<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <meta name="Generator" content="Microsoft Word 15 (filtered medium)"> <style></style> </head> <body lang="EN-US" link="blue" vlink="purple"> <div class="WordSection1"> Well this turned out to be an issue with SeLinux. Disabling or setting it to permissive let me access the repositories. I have to go back in and set up a new rule for Pulp and Selinux today. At least it was fixable. Thanks. <o:p></o:p> <o:p> </o:p> <div> Jeff Reitmayer<o:p></o:p> Lead Systems Administrator Texas A&M University Division of Student Affairs IT John J. Koldus | Suite 233 College Station, TX 77843 <a href="mailto:jeffr@doit.tamu.edu">jeffr@doit.tamu.edu</a> Phone | 979-458-9224 Web | <a href="http://doit.tamu.edu" target="_blank">doit.tamu.edu</a><o:p></o:p> </div> <o:p> </o:p> <div> <div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in"> From: pulp-list-bounces@redhat.com [mailto:pulp-list-bounces@redhat.com] On Behalf Of Reitmayer, Jeffrey S Sent: Thursday, September 29, 2016 12:12 PM To: Konstantin M. Khankin <khankin.konstantin@gmail.com> Cc: pulp-list@redhat.com Subject: Re: [Pulp-list] issues with pulp 2.9 on centos<o:p></o:p> </div> </div> <o:p> </o:p> Well I’m making some progress. I can finally make pulp-admin talk to the pulp workers. I still get errors when I try to access the server from yum. <o:p></o:p> <o:p> </o:p> <o:p> </o:p> [12:08:59 <a href="mailto:root@reposrv:/etc/httpd/conf.d%5d$">root@reposrv:/etc/httpd/conf.d]$</a> yum update<o:p></o:p> Loaded plugins: fastestmirror, pulp-profile-update<o:p></o:p> Setting up Update Process<o:p></o:p> Loading mirror speeds from cached hostfile<o:p></o:p> <a href="https://reposrv.dsa.reldom.tamu.edu/pulp/repos/centos/base/repodata/repomd.xml">https://reposrv.dsa.reldom.tamu.edu/pulp/repos/centos/base/repodata/repomd.xml</a>: [Errno 14] PYCURL ERROR 22 - "NSS: client certificate not found (nickname not specified)"<o:p></o:p> Trying other mirror.<o:p></o:p> Error: Cannot retrieve repository metadata (repomd.xml) for repository: centos-base. Please verify its path and try again<o:p></o:p> [12:10:15 <a href="mailto:root@reposrv:/etc/httpd/conf.d%5d$">root@reposrv:/etc/httpd/conf.d]$</a><o:p></o:p> <o:p> </o:p> ==> https-reposrv.dsa.reldom.tamu.edu_error_ssl.log <==<o:p></o:p> [Thu Sep 29 12:10:15 2016] [error] [client 128.194.188.68] (13)Permission denied: mod_wsgi (pid=92301, process='', application=''): Call to fopen() failed for '/srv/pulp/repo_auth.wsgi'.<o:p></o:p> [Thu Sep 29 12:10:15 2016] [error] [client 128.194.188.68] mod_wsgi (pid=92301): Client denied by server configuration: '/var/www/pub/yum/https/repos/centos/base/repodata/repomd.xml'.