On 02/24/2011 09:13 PM, [email protected] wrote:
Tomas,
The server.pem that is generated via the Spacewalk-hostname-rename script still
contains the old hostname it never changes that hostname to the correct
hostname. It seems that the only way to change this hostname is to modify the
rhn-ca-openssl.cnf (by changing the hostname within) and then run the
rhn-ssl-tool --gen-ca and rhn-ssl-tool --gen-server. This will update the
hostname in all SSL certs to allow me to move them to the correct locations. It
seems the hostname script doesn't do this for me.
If you're sure about it, please file a BZ, I'll check it, when I find
some time.
Regards,
Tomas
--
Tomas Lestach
RHN Satellite Engineering, Red Hat
Kind regards,
JD
---- Tomas Lestach<[email protected]> wrote:
On 02/24/2011 05:36 PM, [email protected] wrote:
Hello Keith,
Thank you for the response. While waiting for a response I have tried many
different things. The one thing that has resolved this issue is as follows. It
seems the script is missing a few steps or is not performing all the steps it
should to complete the hostname change. Please review the steps below to see if
there is anyway to modify the hostname script to resolve these issues.
1: Perform hostname change on Spacewalk Application server.
2: Perform reboot on Spacewalk Application server.
3: Execute spacewalk-hostname-rename script.
3a: Script didn't generate the correct hostname info for the server.pem file
used by jabber.
Could you be more specific? spacewalk-hostname-rename script generates
new server.pem for you.
3b: Generated new crt,key,pem files by modifing openssl.cnf to reflect new
hostname.
So far I know, there's no need to modify openssl.cnf or any other file
manually.
Regards,
Tomas
--
Tomas Lestach
RHN Satellite Engineering, Red Hat
4: Copy new cert to proxy /usr/share/rhn/ location and change the client to the
correct hostname.
5: On proxy server remove contents of ssl-build and reconfigured Spacewalk
proxy server (This generated new SSL certs).
6: remove jabber DB on the Spacewalk Application server.
7: Remove osad-auth.conf file on client and restart osad. (proxy server and
clients.) (This didn't work until a jabber DB removal happened and the correct
SSL cert was on the client.)
8: Verified all is working as it should.
Thank you for your time and have a great day!
Kind regards,
JD
---- "Hagberg wrote:
Try stopping osad on the client, delete the /etc/sysconfig/rhn/osad-auth.conf
file then restart osad.
Keith
-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of [email protected]
Sent: Wednesday, February 23, 2011 3:33 PM
To: [email protected]
Subject: [Spacewalk-list] Failed Hostname Change with Spacewalk-Hostname-Rename
script
Hello All,
I have been trying to figure out what went wrong during the process of changing
my hostname on my Spacewalk Application server.
I performed the steps as outlined on
https://fedorahosted.org/spacewalk/wiki/SpacewalkHostnameRename.
My problem is in regards to osad. It seems that after changing the client to
reflect the recent hostname change osad restart(without error) but never
connects to the Spacewalk server. It also seems the /pub/ SSL cert doesn't
contain the correct hostname that was just changed.
I also have a proxy server that clients connect to and I couldn't find any
documentation on how to handle the Spacewalk Application server hostname change
for proxy servers that are connected.
Please let me know what I need to do in order to resolve this issue. I am at a
lost as to what to do next.
Thank you for your time and have a great day!
Kind regards,
JD
_______________________________________________
Spacewalk-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/spacewalk-list
_______________________________________________
Spacewalk-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/spacewalk-list
_______________________________________________
Spacewalk-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/spacewalk-list
_______________________________________________
Spacewalk-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/spacewalk-list
_______________________________________________
Spacewalk-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/spacewalk-list
