<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <meta name="Generator" content="Microsoft Word 12 (filtered medium)"> <style>  </style> </head> <body lang="EN-US" link="blue" vlink="purple"> <div class="Section1"> Hi Jason,<o:p></o:p> <o:p> </o:p> Thanks for your advice.<o:p></o:p> All of our vm clients are good now.<o:p></o:p> <o:p> </o:p> <div> Best Regards,<o:p></o:p> <o:p> </o:p> Ananda Arifianto<o:p></o:p> </div> <o:p> </o:p> <div> <div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in"> From: spacewalk-list-bounces@redhat.com [mailto:spacewalk-list-bounces@redhat.com] On Behalf Of Jason W. Lewis Sent: Thursday, October 11, 2018 7:58 PM To: spacewalk-list@redhat.com Subject: Re: [Spacewalk-list] System not checking in with Spacewalk<o:p></o:p> </div> </div> <o:p> </o:p> Hi Ananda,<o:p></o:p> That is correct. You just need to run that command on each RHEL 7 client that has the Spacewalk 2.8 client installed and it will be able to check in with Spacewalk again. If Red Hat pushes out a new SELinux policy, you may need to run that command again after installing the policy package.<o:p></o:p> <o:p> </o:p> Good luck!<o:p></o:p> <o:p> </o:p> <div> -- <o:p></o:p> <div> Jason Lewis<o:p></o:p> Senior Systems Engineer @ Micro Electronics, Inc.<o:p></o:p> P: (614) 777-2728 | E: <a href="mailto:jwlewis@microcenter.com">jwlewis@microcenter.com</a><o:p></o:p> </div> </div> <o:p> </o:p> <o:p> </o:p> <div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in"> From: <spacewalk-list-bounces@redhat.com> on behalf of Ananda Arifianto <ananda.arifianto@danamon.co.id> Reply-To: "spacewalk-list@redhat.com" <spacewalk-list@redhat.com> Date: Thursday, October 11, 2018 at 6:45 AM To: "spacewalk-list@redhat.com" <spacewalk-list@redhat.com> Subject: Re: [Spacewalk-list] System not checking in with Spacewalk<o:p></o:p> </div> <div> <o:p> </o:p> </div> <div> **Attention** The following message was received from outside the Micro Electronics network. Carefully examine it before you open any links or attachments. --------------------------<o:p></o:p> </div> <div> Hi Jason,<o:p></o:p> <o:p></o:p> All of our clients are RHEL.<o:p></o:p> So, when I register new client to spacewalk, I must add 1 more step as below?<o:p></o:p> chcon system_u:object_r:rpm_exec_t:s0 /sbin/rhn_check-2.7<o:p></o:p> <o:p></o:p> So that our clients will synchron with spacewalk server.<o:p></o:p> <o:p></o:p> <div> Best Regards,<o:p></o:p> <o:p></o:p> Ananda Arifianto<o:p></o:p> </div> <o:p></o:p> <div> <div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in"> From: spacewalk-list-bounces@redhat.com [mailto:spacewalk-list-bounces@redhat.com] On Behalf Of Jason W. Lewis Sent: Wednesday, October 10, 2018 2:13 AM To: spacewalk-list@redhat.com Subject: Re: [Spacewalk-list] System not checking in with Spacewalk<o:p></o:p> </div> </div> <o:p></o:p> Ananda,<o:p></o:p> That sounds just like what I ran into after the 2.8 upgrade: yum commands worked, but the client systems never checked in with Spacewalk, and therefore never picked up their scheduled tasks. So, I suspect you’re running into the same thing I did – SELinux on the client systems doesn’t have a rule for the new file in /sbin (rhn-check-2.7), and isn’t allowing the program to run.<o:p></o:p> <o:p></o:p> Are the client systems where you’re running into this CentOS 7 or RHEL 7? (Or the corresponding version of Fedora?) If so, this command will add a rule for rhn_check-2.7 and will allow it to run. Run it on every CentOS/RHEL 7 system that has the new Spacewalk 2.8 client on it:<o:p></o:p> <o:p></o:p> chcon system_u:object_r:rpm_exec_t:s0 /sbin/rhn_check-2.7<o:p></o:p> <o:p></o:p> That will tell SELinux that the program is allowed to execute. Once that’s done, your client systems should begin checking into Spacewalk again.