<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> </head> <body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""> Hi Larry, <div class=""><br class=""> </div> <div class="">I think Stefan is on the right track… Check which keys you actually have installed on the client(s) with:</div> <div class=""><br class=""> </div> <div class=""><span class="Apple-tab-span" style="white-space:pre"></span>rpm -q gpg-pubkey --qf '%{NAME}-%{VERSION}-%{RELEASE}\t%{SUMMARY}’</div> <div class=""><br class=""> </div> <div class="">Hopefully that will help narrow it down</div> <div class=""><br class=""> </div> <div class="">—Dean<br class=""> <div><br class=""> <blockquote type="cite" class=""> <div class="">On Feb 24, 2020, at 3:17 PM, Stefan Bluhm <<a href="mailto:redhat.com@bluhm-de.com" class="">redhat.com@bluhm-de.com</a>> wrote:</div> <br class="Apple-interchange-newline"> <div class=""> <div style="font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; font-family: arial, helvetica, sans-serif; font-size: 12pt;" class=""> <div class="">Hello Larry,<br class=""> </div> <div class=""><br data-mce-bogus="1" class=""> </div> <div class="">note that there is a client and server pubkey.gpg. Maybe you mixed them up?<br data-mce-bogus="1" class=""> </div> <div class=""><br data-mce-bogus="1" class=""> </div> <div class="">The key on the client is independent from the server. It is matched to the original package source.<br data-mce-bogus="1" class=""> </div> <div class=""><br data-mce-bogus="1" class=""> </div> <div class="">Only things I can think of is</div> <div class="">1) that you installed the wrong key to the clients,<br data-mce-bogus="1" class=""> </div> <div class="">2) you pushed the keys to the client but you did not import them (rpm --import pubkey.gpg)<br data-mce-bogus="1" class=""> </div> <div class="">3) maybe place the key folder path into the corresponding channel field (this is local to the client, where the client would find the file on the HDD)<br data-mce-bogus="1" class=""> </div> <div class=""><br data-mce-bogus="1" class=""> </div> <div class="">Maybe somebody else has different ideas.<br data-mce-bogus="1" class=""> </div> <div class=""><br data-mce-bogus="1" class=""> </div> <div class="">Best wishes,<br data-mce-bogus="1" class=""> </div> <div class=""><br data-mce-bogus="1" class=""> </div> <div class="">Stefan<br data-mce-bogus="1" class=""> </div> <div class=""><br data-mce-bogus="1" class=""> </div> <div class=""><br class=""> </div> <hr id="zwchr" data-marker="__DIVIDER__" class=""> <div data-marker="__HEADERS__" class=""><b class="">Von:<span class="Apple-converted-space"> </span></b>"Larry Clegg" <<a href="mailto:lclegg@kyriba.com" class="">lclegg@kyriba.com</a>><br class=""> <b class="">An:<span class="Apple-converted-space"> </span></b>"spacewalk-list" <<a href="mailto:spacewalk-list@redhat.com" class="">spacewalk-list@redhat.com</a>><br class=""> <b class="">Gesendet:<span class="Apple-converted-space"> </span></b>Montag, 24. Februar 2020 21:09:33<br class=""> <b class="">Betreff:<span class="Apple-converted-space"> </span></b>Re: [Spacewalk-list] [External Sender] Re: missing public key<br class=""> </div> <div class=""><br class=""> </div> <div data-marker="__QUOTED_TEXT__" class=""> <div dir="ltr" class=""> <div dir="ltr" class="">The client was originally provisioned against a Centos6/Spacewalk 2.8 server. I did the standard client install of the rpms, etc as documented in the client installation guide.