Re: [Spacewalk-list] I can now update CentOS

2014-11-12 Thread Kevin Sandy
It's not enough to copy the file. You also need to update any references to RHNS-CA-CERT in /etc/sysconfig/up2date to instead use RHN-ORG-TRUSTED-SSL-CERT. When you kickstart a server this is all done automatically. -- kevin > On Nov 12, 2014, at 2:19 PM, Daryl Rose wrote: > > Okay. Then we

Re: [Spacewalk-list] Spacewalk SSL Certs

2014-11-12 Thread Waldirio Manhães Pinheiro
Glen A few days ago I did this, using SW 2.2 and postgre, although I changed just a domain, in fact the hostname still the same, btw all was changed in webui (getting info from db) / spacecmd, so I believe it will works fine for you. B' Regards __ Atenciosamente Waldirio msn: waldi...

Re: [Spacewalk-list] Problem Sync'ing a new Channel in Spacewalk.

2014-11-12 Thread Waldirio Manhães Pinheiro
Hello Marc About firewall, you can check ports here - https://access.redhat.com/documentation/en-US/Red_Hat_Satellite/5.6/html-single/Installation_Guide/index.html#sect-Installation_Guide-Additional_Requirements-Firewall About proxy, in this server, can you access internet web page normally ?! or

[Spacewalk-list] Spacewalk SSL Certs

2014-11-12 Thread Glen Collins
Hi all. Just a quick question about the SSL certs. The wiki states if you're using Postgres that you use the OLD/manual method to rename a server and don't use the spacewalk-hostname-rename Is this still the case? I'm using SW 2.2. "NOTE 2 This script currently (as of 10-APR-2013) appears to

Re: [Spacewalk-list] Problem Sync'ing a new Channel in Spacewalk.

2014-11-12 Thread Szabo, Marc
Waldirio, I was looking for the taskomatic and in my search of the GUI, I found the “Spacewalk Configuration” tab with fields that include “HTTP proxy, username, password, … “ I do have some data in those fields, but not sure if they are correct. Should these be blank? Thanks. Marc. From:

Re: [Spacewalk-list] I can now update CentOS

2014-11-12 Thread Amedeo Salvati
instead of using rpm under /root/ssl-build use the one under your /pub web page (without rolling back from snapshot), but remember to install repo and packages mentioned on https://fedorahosted.org/spacewalk/wiki/RegisteringClients -> yum install rhn-client-tools rhn-check rhn-setup rhnsd m2cr

Re: [Spacewalk-list] Problem Sync'ing a new Channel in Spacewalk.

2014-11-12 Thread Szabo, Marc
Waldirio, Thank you for the quick response. I see that it is working for you and our configs are very similar: [root@nw-spcwlk-201 ~]# rhn-satellite-exporter --list-channels Channel List: B = Base Channel C = Child Channel B centos65-base-x86_64 However, when I cut and paste your command line

Re: [Spacewalk-list] I can now update CentOS

2014-11-12 Thread Amedeo Salvati
installing rpm is the same of copy RHN-ORG-TRUSTED-SSL-CERT file under /usr/share/rhn... both files are located under /pub of your spacewalk server: http://FQDN-SPACEWALK/pub so you can use wget: cd /usr/share/rhn/ wget http://FQDN-SPACEWALK/pub/RHN-ORG-TRUSTED-SSL-CERT but if you have just

Re: [Spacewalk-list] I can now update CentOS

2014-11-12 Thread Amedeo Salvati
yes, there are a partial lack on documentations, partial, because if can see when launch rhnreg_ks on serverUrl it use http and not https, and if you don't import ca key (by text file or rpm) http will works fine (but I'm not sure if osad will works), on the other hand https wont works without

Re: [Spacewalk-list] I can now update CentOS

2014-11-12 Thread Daryl Rose
Amedeo, I found the rpm cert package in /root/ssl-build. I copied that over to my server, installed and tested. BTW, the client that I am working with is a VM, so I just easily rolled back the snapshot and I once again had a clean client to test with. I installed the cert attempted to run rhn_c

Re: [Spacewalk-list] Problem Sync'ing a new Channel in Spacewalk.

2014-11-12 Thread Waldirio Manhães Pinheiro
Marc, good afternoon Works in my environment, maybe your problem was network connection in the moment of sync. Take a look bellow ### [root@spacewalk ~]# rhn-satellite-exporter --list-channels Channel List: B = Base Channel C = Child Channel B centos65-base-x86_64 [root@spacewalk ~]# spacewalk

Re: [Spacewalk-list] I can now update CentOS

2014-11-12 Thread Daryl Rose
Okay. Then we're back to square one. As I said, I did in fact copy RHN-ORG-TRUSTED-SSL-CERT from my spacewalk server to the client. Since the certificate is in fact /usr/share/rhn, https should work. But it doesn't. So, there is still either a bug, or something else is missing. With that said,

Re: [Spacewalk-list] I can now update CentOS

2014-11-12 Thread Coffman, Anthony J
Good point – I think this step belongs on the https://fedorahosted.org/spacewalk/wiki/RegisteringClients page. I’m pretty sure I had the same problem when I originally installed Spacewalk 0.7 but thought it was just my mistake. Regards, --Tony From: spacewalk-list-boun...@redhat.com [mailto

Re: [Spacewalk-list] I can now update CentOS

2014-11-12 Thread Amedeo Salvati
Daryl, sorry but I haven't see your previus email, but the answer you get -> scp RHN-ORG-TRUSTED-SSL-CERT from spacewalk it's another solution! to better understand the file RHN-ORG-TRUSTED-SSL-CERT generated during installation it's the CA key that you have to put on path: /usr/share/rhn/RHN

[Spacewalk-list] Problem Sync'ing a new Channel in Spacewalk.

2014-11-12 Thread Szabo, Marc
Hello all, I'm new to spacewalk and I'm in the process of setting up a spacewalk server. I believe that I successfully created the Channel (labeled: centos65-base-x86_64) and Repository (centos65-base-x86_64) and linked them via Manage Software Channels. Now I'm trying to sync the repository

Re: [Spacewalk-list] I can now update CentOS

2014-11-12 Thread Daryl Rose
Amedeo, This is not any any documentation that I can find. As a matter of fact, when I first started working on this, I ran into an error about RHN-ORG-TRUSTED-SSL-CERT. I posted a question to this list, and a person replied back telling me that I needed to scp RHN-ORG-TRUSTED-SSL-CERT from the S

Re: [Spacewalk-list] I can now update CentOS

2014-11-12 Thread Amedeo Salvati
Daryl this seem that you haven't imported your spacewalk ssl keys, usually under pub directory of your SW server you can find two files: RHN-ORG-TRUSTED-SSL-CERT rhn-org-trusted-ssl-cert-1.0-1.noarch.rpm install rpm on your spacewalk clients, and then your clients has this ssl key un

[Spacewalk-list] I can now update CentOS

2014-11-12 Thread Daryl Rose
Previous questions were about the failure of updating CentOS from the Spacewalk server. I was getting the following error: local action status: ((6,), 'Fatal error in Python code occurred', {}) I searched and searched and searched, posted questions and no one was able to answer the question on w