within an individual package page and click Installed Systems I get a 500 Internal Server Error. Below you will find the traceback logs generated from this error. If anyone has any ideas as to how to resolve this it would be much appreciated. The following exception occurred while executing this request: GET /network/software/packages/system_list.pxt?pid=31040 HTTP/1.1 (from browser) /network/software/packages/system_list.pxt (from Apache) Date: Tue Aug 23 08:25:00 2011 Headers: Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Connection: keep-alive Cookie: pxt-session-cookie=194278x53700a92f83c93ab6de74fd0855c4710 Host: FQDN removed Referer: https://FQDN removed/rhn/software/packages/Details.do?pid=31040 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1 Form variables: pid = 31040 User Information: User user account removed (id 2, org_id 1) Error notes: (none) Initial Request: Yes Error message: RHN::Exception: DBD::Oracle::db prepare_cached failed: ORA-00904: P.PACKAGE_ARCH_ID: invalid identifier (DBD ERROR: error possibly near * indicator at char 144 in ' SELECT SP.server_id AS id FROM rhnServerPackage SP WHERE P.id = :pid AND P.name_id = SP.name_id AND P.evr_id = SP.evr_id AND *P.package_arch_id = SP.package_arch_id AND EXISTS (SELECT 1 FROM rhnUserServerPerms USP WHERE USP.user_id = :user_id AND USP.server_id = SP.server_id) ') [for Statement SELECT SP.server_id AS id FROM rhnServerPackage SP WHERE P.id = :pid AND P.name_id = SP.name_id AND P.evr_id = SP.evr_id AND P.package_arch_id = SP.package_arch_id AND EXISTS (SELECT 1 FROM rhnUserServerPerms USP WHERE USP.user_id = :user_id AND USP.server_id = SP.server_id) ] RHN::DB /usr/lib/perl5/vendor_perl/5.8.8/RHN/DB.pm 228 RHN::Exception::DB::throw RHN::DB::DataSource /usr/lib/perl5/vendor_perl/5.8.8/RHN/DB/DataSource.pm 73 RHN::DB::handle_error RHN::DataSource /usr/lib/perl5/vendor_perl/5.8.8/RHN/DataSource.pm 108 RHN::DB::DataSource::run_query Sniglets::ListView::List /usr/lib/perl5/vendor_perl/5.8.8/Sniglets/ListView/List.pm 1211 RHN::DataSource::execute_query Sniglets::ListView::List /usr/lib/perl5/vendor_perl/5.8.8/Sniglets/ListView/List.pm 908 Sniglets::ListView::List::default_provider Sniglets::Lists /usr/lib/perl5/vendor_perl/5.8.8/Sniglets/Lists.pm 119 Sniglets::ListView::List::render PXT::Parser /usr/lib/perl5/vendor_perl/5.8.8/PXT/Parser.pm 160 Sniglets::Lists::listview PXT::Parser /usr/lib/perl5/vendor_perl/5.8.8/PXT/Parser.pm 72 PXT::Parser::expand_tag PXT::ApacheHandler /usr/lib/perl5/vendor_perl/5.8.8/PXT/ApacheHandler.pm 524 PXT::Parser::expand_tags PXT::ApacheHandler /usr/lib/perl5/vendor_perl/5.8.8/PXT/ApacheHandler.pm 117 PXT::ApacheHandler::pxt_parse_data PXT::ApacheHandler /usr/lib/perl5/vendor_perl/5.8.8/PXT/ApacheHandler.pm 117 (eval) main -e 0 PXT::ApacheHandler::handler main -e 0 (eval) Thanks, Jeremy ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Installed Systems within Package page - 500 Internal Server Error
Yes, I am sorry I forgot to put that I am running 1.4. Thanks for the update on this issue. Do you by chance have the code that resolved it? I am not sure I will be able to upgrade to 1.5 for a few months. On Tue, Aug 23, 2011 at 9:39 AM, Martin Eggen m...@steria.no wrote: Are you running 1.4 ? I experienced the same problem, it was solved after upgrading to 1.5. ** ** Martin ** ** *Fra:* spacewalk-list-boun...@redhat.com [mailto: spacewalk-list-boun...@redhat.com] *På vegne av* Jeremy Davis *Sendt:* 23. august 2011 17:31 *Til:* Spacewalk List *Emne:* [Spacewalk-list] Installed Systems within Package page - 500 Internal Server Error ** ** Hello List, ** ** I have another issue as well. It seems that when I am within an individual package page and click Installed Systems I get a 500 Internal Server Error. Below you will find the traceback logs generated from this error. If anyone has any ideas as to how to resolve this it would be much appreciated. ** ** The following exception occurred while executing this request: GET /network/software/packages/system_list.pxt?pid=31040 HTTP/1.1 (from browser) /network/software/packages/system_list.pxt (from Apache) ** ** Date: Tue Aug 23 08:25:00 2011 ** ** Headers: Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8*** * Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3 Accept-Encoding: gzip,deflate,sdch Accept-Language: en-US,en;q=0.8 Connection: keep-alive Cookie: pxt-session-cookie=194278x53700a92f83c93ab6de74fd0855c4710 Host: FQDN removed Referer: https://FQDN removed/rhn/software/packages/Details.do?pid=31040 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1 ** ** Form variables: pid = 31040 ** ** User Information: User user account removed (id 2, org_id 1) ** ** Error notes: (none) ** ** Initial Request: Yes ** ** Error message: RHN::Exception: DBD::Oracle::db prepare_cached failed: ORA-00904: P.PACKAGE_ARCH_ID: invalid identifier (DBD ERROR: error possibly near * indicator at char 144 in ' SELECT SP.server_id AS id FROM rhnServerPackage SP WHERE P.id = :pid AND P.name_id = SP.name_id AND P.evr_id = SP.evr_id AND *P.package_arch_id = SP.package_arch_id