<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <meta name="Generator" content="Microsoft Word 15 (filtered medium)"> <style></style> </head> <body lang="EN-US" link="blue" vlink="purple"> <div class="WordSection1"> Few things that might help.<o:p></o:p> <o:p> </o:p> I can’t assign any base channels to the proxy servers within Spacewalk. Does this need to happen?<o:p></o:p> <o:p> </o:p> I don’t have any http proxy setup for the clients that are registered to a proxy. Does this need to happen?<o:p></o:p> <o:p> </o:p> Nick Kitmitto<o:p></o:p> System Engineer<o:p></o:p> ClearDATA<o:p></o:p> Healthcare Cloud Computing<o:p></o:p> and Information Security<o:p></o:p> 602-635-4004 24x7 Help Line<o:p></o:p> <a href="http://www.cleardata.net/" target="_blank">www.cleardata.net</a><o:p></o:p> <o:p></o:p> This email may contain confidential and privileged material for the sole use of the intended recipient. Any review, use, distribution or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive for the recipient), please contact the sender by reply email and delete all copies of this message.<o:p></o:p> <o:p> </o:p> From: spacewalk-list-bounces@redhat.com [mailto:spacewalk-list-bounces@redhat.com] On Behalf Of Thomas Foster Sent: Wednesday, May 14, 2014 9:04 AM To: spacewalk-list@redhat.com Subject: Re: [Spacewalk-list] Yum Fails For Clients Behind Proxy<o:p></o:p> <o:p> </o:p> If you run netstat -ant 1 and grep for the ip to your proxy server do you see it even listed...try with xmlrpc and without xmlrpc in the file..(testing if communication is even working to server)<o:p></o:p> <div> On May 14, 2014 12:01 PM, "Nick Kitmitto" <<a href="mailto:nick.kitmitto@cleardata.com">nick.kitmitto@cleardata.com</a>> wrote:<o:p></o:p> <blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"> <div> <div> Here’s the error without the XMLRPC:<o:p></o:p> <o:p></o:p> [root@hostname rhn]# yum install xclock<o:p></o:p> Loaded plugins: fastestmirror, rhnplugin, security<o:p></o:p> There was an error communicating with RHN.<o:p></o:p> Red Hat Satellite or RHN Classic support will be disabled.<o:p></o:p> Error communicating with server. The message was:<o:p></o:p> Broken response from the server.<o:p></o:p> Determining fastest mirrors<o:p></o:p> Setting up Install Process<o:p></o:p> No package xclock available.<o:p></o:p> Error: Nothing to do<o:p></o:p> <o:p></o:p> Nick Kitmitto<o:p></o:p> System Engineer<o:p></o:p> ClearDATA<o:p></o:p> Healthcare Cloud Computing<o:p></o:p> and Information Security<o:p></o:p> <a href="tel:602-635-4004" target="_blank">602-635-4004</a> 24x7 Help Line<o:p></o:p> <a href="http://www.cleardata.net/" target="_blank">www.cleardata.net</a><o:p></o:p> <o:p></o:p> This email may contain confidential and privileged material for the sole use of the intended recipient. Any review, use, distribution or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive for the recipient), please contact the sender by reply email and delete all copies of this message.<o:p></o:p> <o:p></o:p> From: <a href="mailto:spacewalk-list-bounces@redhat.com" target="_blank">spacewalk-list-bounces@redhat.com</a> [mailto:<a href="mailto:spacewalk-list-bounces@redhat.com" target="_blank">spacewalk-list-bounces@redhat.com</a>] On Behalf Of Thomas Foster Sent: Wednesday, May 14, 2014 8:54 AM To: <a href="mailto:spacewalk-list@redhat.com" target="_blank">spacewalk-list@redhat.com</a> Subject: Re: [Spacewalk-list] Yum Fails For Clients Behind Proxy<o:p></o:p> <o:p></o:p> If you are on rhel 5 that should work, if not take the XMLRPC off of the url and see if it works...<o:p></o:p> <div> On May 14, 2014 11:50 AM, "Nick Kitmitto" <<a href="mailto:nick.kitmitto@cleardata.com" target="_blank">nick.kitmitto@cleardata.com</a>> wrote:<o:p></o:p> <blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt"> <div> <div> Hi Thomas,<o:p></o:p> <o:p></o:p> Spacewalk-client-repo is at 2.1-2<o:p></o:p> Spacewalk itself is at 2.1<o:p></o:p> <o:p></o:p> <o:p></o:p> # Automatically generated Red Hat Update Agent config file, do not edit.<o:p></o:p> # Format: 1.0<o:p></o:p> tmpDir[comment]=Use this Directory to place the temporary transport files<o:p></o:p> tmpDir=/tmp<o:p></o:p> <o:p></o:p> disallowConfChanges[comment]=Config options that can not be overwritten by a config update action<o:p></o:p> disallowConfChanges=noReboot;sslCACert;useNoSSLForPackages;noSSLServerURL;serverURL;disallowConfChanges<o:p></o:p> <o:p></o:p> skipNetwork[comment]=Skips network information in hardware profile sync during registration.