<o:p></o:p> <o:p> </o:p> ==> https-reposrv.dsa.reldom.tamu.edu_access_ssl.log <==<o:p></o:p> [29/Sep/2016:12:10:15 -0500] reposrv.dsa.reldom.tamu.edu 128.194.188.68 - - 443 "GET /pulp/repos/centos/base/repodata/repomd.xml HTTP/1.1" 403 244 "-" "urlgrabber/3.9.1 yum/3.2.29"<o:p></o:p> <o:p> </o:p> I’m thinking I have a setting in my vhost file that is wrong similar to what the problem was with my pulp.conf I ended up having to point <o:p></o:p> <o:p> </o:p> WSGISocketPrefix run/wsgi<o:p></o:p> WSGIScriptAlias /pulp/api /usr/share/pulp/wsgi/webservices.wsgi<o:p></o:p> WSGIImportScript /usr/share/pulp/wsgi/webservices.wsgi process-group=pulp application-group=pulp<o:p></o:p> <o:p> </o:p> It was set to:<o:p></o:p> #WSGISocketPrefix run/wsgi<o:p></o:p> #WSGIScriptAlias /pulp/api /srv/pulp/webservices.wsgi<o:p></o:p> #WSGIImportScript /srv/pulp/webservices.wsgi process-group=pulp application-group=pulp<o:p></o:p> <o:p> </o:p> If you have any ideas, I’m all ears. I have been doing through those docs that you sent but I’m not finding much on setting up these Vhost files yet. <o:p></o:p> Jeff Reitmayer<o:p></o:p> Lead Systems Administrator Texas A&M University Division of Student Affairs IT John J. Koldus | Suite 233 College Station, TX 77843 <a href="mailto:jeffr@doit.tamu.edu">jeffr@doit.tamu.edu</a> Phone | 979-458-9224 Web | <a href="http://doit.tamu.edu" target="_blank">doit.tamu.edu</a><o:p></o:p> <o:p> </o:p> From: Konstantin M. Khankin [<a href="mailto:khankin.konstantin@gmail.com">mailto:khankin.konstantin@gmail.com</a>] Sent: Thursday, September 29, 2016 12:01 PM To: Reitmayer, Jeffrey S <<a href="mailto:jeffr@doit.tamu.edu">jeffr@doit.tamu.edu</a>> Cc: <a href="mailto:pulp-list@redhat.com">pulp-list@redhat.com</a> Subject: Re: [Pulp-list] issues with pulp 2.9 on centos<o:p></o:p> <o:p> </o:p> <div> It seems like Apache is looking for pulp wsgi file in /srv/pulp directory. If it's empty as you say, it's expected that Apache cannot read anything from there :) I would recommend to either verify your installation (which packets are installed and where, how things are configured) or just reinstall everything from scratch by this manual - <a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__docs.pulpproject.org_user-2Dguide_installation_index.html&d=CwMFaQ&c=ODFT-G5SujMiGrKuoJJjVg&r=MFiN7iXU2x3gY25BmN9dtRxf6xeyq3fs5ZfQPm3sPdI&m=fTUyfj9jUiRrqNSn42ZhSpEwnupUtfgFp1Phc0SLXrw&s=wzbQvmvl0fISHk3mGr2LsRnW09TmkfBt2R_url9cj6g&e=">https://docs.pulpproject.org/user-guide/installation/index.html</a><o:p></o:p> </div> <div> <o:p> </o:p> <div> 2016-09-29 15:44 GMT+03:00 Reitmayer, Jeffrey S <<a href="mailto:jeffr@doit.tamu.edu" target="_blank">jeffr@doit.tamu.edu</a>>:<o:p></o:p> <blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt"> <div> <div> Hey Konstantin,<o:p></o:p> <o:p></o:p> Thanks for the reply. I’m not sure which apache config you need. I didn’t build this server so the last guy left me with a mess. The /srv/pulp directory is empty right now and the directory permissions are set to root:root <o:p></o:p> <o:p></o:p> If you let me know what Apache configs you need I can provide them. It looks like he has everything set in vhost files in /etc/httpd/conf.d/<o:p></o:p> <o:p></o:p> Please let me know what you need I’ll be happy to provide. <o:p></o:p> <o:p></o:p> Thanks<o:p></o:p> <o:p></o:p> Jeff <o:p></o:p> <o:p></o:p> From: Konstantin M. Khankin [mailto:<a href="mailto:khankin.konstantin@gmail.com" target="_blank">khankin.konstantin@gmail.com</a>] Sent: Thursday, September 29, 2016 12:12 AM To: Reitmayer, Jeffrey S <<a href="mailto:jeffr@doit.tamu.edu" target="_blank">jeffr@doit.tamu.edu</a>> Cc: <a href="mailto:pulp-list@redhat.com" target="_blank">pulp-list@redhat.com</a> Subject: Re: [Pulp-list] issues with pulp 2.9 on centos<o:p></o:p> <div> <div> <o:p></o:p> <div> Hi Jeffrey,<o:p></o:p> <div> <o:p></o:p> </div> <div> Could you please show your Apache config? Is your pulp instance installed in /srv/pulp? Are permissions set up so that Apach can read webservices.wsgi?