AND EXISTS (SELECT 1 FROM rhnUserServerPerms USP WHERE USP.user_id = :user_id AND USP.server_id = SP.server_id) ') [for Statement SELECT SP.server_id AS id FROM rhnServerPackage SP WHERE P.id = :pid AND P.name_id = SP.name_id AND P.evr_id = SP.evr_id AND P.package_arch_id = SP.package_arch_id AND EXISTS (SELECT 1 FROM rhnUserServerPerms USP WHERE USP.user_id = :user_id AND USP.server_id = SP.server_id) ] RHN::DB /usr/lib/perl5/vendor_perl/5.8.8/RHN/DB.pm 228 RHN::Exception::DB::throw RHN::DB::DataSource /usr/lib/perl5/vendor_perl/5.8.8/RHN/DB/DataSource.pm 73 RHN::DB::handle_error RHN::DataSource /usr/lib/perl5/vendor_perl/5.8.8/RHN/DataSource.pm 108 RHN::DB::DataSource::run_query Sniglets::ListView::List /usr/lib/perl5/vendor_perl/5.8.8/Sniglets/ListView/List.pm 1211 RHN::DataSource::execute_query Sniglets::ListView::List /usr/lib/perl5/vendor_perl/5.8.8/Sniglets/ListView/List.pm 908 Sniglets::ListView::List::default_provider Sniglets::Lists /usr/lib/perl5/vendor_perl/5.8.8/Sniglets/Lists.pm 119 Sniglets::ListView::List::render PXT::Parser /usr/lib/perl5/vendor_perl/5.8.8/PXT/Parser.pm 160 Sniglets::Lists::listview PXT::Parser /usr/lib/perl5/vendor_perl/5.8.8/PXT/Parser.pm 72 PXT::Parser::expand_tag PXT::ApacheHandler /usr/lib/perl5/vendor_perl/5.8.8/PXT/ApacheHandler.pm 524 PXT::Parser::expand_tags PXT::ApacheHandler /usr/lib/perl5/vendor_perl/5.8.8/PXT/ApacheHandler.pm 117 PXT::ApacheHandler::pxt_parse_data PXT::ApacheHandler /usr/lib/perl5/vendor_perl/5.8.8/PXT/ApacheHandler.pm 117 (eval) main -e 0 PXT::ApacheHandler::handler main -e 0 (eval) ** ** Thanks, Jeremy -- This email originates from Steria AS, Biskop Gunnerus' gate 14a, N-0051 OSLO, http://www.steria.no. This email and any attachments may contain confidential/intellectual property/copyright information and is only for the use of the addressee(s). You are prohibited from copying, forwarding, disclosing, saving or otherwise using it in any way if you are not the addressee(s) or responsible for delivery. If you receive this email by mistake, please advise the sender and cancel it immediately. Steria may monitor the content of emails within its network to ensure compliance with its policies and procedures. Any email is susceptible to alteration and its integrity cannot be assured. Steria shall not be liable
Re: [Spacewalk-list] Repo Sync speed problem
On Wed, Aug 17, 2011 at 12:54 PM, Jan Pazdziora jpazdzi...@redhat.comwrote: On Wed, Aug 17, 2011 at 09:18:25AM -0600, Jeremy Davis wrote: Hello All, I have this issue with slowness but the index does exist. It is somewhat quick for repositories that only hve like 2 or 3 package but repositories that have more than 300 it takes a while to process new packages. Any ideas as to what might be the cause? Thank you for your time and have a great day! You should find out if it's the database or something else where most CPU time is spent, and if it's the database system, find out which query it spends its cycles. Then get the execution (explain) plan for the query and see if it could be made faster. Hello Jan, It appears to be the Spacewalk-repo-sync and Java applications that are taking up the most CPU time when performing yum repository syncs. The database almost looks like it is idle. The database server is a standalone server. Regards, Jeremy ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] FW: Updating software channel to new minor version
I am not sure on the Scientific Linux issue but in regards to minor releases (5.5,5.6 etc.) I use the same base channels. I have a base channel setup with the contents of the OS repo from centos. Then under the base I have updates which is a mirror of the updates repo. Centos has a major release repository that contains the latest release (4, 5, 6). Then they have the minor release directory that contains the minor release (4.9, 5.6, 6.0). I use the latest release for my repo sync(4, 5, 6). This has worked for upgrading Centos 5.2 all the way up to 5.6 using the same channels and repository. I just sync the new packages when added. No other changes are made and this can all be automated. This is because when Centos releases a new minor version they update the major release directory with the packages for the latest release. Now major releases get a new base channel (just like centos creates the new release directory). I hope this helps. If you have any questions please feel free to ask. Thanks, Jeremy On Aug 18, 2011, at 6:09 PM, Jeff Falgout jtfalg...@gmail.com wrote: On Thu, Aug 18, 2011 at 8:16 AM, Matt Moldvan mmold...@dcctools.com wrote: In response to Sascha: Our spacewalk server is now working quite well. Before rollout I tested the update of our Scientific Linux 6 channel from 6.0 to 6.1 (6.1 is called 6rolling, because it is not release yet). Has anyone found a good solution to this? I'm experiencing the same type of issue now, having installed Spacewalk on Scientific Linux 6, then running a yum update on the Spacewalk server which broke it's ability to update through Spacewalk. Do we really need to create new channels everytime a minor version is released? Is there a best practices document or resource somewhere for Spacewalk? How does the RH Satellite product address this same issue? Thanks, Matt. +1 on the problem No solution yet and I'm on 1.6 nightly for server 1.5 for clients ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Repo Sync speed problem