<o:p></o:p> <o:p></o:p> For more info, see <a href="https://bugzilla.redhat.com/show_bug.cgi?id=1584255"> https://bugzilla.redhat.com/show_bug.cgi?id=1584255</a><o:p></o:p> <o:p></o:p> <div> -- <o:p></o:p> <div> Jason Lewis<o:p></o:p> Senior Systems Engineer @ Micro Electronics, Inc.<o:p></o:p> P: (614) 777-2728 | E: <a href="mailto:jwlewis@microcenter.com">jwlewis@microcenter.com</a><o:p></o:p> </div> </div> <o:p></o:p> <o:p></o:p> <div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in"> From: <spacewalk-list-bounces@redhat.com> on behalf of Ananda Arifianto <ananda.arifianto@danamon.co.id> Reply-To: "spacewalk-list@redhat.com" <spacewalk-list@redhat.com> Date: Sunday, October 7, 2018 at 11:50 PM To: "spacewalk-list@redhat.com" <spacewalk-list@redhat.com> Subject: Re: [Spacewalk-list] System not checking in with Spacewalk<o:p></o:p> </div> <div> <o:p></o:p> </div> <div> **Attention** The following message was received from outside the Micro Electronics network. Carefully examine it before you open any links or attachments. --------------------------<o:p></o:p> </div> <div> Hi Jason,<o:p></o:p> <o:p></o:p> For the ‘yum update’, our clients can receive the updates.<o:p></o:p> Today some clients show the same error again, System not checking in with Spacewalk.<o:p></o:p> The only workaround that can be resolved this issue is running rhn_check<o:p></o:p> <o:p></o:p> <div> Best Regards,<o:p></o:p> <o:p></o:p> Ananda Arifianto<o:p></o:p> </div> <o:p></o:p> <div> <div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in"> From: spacewalk-list-bounces@redhat.com [mailto:spacewalk-list-bounces@redhat.com] On Behalf Of Jason W. Lewis Sent: Thursday, October 04, 2018 7:50 PM To: spacewalk-list@redhat.com Subject: Re: [Spacewalk-list] System not checking in with Spacewalk<o:p></o:p> </div> </div> <o:p></o:p> Ananda,<o:p></o:p> If you run ‘yum update’ on the server, does that update it?<o:p></o:p> <o:p></o:p> <div> -- <o:p></o:p> <div> Jason Lewis<o:p></o:p> Senior Systems Engineer @ Micro Electronics, Inc.<o:p></o:p> P: (614) 777-2728 | E: <a href="mailto:jwlewis@microcenter.com">jwlewis@microcenter.com</a><o:p></o:p> </div> </div> <o:p></o:p> <o:p></o:p> <div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in"> From: <spacewalk-list-bounces@redhat.com> on behalf of Ananda Arifianto <ananda.arifianto@danamon.co.id> Reply-To: "spacewalk-list@redhat.com" <spacewalk-list@redhat.com> Date: Thursday, October 4, 2018 at 4:40 AM To: "spacewalk-list@redhat.com" <spacewalk-list@redhat.com> Subject: Re: [Spacewalk-list] System not checking in with Spacewalk<o:p></o:p> </div> <div> <o:p></o:p> </div> <div> **Attention** The following message was received from outside the Micro Electronics network. Carefully examine it before you open any links or attachments. --------------------------<o:p></o:p> </div> <div> Hi Team,<o:p></o:p> <o:p></o:p> I also found our SW clients that have issue with check-in problem, all are in virtual environment.<o:p></o:p> For the physical server, we didn’t find check-in problem. Even I don’t need to create the cronjob for running rhn_check.<o:p></o:p> <o:p></o:p> <div> Best Regards,<o:p></o:p> <o:p></o:p> Ananda Arifianto<o:p></o:p> </div> <o:p></o:p> <div> <div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in"> From: Ananda Arifianto Sent: Thursday, October 04, 2018 1:39 PM To: spacewalk-list@redhat.com Subject: RE: [Spacewalk-list] System not checking in with Spacewalk<o:p></o:p> </div> </div> <o:p></o:p> Hi Jason,<o:p></o:p> <o:p></o:p> Yes, you’re right. I just upgraded to 2.8.