<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:"Courier New";}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Hi, <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I would like to migrate my spacewalk 2.4 to a new AWS instance (same CentOS 7.3 64 bit) with different server name and same version of spacewalk 2.4.
<o:p></o:p></p>
<p class="MsoNormal">The current setup is the spacewalk server is connected to an another satellite server which hosts all the Local mirror Red Hat repositories.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have followed the below steps and run into some issue with the ssl error for osa-dispather.log and my clients don’t check in with the spacewalk server.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Is this a complete list of thing for migrating the spacewalk server ? Thanks.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">var/log/rhn/osa-dispatcher.log<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">2017/01/31 21:32:25 -04:00 8037 0.0.0.0: osad/jabber_lib.connect('ERROR', 'Traceback (most recent call last):\n File "/usr/<o:p></o:p></p>
<p class="MsoNormal">share/rhn/osad/jabber_lib.py", line 642, in connect\n ssl.do_handshake()\nError: [(\'SSL routines\', \'SSL3_GET_SERVER_CE<o:p></o:p></p>
<p class="MsoNormal">RTIFICATE\', \'certificate verify failed\')]\n')<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Below is my steps. <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Installation step: <o:p></o:p></p>
<p class="MsoNormal">============================================================================<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Part I <o:p></o:p></p>
<p class="MsoNormal">Backup the DB on the source server. ‘<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">db-control online-backup /db_dump/postgresql-bk-1-31-2107<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">part II: <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">1. install Centos 7 <o:p></o:p></p>
<p class="MsoNormal">2. install new spacewalk 2.4 and <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New"">yum install spacewalk-setup-postgresql<o:p></o:p></span></p>
<pre>yum install spacewalk-postgresql<o:p></o:p></pre>
<pre>spacewalk-setup --disconnected<o:p></o:p></pre>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">3. Restore and upgrade the db schema<o:p></o:p></p>
<p class="MsoNormal"> ==> Go to the target Server <o:p></o:p></p>
<p class="MsoNormal"> => db-control restore /var/satellite/postgresql-bk-1-31-2107
<o:p></o:p></p>
<p class="MsoNormal"> => spacewalk-schema-upgrade<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">4. Restore /var/satellite & ~nocpulse/.ssh/nocpulse-identity* (with permissions & selinux)<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">> 4a.<span style="color:red"> If you're keeping your original hostname</span>:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> # Restore /root/ssl-build and rebuild the RPM with previous certificates:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">> * Restore content of /root/ssl-build<o:p></o:p></p>
<p class="MsoNormal">> * cd /root<o:p></o:p></p>
<p class="MsoNormal">> * rhn-ssl-tool --gen-server --rpm-only <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> # Now you have to install the RPM with your certs (previous command will tell<o:p></o:p></p>
<p class="MsoNormal"> you its exact path):<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">> * rpm -Uvh /root/ssl-build/<MACHINE_NAME>/rhn-org-httpd-ssl-key-pair-<o:p></o:p></p>
<p class="MsoNormal">> <VERSION>.noarch.rpm<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> # And now you have to deploy the original CA cert:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">> * rhn-deploy-ca-cert.pl \<o:p></o:p></p>
<p class="MsoNormal">> --source-dir=/root/ssl-build \<o:p></o:p></p>
<p class="MsoNormal">> --target-dir=/var/www/html/pub/<o:p></o:p></p>
<p class="MsoNormal">> <o:p></o:p></p>
<p class="MsoNormal">> <o:p></o:p></p>
<p class="MsoNormal"><span style="color:red">> 4b. If you're switching to a new hostname:<o:p></o:p></span></p>
<p class="MsoNormal">> <o:p></o:p></p>
<p class="MsoNormal">> * rhn-ssl-dbstore -vvv --ca-cert=/root/ssl-build/RHN-ORG-TRUSTED-SSL-CERT<o:p></o:p></p>
<p class="MsoNormal">> * spacewalk-hostname-rename <NEW-IP-ADDRESS><o:p></o:p></p>
</div>
<br clear="both">
______________________________________________________________________<BR>
Confidentiality Notice: The information contained in this e-mail and any attachment(s) is confidential and for the use of the addressee(s) only. If you are not the intended recipient of this e-mail, do not duplicate or redistribute it by any means. Please delete this e-mail and any attachment(s) and notify us immediately. Unauthorized use, reliance, disclosure or copying of the contents of this e-mail and any attachment(s), or any similar action, is strictly prohibited. Fitch Ratings reserves the right, to the extent permitted by applicable law, to retain, monitor and intercept e-mail messages both to and from its systems.<BR>
<BR>
This e-mail has been scanned by the MessageLabs Email Security System. For more information, please visit http://www.messagelabs.com/email.<BR>
______________________________________________________________________<BR>
</body>
</html>