Hello All, I have this issue with slowness but the index does exist. It is somewhat quick for repositories that only hve like 2 or 3 package but repositories that have more than 300 it takes a while to process new packages. Any ideas as to what might be the cause? Thank you for your time and have a great day! Thanks, Jeremy On Wed, Aug 17, 2011 at 6:57 AM, pradelles nicolas npradel...@eutelsat.frwrote: I have created this index following the sql file, but without UNIQUE option because the actual table contains duplicates keys. After a new repos sync test the speed is incredible faster :) Thanks for your help. Nicolas -Original Message- From: spacewalk-list-boun...@redhat.com [mailto: spacewalk-list-boun...@redhat.com] On Behalf Of Jan Pazdziora Sent: mercredi 17 août 2011 09:18 To: spacewalk-list@redhat.com Subject: Re: [Spacewalk-list] Repo Sync speed problem On Tue, Aug 16, 2011 at 04:58:37PM +0200, pradelles nicolas wrote: We use Oracle as database backend, client version 11.2.0.2 on Spacewalk server and 10.2.0.4 on external AIX Oracle server. After checking with a DBA, the Oracle server is very CPU stressed by the reposync script, specially by the following SQL command: --- select /*+index(rhnPackageCapability rhn_pkg_cap_name_version_uq)*/ id from rhnPackageCapability where name = :name and version is null --- It seems the script is reading continuously the table rhnPackageCapability to search file path (column name). As there is no index on this column (quite normal for a filepath list), the select is parsing the +2'000'000 lines of the table at each select. How come you have no index on that column? We create the index there http://git.fedorahosted.org/git/?p=spacewalk.git;a=blob;f=schema/spacewalk/common/tables/rhnPackageCapability.sql#l32 and in the select we explicitly hint for it to be used. If you don't have the index rhn_pkg_cap_name_version_uq in your database schema, something went wrong with the database schema population, or something/someone has removed it. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list This message may contain confidential or privileged information and is intended only for the personal and confidential use of the designated recipient(s) named above. If you are not one of the intended recipients of this message you are hereby notified that any review, dissemination, distribution or copying is strictly prohibited. This communication is for information purposes only and should not be regarded as an official statement of Eutelsat S.A. or any of its subsidiaries. E-mail transmission cannot be guaranteed to be secure or error-free. Therefore, Eutelsat S.A. does not claim that this information is complete or accurate and it should not be treated as such. ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Help with client connection to Spacewalk Proxy via SSL with CA signed cert
Thank you for the reply. I have created a bug report regarding this issue. https://bugzilla.redhat.com/show_bug.cgi?id=710188 On Mon, Aug 15, 2011 at 6:38 AM, Wojtak, Greg gregwoj...@quickenloans.comwrote: I've had this same issue. I had to revert back to the self-signed cert for httpd in order to get OSA and provisioning to work properly. From: Jeremy Davis jdavis4...@gmail.commailto:jdavis4...@gmail.com Reply-To: spacewalk-list@redhat.commailto:spacewalk-list@redhat.com spacewalk-list@redhat.commailto:spacewalk-list@redhat.com Date: Fri, 12 Aug 2011 20:16:36 -0400 To: spacewalk-list@redhat.commailto:spacewalk-list@redhat.com spacewalk-list@redhat.commailto:spacewalk-list@redhat.com Subject: Re: [Spacewalk-list] Help with client connection to Spacewalk Proxy via SSL with CA signed cert William, Are you using osa-dispatcher and osad for remote command functionality between the App server and all clients/proxy servers? I have been trying to get a signed SSL cert to work and been having issues with getting osa-dispatcher to restart using the new cert. If you are using this could you provide a step by step on how you have been able to get a signed cert to work with your setup? Thank you for your time and have a great day! Thanks, Jeremy On Fri, Aug 12, 2011 at 12:44 PM, William Clark majorgearh...@gmail.com mailto:majorgearh...