<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv="Content-Type" content="text/html; charset=us-ascii"> <meta name="Generator" content="Microsoft Word 15 (filtered medium)"> <style></style> </head> <body lang="EN-US" link="#0563C1" vlink="#954F72"> <div class="WordSection1"> All,<o:p></o:p> <o:p> </o:p> I have ran into what I hope is a simple misconfiguration during setup. I am unable to start the osa-dispatcher service:<o:p></o:p> <o:p> </o:p> [root@SNCFGSPWD01S ~]# spacewalk-service restart<o:p></o:p> Shutting down spacewalk services...<o:p></o:p> Redirecting to /bin/systemctl stop taskomatic.service<o:p></o:p> Stopping cobblerd (via systemctl): [ OK ]<o:p></o:p> Redirecting to /bin/systemctl stop rhn-search.service<o:p></o:p> Redirecting to /bin/systemctl stop osa-dispatcher.service<o:p></o:p> Redirecting to /bin/systemctl stop httpd.service<o:p></o:p> Redirecting to /bin/systemctl stop tomcat.service<o:p></o:p> Redirecting to /bin/systemctl stop jabberd.service<o:p></o:p> Done.<o:p></o:p> Starting spacewalk services...<o:p></o:p> Redirecting to /bin/systemctl start jabberd.service<o:p></o:p> Redirecting to /bin/systemctl start tomcat.service<o:p></o:p> Waiting for tomcat to be ready ...<o:p></o:p> Redirecting to /bin/systemctl start httpd.service<o:p></o:p> Redirecting to /bin/systemctl start osa-dispatcher.service<o:p></o:p> Job for osa-dispatcher.service failed because the control process exited with error code. See "systemctl status osa-dispatcher.service" and "journalctl -xe" for details.<o:p></o:p> Redirecting to /bin/systemctl start rhn-search.service<o:p></o:p> Starting cobblerd (via systemctl): [ OK ]<o:p></o:p> Redirecting to /bin/systemctl start taskomatic.service<o:p></o:p> Done.<o:p></o:p> <o:p> </o:p> When reviewing the osa-dispatcher log:<o:p></o:p> 2017/12/21 13:30:36 -05:00 3040 0.0.0.0: osad/jabber_lib.__init__<o:p></o:p> 2017/12/21 13:30:36 -05:00 3040 0.0.0.0: osad/jabber_lib.connect('Server did not return a <features /> stanza, reconnecting',)<o:p></o:p> 2017/12/21 13:30:37 -05:00 3040 0.0.0.0: osad/jabber_lib.connect('Server did not return a <features /> stanza, reconnecting',)<o:p></o:p> 2017/12/21 13:30:38 -05:00 3040 0.0.0.0: osad/jabber_lib.connect('Server did not return a <features /> stanza, reconnecting',)<o:p></o:p> 2017/12/21 13:30:39 -05:00 3040 0.0.0.0: osad/jabber_lib.connect('ERROR', 'Not able to reconnect - See https://access.redhat.com/solutions/45332 for possible solutions.\n')<o:p></o:p> 2017/12/21 13:30:39 -05:00 3040 0.0.0.0: osad/jabber_lib.print_message('SSLError',)<o:p></o:p> 2017/12/21 13:30:39 -05:00 3040 0.0.0.0: osad/jabber_lib.print_message('Could not connect to jabber server', 'SNCFGSPWD01S')<o:p></o:p> 2017/12/21 13:30:39 -05:00 3040 0.0.0.0: osad/jabber_lib.main('ERROR', 'Error caught:')<o:p></o:p> <o:p> </o:p> Some Jabber specific configs:<o:p></o:p> [root@SNCFGSPWD01S ~]# grep $(hostname) /etc/jabberd/*xml<o:p></o:p> /etc/jabberd/c2s.xml: <id require-starttls="false" pemfile="/etc/pki/spacewalk/jabberd/server.pem" realm="" register-enable="true">SNCFGSPWD01S</id><o:p></o:p> /etc/jabberd/sm.xml: <id>SNCFGSPWD01S</id><o:p></o:p> /etc/jabberd/sm.xml: <id>SNCFGSPWD01S</id><o:p></o:p> /etc/jabberd/sm.xml: <id>SNCFGSPWD01S</id><o:p></o:p> /etc/jabberd/sm.xml: <id>SNCFGSPWD01S</id><o:p></o:p> /etc/jabberd/sm.xml: <id>SNCFGSPWD01S</id><o:p></o:p> /etc/jabberd/sm.xml: <id>SNCFGSPWD01S</id><o:p></o:p> /etc/jabberd/sm.xml: <id>SNCFGSPWD01S</id><o:p></o:p> <o:p> </o:p> <o:p> </o:p> Seeing as this is an SSL error, makes sense to include these:<o:p></o:p> [root@SNCFGSPWD01S ~]# grep CN= $(grep spacewalk.crt /etc/httpd/conf.d/ssl.conf | cut -f 2 -d' ') | grep Subject<o:p></o:p> Subject: C=US, ST=MO, O=Stifel, OU=SNCFGSPWD01S, <a href="mailto:CN=SNCFGSPWD01S/emailAddress=adamsn@stifel.com"> CN=SNCFGSPWD01S/emailAddress=adamsn@stifel.com</a><o:p></o:p> [root@SNCFGSPWD01S ~]# grep CN= /etc/pki/spacewalk/jabberd/server.pem | grep Subject<o:p></o:p> Subject: C=US, ST=MO, O=Stifel, OU=SNCFGSPWD01S, CN=SNCFGSPWD01S/emailAddress=adamsn@stifel.com<o:p></o:p> <o:p> </o:p> <o:p> </o:p> The