<o:p></o:p> All clients are check in, but now the spacewalk server itself show that it’s not checked in.<o:p></o:p> When I try to run rhn_check, there is an error “ERROR: unable to read system id”<o:p></o:p> What can I do to resolve this?<o:p></o:p> <o:p></o:p> <div> Best Regards,<o:p></o:p> <o:p></o:p> Ananda Arifianto<o:p></o:p> </div> <o:p></o:p> <div> <div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in"> From: spacewalk-list-bounces@redhat.com [mailto:spacewalk-list-bounces@redhat.com] On Behalf Of Jason W. Lewis Sent: Tuesday, October 02, 2018 7:37 PM To: spacewalk-list@redhat.com Subject: Re: [Spacewalk-list] System not checking in with Spacewalk<o:p></o:p> </div> </div> <o:p></o:p> I saw that, and I hope it works well for you. <o:p></o:p> <o:p></o:p> That said, if you recently upgraded to 2.8, an SELinux context setting does keep rhn_check from running. Changing the context for the new binary fixes it:<o:p></o:p> <o:p></o:p> chcon system_u:object_r:rpm_exec_t:s0 /sbin/rhn_check-2.7<o:p></o:p> <o:p></o:p> For more info, see <a href="https://bugzilla.redhat.com/show_bug.cgi?id=1584255"> https://bugzilla.redhat.com/show_bug.cgi?id=1584255</a><o:p></o:p> <o:p></o:p> <div> -- <o:p></o:p> <div> Jason Lewis<o:p></o:p> Senior Systems Engineer @ Micro Electronics, Inc.<o:p></o:p> P: (614) 777-2728 | E: <a href="mailto:jwlewis@microcenter.com">jwlewis@microcenter.com</a><o:p></o:p> </div> </div> <o:p></o:p> <o:p></o:p> <div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in"> From: <spacewalk-list-bounces@redhat.com> on behalf of Ananda Arifianto <ananda.arifianto@danamon.co.id> Reply-To: "spacewalk-list@redhat.com" <spacewalk-list@redhat.com> Date: Tuesday, October 2, 2018 at 6:51 AM To: "spacewalk-list@redhat.com" <spacewalk-list@redhat.com> Subject: Re: [Spacewalk-list] System not checking in with Spacewalk<o:p></o:p> </div> <div> <o:p></o:p> </div> <div> **Attention** The following message was received from outside the Micro Electronics network. Carefully examine it before you open any links or attachments. --------------------------<o:p></o:p> </div> <div> Hi Jason,<o:p></o:p> <o:p></o:p> There is no change between that window.<o:p></o:p> But, I have created the cronjob to regularly execute rhn_check, so that I can pull the package from spacewalk server.<o:p></o:p> <o:p></o:p> Thanks..<o:p></o:p> <o:p></o:p> <div> Best Regards,<o:p></o:p> <o:p></o:p> Ananda Arifianto<o:p></o:p> </div> <o:p></o:p> <div> <div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in"> From: spacewalk-list-bounces@redhat.com [mailto:spacewalk-list-bounces@redhat.com] On Behalf Of Jason W. Lewis Sent: Tuesday, October 02, 2018 5:23 PM To: spacewalk-list@redhat.com Subject: Re: [Spacewalk-list] System not checking in with Spacewalk<o:p></o:p> </div> </div> <o:p></o:p> Ananda,<o:p></o:p> You’ll have to provide more info; that’s not a lot to go on. What changed between Friday and today?<o:p></o:p> <o:p></o:p> <div> -- <o:p></o:p> <div> Jason Lewis<o:p></o:p> Senior Systems Engineer @ Micro Electronics, Inc.