@gmail.com wrote: I solved the issue. I took the csr in /etc/httpd/conf/ssl.csr and used that to get a signed cert from my CA. I then took the resultant cert and moved it to /etc/httpd/conf/ssl.crt/server.crt. I then restarted httpd and I no longer get ssl errors on clients trying to connect to the proxy with ssl. Nothing else broke in the process so I believe I am good to go. William Clark On Aug 12, 2011, at 11:07 AM, William Clark wrote: Here is some background on the system I am running. I currently have a single spacewalk server running SW1.4 and I have 2 proxy servers running proxy 1.4. On my spacewalk server I have a CA signed cert and set everything up for that. I connected the proxy's and they communicate to the master server over ssl with no issues. The problem comes in when I try to connect via SSL from a client to one of the proxy servers. I get SSL certificate errors. I suspect that this may have something to do with the fact that I have a CA signed cert on the master but not the proxy's. So when the proxy's try and validate their self signed certs against the CA chain I have from a valid CA they cannot validate their certs. Question is, is there a way to get CA signed certs in place on the proxy's so that I can connect to the proxy's from clients via SSL? William Clark ___ Spacewalk-list mailing list Spacewalk-list@redhat.commailto:Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list -- Thank you, Jeremy Davis, GCIH ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list -- Kind regards, Jeremy Davis, GCIH ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Help with client connection to Spacewalk Proxy via SSL with CA signed cert
William, Are you using osa-dispatcher and osad for remote command functionality between the App server and all clients/proxy servers? I have been trying to get a signed SSL cert to work and been having issues with getting osa-dispatcher to restart using the new cert. If you are using this could you provide a step by step on how you have been able to get a signed cert to work with your setup? Thank you for your time and have a great day! Thanks, Jeremy On Fri, Aug 12, 2011 at 12:44 PM, William Clark majorgearh...@gmail.comwrote: I solved the issue. I took the csr in /etc/httpd/conf/ssl.csr and used that to get a signed cert from my CA. I then took the resultant cert and moved it to /etc/httpd/conf/ssl.crt/server.crt. I then restarted httpd and I no longer get ssl errors on clients trying to connect to the proxy with ssl. Nothing else broke in the process so I believe I am good to go. William Clark On Aug 12, 2011, at 11:07 AM, William Clark wrote: Here is some background on the system I am running. I currently have a single spacewalk server running SW1.4 and I have 2 proxy servers running proxy 1.4. On my spacewalk server I have a CA signed cert and set everything up for that. I connected the proxy's and they communicate to the master server over ssl with no issues. The problem comes in when I try to connect via SSL from a client to one of the proxy servers. I get SSL certificate errors. I suspect that this may have something to do with the fact that I have a CA signed cert on the master but not the proxy's. So when the proxy's try and validate their self signed certs against the CA chain I have from a valid CA they cannot validate their certs. Question is, is there a way to get CA signed certs in place on the proxy's so that I can connect to the proxy's from clients via SSL? William Clark ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list -- Thank you, Jeremy Davis, GCIH ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Architecture question
Hello all,
I would like to provide how I have setup channels for Spacewalk.
Currently, we have a Development, Test, and Production 32bit and 64bit with
version 4, 5, and 6 base channels. These base channels contain the OS level
packages obtained form the OS CentOS yum repository. We then have
subchannels as follows. Extras, addons, centosplus, and updates. These
sub-channels of each of the base channels reflect each of the different
CentOS yum repositories with the same name. We then have a custom channel
created under the base channels for custom packages or custom builds of
packages that are assigned to different systems. This has worked out well as
we can assign certain custom channels to different systems and also upgrade
systems to the latest sub release like cent 5.4 to say 5.6 within the base
channels. It also allows for complete testing in each of the different
environments (Dev,Test,Prod). In order to move between 4 5 and 6 we retire
old servers and rebuild the server as the new release and assign it to the
correct channels based on keys. Below is a short example of what I am
talking about above.
orgname-centos-{development,test,production}-base-{v4,v5,v6}-{32bit,64bit}
orgname-centos-{development,test,production}-addons-{v4,v5,v6}-{32bit,64bit}
orgname-centos-{development,test,production}-centosplus-{v4,v5,v6}-{32bit,64bit}
orgname-centos-{development,test,production}-contrib-{v4,v5,v6}-{32bit,64bit}
orgname-centos-{development,test,production}-extras-{v4,v5,v6}-{32bit,64bit}
orgname-centos-{development,test,production}-updates-{v4,v5,v6}-{32bit,64bit}
orgname-custom-{development,test,production}-{v4,v5,v6}-{32bit,64bit}-product/environment
name
If you have any further questions please feel free to ask. Thank you for
your time and have a great day!
Thanks,
Jeremy
On Tue, Aug 9, 2011 at 9:46 AM, Pierre Casenove pcasen...@gmail.com wrote:
Hello,
Thanks you for your answer. I think I will set up something like you have
done for centos.