<o:p></o:p> skipNetwork=0<o:p></o:p> <o:p></o:p> stagingContent[comment]=Retrieve content of future actions in advance<o:p></o:p> stagingContent=1<o:p></o:p> <o:p></o:p> networkRetries[comment]=Number of attempts to make at network connections before giving up<o:p></o:p> networkRetries=1<o:p></o:p> <o:p></o:p> hostedWhitelist[comment]=RHN Hosted URL's<o:p></o:p> hostedWhitelist=<o:p></o:p> <o:p></o:p> enableProxy[comment]=Use a HTTP Proxy<o:p></o:p> enableProxy=0<o:p></o:p> <o:p></o:p> writeChangesToLog[comment]=Log to /var/log/up2date which packages has been added and removed<o:p></o:p> writeChangesToLog=0<o:p></o:p> <o:p></o:p> serverURL[comment]=Remote server URL (use FQDN)<o:p></o:p> serverURL=<a href="https://proxy-server-FQDN/XMLRPC" target="_blank">https://proxy-server-FQDN/XMLRPC</a><o:p></o:p> <o:p></o:p> proxyPassword[comment]=The password to use for an authenticated proxy<o:p></o:p> proxyPassword=<o:p></o:p> <o:p></o:p> stagingContentWindow[comment]=How much forward we should look for future actions. In hours.<o:p></o:p> stagingContentWindow=24<o:p></o:p> <o:p></o:p> proxyUser[comment]=The username for an authenticated proxy<o:p></o:p> proxyUser=<o:p></o:p> <o:p></o:p> versionOverride[comment]=Override the automatically determined system version<o:p></o:p> versionOverride=<o:p></o:p> <o:p></o:p> sslCACert[comment]=The CA cert used to verify the ssl server<o:p></o:p> sslCACert=/usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT<o:p></o:p> <o:p></o:p> retrieveOnly[comment]=Retrieve packages only<o:p></o:p> retrieveOnly=0<o:p></o:p> <o:p></o:p> debug[comment]=Whether or not debugging is enabled<o:p></o:p> debug=0<o:p></o:p> <o:p></o:p> httpProxy[comment]=HTTP proxy in host:port format, e.g. <a href="http://squid.redhat.com:3128" target="_blank">squid.redhat.com:3128</a><o:p></o:p> httpProxy=<o:p></o:p> <o:p></o:p> useNoSSLForPackages[comment]=Use the noSSLServerURL for package, package list, and header fetching (disable Akamai)<o:p></o:p> useNoSSLForPackages=0<o:p></o:p> <o:p></o:p> systemIdPath[comment]=Location of system id<o:p></o:p> systemIdPath=/etc/sysconfig/rhn/systemid<o:p></o:p> <o:p></o:p> enableProxyAuth[comment]=To use an authenticated proxy or not<o:p></o:p> enableProxyAuth=0<o:p></o:p> <o:p></o:p> noReboot[comment]=Disable the reboot actions<o:p></o:p> noReboot=0<o:p></o:p> <o:p></o:p> Thanks,<o:p></o:p> <o:p></o:p> Nick Kitmitto<o:p></o:p> System Engineer<o:p></o:p> ClearDATA<o:p></o:p> Healthcare Cloud Computing<o:p></o:p> and Information Security<o:p></o:p> <a href="tel:602-635-4004" target="_blank">602-635-4004</a> 24x7 Help Line<o:p></o:p> <a href="http://www.cleardata.net/" target="_blank">www.cleardata.net</a><o:p></o:p> <o:p></o:p> This email may contain confidential and privileged material for the sole use of the intended recipient. Any review, use, distribution or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive for the recipient), please contact the sender by reply email and delete all copies of this message.<o:p></o:p> <o:p></o:p> From: <a href="mailto:spacewalk-list-bounces@redhat.com" target="_blank">spacewalk-list-bounces@redhat.com</a> [mailto:<a href="mailto:spacewalk-list-bounces@redhat.com" target="_blank">spacewalk-list-bounces@redhat.com</a>] On Behalf Of Thomas Foster Sent: Wednesday, May 14, 2014 3:03 AM To: <a href="mailto:spacewalk-list@redhat.com" target="_blank">spacewalk-list@redhat.com</a> Subject: Re: [Spacewalk-list] Yum Fails For Clients Behind Proxy<o:p></o:p> <o:p></o:p> What does your /etc/sysconfig/rhn/up2date file say on the client...also what release?<o:p></o:p> <div> On May 14, 2014 1:33 AM, "Nick Kitmitto" <<a href="mailto:nick.kitmitto@cleardata.com" target="_blank">nick.kitmitto@cleardata.com</a>> wrote:<o:p></o:p> <blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt"> <div> <div> I recently setup proxy servers and got them functional and registered properly through Spacewalk. I can now use the proxy servers to register the clients in the respective datacenter, however when I try to install with yum, it fails. Is there something I need to do to the proxy servers so they start handing out packages that are in the repos on the master?