Re: [Spacewalk-list] clients can't register - ssl cert problem

2011-05-24 Thread Michael Mraka
Matthew Darcy wrote: % Sander, % % this is excellent inforamtion and advice, thank you. % % I've now found the spacewalk rename trac page % https://fedorahosted.org/spacewalk/wiki/SpacewalkHostnameRename % % which is very useful. % % I'm now having a problem in that when I try to run the spac

Re: [Spacewalk-list] /var/satellite on NFS mount

2011-05-24 Thread Sabuj Pattanayek
We do and it works fine. We have about 250 clients and growing. On Wed, May 25, 2011 at 12:28 AM, Pierre Casenove wrote: > Hello, > I'm planning to deploy a spacewalk server to manage approx 400 clients > (centos and fedora). > I'm currently sizing the server and I was wondering if it was possibl

[Spacewalk-list] /var/satellite on NFS mount

2011-05-24 Thread Pierre Casenove
Hello,I'm planning to deploy a spacewalk server to manage approx 400 clients (centos and fedora).I'm currently sizing the server and I was wondering if it was possible to store the rpm packages on a NFS share? The spacewalk server would be the client of the share of course.I think it's a good t

Re: [Spacewalk-list] re-configure Oracle XE without losing data

2011-05-24 Thread Matthew Darcy
I should add to this once I got the database running again by changing the listener and names .ora file to the FQDN I tried to use the spacewalk-hostname-rename script, that changes the hostname back to "localhost" in both files, and therefore stops the database from being available to connect.

[Spacewalk-list] re-configure Oracle XE without losing data

2011-05-24 Thread Matthew Darcy
All, I foolishly changed the hostname on my machine and oracle stopped working. After a ton of reading and some advice, I change the listenera.ora to match my new hostname / fqdn and it works howerver I'm concerned that this is just a temp/hash fix to get spacewalk talking to oracle again. Is

Re: [Spacewalk-list] NIS authentication support?

2011-05-24 Thread Jeff Moody
I don't know of a native NIS option, but it does support PAM authentication. http://docs.redhat.com/docs/en-US/Red_Hat_Network_Satellite/5.4/html/Installation_Guide/s1-maintenance-pam-auth.html So if you can leverage PAM to authenticate users, then Spacewalk can leverage PAM to authenticate agai

[Spacewalk-list] NIS authentication support?

2011-05-24 Thread Contant, Olivier
Is there support to use NIS as authentication system for Spacewalk? ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list

Re: [Spacewalk-list] clients can't register - ssl cert problem

2011-05-24 Thread Matthew Darcy
Sander, this is excellent inforamtion and advice, thank you. I've now found the spacewalk rename trac page https://fedorahosted.org/spacewalk/wiki/SpacewalkHostnameRename which is very useful. I'm now having a problem in that when I try to run the spacewalk-hostname-rename script it's complai

Re: [Spacewalk-list] clients can't register - ssl cert problem

2011-05-24 Thread Sander Grendelman
> > When I do a rhn_register on a client I get told it's failed and I should look > in the up2date log. > > The up2date log shows a large python backtrace ... > 15. > up2date_client.up2dateErrors.SSLCertificateVerifyFailedError: The SSL > certificate /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT fa

Re: [Spacewalk-list] spacewalk-proxy

2011-05-24 Thread Baptiste AGASSE
That's ok now, when i've run ssldump, it says: 3 6 0.0224 (0.0004) C>S Alert level fatal value unknown_ca the spacewalk server is a self signed cert and by default, configure-proxy.sh script specify RHN CA cert, i've replaced RHN CA by my spacewalk cert path like

[Spacewalk-list] clients can't register - ssl cert problem

2011-05-24 Thread Matthew Darcy
I tried not to post this to the list as I thought I had it resolved, but I've hit a brick wall. I've got a spacewalk 1.4 server on Centos 5.6 64bit with Oracle XE backend. I had a mild DNS problem (see my prevous post to the list) which to resovle I had to change the SSL certificate on the spac

Re: [Spacewalk-list] spacewalk-proxy

2011-05-24 Thread Baptiste AGASSE
Yes, i've checked again, that's definitively the same cert It use only 443 (i've specified that i want to use ssl) port for register proxy to spacewalk server ? i can connect via telnet on following ports from my "future" spacewalk-proxy to spacewalk server, so it's not a filter problem : 80, 443

