<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"><meta name="Generator" content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style></head><body lang="EN-US" link="#0563C1" vlink="#954F72"><div class="WordSection1"><p class="MsoNormal">Greetings Spacers,</p><p class="MsoNormal"> </p><p class="MsoNormal">I’m running SW 2.8 on Centos 6.10. This is a fresh install of both the OS and SW. I believe I might be running into issues with CNAME aliases.</p><p class="MsoNormal">My goal is to be able to use the friendly URL Alias but I can’t get it to work with OSAD.</p><p class="MsoNormal"> </p><p class="MsoNormal">Actual hostname: <a href="http://fr1-inf-lu-s01.inf.fr1.cloud.kyriba.com">fr1-inf-lu-s01.inf.fr1.cloud.kyriba.com</a></p><p class="MsoNormal">Friendly Alias: <a href="http://spacewalk.fr1.cloud.kyriba.com">spacewalk.fr1.cloud.kyriba.com</a></p><p class="MsoNormal"> </p><p class="MsoNormal">During the SW install/configuration I answered the ssl-set-org-unit with <a href="http://fr1-inf-lu-s01.inf.fr1.cloud.kyriba.com">fr1-inf-lu-s01.inf.fr1.cloud.kyriba.com</a></p><p class="MsoNormal">I answered the ssl-set-cnames with <a href="http://spacewalk.fr1.cloud.kyriba.com">spacewalk.fr1.cloud.kyriba.com</a></p><p class="MsoNormal"> </p><p class="MsoNormal">SW clients can successfully register with either actual FQDN and/or the Alias.</p><p class="MsoNormal"> </p><p class="MsoNormal">The jabberd process on the SW server reports this:</p><p class="MsoNormal">Oct 11 18:50:04 fr1-inf-lu-s01 jabberd/c2s[2288]: [9] [::ffff:172.17.43.89, port=36460] disconnect jid=unbound, packets: 0, bytes: 173</p><p class="MsoNormal">Oct 11 18:50:04 fr1-inf-lu-s01 jabberd/c2s[2288]: SASL callback for non-existing host: <a href="http://spacewalk.fr1.cloud.kyriba.com">spacewalk.fr1.cloud.kyriba.com</a></p><p class="MsoNormal">Oct 11 18:50:04 fr1-inf-lu-s01 jabberd/c2s[2288]: SASL callback for non-existing host: <a href="http://spacewalk.fr1.cloud.kyriba.com">spacewalk.fr1.cloud.kyriba.com</a></p><p class="MsoNormal">Oct 11 18:50:04 fr1-inf-lu-s01 jabberd/c2s[2288]: SASL callback for non-existing host: <a href="http://spacewalk.fr1.cloud.kyriba.com">spacewalk.fr1.cloud.kyriba.com</a></p><p class="MsoNormal">Oct 11 18:50:04 fr1-inf-lu-s01 jabberd/c2s[2288]: SASL callback for non-existing host: <a href="http://spacewalk.fr1.cloud.kyriba.com">spacewalk.fr1.cloud.kyriba.com</a></p><p class="MsoNormal">Oct 11 18:50:04 fr1-inf-lu-s01 jabberd/c2s[2288]: SASL callback for non-existing host: <a href="http://spacewalk.fr1.cloud.kyriba.com">spacewalk.fr1.cloud.kyriba.com</a></p><p class="MsoNormal">Oct 11 18:50:04 fr1-inf-lu-s01 jabberd/c2s[2288]: SASL callback for non-existing host: <a href="http://spacewalk.fr1.cloud.kyriba.com">spacewalk.fr1.cloud.kyriba.com</a></p><p class="MsoNormal"> </p><p class="MsoNormal">OSAD on the client reports this:</p><p class="MsoNormal">2018-10-11 19:22:44 rhn_log.log_error: Traceback (most recent call last):</p><p class="MsoNormal"> File "/usr/lib/python2.6/site-packages/osad/jabber_lib.py", line 264, in setup_connection</p><p class="MsoNormal"> c = self._get_jabber_client(js)</p><p class="MsoNormal"> File "/usr/lib/python2.6/site-packages/osad/jabber_lib.py", line 336, in _get_jabber_client</p><p class="MsoNormal"> c.connect()</p><p class="MsoNormal"> File "/usr/lib/python2.6/site-packages/osad/jabber_lib.py", line 633, in connect</p><p class="MsoNormal"> raise SSLDisabledError</p><p class="MsoNormal">SSLDisabledError</p><p class="MsoNormal"> </p><p class="MsoNormal">2018-10-11 19:22:44 jabber_lib.main: Unable to connect to jabber servers, sleeping 76 seconds</p><p class="MsoNormal"> </p><p