OSA configuration portion of rhn.conf:<o:p></o:p> # OSA configuration #<o:p></o:p> <o:p> </o:p> server.jabber_server = SNCFGSPWD01S<o:p></o:p> osa-dispatcher.jabber_server = SNCFGSPWD01S<o:p></o:p> <o:p> </o:p> # set up SSL on the dispatcher<o:p></o:p> osa-dispatcher.osa_ssl_cert = /var/www/html/pub/RHN-ORG-TRUSTED-SSL-CERT<o:p></o:p> <o:p> </o:p> # system snapshots enabled<o:p></o:p> enable_snapshots = 1<o:p></o:p> <o:p> </o:p> #cobbler host name<o:p></o:p> cobbler.host = SNCFGSPWD01S<o:p></o:p> <o:p> </o:p> <o:p> </o:p> <o:p> </o:p> And finally the contents of the up2date.conf:<o:p></o:p> # Red Hat Update Agent config file.<o:p></o:p> # Format: 1.0<o:p></o:p> <o:p> </o:p> debug[comment]=Whether or not debugging is enabled<o:p></o:p> debug=0<o:p></o:p> <o:p> </o:p> systemIdPath[comment]=Location of system id<o:p></o:p> systemIdPath=/etc/sysconfig/rhn/systemid<o:p></o:p> <o:p> </o:p> serverURL[comment]=Remote server URL (use FQDN)<o:p></o:p> serverURL=https://sncfgspwd01s/XMLRPC<o:p></o:p> <o:p> </o:p> hostedWhitelist[comment]=RHN Hosted URL's<o:p></o:p> hostedWhitelist=<o:p></o:p> <o:p> </o:p> enableProxy[comment]=Use a HTTP Proxy<o:p></o:p> enableProxy=0<o:p></o:p> <o:p> </o:p> versionOverride[comment]=Override the automatically determined system version<o:p></o:p> versionOverride=<o:p></o:p> <o:p> </o:p> httpProxy[comment]=HTTP proxy in host:port format, e.g. squid.redhat.com:3128<o:p></o:p> httpProxy=<o:p></o:p> <o:p> </o:p> noReboot[comment]=Disable the reboot actions<o:p></o:p> noReboot=0<o:p></o:p> <o:p> </o:p> networkRetries[comment]=Number of attempts to make at network connections before giving up<o:p></o:p> networkRetries=1<o:p></o:p> <o:p> </o:p> disallowConfChanges[comment]=Config options that can not be overwritten by a config update action<o:p></o:p> disallowConfChanges=noReboot;sslCACert;useNoSSLForPackages;serverURL;disallowConfChanges;<o:p></o:p> <o:p> </o:p> sslCACert[comment]=The CA cert used to verify the ssl server<o:p></o:p> sslCACert=/usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT<o:p></o:p> <o:p> </o:p> # Akamai does not support http protocol, therefore setting this option as side effect disable "Location aware" function<o:p></o:p> useNoSSLForPackages[comment]=Use HTTP for package, package list, and header fetching (disable Akamai)<o:p></o:p> useNoSSLForPackages=0<o:p></o:p> <o:p> </o:p> retrieveOnly[comment]=Retrieve packages only<o:p></o:p> retrieveOnly=0<o:p></o:p> <o:p> </o:p> skipNetwork[comment]=Skips network information in hardware profile sync during registration.<o:p></o:p> skipNetwork=0<o:p></o:p> <o:p> </o:p> writeChangesToLog[comment]=Log to /var/log/up2date which packages has been added and removed<o:p></o:p> writeChangesToLog=0<o:p></o:p> <o:p> </o:p> stagingContent[comment]=Retrieve content of future actions in advance<o:p></o:p> stagingContent=1<o:p></o:p> <o:p> </o:p> stagingContentWindow[comment]=How much forward we should look for future actions. In hours.<o:p></o:p> stagingContentWindow=24<o:p></o:p> <o:p> </o:p> <o:p> </o:p> Any help would be greatly appreciated! Thanks so much!<o:p></o:p> <o:p> </o:p> -Nick<o:p></o:p> <o:p> </o:p> <o:p> </o:p> <img border="0" width="337" height="56" style="width:3.5104in;height:.5833in" id="Picture_x0020_1" src="cid:image001.png@01D37B01.98B0BE60" alt="new_sig"><o:p></o:p> <img border="0" width="268" height="64" style="width:2.7916in;height:.6666in" id="Picture_x0020_2" src="cid:image002.png@01D37B01.98B0BE60" alt="stifel-sig"><o:p></o:p> <o:p> </o:p> </div> This message, and any of its attachments, is for the intended recipient(s) only, and it may contain information that is privileged, confidential, and/or proprietary and subject to important terms and conditions available at <A href="http://www.stifel.com/disclosures/emaildisclaimers/">http://www.stifel.com/disclosures/emaildisclaimers/</A>. If you are not the intended recipient, please delete this message and immediately notify the sender. No confidentiality, privilege, or property rights are waived or lost by any errors in transmission.</body> </html>