Pierre
2011/8/9 John Hodrien j.h.hodr...@leeds.ac.uk
On Mon, 8 Aug 2011, Martin Eggen wrote:
Hi,
the Updates channel receive all updates packages. I used this layout
mostly
because it was suggested for the CentOS channels, and it also matches my
yum
repositories as created by mrepo. For some systems I want to be able to
subscribe them just to a specific Base channel (RHEL 5.x) and then adding
updates later as needed.
I created one main configuration channel pr. OS (we have both RHEL and
Solaris systems), and then some role/application specific channels. Make
sure to rank the more specific configuration channels higher than the
general channel (so any common configuration files will read the more
specific version).
I could never quite decide the right/best way to lay out the channels.
This time I've gone with:
CentOS 6 (contains no packages)
--CentOS 6.0
--CentOS 6.0 updates
--CentOS 6.0 approved updates
--CentOS 6 internal packages
Then when 6.1 comes out, I can add a 6.1 child channel, test a new
kickstart
against it (without disturbing the existing 6.0 kickstart). I can test
updates to 6.1 without disturbing the existing 6.0 machines. Moving from
6.0
to 6.1 doesn't affect the base channel subscription. 6.0 updates would be
a
regularly repo-synced version of 6.0 updates, and 6.0 approved updates
would
contain a subset of the updates channel.
jh
__**_
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/**mailman/listinfo/spacewalk-**listhttps://www.redhat.com/mailman/listinfo/spacewalk-list
___
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list
___
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Architecture question
The base would have 6. The yum repositories used to sync with these channels
contain the same as what centos releases. So when 6.1 is released the
packages first get synced to the base os level repository. This in turn gets
synced to the channels which allows the systems running 6.0 to be upgraded
to 6.1. Any updates that get put into the 6 updates repository get added to
the updates channel and so on. This has been tested with 5.2 all the way up
to 5.6 for our servers in our environment. I don't have to change base or
any sub channel. All I have to do to upgrade to a new sub-release is put the
packages in the repository needed (This is actually done by CentOS by
default. so really only thing I have to do is sync the repos and channels.).
To enable testing of each release that is why I have Development, Test, and
Production to make sure everything works before moving the new packages to
the other channels. This is all done via scripts and is almost fully
automated.
On Tue, Aug 9, 2011 at 10:38 AM, John Hodrien j.h.hodr...@leeds.ac.ukwrote:
On Tue, 9 Aug 2011, Jeremy Davis wrote:
orgname-centos-{development,**test,production}-base-{v4,v5,**
v6}-{32bit,64bit}
orgname-centos-{development,**test,production}-addons-{v4,**
v5,v6}-{32bit,64bit}
orgname-centos-{development,**test,production}-centosplus-{**
v4,v5,v6}-{32bit,64bit}
orgname-centos-{development,**test,production}-contrib-{v4,**
v5,v6}-{32bit,64bit}
orgname-centos-{development,**test,production}-extras-{v4,**
v5,v6}-{32bit,64bit}
orgname-centos-{development,**test,production}-updates-{v4,**
v5,v6}-{32bit,64bit}
orgname-custom-{development,**test,production}-{v4,v5,v6}-{**
32bit,64bit}-product/**environment name
If you have any further questions please feel free to ask. Thank you for
your time and have a great day!
Just a simple query; is the base 6.0 or 6? If the former (which you seem
to
imply) how to do you upgrade to sub-reases within the base channel?
jh
__**_
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/**mailman/listinfo/spacewalk-**listhttps://www.redhat.com/mailman/listinfo/spacewalk-list
--
Thank you,
Jeremy Davis, GCIH
___
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] OSAD - Clients not receiving actions
David, Thank you for the recommendation. I will use this command the next time jabber goes down and we will see if this is able to bring up the service. All, I have some more information. Over the weekend the remote command functionality has stayed up. I have not changed anything other than restarting the services noted in this email list. The only difference between the weekend and a weekday is users logging in and performing remote commands and package management. During the weekend the only user logging in would be my script account that performs 1 remote command every thirty minutes to determine when osad goes down. Any other thoughts as to what might be causing this issue? On Mon, Aug 8, 2011 at 3:00 AM, David Nutter dav...@bioss.ac.uk wrote: On Fri, Aug 05, 2011 at 08:29:53PM -0600, Jeremy Davis wrote: All, I have verified that this is DB corruption. Is there anyway to resolve this DB corruption issue? As a work-around you could try the db_recover tool from db4-utils. This should at least allow Jabber to open its databases again, rather than crashing on startup due to the DBs being in an inconsistent state. This probably isn't any better than removing the Jabber DBs though. Regards, -- David NutterTel: +44 (0)131 650 4888 BioSS, JCMB, King's Buildings, Mayfield Rd, EH9 3JZ. Scotland, UK Biomathematics and Statistics Scotland (BioSS) is formally part of The James Hutton Institute (JHI), a registered Scottish charity No. SC041796 and a company limited by guarantee No. SC374831 ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
