<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv="Content-Type" content="text/html; charset=us-ascii"> <meta name="Generator" content="Microsoft Word 15 (filtered medium)"> <style></style> </head> <body lang="EN-US" link="#0563C1" vlink="#954F72"> <div class="WordSection1"> Can someone email me directly at <a href="mailto:Robert.boyd@peoplefluent.com">Robert.boyd@peoplefluent.com</a> if you have recent experience working with your Red Hat Entitlement certificate? I’m very much in need of figuring out how to clear up the problem I’m having pulling updates since our contract renewal.<o:p></o:p> <o:p> </o:p> Thanks in advance,<o:p></o:p> <o:p> </o:p> Robert<o:p></o:p> <o:p> </o:p> <div> <div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in"> From: spacewalk-list-bounces@redhat.com [mailto:spacewalk-list-bounces@redhat.com] On Behalf Of Boyd, Robert Sent: Friday, October 09, 2015 3:35 PM To: spacewalk-list@redhat.com Subject: Re: [Spacewalk-list] Red Hat repository syncing and Errors while cloning/promoting channels<o:p></o:p> </div> </div> <o:p> </o:p> It looks like my issue is that I need to update my SSL Client Certificate. The problem I’m having now is that I am having trouble figuring out where to find the new entitlement certificate. The mechanism that used to work for this seems to have been changed and it’s no longer available from the same place it was before. I found something on a RHEL 6 server that is subscribed directly to Red Hat, but when I try to load the text from that file (under /etc/pki/entitlement/<longnumber>.pem and <samelongnumber>-key.pem) the text is rejected as being invalid<o:p></o:p> <o:p> </o:p> Anyone able to email me privately and advise me on where to get it from?<o:p></o:p> <o:p> </o:p> Also, how can I list the certificates I have loaded in spacewalk already? On the repository details page I can see the names I assigned to them in the drop down lists for ssl ca cert and so forth. Is there somewhere in the GUI that I can examine these names and the files/keys they are associated with? Or is there some way with the command line tools to do that? This is one aspect of spacewalk that still feels very difficult to deal with. The instructions for managing certificates seem to be incomplete and hard to find, and the GUI interface is obscurely placed as well under Admin>Spacewalk Configuration>Certificate. And that location only provides “Update” function, no display of existing certificates.<o:p></o:p> <o:p> </o:p> The last time I touched this stuff was about a year ago and it seems almost as mysterious now as it did back then.<o:p></o:p> <o:p> </o:p> Any help would be appreciated.<o:p></o:p> <o:p> </o:p> Thanks,<o:p></o:p> <o:p> </o:p> Robert<o:p></o:p> <o:p> </o:p> <div> <div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in"> From: <a href="mailto:spacewalk-list-bounces@redhat.com"> spacewalk-list-bounces@redhat.com</a> [<a href="mailto:spacewalk-list-bounces@redhat.com">mailto:spacewalk-list-bounces@redhat.com</a>] On Behalf Of Boyd, Robert Sent: Friday, October 09, 2015 1:13 PM To: <a href="mailto:spacewalk-list@redhat.com">spacewalk-list@redhat.com</a> Subject: [Spacewalk-list] Red Hat repository syncing and Errors while cloning/promoting channels<o:p></o:p> </div> </div> <o:p> </o:p> Running taskomatic generates this:<o:p></o:p> <o:p> </o:p> 2015-10-09 12:03:17,245 [Thread-78] ERROR com.redhat.rhn.taskomatic.task.RepoSyncTask - ERROR: Cannot retrieve repository metadata (repomd.xml) for repository: rhel-server-6-supplementary-x86_64. Please verify its path and try again<o:p></o:p> <o:p> </o:p> I’ve looked at several of my reposyncs and it looks like all of the red hat syncs are failing, apparently since our support renewal recently. Can anyone advise me as to what I need to do to re-activate the syncing?<o:p></o:p> <o:p> </o:p> <o:p> </o:p> <o:p> </o:p> I see this happen about once out of 10 times I clone channels using the spacewalk-manage-channel-lifecycle script. It seems something in the spacewalk engine is running off the rails. When it happens I restart everything and the next time I try it things go fine. Then later another run with it for the same or another channel will trigger the failure again. Which logs should I be looking at? And is this a known problem with channel cloning? I’d almost bet something is running out of resources in one of the background processes.<o:p></o:p> <o:p> </o:p> <o:p> </o:p> Thanks.<o:p></o:p> <o:p> </o:p> Here is the error when I’m cloning.<o:p></o:p> <o:p> </o:p> spacewalk-manage-channel-lifecycle -c rhel-x86_64-server-5 --promote -u redacteduser -p redacted --workflow=rms --clear-channel<o:p></o:p> WARNING: Existing session is invalid<o:p></o:p> INFO: Parent Source: rhel-x86_64-server-5, destination: rms-preprod-rhel-x86_64-server-5<o:p></o:p> INFO: Clearing all errata from rms-preprod-rhel-x86_64-server-5<o:p></o:p> Traceback (most recent call last):<o:p></o:p> File "/usr/local/bin/spacewalk-manage-channel-lifecycle", line 784, in <module><o:p></o:p> merge_channels(parent_source, parent_dest)<o:p></o:p> File "/usr/local/bin/spacewalk-manage-channel-lifecycle", line 420, in merge_channels<o:p></o:p> clear_channel(dest_label)<o:p></o:p> File "/usr/local/bin/spacewalk-manage-channel-lifecycle", line 500, in clear_channel<o:p></o:p> False)<o:p></o:p> File "/usr/lib64/python2.6/xmlrpclib.py", line 1199, in __call__<o:p></o:p> return self.__send(self.__name, args)<o:p></o:p> File "/usr/lib64/python2.6/xmlrpclib.py", line 1489, in __request<o:p></o:p> verbose=self.__verbose<o:p></o:p> File "/usr/lib64/python2.6/xmlrpclib.py", line 1243, in request<o:p></o:p> headers<o:p></o:p> xmlrpclib.ProtocolError: <ProtocolError for localhost/rpc/api: 503 Service Temporarily Unavailable><o:p></o:p> </div> </body> </html>