<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div></div><div>Hostname for spacewalk/satellite servers can be lowercase only, otherwise it causes exactly the type of issue with OSA that you are experiencing. This is documented in the satellite documentation, and was added just days ago to the spacewalk wiki.</div><div> On Dec 22, 2017, at 11:29 AM, Adams, Nick <<a href="mailto:adamsn@stifel.com">adamsn@stifel.com</a>> wrote: </div><blockquote type="cite"><div> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <meta name="Generator" content="Microsoft Word 15 (filtered medium)"> <style></style> <div class="WordSection1"> Thanks Vipul for the quick reply! I’ve updated the hostname to be an fqdn that is resolvable via DNS, though the same error still persists.<o:p></o:p> <o:p> </o:p> Please see the following changes:<o:p></o:p> [root@SNCFGSPWD01S ~]# cat /etc/hostname<o:p></o:p> SNCFGSPWD01S.stifelnet.stifel.local<o:p></o:p> <o:p> </o:p> Osa-dispatcher.log:<o:p></o:p> 2017/12/22 10:06:36 -05:00 6374 0.0.0.0: osad/jabber_lib.__init__<o:p></o:p> 2017/12/22 10:06:36 -05:00 6374 0.0.0.0: osad/jabber_lib.connect('Server did not return a <features /> stanza, reconnecting',)<o:p></o:p> 2017/12/22 10:06:37 -05:00 6374 0.0.0.0: osad/jabber_lib.connect('Server did not return a <features /> stanza, reconnecting',)<o:p></o:p> 2017/12/22 10:06:38 -05:00 6374 0.0.0.0: osad/jabber_lib.connect('Server did not return a <features /> stanza, reconnecting',)<o:p></o:p> 2017/12/22 10:06:39 -05:00 6374 0.0.0.0: osad/jabber_lib.connect('ERROR', 'Not able to reconnect - See <a href="https://access.redhat.com/solutions/45332">https://access.redhat.com/solutions/45332</a> for possible solutions.\n')<o:p></o:p> 2017/12/22 10:06:39 -05:00 6374 0.0.0.0: osad/jabber_lib.print_message('SSLError',)<o:p></o:p> 2017/12/22 10:06:39 -05:00 6374 0.0.0.0: osad/jabber_lib.print_message('Could not connect to jabber server', 'SNCFGSPWD01S.stifelnet.stifel.local')<o:p></o:p> 2017/12/22 10:06:39 -05:00 6374 0.0.0.0: osad/jabber_lib.main('ERROR', 'Error caught:')<o:p></o:p> <o:p> </o:p> rhn.conf:<o:p></o:p> # OSA configuration #<o:p></o:p> <o:p> </o:p> server.jabber_server = SNCFGSPWD01S.stifelnet.stifel.local<o:p></o:p> osa-dispatcher.jabber_server = SNCFGSPWD01S.stifelnet.stifel.local<o:p></o:p> <o:p> </o:p> # set up SSL on the dispatcher<o:p></o:p> osa-dispatcher.osa_ssl_cert = /var/www/html/pub/RHN-ORG-TRUSTED-SSL-CERT<o:p></o:p> <o:p> </o:p> # system snapshots enabled<o:p></o:p> enable_snapshots = 1<o:p></o:p> <o:p> </o:p> #cobbler host name<o:p></o:p> cobbler.host = SNCFGSPWD01S.stifelnet.stifel.local<o:p></o:p> <o:p> </o:p> <o:p> </o:p> SSL subjects:<o:p></o:p> [root@SNCFGSPWD01S ~]# grep CN= /etc/pki/spacewalk/jabberd/server.pem | grep Subject<o:p></o:p> Subject: C=US, ST=MO, O=Stifel, OU=SNCFGSPWD01S.stifelnet.stifel.local, <a href="mailto:CN=SNCFGSPWD01S.stifelnet.stifel.local/emailAddress=adamsn@stifel.com">CN=SNCFGSPWD01S.stifelnet.stifel.local/emailAddress=adamsn@stifel.com</a><o:p></o:p> [root@SNCFGSPWD01S ~]# grep CN= $(grep spacewalk.crt /etc/httpd/conf.d/ssl.conf | cut -f 2 -d' ') | grep Subject<o:p></o:p> Subject: C=US, ST=MO, O=Stifel, OU=SNCFGSPWD01S.stifelnet.stifel.local, <a href="mailto:CN=SNCFGSPWD01S.stifelnet.stifel.local/emailAddress=adamsn@stifel.com">CN=SNCFGSPWD01S.stifelnet.stifel.local/emailAddress=adamsn@stifel.com</a><o:p></o:p> <o:p> </o:p> <o:p> </o:p> Jabber configs:<o:p></o:p> [root@SNCFGSPWD01S ~]# grep $(hostname) /etc/jabberd/*xml<o:p></o:p> /etc/jabberd/c2s.xml: <id require-starttls="false" pemfile="/etc/pki/spacewalk/jabberd/server.pem" realm="" register-enable="true">SNCFGSPWD01S.stifelnet.stifel.local</id><o:p></o:p> /etc/jabberd/sm.xml: <id>SNCFGSPWD01S.stifelnet.stifel.local</id><o:p></o:p> /etc/jabberd/sm.xml: <id>SNCFGSPWD01S.stifelnet.stifel.local</id><o:p></o:p> /etc/jabberd/sm.xml: <id>SNCFGSPWD01S.stifelnet.stifel.local</id><o:p></o:p> [root@SNCFGSPWD01S ~]# grep require-starttls /etc/jabberd/c2s.xml | grep pemfile<o:p></o:p> <id require-starttls="false" pemfile="/etc/pki/spacewalk/jabberd/server.pem" realm="" register-enable="true">SNCFGSPWD01S.stifelnet.stifel.local</id><o:p></o:p> <o:p> </o:p> <o:p> </o:p> Thanks!<o:p></o:p> <o:p> </o:p> <o:p> </o:p> <image001.png><o:p></o:p> <img width="268" height="64" style="width:2.7916in;height:.6666in" id="Picture_x0020_2" src="cid:image002.png@01D37B0D.23419C10" alt="stifel-sig"><o:p></o:p> <o:p> </o:p> From: <a href="mailto:spacewalk-list-bounces@redhat.com">spacewalk-list-bounces@redhat.com</a> [<a href="mailto:spacewalk-list-bounces@redhat.com">mailto:spacewalk-list-bounces@redhat.com</a>] On Behalf Of Vipul Sharma (DevOps) Sent: Friday, December 22, 2017 9:56 AM To: <a href="mailto:spacewalk-list@redhat.com">spacewalk-list@redhat.com</a> Subject: Re: [Spacewalk-list] osa-dispatcher fails to start with null ssl error<o:p></o:p> <o:p> </o:p> <div> <div> Some pointers -<o:p></o:p> </div> <ul type="disc"> <li class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1"> Your hostname should match your FQDN -<o:p></o:p></li><li class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1"> Compare your SSL certs between /var/jabberd/server.pem & /etc/pki/spacewalk/server.pem - They should be same.<o:p></o:p></li><li class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1"> CN & OU should be your FQDN in your .crt & .pem files.<o:p></o:p></li></ul> Thanks<o:p></o:p> Vipul<o:p></o:p> <o:p> </o:p> </div> <div> <o:p> </o:p> <div> On Fri, Dec 22, 2017 at 8:29 PM, Adams, Nick <<a href="mailto:adamsn@stifel.com" target="_blank">adamsn@stifel.com</a>> wrote:<o:p></o:p> <blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"> <div> <div> All,<o:p></o:p> <o:p></o:p> I have ran into what I hope is a simple misconfiguration during setup. I am unable to start the osa-dispatcher service:<o:p></o:p> <o:p></o:p> [root@SNCFGSPWD01S ~]# spacewalk-service restart<o:p></o:p> Shutting down spacewalk services...<o:p></o:p> Redirecting to /bin/systemctl stop taskomatic.service<o:p></o:p> Stopping cobblerd (via systemctl): [ OK ]<o:p></o:p> Redirecting to /bin/systemctl stop rhn-search.service<o:p></o:p> Redirecting to /bin/systemctl stop osa-dispatcher.service<o:p></o:p> Redirecting to /bin/systemctl stop httpd.service<o:p></o:p> Redirecting to /bin/systemctl stop tomcat.service<o:p></o:p> Redirecting to /bin/systemctl stop jabberd.service<o:p></o:p> Done.