<br class=""> <div class="">Since then the 2.8 Spacewalk Server was rebuilt from scratch using Centos 7 and Spacewalk 2.9 and all the clients re-registered.</div> <br class=""> <div class="">The SW channels are created on the server using the spacewalk-common-channels command like this: /usr/bin/spacewalk-common-channels - u <user> -p <pass> -a x86_64 spacewalk29-client-centos6</div> <br class=""> <div class="">I have noticed that the gpg key generated in the SW channel for the 2.9 client looks like this:</div> <div class=""><br class=""> GPG key URL: <a href="https://urldefense.com/v3/__https://copr-be.cloud.fedoraproject.org/results/@spacewalkproject/spacewalk-2.9-client/pubkey.gpg__;!!MXVguWEtGgZw!dn0TRgvRSZTM6Aw5zPRCknsj3kD8t4RRR0wD3S8Lr6QTiLqcG25goRWR5SQRCLWBrQ$" target="_blank" rel="nofollow noopener noreferrer" class="">https://copr-be.cloud.fedoraproject.org/results/@spacewalkproject/spacewalk-2.9-client/pubkey.gpg</a><br class=""> GPG key ID: 9BD837BA<br class=""> GPG key Fingerprint: A353 22CF 3B3F 9C71 101E B74B 49FC 0FD8 9BD8 37BA<br class=""> <br class=""> </div> <div class="">Yet when I download that same pubkey.gpg and examine it I get different results for the id and fingerprint:</div> <br class=""> <div class="">[root@us3-inf-lu-s01 rpm-gpg]# gpg --with-fingerprint RPM-GPG-KEY-spacewalk-2.9<br class=""> </div> <div class="">pub 2048R/6E5454FA 2018-11-26 @spacewalkproject_spacewalk-2.9 (None) <@spacewalkproject#<a href="mailto:spacewalk-2.9@copr.fedorahosted.org" target="_blank" rel="nofollow noopener noreferrer" class="">spacewalk-2.9@copr.fedorahosted.org</a>><br class=""> Key fingerprint = E089 1A20 65C5 4DDD 4E12 B8CA AD32 9E0D 6E54 54FA<br class=""> </div> <br class=""> <div class="">I have updated the channel with this ID and Fingerprint but that made no difference. I'm very confused at this point. The client does have a public key installed which matched the version I get from the gpg --with-fingerprint command.</div> </div> <br class=""> <div class="elided-text"> <div dir="ltr" class="">On Mon, Feb 24, 2020 at 11:32 AM Stefan Bluhm <<a href="mailto:redhat.com@bluhm-de.com" target="_blank" rel="nofollow noopener noreferrer" class="">redhat.com@bluhm-de.com</a>> wrote:<br class=""> </div> <blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; border-left-width: 1px; border-left-style: solid; border-left-color: rgb(204, 204, 204); padding-left: 1ex;"> <div class=""> <div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;" class=""> <div class="">Hello Larry,<br class=""> </div> <br class=""> <div class="">how did you provision the client? When provisioning, you do need to push the key to the client first. This is not necessarily done automatically.<br class=""> </div> <br class=""> <div class="">Best wishes,<br class=""> </div> <br class=""> <div class="">Stefan<br class=""> </div> <br class=""> <hr id="m_-1020685351505168679gmail-m_1657499673563935387zwchr" class=""> <div class=""><b class="">Von:<span class="Apple-converted-space"> </span></b>"Larry Clegg" <<a href="mailto:lclegg@kyriba.com" target="_blank" rel="nofollow noopener noreferrer" class="">lclegg@kyriba.com</a>><br class=""> <b class="">An:<span class="Apple-converted-space"> </span></b>"spacewalk-list" <<a href="mailto:spacewalk-list@redhat.com" target="_blank" rel="nofollow noopener noreferrer" class="">spacewalk-list@redhat.com</a>><br class=""> <b class="">Gesendet:<span class="Apple-converted-space"> </span></b>Montag, 24. Februar 2020 20:20:37<br class=""> <b class="">Betreff:<span class="Apple-converted-space"> </span></b>[Spacewalk-list] missing public key<br class=""> </div> <br class=""> <div class=""> <div dir="ltr" class=""> <div class="">Greetings Spacewalkers:</div> <br class=""> <div class="">I have gone over and over my configuration and I'm just not finding the problem.