[Spacewalk-list] Spacewalk API using PHP
List, I am looking to use php for a web tool that I am creating that uses the Spacewalk API. I was wanting to know if anyone has used PHP to work with the Spacewalk API and if so could provide me some example code and libraries used. Any assistance you could provide would be greatly appreciated. Thanks, Jeremy ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] OSAD - Clients not receiving actions
Thank you all for the replies. Unfortunately, I have already added the firewall options to resolve that issue. A little more information I think might be needed. When osad goes down I am still able to ping the system via the web UI and the client returns as online. When I restart the service I get two failed services (c2s and s2s). Seems like DB corruption with the Jabber service. Greg, In order to get the proxy client operation to work with OSA you would need to point the client to the proxy server and provide the client with the SSL cert that is generated when you configure a proxy server. Once you have these two items you will also need some ports opened. 5222 for client to server and 5269 for application server to proxy server. Once you have all of these setup restart the services as outlined below and you should be able to get the services up. If you have problems with this please restart the osad service with debugging turned on to 9 and submit the logs within a new email and I would be more than glad to assist. Thanks, Jeremy On Fri, Aug 5, 2011 at 6:54 AM, Wojtak, Greg gregwoj...@quickenloans.comwrote: If you're able to get the OSA clients working with proxy at all, you're better off than I am. I (and I think one or two other people on this list) all have the issue where it has never worked; only if the clients communicate directly with the spacewalk server does OSA seem to work for me. I'm going to try the steps you outlined below and see if I can use that as a starting point to get the proxy communications to the server working properly. Greg From: Jeremy Davis jdavis4...@gmail.commailto:jdavis4...@gmail.com Reply-To: spacewalk-list@redhat.commailto:spacewalk-list@redhat.com spacewalk-list@redhat.commailto:spacewalk-list@redhat.com Date: Thu, 4 Aug 2011 18:51:34 -0400 To: spacewalk-list@redhat.commailto:spacewalk-list@redhat.com spacewalk-list@redhat.commailto:spacewalk-list@redhat.com Subject: Re: [Spacewalk-list] OSAD - Clients not receiving actions List, Anyone have any ideas as to what is causing this issue? Any assistance you could provide would be greatly appreciated. Thanks, Jeremy On Wed, Aug 3, 2011 at 3:10 PM, Jeremy Davis jdavis4...@gmail.commailto: jdavis4...@gmail.com wrote: List, I have a Spacewalk 1.4 installation and have about 2000+ servers connected to proxy servers. At intermittent times I am unable to send remote commands to clients via the osad service. When this happens the only way to get this feature to work again is to perform the following steps on in order. Step 1: On Spacewalk Application server. service jabberd stop service osa-dispatcher stop rm -f /var/lib/jabberd/db/* service jabberd start sleep 5 service osa-dispatcher start Step 2: Wait until Proxy server reconnect to Spacewalk Application server. Step 3: On Spacewalk Proxy servers. service jabberd stop rm -f /var/lib/jabberd/db/* service jabberd start After I perform these steps the client will be able to receive actions until the next time it goes down. Unfortunately, I am unable to find any logs to determine what is going on. Any assistance you could provide in this would be greatly appreciated. Thanks, Jeremy ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list -- Thank you, Jeremy Davis, GCIH ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] OSAD - Clients not receiving actions
All, Any other ideas regarding DB corruption being the cause of OSAD going down in my environment? Greg, Are you able to send remote commands to the Spacewalk proxy servers from the Spacewalk server using osad? On Fri, Aug 5, 2011 at 12:39 PM, Wojtak, Greg gregwoj...@quickenloans.comwrote: I turned on some debugging and the clients are communicating just fine with the proxy. It looks like the proxy to spacewalk server is where the breakdown is occurring. I'm seeing the following repeated over and over in the proxy's /var/lib/jabberd/log/s2s.log (ip addresses and host names scrubbed in the interest of security): Fri Aug 5 14:22:13 2011 [notice] [8] [1.2.3.4, port=5269] outgoing connection for 'spacewalk' Fri Aug 5 14:22:13 2011 [notice] [8] [1.2.3.4, port=5269] sending dialback auth request for route 'proxy/spacewalk' Fri Aug 5 14:23:13 2011 [notice] [8] [1.2.3.4, port=5269] error: Stream error (dialback timed out) Fri Aug 5 14:23:13 2011 [notice] [8] [1.2.3.4, port=5269] disconnect, packets: 0 I'm not real strong on how jabber communicates, but I did verify that I could get to spacewalk from proxy and to proxy from spacewalk on port 5269. In fact, my firewall rules have ports 80, 443, and 5269 open from proxy to spacewalk. I believe 5269 is the only port open from spacewalk to proxy. We are not running local firewalls (ie iptables) on the hosts. They are separated by a network firewall into a management environment and a DMZ. Any ideas based on the above error? From: Jeremy Davis jdavis4...