Re: [Spacewalk-list] spacewalk-proxy

2011-05-24 Thread Miroslav Suchy
Dne 24.5.2011 14:58, Baptiste AGASSE napsal(a): RHN Parent [spacewalk1.example.com]: CA Chain [/usr/share/rhn/RHNS-CA-CERT]: ... Country code []: FR Email [baptiste.aga...@lyra-network.com]: ERROR: failed SSL connection - bad or expired cert? Proxy activation failed! Installation interrupted. E

[Spacewalk-list] spacewalk-proxy

2011-05-24 Thread Baptiste AGASSE
Hi all, I've a "little" problem when i try to run configure-proxy.sh, i've the following error : [root@spacewalk2 ~]# configure-proxy.sh RHN Parent [spacewalk1.example.com]: CA Chain [/usr/share/rhn/RHNS-CA-CERT]: Proxy version to activate [1.3]: Traceback email []: baptiste.aga...@example.com

Re: [Spacewalk-list] what sets the kickstart hostname URL at build time

2011-05-24 Thread Michael Gliwinski
On Monday 23 May 2011 16:09:59 Matthew Darcy wrote: > you appear to becoming my personal support unit, thank you. Heh, no worries, glad to help :) > The pre script was the option I was going for, I'm curious to have you've > done this specfically as each time I try it, anaconda panics and fails o

Re: [Spacewalk-list] Spacewalk 1.4 and Oracle 11g

2011-05-24 Thread Jan Pazdziora
On Tue, May 24, 2011 at 12:10:41PM +0200, Mario Mikocevic wrote: > On 05/24/2011 12:03:36 PM, Jan Pazdziora wrote: > > On Tue, May 24, 2011 at 11:02:27AM +0200, Mario Mikocevic wrote: > > > > > > Any progress on fixing Spacewalk 1.4 and Oracle 11.2.0.2.0 ? > > > > No really. We were not able to r

Re: [Spacewalk-list] repos wrong SSL name ? [ SOLVED ]

2011-05-24 Thread Matthew Darcy
For the record, this was my own stupidity. I had updated the certificates, but not imported them into the spacewalk interface. Sorry Matt From: spacewalk-list-boun...@redhat.com [spacewalk-list-boun...@redhat.com] on behalf of Matthew Darcy [mda...@sch-group.n

Re: [Spacewalk-list] Spacewalk kickstart generating & snippet compiling

2011-05-24 Thread Martin Zehetmayer
Hi Tim, works perfectly now! Thanks a lot! Martin - Original Message - From: "Martin Zehetmayer" To: spacewalk-list@redhat.com Sent: Monday, May 23, 2011 8:59:19 PM Subject: Re: [Spacewalk-list] Spacewalk kickstart generating & snippet compiling Hi Michael, thanks for the info! I

Re: [Spacewalk-list] Spacewalk 1.4 and Oracle 11g

2011-05-24 Thread Mario Mikocevic
On 05/24/2011 12:03:36 PM, Jan Pazdziora wrote: > On Tue, May 24, 2011 at 11:02:27AM +0200, Mario Mikocevic wrote: > > > > Any progress on fixing Spacewalk 1.4 and Oracle 11.2.0.2.0 ? > > No really. We were not able to reproduce the problem with insert / > lookup / autonomous transaction on our 1

Re: [Spacewalk-list] Spacewalk 1.4 and Oracle 11g

2011-05-24 Thread Jan Pazdziora
On Tue, May 24, 2011 at 11:02:27AM +0200, Mario Mikocevic wrote: > > Any progress on fixing Spacewalk 1.4 and Oracle 11.2.0.2.0 ? No really. We were not able to reproduce the problem with insert / lookup / autonomous transaction on our 11.2.0.2.0 installation so we really do not have anything to

Re: [Spacewalk-list] Spacewalk 1.4 and Oracle 11g

2011-05-24 Thread Mario Mikocevic
Any progress on fixing Spacewalk 1.4 and Oracle 11.2.0.2.0 ? -- T-Com Odjel za upravljanje mrežom i uslužnim platformama / / Network and Service Platform Operations Department. Radna jedinica za servisne mreže - T5.1.7 Mario Mikočević Draškovićeva 26, Zagreb, 1 +385 1 4913 800 +385 1 491

[Spacewalk-list] repos wrong SSL name ?

2011-05-24 Thread Matthew Darcy
While playing around with spacewalk yesterday to try to resolve a DNS issue I appear to have broken my SSL certificate for my repos. I've just built a test centos 5 machine from my spacewalk 1.4 Oracle server, great, not problems. When I run a yum update on the client to test the functionality,