<o:p></o:p> Starting spacewalk services...<o:p></o:p> Redirecting to /bin/systemctl start jabberd.service<o:p></o:p> Redirecting to /bin/systemctl start tomcat.service<o:p></o:p> Waiting for tomcat to be ready ...<o:p></o:p> Redirecting to /bin/systemctl start httpd.service<o:p></o:p> Redirecting to /bin/systemctl start osa-dispatcher.service<o:p></o:p> Job for osa-dispatcher.service failed because the control process exited with error code. See "systemctl status osa-dispatcher.service" and "journalctl -xe" for details.<o:p></o:p> Redirecting to /bin/systemctl start rhn-search.service<o:p></o:p> Starting cobblerd (via systemctl): [ OK ]<o:p></o:p> Redirecting to /bin/systemctl start taskomatic.service<o:p></o:p> Done.<o:p></o:p> <o:p></o:p> When reviewing the osa-dispatcher log:<o:p></o:p> 2017/12/21 13:30:36 -05:00 3040 <a href="http://0.0.0.0" target="_blank">0.0.0.0</a>: osad/jabber_lib.__init__<o:p></o:p> 2017/12/21 13:30:36 -05:00 3040 <a href="http://0.0.0.0" target="_blank">0.0.0.0</a>: osad/jabber_lib.connect('Server did not return a <features /> stanza, reconnecting',)<o:p></o:p> 2017/12/21 13:30:37 -05:00 3040 <a href="http://0.0.0.0" target="_blank">0.0.0.0</a>: osad/jabber_lib.connect('Server did not return a <features /> stanza, reconnecting',)<o:p></o:p> 2017/12/21 13:30:38 -05:00 3040 <a href="http://0.0.0.0" target="_blank">0.0.0.0</a>: osad/jabber_lib.connect('Server did not return a <features /> stanza, reconnecting',)<o:p></o:p> 2017/12/21 13:30:39 -05:00 3040 <a href="http://0.0.0.0" target="_blank">0.0.0.0</a>: osad/jabber_lib.connect('ERROR', 'Not able to reconnect - See <a href="https://access.redhat.com/solutions/45332" target="_blank">https://access.redhat.com/solutions/45332</a> for possible solutions.\n')<o:p></o:p> 2017/12/21 13:30:39 -05:00 3040 <a href="http://0.0.0.0" target="_blank">0.0.0.0</a>: osad/jabber_lib.print_message('SSLError',)<o:p></o:p> 2017/12/21 13:30:39 -05:00 3040 <a href="http://0.0.0.0" target="_blank">0.0.0.0</a>: osad/jabber_lib.print_message('Could not connect to jabber server', 'SNCFGSPWD01S')<o:p></o:p> 2017/12/21 13:30:39 -05:00 3040 <a href="http://0.0.0.0" target="_blank">0.0.0.0</a>: osad/jabber_lib.main('ERROR', 'Error caught:')<o:p></o:p> <o:p></o:p> Some Jabber specific configs:<o:p></o:p> [root@SNCFGSPWD01S ~]# grep $(hostname) /etc/jabberd/*xml<o:p></o:p> /etc/jabberd/c2s.xml: <id require-starttls="false" pemfile="/etc/pki/spacewalk/jabberd/server.pem" realm="" register-enable="true">SNCFGSPWD01S</id><o:p></o:p> /etc/jabberd/sm.xml: <id>SNCFGSPWD01S</id><o:p></o:p> /etc/jabberd/sm.xml: <id>SNCFGSPWD01S</id><o:p></o:p> /etc/jabberd/sm.xml: <id>SNCFGSPWD01S</id><o:p></o:p> /etc/jabberd/sm.xml: <id>SNCFGSPWD01S</id><o:p></o:p> /etc/jabberd/sm.xml: <id>SNCFGSPWD01S</id><o:p></o:p> /etc/jabberd/sm.xml: <id>SNCFGSPWD01S</id><o:p></o:p> /etc/jabberd/sm.xml: <id>SNCFGSPWD01S</id><o:p></o:p> <o:p></o:p> <o:p></o:p> Seeing as this is an SSL error, makes sense to include these:<o:p></o:p> [root@SNCFGSPWD01S ~]# grep CN= $(grep