class="MsoNormal"> </p><p class="MsoNormal">When I re-register the client using the “<a href="http://fr1-inf-lu-s01.inf.fr1.cloud.kyriba.com">fr1-inf-lu-s01.inf.fr1.cloud.kyriba.com</a>” host name I get these messages:</p><p class="MsoNormal">[root@fr1-inf-lm-s02 ~]# service osad restart</p><p class="MsoNormal">Shutting down osad: [ OK ]</p><p class="MsoNormal">Starting osad: 2018-10-11 19:27:33 rhn_log.log_error: Traceback caught:</p><p class="MsoNormal">Traceback caught:</p><p class="MsoNormal">2018-10-11 19:27:33 rhn_log.log_error: Traceback (most recent call last):</p><p class="MsoNormal"> File "/usr/lib/python2.6/site-packages/osad/jabber_lib.py", line 660, in connect</p><p class="MsoNormal"> ssl.do_handshake()</p><p class="MsoNormal">Error: [('SSL routines', 'SSL3_GET_SERVER_CERTIFICATE', 'certificate verify failed')]</p><p class="MsoNormal"> </p><p class="MsoNormal">Traceback (most recent call last):</p><p class="MsoNormal"> File "/usr/lib/python2.6/site-packages/osad/jabber_lib.py", line 660, in connect</p><p class="MsoNormal"> ssl.do_handshake()</p><p class="MsoNormal">Error: [('SSL routines', 'SSL3_GET_SERVER_CERTIFICATE', 'certificate verify failed')]</p><p class="MsoNormal"> </p><p class="MsoNormal"> [FAILED]</p><p class="MsoNormal"> </p><p class="MsoNormal">But on the SW server I now get this:</p><p class="MsoNormal">Oct 11 19:27:21 fr1-inf-lu-s01 jabberd/c2s[2288]: SASL callback for non-existing host: <a href="http://spacewalk.fr1.cloud.kyriba.com">spacewalk.fr1.cloud.kyriba.com</a></p><p class="MsoNormal">Oct 11 19:27:33 fr1-inf-lu-s01 jabberd/c2s[2288]: [9] [::ffff:172.17.43.89, port=36782] connect</p><p class="MsoNormal">Oct 11 19:27:33 fr1-inf-lu-s01 jabberd/c2s[2288]: [9] [::ffff:172.17.43.89, port=36782] disconnect jid=unbound, packets: 0, bytes: 0</p><p class="MsoNormal"> </p><p class="MsoNormal"> </p><p class="MsoNormal" style="margin-bottom:6.0pt;background:white"><b><span style="color:#1c4482">Larry E. Clegg</span></b><span style="font-size:9.5pt;font-family:"Arial",sans-serif;color:#222222"></span></p><p class="MsoNormal">Systems Engineer (SaaS Platform Operations) <span style="color:#595959">| </span><b><span style="color:#1c4482">Kyriba</span></b></p><p class="MsoNormal" style="margin-bottom:6.0pt;background:white"><span style="color:#595959">[Cell Phone] +1 858-357-5579</span></p><p class="MsoNormal" style="margin-bottom:6.0pt;background:white"><span style="color:#595959">[Address] 9620 Towne Centre Drive | Suite 250 | San Diego, California | 92121</span><span style="font-size:9.5pt;font-family:"Arial",sans-serif;color:#222222"></span></p><p class="MsoNormal"><a href="http://www.kyriba.com/" target="_blank"><span style="font-size:10.0pt;color:#595959;background:white">www.kyriba.com</span></a><span style="font-size:10.0pt;color:#595959;background:white"> | </span><a href="https://www.facebook.com/KyribaCorp" target="_blank"><span style="font-size:10.0pt;color:#1155cc;background:white">Facebook</span></a><span style="font-size:10.0pt;color:#595959;background:white"> | </span><a href="https://twitter.com/kyribacorp" target="_blank"><span style="font-size:10.0pt;color:#595959;background:white">Twitter</span></a><span style="font-size:10.0pt;color:#595959;background:white"> | </span><a href="http://www.linkedin.com/company/kyriba-corporation" target="_blank"><span style="font-size:10.0pt;color:#595959;background:white">LinkedIn</span></a><span style="font-size:10.0pt;color:#595959;background:white"> | </span><a href="http://www.kyriba.com/blog" target="_blank"><span style="font-size:10.0pt;color:#595959;background:white">Blog</span></a></p><p class="MsoNormal"> </p></div></body></html>