</div> <br class=""> <div class="">Server: Spacewalk 2.9 on Centos 6 - all fully patched</div> <div class="">Client: Centos6 </div> download<br class=""> <div class="">This issue is NOT happening on all clients...only a few. When I try to do a "yum upgrade" I get this message about rhncfg:</div> <br class=""> <div class="">warning: rpmts_HdrFromFdno: Header V3 RSA/SHA1 Signature, key ID 9bd837ba: NOKEY<br class=""> Public key for rhncfg-5.10.129-1.el6.noarch.rpm is not installed<br class=""> </div> -- <div class="">It is trying to upgrade rhncfg from 5.10.122-1 to 5.10.129-1</div> <div class="">No other package reports this issue. Using the --nogpg on the yum command line gets around this issue but I'd like to understand and fix root cause.</div> <br class=""> <div class="">Any hints are greatly appreciated.</div> <br class=""> <br class=""> <div class=""><br class=""> <div dir="ltr" class=""> <div dir="ltr" class=""> <div class=""> <div dir="ltr" class=""> <div class=""> <div dir="ltr" class=""> <div class=""> <div dir="ltr" class=""><font face="verdana, sans-serif" class=""> <p style="line-height: 1.30909; margin-top: 0pt; margin-bottom: 6pt;" class=""><font color="#1c4482" class=""><span style="font-size: 14.6667px; white-space: pre-wrap;" class=""><b class="">Larry E. Clegg</b></span></font></p> <p dir="ltr" style="line-height: 1.30909; margin-top: 0pt; margin-bottom: 6pt;" class=""> <span style="font-size: 11pt; color: rgb(89, 89, 89); vertical-align: baseline; white-space: pre-wrap;" class="">Systems Administrator | </span><span style="font-size: 11pt; color: rgb(28, 68, 130); font-weight: 700; vertical-align: baseline; white-space: pre-wrap;" class="">Kyriba</span></p> <p dir="ltr" style="line-height: 1.30909; margin-top: 0pt; margin-bottom: 6pt;" class=""> <span style="font-size: 11pt; color: rgb(89, 89, 89); vertical-align: baseline; white-space: pre-wrap;" class="">[Address] </span><span style="color: rgb(28, 30, 41);" class="">4435 Eastgate Mall, Suite 200, San Diego, CA 92121</span></p> <a href="https://urldefense.com/v3/__http://www.kyriba.com__;!!MXVguWEtGgZw!dn0TRgvRSZTM6Aw5zPRCknsj3kD8t4RRR0wD3S8Lr6QTiLqcG25goRWR5SSc_qA16Q$" rel="nofollow noopener noreferrer nofollow noopener noreferrer" target="_blank" style="text-decoration: none;" class=""><span style="font-size: 10pt; color: rgb(89, 89, 89); text-decoration: underline; vertical-align: baseline; white-space: pre-wrap;" class="">www.kyriba.com</span></a><span style="font-size: 10pt; color: rgb(89, 89, 89); vertical-align: baseline; white-space: pre-wrap;" class=""> | </span><a href="https://urldefense.com/v3/__https://www.facebook.com/KyribaCorp__;!!MXVguWEtGgZw!dn0TRgvRSZTM6Aw5zPRCknsj3kD8t4RRR0wD3S8Lr6QTiLqcG25goRWR5SRBS--OVQ$" rel="nofollow noopener noreferrer nofollow noopener noreferrer" target="_blank" style="text-decoration: none;" class=""><span style="font-size: 10pt; color: rgb(17, 85, 204); text-decoration: underline; vertical-align: baseline; white-space: pre-wrap;" class="">Facebook</span></a><span style="font-size: 10pt; color: rgb(89, 89, 89); vertical-align: baseline; white-space: