Hello Larry, note that there is a client and server pubkey.gpg. Maybe you mixed them up?
The key on the client is independent from the server. It is matched to the original package source. Only things I can think of is 1) that you installed the wrong key to the clients, 2) you pushed the keys to the client but you did not import them (rpm --import pubkey.gpg) 3) maybe place the key folder path into the corresponding channel field (this is local to the client, where the client would find the file on the HDD) Maybe somebody else has different ideas. Best wishes, Stefan Von: "Larry Clegg" <lcl...@kyriba.com> An: "spacewalk-list" <spacewalk-list@redhat.com> Gesendet: Montag, 24. Februar 2020 21:09:33 Betreff: Re: [Spacewalk-list] [External Sender] Re: missing public key The client was originally provisioned against a Centos6/Spacewalk 2.8 server. I did the standard client install of the rpms, etc as documented in the client installation guide. Since then the 2.8 Spacewalk Server was rebuilt from scratch using Centos 7 and Spacewalk 2.9 and all the clients re-registered. The SW channels are created on the server using the spacewalk-common-channels command like this: /usr/bin/spacewalk-common-channels - u <user> -p <pass> -a x86_64 spacewalk29-client-centos6 I have noticed that the gpg key generated in the SW channel for the 2.9 client looks like this: GPG key URL: [ https://copr-be.cloud.fedoraproject.org/results/@spacewalkproject/spacewalk-2.9-client/pubkey.gpg | https://copr-be.cloud.fedoraproject.org/results/@spacewalkproject/spacewalk-2.9-client/pubkey.gpg ] GPG key ID: 9BD837BA GPG key Fingerprint: A353 22CF 3B3F 9C71 101E B74B 49FC 0FD8 9BD8 37BA Yet when I download that same pubkey.gpg and examine it I get different results for the id and fingerprint: [root@us3-inf-lu-s01 rpm-gpg]# gpg --with-fingerprint RPM-GPG-KEY-spacewalk-2.9 pub 2048R/6E5454FA 2018-11-26 @spacewalkproject_spacewalk-2.9 (None) <@spacewalkproject# [ mailto:spacewalk-...@copr.fedorahosted.org | spacewalk-...@copr.fedorahosted.org ] > Key fingerprint = E089 1A20 65C5 4DDD 4E12 B8CA AD32 9E0D 6E54 54FA I have updated the channel with this ID and Fingerprint but that made no difference. I'm very confused at this point. The client does have a public key installed which matched the version I get from the gpg --with-fingerprint command. On Mon, Feb 24, 2020 at 11:32 AM Stefan Bluhm < [ mailto:redhat....@bluhm-de.com | redhat....@bluhm-de.com ] > wrote: Hello Larry, how did you provision the client? When provisioning, you do need to push the key to the client first. This is not necessarily done automatically. Best wishes, Stefan Von: "Larry Clegg" < [ mailto:lcl...@kyriba.com | lcl...@kyriba.com ] > An: "spacewalk-list" < [ mailto:spacewalk-list@redhat.com | spacewalk-list@redhat.com ] > Gesendet: Montag, 24. Februar 2020 20:20:37 Betreff: [Spacewalk-list] missing public key Greetings Spacewalkers: I have gone over and over my configuration and I'm just not finding the problem. Server: Spacewalk 2.9 on Centos 6 - all fully patched Client: Centos6 download This issue is NOT happening on all clients...only a few. When I try to do a "yum upgrade" I get this message about rhncfg: warning: rpmts_HdrFromFdno: Header V3 RSA/SHA1 Signature, key ID 9bd837ba: NOKEY Public key for rhncfg-5.10.129-1.el6.noarch.rpm is not installed -- It is trying to upgrade rhncfg from 5.10.122-1 to 5.10.129-1 No other package reports this issue. Using the --nogpg on the yum command line gets around this issue but I'd like to understand and fix root cause. Any hints are greatly appreciated. Larry E. Clegg Systems Administrator | Kyriba [Address] 4435 Eastgate Mall, Suite 200, San Diego, CA 92121 [ http://www.kyriba.com/ | www.kyriba.com ] | [ https://www.facebook.com/KyribaCorp | Facebook ] | [ https://twitter.com/kyribacorp | Twitter ] | [ http://www.linkedin.com/company/kyriba-corporation | LinkedIn ] | [ http://www.kyriba.com/blog | Blog ] _______________________________________________ Spacewalk-list mailing list [ mailto:Spacewalk-list@redhat.com | Spacewalk-list@redhat.com ] [ https://www.redhat.com/mailman/listinfo/spacewalk-list | https://www.redhat.com/mailman/listinfo/spacewalk-list ] _______________________________________________ Spacewalk-list mailing list [ mailto:Spacewalk-list@redhat.com | Spacewalk-list@redhat.com ] [ https://www.redhat.com/mailman/listinfo/spacewalk-list | https://www.redhat.com/mailman/listinfo/spacewalk-list ] -- Larry E. Clegg Systems Administrator | Kyriba [Address] 4435 Eastgate Mall, Suite 200, San Diego, CA 92121 [ http://www.kyriba.com/ | www.kyriba.com ] | [ https://www.facebook.com/KyribaCorp | Facebook ] | [ https://twitter.com/kyribacorp | Twitter ] | [ http://www.linkedin.com/company/kyriba-corporation | LinkedIn ] | [ http://www.kyriba.com/blog | Blog ] _______________________________________________ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
_______________________________________________ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