<o:p></o:p> <o:p></o:p> Here’s the error on the client:<o:p></o:p> <o:p></o:p> [root@hostname rhn]# yum repolist<o:p></o:p> Loaded plugins: fastestmirror, rhnplugin, security<o:p></o:p> This system is receiving updates from RHN Classic or Red Hat Satellite.<o:p></o:p> Determining fastest mirrors<o:p></o:p> repo id repo name status<o:p></o:p> centos-base-64bit CentOS Base 64Bit 0<o:p></o:p> epel-64bit EPEL 64Bit 0<o:p></o:p> repolist: 0<o:p></o:p> [root@hostname rhn]# yum install xclock<o:p></o:p> Loaded plugins: fastestmirror, rhnplugin, security<o:p></o:p> This system is receiving updates from RHN Classic or Red Hat Satellite.<o:p></o:p> Loading mirror speeds from cached hostfile<o:p></o:p> Error: Cannot retrieve repository metadata (repomd.xml) for repository: centos-base-64bit. Please verify its path and try again<o:p></o:p> <o:p></o:p> <o:p></o:p> Here’s what I see on the proxy:<o:p></o:p> <o:p></o:p> <o:p></o:p> ==> ssl_access_log <==<o:p></o:p> 10.210.0.70 - - [13/May/2014:22:26:32 -0700] "POST /XMLRPC HTTP/1.1" 200 2042<o:p></o:p> <o:p></o:p> ==> ssl_request_log <==<o:p></o:p> [13/May/2014:22:26:32 -0700] 10.210.0.70 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /XMLRPC HTTP/1.1" 2042<o:p></o:p> <o:p></o:p> ==> ssl_access_log <==<o:p></o:p> 10.210.0.70 - - [13/May/2014:22:26:32 -0700] "POST /XMLRPC HTTP/1.1" 200 1103<o:p></o:p> <o:p></o:p> ==> ssl_request_log <==<o:p></o:p> [13/May/2014:22:26:32 -0700] 10.210.0.70 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /XMLRPC HTTP/1.1" 1103<o:p></o:p> <o:p></o:p> ==> ssl_access_log <==<o:p></o:p> 10.210.0.70 - - [13/May/2014:22:26:33 -0700] "POST /XMLRPC HTTP/1.1" 200 1103<o:p></o:p> <o:p></o:p> ==> ssl_request_log <==<o:p></o:p> [13/May/2014:22:26:33 -0700] 10.210.0.70 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /XMLRPC HTTP/1.1" 1103<o:p></o:p> <o:p></o:p> ==> ssl_access_log <==<o:p></o:p> 10.210.0.70 - - [13/May/2014:22:26:33 -0700] "POST /XMLRPC HTTP/1.1" 200 1103<o:p></o:p> <o:p></o:p> ==> ssl_request_log <==<o:p></o:p> [13/May/2014:22:26:33 -0700] 10.210.0.70 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /XMLRPC HTTP/1.1" 1103<o:p></o:p> <o:p></o:p> Here’s what I see on the master:<o:p></o:p> <o:p></o:p> [13/May/2014:22:26:34 -0700] 10.209.0.86 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /XMLRPC HTTP/1.1" 2042<o:p></o:p> [13/May/2014:22:26:34 -0700] 10.209.0.86 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /XMLRPC HTTP/1.1" 1103<o:p></o:p> [13/May/2014:22:26:35 -0700] 10.209.0.86 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /XMLRPC HTTP/1.1" 1103<o:p></o:p> [13/May/2014:22:26:35 -0700] 10.209.0.86 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /XMLRPC HTTP/1.1" 1103<o:p></o:p> <o:p></o:p> Thanks in advance if you’re able to help!<o:p></o:p> <o:p></o:p> Regards,<o:p></o:p> <o:p></o:p> Nick Kitmitto<o:p></o:p> System Engineer<o:p></o:p> ClearDATA<o:p></o:p> Healthcare Cloud Computing<o:p></o:p> and Information Security<o:p></o:p> <a href="tel:602-635-4004" target="_blank">602-635-4004</a> 24x7 Help Line<o:p></o:p> <a href="http://www.cleardata.net/" target="_blank">www.cleardata.net</a><o:p></o:p> <o:p></o:p> This email may contain confidential and privileged material for the sole use of the intended recipient. Any review, use, distribution or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive for the recipient), please contact the sender by reply email and delete all copies of this message.<o:p></o:p> <o:p></o:p> </div> </div> _______________________________________________ Spacewalk-list mailing list <a href="mailto:Spacewalk-list@redhat.com" target="_blank">Spacewalk-list@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a><o:p></o:p> </blockquote> </div> </div> </div> _______________________________________________ Spacewalk-list mailing list <a href="mailto:Spacewalk-list@redhat.com" target="_blank">Spacewalk-list@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a><o:p></o:p> </blockquote> </div> </div> </div> _______________________________________________ Spacewalk-list mailing list <a href="mailto:Spacewalk-list@redhat.com">Spacewalk-list@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a><o:p></o:p> </blockquote> </div> </div> </body> </html>