<o:p></o:p> </div> </div> <div> <o:p></o:p> <div> 2016-09-28 22:59 GMT+03:00 Reitmayer, Jeffrey S <<a href="mailto:jeffr@doit.tamu.edu" target="_blank">jeffr@doit.tamu.edu</a>>:<o:p></o:p> <blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt"> <div> <div> Good Afternoon. I am having issues with our reposrv running pulp. We cannot access and download any updates through yum. I am getting this error when I restart apache:<o:p></o:p> <o:p></o:p> ==> error_log <==<o:p></o:p> [Wed Sep 28 14:54:09 2016] [notice] caught SIGTERM, shutting down<o:p></o:p> [Wed Sep 28 14:54:09 2016] [notice] SELinux policy enabled; httpd running as context unconfined_u:system_r:httpd_t:s0<o:p></o:p> [Wed Sep 28 14:54:09 2016] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)<o:p></o:p> [Wed Sep 28 14:54:09 2016] [notice] Digest: generating secret for digest authentication ...<o:p></o:p> [Wed Sep 28 14:54:09 2016] [notice] Digest: done<o:p></o:p> [Wed Sep 28 14:54:09 2016] [notice] Apache/2.2.15 (Unix) DAV/2 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips mod_wsgi/3.4 Python/2.6.6 configured -- resuming normal operations<o:p></o:p> [Wed Sep 28 14:54:09 2016] [error] (2)No such file or directory: mod_wsgi (pid=16171, process='pulp', application='pulp'): Call to fopen() failed for '/srv/pulp/webservices.wsgi'.<o:p></o:p> [Wed Sep 28 14:54:09 2016] [error] (2)No such file or directory: mod_wsgi (pid=16170, process='pulp', application='pulp'): Call to fopen() failed for '/srv/pulp/webservices.wsgi'.<o:p></o:p> [Wed Sep 28 14:54:09 2016] [error] (2)No such file or directory: mod_wsgi (pid=16172, process='pulp', application='pulp'): Call to fopen() failed for '/srv/pulp/webservices.wsgi'.<o:p></o:p> <o:p></o:p> I don’t know if this is enough to start troubleshooting the process but I would greatly appreciate any help<o:p></o:p> Thanks. <o:p></o:p> Jeff <o:p></o:p> <o:p></o:p> </div> </div> _______________________________________________ Pulp-list mailing list <a href="mailto:Pulp-list@redhat.com" target="_blank">Pulp-list@redhat.com</a> <a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.redhat.com_mailman_listinfo_pulp-2Dlist&d=CwMFaQ&c=ODFT-G5SujMiGrKuoJJjVg&r=MFiN7iXU2x3gY25BmN9dtRxf6xeyq3fs5ZfQPm3sPdI&m=fjj3W-ZcbnrnFZqfUMbu8WoxalJA7mP2rL6utTJx83A&s=B0STBK0gS1fBBAbyaKmUfN5fPg5_EAI1Q6YB0CMyFGw&e=" target="_blank">https://www.redhat.com/mailman/listinfo/pulp-list</a><o:p></o:p> </blockquote> </div> <o:p></o:p> <div> <o:p></o:p> </div> -- <o:p></o:p> <div> Ханкин Константин<o:p></o:p> </div> </div> </div> </div> </div> </div> </blockquote> </div> <o:p></o:p> <div> <o:p> </o:p> </div> -- <o:p></o:p> <div> Ханкин Константин<o:p></o:p> </div> </div> </div> </body> </html>