<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Hi Gavin,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">I am having the same problem. I just noticed that it was occurring yesterday. I re-issued new entitlement certificates with valid expiration dates from RHN
and the problem is still occurring. I have verified that my certificates contain path/entitlements for the channels that I am trying to sync (via rct cat-cert). Occasionally, Pulp will be able to download the metadata for certain channels, but then get 'Forbidden'
when downloading individual packages. Other times, it will throw a 'Forbidden' before being able to download the metadata as you pasted below.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">I am going to hopefully spend some time working with the developers in #pulp today to get this figured out. I have a feeling it is CDN related, but I'm not
exactly sure at this point.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Thanks,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Josh<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div style="border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt">
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> pulp-list-bounces@redhat.com [mailto:pulp-list-bounces@redhat.com]
<b>On Behalf Of </b>Gavin Jones<br>
<b>Sent:</b> Tuesday, May 05, 2015 12:13 AM<br>
<b>To:</b> pulp-list@redhat.com<br>
<b>Subject:</b> [Pulp-list] Pulp RHEL Repo Download Forbidden??<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Hi Everyone, I seem to be getting an error when downloading from the Redhat Repos. This has only just stopped working and has been working fine for months.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">It looks to be certificate related I believe from the logs.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">* Firstly I have not changed anything on the pulp side<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">* I have checked my subscriptions are still active and the hosts that are connected to RHEL are still connected.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">- Pulp Version:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">rpm -qa | grep -i pulp<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">python-pulp-client-lib-2.6.0-1.el7.noarch<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">pulp-rpm-plugins-2.6.0-1.el7.noarch<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">python-pulp-bindings-2.6.0-1.el7.noarch<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">python-kombu-3.0.24-5.pulp.el7.noarch<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">python-isodate-0.5.0-4.pulp.el7.noarch<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">pulp-admin-client-2.6.0-1.el7.noarch<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">pulp-rpm-admin-extensions-2.6.0-1.el7.noarch<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">python-pulp-common-2.6.0-1.el7.noarch<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">pulp-server-2.6.0-1.el7.noarch<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">pulp-selinux-2.6.0-1.el7.noarch<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">python-pulp-rpm-common-2.6.0-1.el7.noarch<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">- Attempting to download the repo.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Please see below:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">pulp-admin rpm repo sync run --repo-id=rhel-7-server-rhn-tools-rpms<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">+----------------------------------------------------------------------+<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> Synchronizing Repository [rhel-7-server-rhn-tools-rpms]<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">+----------------------------------------------------------------------+<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">This command may be exited via ctrl+c without affecting the request.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Downloading metadata...<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">[\]<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">... failed<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Forbidden<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Task Failed<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Importer indicated a failed response<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">- Error Log<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">journalctl -f<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">ay 05 13:33:05 pulp01.rap.local pulp[2741]: pulp_rpm.plugins.importers.yum.sync:INFO: Downloading metadata from
<a href="https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/rhn-tools/os/">
https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/rhn-tools/os/</a>.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">May 05 13:33:05 pulp01.rap.local pulp[2741]: requests.packages.urllib3.connectionpool:INFO: Starting new HTTPS connection (1):
<a href="http://cdn.redhat.com">cdn.redhat.com</a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">May 05 13:33:06 pulp01.rap.local pulp[2741]: pulp_rpm.plugins.importers.yum.sync:ERROR: (2741-28000) sync failed<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">May 05 13:33:06 pulp01.rap.local pulp[2741]: pulp_rpm.plugins.importers.yum.sync:ERROR: (2741-28000) Traceback (most recent call last):<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">May 05 13:33:06 pulp01.rap.local pulp[2741]: pulp_rpm.plugins.importers.yum.sync:ERROR: (2741-28000) File "/usr/lib/python2.7/site-packages/pulp_rpm/plugins/importers/yum/sync.py",...e 104, in run<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">May 05 13:33:06 pulp01.rap.local pulp[2741]: pulp_rpm.plugins.importers.yum.sync:ERROR: (2741-28000) metadata_files = self.get_metadata()<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">May 05 13:33:06 pulp01.rap.local pulp[2741]: pulp_rpm.plugins.importers.yum.sync:ERROR: (2741-28000) File "/usr/lib/python2.7/site-packages/pulp_rpm/plugins/importers/yum/sync.py",... get_metadata<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">May 05 13:33:06 pulp01.rap.local pulp[2741]: pulp_rpm.plugins.importers.yum.sync:ERROR: (2741-28000) raise FailedException(str(e))<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">May 05 13:33:06 pulp01.rap.local pulp[2741]: pulp_rpm.plugins.importers.yum.sync:ERROR: (2741-28000) FailedException: Forbidden<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">May 05 13:33:06 pulp01.rap.local pulp[2554]: celery.worker.job:ERROR: (2554-28000) Task pulp.server.managers.repo.sync.sync[81644b21-6bec-47dd-a31b-552baa2a27a8] raised unexpected: P...d response',)<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">May 05 13:33:06 pulp01.rap.local pulp[2554]: celery.worker.job:ERROR: (2554-28000) Traceback (most recent call last):<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">May 05 13:33:06 pulp01.rap.local pulp[2554]: celery.worker.job:ERROR: (2554-28000) File "/usr/lib/python2.7/site-packages/celery/app/trace.py", line 240, in trace_task<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">May 05 13:33:06 pulp01.rap.local pulp[2554]: celery.worker.job:ERROR: (2554-28000) R = retval = fun(*args, **kwargs)<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">May 05 13:33:06 pulp01.rap.local pulp[2554]: celery.worker.job:ERROR: (2554-28000) File "/usr/lib/python2.7/site-packages/pulp/server/async/tasks.py", line 328, in __call__<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">May 05 13:33:06 pulp01.rap.local pulp[2554]: celery.worker.job:ERROR: (2554-28000) return super(Task, self).__call__(*args, **kwargs)<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">May 05 13:33:06 pulp01.rap.local pulp[2554]: celery.worker.job:ERROR: (2554-28000) File "/usr/lib/python2.7/site-packages/celery/app/trace.py", line 437, in __protected_call__<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">May 05 13:33:06 pulp01.rap.local pulp[2554]: celery.worker.job:ERROR: (2554-28000) return self.run(*args, **kwargs)<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">May 05 13:33:06 pulp01.rap.local pulp[2554]: celery.worker.job:ERROR: (2554-28000) File "/usr/lib/python2.7/site-packages/pulp/server/managers/repo/sync.py", line 114, in sync<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">May 05 13:33:06 pulp01.rap.local pulp[2554]: celery.worker.job:ERROR: (2554-28000) raise PulpExecutionException(_('Importer indicated a failed response'))<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">May 05 13:33:06 pulp01.rap.local pulp[2554]: celery.worker.job:ERROR: (2554-28000) PulpExecutionException: Importer indicated a failed response<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">May 05 13:33:06 pulp01.rap.local pulp[2554]: celery.worker.job:INFO: Task pulp.server.async.tasks._release_resource[e8f32211-ccc5-4918-b4d5-ada23e15ecf4] succeeded in 0.010533269s: None<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">is there a clean way to fix this issue without Deleting the entire repo and going through the process of setting this up again?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Thanks for your time.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</div>
</body>
</html>