pre-wrap;" class=""> | </span><a href="https://urldefense.com/v3/__https://twitter.com/kyribacorp__;!!MXVguWEtGgZw!dn0TRgvRSZTM6Aw5zPRCknsj3kD8t4RRR0wD3S8Lr6QTiLqcG25goRWR5SSNh8wcRA$" rel="nofollow noopener noreferrer nofollow noopener noreferrer" target="_blank" style="text-decoration: none;" class=""><span style="font-size: 10pt; color: rgb(89, 89, 89); text-decoration: underline; vertical-align: baseline; white-space: pre-wrap;" class="">Twitter</span></a><span style="font-size: 10pt; color: rgb(89, 89, 89); vertical-align: baseline; white-space: pre-wrap;" class=""> | </span><a href="https://urldefense.com/v3/__http://www.linkedin.com/company/kyriba-corporation__;!!MXVguWEtGgZw!dn0TRgvRSZTM6Aw5zPRCknsj3kD8t4RRR0wD3S8Lr6QTiLqcG25goRWR5SRDB1NVxQ$" rel="nofollow noopener noreferrer nofollow noopener noreferrer" target="_blank" style="text-decoration: none;" class=""><span style="font-size: 10pt; color: rgb(89, 89, 89); text-decoration: underline; vertical-align: baseline; white-space: pre-wrap;" class="">LinkedIn</span></a><span style="font-size: 10pt; color: rgb(89, 89, 89); vertical-align: baseline; white-space: pre-wrap;" class=""> | </span><a href="https://urldefense.com/v3/__http://www.kyriba.com/blog__;!!MXVguWEtGgZw!dn0TRgvRSZTM6Aw5zPRCknsj3kD8t4RRR0wD3S8Lr6QTiLqcG25goRWR5SR2SSXUgg$" rel="nofollow noopener noreferrer nofollow noopener noreferrer" target="_blank" style="text-decoration: none;" class=""><span style="font-size: 10pt; color: rgb(89, 89, 89); text-decoration: underline; vertical-align: baseline; white-space: pre-wrap;" class="">Blog</span></a></font><br class=""> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> <br class=""> _______________________________________________<br class=""> Spacewalk-list mailing list<br class=""> <a href="mailto:Spacewalk-list@redhat.com" target="_blank" rel="nofollow noopener noreferrer" class="">Spacewalk-list@redhat.com</a><br class=""> <a href="https://urldefense.com/v3/__https://www.redhat.com/mailman/listinfo/spacewalk-list__;!!MXVguWEtGgZw!dn0TRgvRSZTM6Aw5zPRCknsj3kD8t4RRR0wD3S8Lr6QTiLqcG25goRWR5SSIXYd4yg$" target="_blank" rel="nofollow noopener noreferrer" class="">https://www.redhat.com/mailman/listinfo/spacewalk-list</a><br class=""> </div> </div> </div> _______________________________________________<br class=""> Spacewalk-list mailing list<br class=""> <a href="mailto:Spacewalk-list@redhat.com" target="_blank" rel="nofollow noopener noreferrer" class="">Spacewalk-list@redhat.com</a><br class=""> <a href="https://urldefense.com/v3/__https://www.redhat.com/mailman/listinfo/spacewalk-list__;!!MXVguWEtGgZw!dn0TRgvRSZTM6Aw5zPRCknsj3kD8t4RRR0wD3S8Lr6QTiLqcG25goRWR5SSIXYd4yg$" rel="noreferrer nofollow noopener noreferrer" target="_blank" class="">https://www.redhat.com/mailman/listinfo/spacewalk-list</a><br class=""> </blockquote> </div> <br clear="all" class=""> <br class=""> --<span class="Apple-converted-space"> </span><br class=""> </div> <div dir="ltr" class=""> <div dir="ltr" class=""> <div class=""> <div dir="ltr" class=""> <div class=""> <div dir="ltr" class=""> <div class=""> <div dir="ltr" class=""><font face="verdana, sans-serif" class=""> <p style="line-height: 1.30909; margin-top: 0pt; margin-bottom: 6pt;" class=""><font color="#1c4482" class=""><span style="font-size: 14.6667px; white-space: pre-wrap;" class=""><b class="">Larry E. Clegg</b></span></font></p> <p dir="ltr" style="line-height: 1.30909; margin-top: 0pt; margin-bottom: 6pt;" class=""> <span