@gmail.commailto:jdavis4...@gmail.com Reply-To: spacewalk-list@redhat.commailto:spacewalk-list@redhat.com spacewalk-list@redhat.commailto:spacewalk-list@redhat.com Date: Fri, 5 Aug 2011 11:51:29 -0400 To: spacewalk-list@redhat.commailto:spacewalk-list@redhat.com spacewalk-list@redhat.commailto:spacewalk-list@redhat.com Subject: Re: [Spacewalk-list] OSAD - Clients not receiving actions Thank you all for the replies. Unfortunately, I have already added the firewall options to resolve that issue. A little more information I think might be needed. When osad goes down I am still able to ping the system via the web UI and the client returns as online. When I restart the service I get two failed services (c2s and s2s). Seems like DB corruption with the Jabber service. Greg, In order to get the proxy client operation to work with OSA you would need to point the client to the proxy server and provide the client with the SSL cert that is generated when you configure a proxy server. Once you have these two items you will also need some ports opened. 5222 for client to server and 5269 for application server to proxy server. Once you have all of these setup restart the services as outlined below and you should be able to get the services up. If you have problems with this please restart the osad service with debugging turned on to 9 and submit the logs within a new email and I would be more than glad to assist. Thanks, Jeremy On Fri, Aug 5, 2011 at 6:54 AM, Wojtak, Greg gregwoj...@quickenloans.com mailto:gregwoj...@quickenloans.com wrote: If you're able to get the OSA clients working with proxy at all, you're better off than I am. I (and I think one or two other people on this list) all have the issue where it has never worked; only if the clients communicate directly with the spacewalk server does OSA seem to work for me. I'm going to try the steps you outlined below and see if I can use that as a starting point to get the proxy communications to the server working properly. Greg From: Jeremy Davis jdavis4...@gmail.commailto:jdavis4...@gmail.com mailto:jdavis4...@gmail.commailto:jdavis4...@gmail.com Reply-To: spacewalk-list@redhat.commailto:spacewalk-list@redhat.com mailto:spacewalk-list@redhat.commailto:spacewalk-list@redhat.com spacewalk-list@redhat.commailto:spacewalk-list@redhat.commailto: spacewalk-list@redhat.commailto:spacewalk-list@redhat.com Date: Thu, 4 Aug 2011 18:51:34 -0400 To: spacewalk-list@redhat.commailto:spacewalk-list@redhat.commailto: spacewalk-list@redhat.commailto:spacewalk-list@redhat.com spacewalk-list@redhat.commailto:spacewalk-list@redhat.commailto: spacewalk-list@redhat.commailto:spacewalk-list@redhat.com Subject: Re: [Spacewalk-list] OSAD - Clients not receiving actions List, Anyone have any ideas as to what is causing this issue? Any assistance you could provide would be greatly appreciated. Thanks, Jeremy On Wed, Aug 3, 2011 at 3:10 PM, Jeremy Davis jdavis4...@gmail.commailto: jdavis4...@gmail.commailto:jdavis4...@gmail.commailto: jdavis4...@gmail.com wrote: List, I have a Spacewalk 1.4 installation and have about 2000+ servers connected to proxy servers. At intermittent times I am unable to send remote commands to clients via the osad service. When this happens the only way to get this feature to work again is to perform the following steps on in order. Step 1: On Spacewalk
Re: [Spacewalk-list] OSAD - Clients not receiving actions
All, I have verified that this is DB corruption. Is there anyway to resolve this DB corruption issue? Greg, What I would do is open 80, 443, 5222, 5269 from proxy server to app server and app server to proxy server and then perform the following. /usr/bin/yum install rhn-client-tools rhn-check rhn-setup rhnsd m2crypto yum-rhn-plugin osad rhncfg* # Add the run file to /etc/sysconfig/rhn/allowed-actions/script to allow remote command capabilities make sure it is owned be root. /bin/touch /etc/sysconfig/rhn/allowed-actions/script/run cd /usr/share/rhn/ rm -rf RHN-ORG-TRUSTED-SSL-CERT /usr/bin/wget http://appserver/pub/RHN-ORG-TRUSTED-SSL-CERT /bin/sed -i s'/osa_ssl_cert = /osa_ssl_cert = \/usr\/share\/rhn\/RHN-ORG-TRUSTED-SSL-CERT/'g /etc/sysconfig/rhn/osad.conf # Make sure osad starts at startup /sbin/chkconfig osad on # Start osad /sbin/service osad restart Once you have performed the following make sure that the proxy server can receive actions from the app server via osad. If you could before you restart the osad service put it in debug 9 mode and you can watch the log in /var/log/osad to see if it is able to connect to the app server. Once this is working then do the same thing for clients make sure that you change appserver for the url to the proxy server. You also want to make sure that jabber is installed and operational on the proxy server. On Fri, Aug 5, 2011 at 7:55 PM, Wojtak, Greg gregwoj...@quickenloans.comwrote: Hi Jeremy, No, I'm unable to do so. The systems also show up as 'offline as of unknown'. Is the proxy supposed to have the osad client package installed on it? I do not have it on my proxy. I also wanted to point out that scheduled events do get picked up by rhnsd, but only after the configured time (the default of four hours in my case) elapses. I suppose I can work around this for now by putting a cron job in on every server that runs rhn_check every minute, but I do want to get this straightened out. I do appreciate your willingness to help! Thanks! Greg From: Jeremy Davis jdavis4...