spacewalk.crt /etc/httpd/conf.d/ssl.conf | cut -f 2 -d' ') | grep Subject<o:p></o:p> Subject: C=US, ST=MO, O=Stifel, OU=SNCFGSPWD01S, <a href="mailto:CN=SNCFGSPWD01S/emailAddress=adamsn@stifel.com" target="_blank">CN=SNCFGSPWD01S/emailAddress=adamsn@stifel.com</a><o:p></o:p> [root@SNCFGSPWD01S ~]# grep CN= /etc/pki/spacewalk/jabberd/server.pem | grep Subject<o:p></o:p> Subject: C=US, ST=MO, O=Stifel, OU=SNCFGSPWD01S, CN=SNCFGSPWD01S/emailAddress=<a href="mailto:adamsn@stifel.com" target="_blank">adamsn@stifel.com</a><o:p></o:p> <o:p></o:p> <o:p></o:p> The OSA configuration portion of rhn.conf:<o:p></o:p> # OSA configuration #<o:p></o:p> <o:p></o:p> server.jabber_server = SNCFGSPWD01S<o:p></o:p> osa-dispatcher.jabber_server = SNCFGSPWD01S<o:p></o:p> <o:p></o:p> # set up SSL on the dispatcher<o:p></o:p> osa-dispatcher.osa_ssl_cert = /var/www/html/pub/RHN-ORG-TRUSTED-SSL-CERT<o:p></o:p> <o:p></o:p> # system snapshots enabled<o:p></o:p> enable_snapshots = 1<o:p></o:p> <o:p></o:p> #cobbler host name<o:p></o:p> cobbler.host = SNCFGSPWD01S<o:p></o:p> <o:p></o:p> <o:p></o:p> <o:p></o:p> And finally the contents of the up2date.conf:<o:p></o:p> # Red Hat Update Agent config file.<o:p></o:p> # Format: 1.0<o:p></o:p> <o:p></o:p> debug[comment]=Whether or not debugging is enabled<o:p></o:p> debug=0<o:p></o:p> <o:p></o:p> systemIdPath[comment]=Location of system id<o:p></o:p> systemIdPath=/etc/sysconfig/rhn/systemid<o:p></o:p> <o:p></o:p> serverURL[comment]=Remote server URL (use FQDN)<o:p></o:p> serverURL=<a href="https://sncfgspwd01s/XMLRPC" target="_blank">https://sncfgspwd01s/XMLRPC</a><o:p></o:p> <o:p></o:p> hostedWhitelist[comment]=RHN Hosted URL's<o:p></o:p> hostedWhitelist=<o:p></o:p> <o:p></o:p> enableProxy[comment]=Use a HTTP Proxy<o:p></o:p> enableProxy=0<o:p></o:p> <o:p></o:p> versionOverride[comment]=Override the automatically determined system version<o:p></o:p> versionOverride=<o:p></o:p> <o:p></o:p> httpProxy[comment]=HTTP proxy in host:port format, e.g. <a href="http://squid.redhat.com:3128" target="_blank">squid.redhat.com:3128</a><o:p></o:p> httpProxy=<o:p></o:p> <o:p></o:p> noReboot[comment]=Disable the reboot actions<o:p></o:p> noReboot=0<o:p></o:p> <o:p></o:p> networkRetries[comment]=Number of attempts to make at network connections before giving up<o:p></o:p> networkRetries=1<o:p></o:p> <o:p></o:p> disallowConfChanges[comment]=Config options that can not be overwritten by a config update action<o:p></o:p> disallowConfChanges=noReboot;sslCACert;useNoSSLForPackages;serverURL;disallowConfChanges;<o:p></o:p> <o:p></o:p> sslCACert[comment]=The CA cert used to verify the ssl server<o:p></o:p> sslCACert=/usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT<o:p></o:p> <o:p></o:p> # Akamai does not support http protocol, therefore setting this option as side effect disable "Location aware" function<o:p></o:p> useNoSSLForPackages[comment]=Use HTTP for package, package list, and header fetching (disable Akamai)<o:p></o:p> useNoSSLForPackages=0<o:p></o:p> <o:p></o:p> retrieveOnly[comment]=Retrieve packages only<o:p></o:p> retrieveOnly=0<o:p></o:p> <o:p></o:p> skipNetwork[comment]=Skips network information in hardware profile sync during registration.