<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=gb2312"> <style type="text/css" style="display:none;"></style> </head> <body dir="ltr"> <div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr"> Hi, Thank you Robert. I may have fixed it. I have changed my Spacewalk server name. Just where are all of those config files? Thanks, <div id="Signature"> <div id="divtagdefaultwrapper" dir="ltr" style="font-size: 12pt; color: rgb(0, 0, 0); font-family: Calibri, Helvetica, sans-serif, "EmojiFont", "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols;"> <div> -- Paul Deveau Analyste de systèmes principal|Senior Systems Analyst Technologies de l’information|Information Technology Université d’Ottawa|University of Ottawa 613-562-5800 (3774)</div> </div> </div> <div style="color: rgb(0, 0, 0);"> <hr style="display:inline-block;width:98%" tabindex="-1"> <div id="divRplyFwdMsg" dir="ltr">From: Robert Paschedag <robert.paschedag@web.de> Sent: Monday, January 28, 2019 1:01 PM To: spacewalk-list@redhat.com; Paul Deveau; spacewalk-list@redhat.com Subject: Re: [Spacewalk-list] Migreating servers to new Spacewalk server <div> </div> </div> <div class="BodyFragment"> <div class="PlainText">Am 28. Januar 2019 17:15:32 MEZ schrieb Paul Deveau <pdeveau@uottawa.ca>: >Hi, > > >Two things: > > > 1. What is the best way to migrate Spacewalk clients to a new server? >2. Have created a new Spacewalk server and have deleted Spacewalk >clients from the original server and re-registered the servers to the >new server. OSAD no longer starts. I get the following error: > > ># systemctl status osad.service >● osad.service - OSAD daemon >Loaded: loaded (/usr/lib/systemd/system/osad.service; disabled; vendor >preset: disabled) >Active: failed (Result: exit-code) since Fri 2019-01-25 15:00:00 EST; >5s ago >Process: 13335 ExecStart=/usr/sbin/osad --pid-file /var/run/osad.pid >(code=exited, status=1/FAILURE) > Main PID: 5067 (code=exited, status=0/SUCCESS) > >Jan 25 15:00:00 CAP-D100 osad[13335]: Error: [('SSL routines', >'ssl3_get_server_certificate', 'certificate verify failed')] >Jan 25 15:00:00 CAP-D100 osad[13335]: 2019-01-25 15:00:00 >rhn_log.log_error: Traceback caught: >Jan 25 15:00:00 CAP-D100 osad[13335]: 2019-01-25 15:00:00 >rhn_log.log_error: Traceback (most recent call last): >Jan 25 15:00:00 CAP-D100 osad[13335]: File >"/usr/share/rhn/osad/jabber_lib.py", line 662, in connect >Jan 25 15:00:00 CAP-D100 osad[13335]: ssl.do_handshake() >Jan 25 15:00:00 CAP-D100 osad[13335]: Error: [('SSL routines', >'ssl3_get_server_certificate', 'certificate verify failed')] >Jan 25 15:00:00 CAP-D100 systemd[1]: osad.service: control process >exited, code=exited status=1 >Jan 25 15:00:00 CAP-D100 systemd[1]: Failed to start OSAD daemon. >Jan 25 15:00:00 CAP-D100 systemd[1]: Unit osad.service entered failed >state. >Jan 25 15:00:00 CAP-D100 systemd[1]: osad.service failed. > > > >Thank you. > Deletion of software on client isn't necessary. Get the CA cert of your new spacewalk server (RHN-ORG-TRUSTED-SSL-CERT) onto your clients. Add the cert to the "trusted certificates" on the client (see update-ca-certificates) and Re-register the client with "rhnreg_ks --force --activationkey <your_key> --serverUrl <fqdn_of_your_server/XMLRPC" Delete the osad-auth.conf from /etc/sysconfig/rhn and restart osad. That should be it, as long you did not change the server name. In this case, you have to modify your configs on *all* clients. Robert > >-- >Paul Deveau >Analyste de systèmes principal|Senior Systems Analyst >Technologies de l’information|Information Technology >Université d’Ottawa|University of Ottawa >613-562-5800 (3774) -- sent from my mobile device </div> </div> </div> </div> </body> </html>