@gmail.commailto:jdavis4...@gmail.com Reply-To: spacewalk-list@redhat.commailto:spacewalk-list@redhat.com spacewalk-list@redhat.commailto:spacewalk-list@redhat.com Date: Fri, 5 Aug 2011 16:42:41 -0400 To: spacewalk-list@redhat.commailto:spacewalk-list@redhat.com spacewalk-list@redhat.commailto:spacewalk-list@redhat.com Subject: Re: [Spacewalk-list] OSAD - Clients not receiving actions All, Any other ideas regarding DB corruption being the cause of OSAD going down in my environment? Greg, Are you able to send remote commands to the Spacewalk proxy servers from the Spacewalk server using osad? On Fri, Aug 5, 2011 at 12:39 PM, Wojtak, Greg gregwoj...@quickenloans.com mailto:gregwoj...@quickenloans.com wrote: I turned on some debugging and the clients are communicating just fine with the proxy. It looks like the proxy to spacewalk server is where the breakdown is occurring. I'm seeing the following repeated over and over in the proxy's /var/lib/jabberd/log/s2s.log (ip addresses and host names scrubbed in the interest of security): Fri Aug 5 14:22:13 2011 [notice] [8] [1.2.3.4, port=5269] outgoing connection for 'spacewalk' Fri Aug 5 14:22:13 2011 [notice] [8] [1.2.3.4, port=5269] sending dialback auth request for route 'proxy/spacewalk' Fri Aug 5 14:23:13 2011 [notice] [8] [1.2.3.4, port=5269] error: Stream error (dialback timed out) Fri Aug 5 14:23:13 2011 [notice] [8] [1.2.3.4, port=5269] disconnect, packets: 0 I'm not real strong on how jabber communicates, but I did verify that I could get to spacewalk from proxy and to proxy from spacewalk on port 5269. In fact, my firewall rules have ports 80, 443, and 5269 open from proxy to spacewalk. I believe 5269 is the only port open from spacewalk to proxy. We are not running local firewalls (ie iptables) on the hosts. They are separated by a network firewall into a management environment and a DMZ. Any ideas based on the above error? From: Jeremy Davis jdavis4...@gmail.commailto:jdavis4...@gmail.com mailto:jdavis4...@gmail.commailto:jdavis4...@gmail.com Reply-To: spacewalk-list@redhat.commailto:spacewalk-list@redhat.com mailto:spacewalk-list@redhat.commailto:spacewalk-list@redhat.com spacewalk-list@redhat.commailto:spacewalk-list@redhat.commailto: spacewalk-list@redhat.commailto:spacewalk-list@redhat.com Date: Fri, 5 Aug 2011 11:51:29 -0400 To: spacewalk-list@redhat.commailto:spacewalk-list@redhat.commailto: spacewalk-list@redhat.commailto:spacewalk-list@redhat.com spacewalk-list@redhat.commailto:spacewalk-list@redhat.commailto: spacewalk-list@redhat.commailto:spacewalk-list@redhat.com Subject: Re: [Spacewalk-list] OSAD - Clients not receiving actions Thank you all for the replies. Unfortunately, I have already added the firewall options to resolve that issue. A little more information I think might be needed. When osad goes down I am still able to ping
Re: [Spacewalk-list] OSAD - Clients not receiving actions
List, Anyone have any ideas as to what is causing this issue? Any assistance you could provide would be greatly appreciated. Thanks, Jeremy On Wed, Aug 3, 2011 at 3:10 PM, Jeremy Davis jdavis4...@gmail.com wrote: List, I have a Spacewalk 1.4 installation and have about 2000+ servers connected to proxy servers. At intermittent times I am unable to send remote commands to clients via the osad service. When this happens the only way to get this feature to work again is to perform the following steps on in order. Step 1: On Spacewalk Application server. service jabberd stop service osa-dispatcher stop rm -f /var/lib/jabberd/db/* service jabberd start sleep 5 service osa-dispatcher start Step 2: Wait until Proxy server reconnect to Spacewalk Application server. Step 3: On Spacewalk Proxy servers. service jabberd stop rm -f /var/lib/jabberd/db/* service jabberd start After I perform these steps the client will be able to receive actions until the next time it goes down. Unfortunately, I am unable to find any logs to determine what is going on. Any assistance you could provide in this would be greatly appreciated. Thanks, Jeremy ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
[Spacewalk-list] OSAD - Clients not receiving actions
List, I have a Spacewalk 1.4 installation and have about 2000+ servers connected to proxy servers. At intermittent times I am unable to send remote commands to clients via the osad service. When this happens the only way to get this feature to work again is to perform the following steps on in order. Step 1: On Spacewalk Application server. service jabberd stop service osa-dispatcher stop rm -f /var/lib/jabberd/db/* service jabberd start sleep 5 service osa-dispatcher start Step 2: Wait until Proxy server reconnect to Spacewalk Application server. Step 3: On Spacewalk Proxy servers. service jabberd stop rm -f /var/lib/jabberd/db/* service jabberd start After I perform these steps the client will be able to receive actions until the next time it goes down. Unfortunately, I am unable to find any logs to determine what is going on. Any assistance you could provide in this would be greatly appreciated. Thanks, Jeremy ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