<o:p></o:p> P: (614) 777-2728 | E: <a href="mailto:jwlewis@microcenter.com">jwlewis@microcenter.com</a><o:p></o:p> </div> </div> <o:p></o:p> <o:p></o:p> <div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in"> From: <spacewalk-list-bounces@redhat.com> on behalf of Ananda Arifianto <ananda.arifianto@danamon.co.id> Reply-To: "spacewalk-list@redhat.com" <spacewalk-list@redhat.com> Date: Monday, October 1, 2018 at 11:06 PM To: "spacewalk-list@redhat.com" <spacewalk-list@redhat.com> Subject: [Spacewalk-list] System not checking in with Spacewalk<o:p></o:p> </div> <div> <o:p></o:p> </div> <div> **Attention** The following message was received from outside the Micro Electronics network. Carefully examine it before you open any links or attachments. --------------------------<o:p></o:p> </div> <div> Hi Guys,<o:p></o:p> <o:p></o:p> Some of our clients show that system not checking in with Spacewalk, Last checked in was on Friday.<o:p></o:p> What is the solution for this problem?<o:p></o:p> Is it need to change the interval time in rhnsd.conf?<o:p></o:p> Thank you in advance..<o:p></o:p> <o:p></o:p> Best Regards,<o:p></o:p> Ananda Arifianto<o:p></o:p> The information in this e-mail is confidential and is transmitted strictly for the addressee/s. If you receive this e-mail in error, please notify the sender and delete it immediately. Copying and/or disseminating the contents are prohibited. PT Bank Danamon Indonesia, Tbk. shall not be responsible for the accuracy or completeness of this email and any views expressed herein do not necessarily reflect the views of PT Bank Danamon Indonesia, Tbk. <o:p></o:p> </div> The information in this e-mail is confidential and is transmitted strictly for the addressee/s. If you receive this e-mail in error, please notify the sender and delete it immediately. Copying and/or disseminating the contents are prohibited. PT Bank Danamon Indonesia, Tbk. shall not be responsible for the accuracy or completeness of this email and any views expressed herein do not necessarily reflect the views of PT Bank Danamon Indonesia, Tbk. <o:p></o:p> </div> The information in this e-mail is confidential and is transmitted strictly for the addressee/s. If you receive this e-mail in error, please notify the sender and delete it immediately. Copying and/or disseminating the contents are prohibited. PT Bank Danamon Indonesia, Tbk. shall not be responsible for the accuracy or completeness of this email and any views expressed herein do not necessarily reflect the views of PT Bank Danamon Indonesia, Tbk. <o:p></o:p> </div> The information in this e-mail is confidential and is transmitted strictly for the addressee/s. If you receive this e-mail in error, please notify the sender and delete it immediately. Copying and/or disseminating the contents are prohibited. PT Bank Danamon Indonesia, Tbk. shall not be responsible for the accuracy or completeness of this email and any views expressed herein do not necessarily reflect the views of PT Bank Danamon Indonesia, Tbk. <o:p></o:p> </div> The information in this e-mail is confidential and is transmitted strictly for the addressee/s. If you receive this e-mail in error, please notify the sender and delete it immediately. Copying and/or disseminating the contents are prohibited. PT Bank Danamon Indonesia, Tbk. shall not be responsible for the accuracy or completeness of this email and any views expressed herein do not necessarily reflect the views of PT Bank Danamon Indonesia, Tbk. <o:p></o:p> </div> </div> The information in this e-mail is confidential and is transmitted strictly for the addressee/s. If you receive this e-mail in error, please notify the sender and delete it immediately. Copying and/or disseminating the contents are prohibited. PT Bank Danamon Indonesia, Tbk. shall not be responsible for the accuracy or completeness of this email and any views expressed herein do not necessarily reflect the views of PT Bank Danamon Indonesia, Tbk.</body> </html>