<o:p></o:p> skipNetwork=0<o:p></o:p> <o:p></o:p> writeChangesToLog[comment]=Log to /var/log/up2date which packages has been added and removed<o:p></o:p> writeChangesToLog=0<o:p></o:p> <o:p></o:p> stagingContent[comment]=Retrieve content of future actions in advance<o:p></o:p> stagingContent=1<o:p></o:p> <o:p></o:p> stagingContentWindow[comment]=How much forward we should look for future actions. In hours.<o:p></o:p> stagingContentWindow=24<o:p></o:p> <o:p></o:p> <o:p></o:p> Any help would be greatly appreciated! Thanks so much!<o:p></o:p> <o:p></o:p> -Nick<o:p></o:p> <o:p></o:p> <o:p></o:p> <image001.png><o:p></o:p> <img border="0" width="268" height="64" style="width:2.7916in;height:.6666in" id="m_-1306362523195195814Picture_x0020_2" src="cid:image002.png@01D37B0D.23419C10" alt="stifel-sig"><o:p></o:p> <o:p></o:p> </div> This message, and any of its attachments, is for the intended recipient(s) only, and it may contain information that is privileged, confidential, and/or proprietary and subject to important terms and conditions available at <a href="http://www.stifel.com/disclosures/emaildisclaimers/" target="_blank">http://www.stifel.com/disclosures/emaildisclaimers/</a>. If you are not the intended recipient, please delete this message and immediately notify the sender. No confidentiality, privilege, or property rights are waived or lost by any errors in transmission.<o:p></o:p> </div> _______________________________________________ Spacewalk-list mailing list <a href="mailto:Spacewalk-list@redhat.com">Spacewalk-list@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a><o:p></o:p> </blockquote> </div> <o:p> </o:p> </div> <o:p> </o:p> <div> <o:p> </o:p> </div> Please consider the environment before printing this email. ********************************************************************* This communication may contain information which is confidential, personal and/or privileged. It is for the exclusive use of the intended recipient(s). If you are not the intended recipient(s), please note that any distribution, forwarding, copying or use of this communication or the information in it is strictly prohibited. If you have received it in error please contact the sender immediately by return e-mail. Please then delete the e-mail and any copies of it and do not use or disclose its contents to any person. Any personal views expressed in this e-mail are those of the individual sender and the company does not endorse or accept responsibility for them. Prior to taking any action based upon this e-mail message, you should seek appropriate confirmation of its authenticity. This message has been checked for viruses on behalf of the company. *********************************************************************<o:p></o:p> </div> </div></blockquote><blockquote type="cite"><div>_______________________________________________ Spacewalk-list mailing list <a href="mailto:Spacewalk-list@redhat.com">Spacewalk-list@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list">https://www.redhat.com/mailman/listinfo/spacewalk-list</a></div></blockquote></body></html>