style="font-size: 11pt; color: rgb(89, 89, 89); vertical-align: baseline; white-space: pre-wrap;" class="">Systems Administrator | </span><span style="font-size: 11pt; color: rgb(28, 68, 130); font-weight: 700; vertical-align: baseline; white-space: pre-wrap;" class="">Kyriba</span></p> <p dir="ltr" style="line-height: 1.30909; margin-top: 0pt; margin-bottom: 6pt;" class=""> <span style="font-size: 11pt; color: rgb(89, 89, 89); vertical-align: baseline; white-space: pre-wrap;" class="">[Address] </span><span style="color: rgb(28, 30, 41);" class="">4435 Eastgate Mall, Suite 200, San Diego, CA 92121</span></p> <a href="https://urldefense.com/v3/__http://www.kyriba.com/__;!!MXVguWEtGgZw!dn0TRgvRSZTM6Aw5zPRCknsj3kD8t4RRR0wD3S8Lr6QTiLqcG25goRWR5SSpMfYTJw$" target="_blank" rel="nofollow noopener noreferrer" style="text-decoration: none;" class=""><span style="font-size: 10pt; color: rgb(89, 89, 89); text-decoration: underline; vertical-align: baseline; white-space: pre-wrap;" class="">www.kyriba.com</span></a><span style="font-size: 10pt; color: rgb(89, 89, 89); vertical-align: baseline; white-space: pre-wrap;" class=""> | </span><a href="https://urldefense.com/v3/__https://www.facebook.com/KyribaCorp__;!!MXVguWEtGgZw!dn0TRgvRSZTM6Aw5zPRCknsj3kD8t4RRR0wD3S8Lr6QTiLqcG25goRWR5SRBS--OVQ$" target="_blank" rel="nofollow noopener noreferrer" style="text-decoration: none;" class=""><span style="font-size: 10pt; color: rgb(17, 85, 204); text-decoration: underline; vertical-align: baseline; white-space: pre-wrap;" class="">Facebook</span></a><span style="font-size: 10pt; color: rgb(89, 89, 89); vertical-align: baseline; white-space: pre-wrap;" class=""> | </span><a href="https://urldefense.com/v3/__https://twitter.com/kyribacorp__;!!MXVguWEtGgZw!dn0TRgvRSZTM6Aw5zPRCknsj3kD8t4RRR0wD3S8Lr6QTiLqcG25goRWR5SSNh8wcRA$" target="_blank" rel="nofollow noopener noreferrer" style="text-decoration: none;" class=""><span style="font-size: 10pt; color: rgb(89, 89, 89); text-decoration: underline; vertical-align: baseline; white-space: pre-wrap;" class="">Twitter</span></a><span style="font-size: 10pt; color: rgb(89, 89, 89); vertical-align: baseline; white-space: pre-wrap;" class=""> | </span><a href="https://urldefense.com/v3/__http://www.linkedin.com/company/kyriba-corporation__;!!MXVguWEtGgZw!dn0TRgvRSZTM6Aw5zPRCknsj3kD8t4RRR0wD3S8Lr6QTiLqcG25goRWR5SRDB1NVxQ$" target="_blank" rel="nofollow noopener noreferrer" style="text-decoration: none;" class=""><span style="font-size: 10pt; color: rgb(89, 89, 89); text-decoration: underline; vertical-align: baseline; white-space: pre-wrap;" class="">LinkedIn</span></a><span style="font-size: 10pt; color: rgb(89, 89, 89); vertical-align: baseline; white-space: pre-wrap;" class=""> | </span><a href="https://urldefense.com/v3/__http://www.kyriba.com/blog__;!!MXVguWEtGgZw!dn0TRgvRSZTM6Aw5zPRCknsj3kD8t4RRR0wD3S8Lr6QTiLqcG25goRWR5SR2SSXUgg$" target="_blank" rel="nofollow noopener noreferrer" style="text-decoration: none;" class=""><span style="font-size: 10pt; color: rgb(89, 89, 89); text-decoration: underline; vertical-align: baseline; white-space: pre-wrap;" class="">Blog</span></a></font><br class=""> </div> </div> </div> </div> </div> </div> </div> </div> <br class=""> _______________________________________________<br class=""> Spacewalk-list mailing list<br class=""> <a href="mailto:Spacewalk-list@redhat.com" class="">Spacewalk-list@redhat.com</a><br class=""> <a href="https://urldefense.com/v3/__https://www.redhat.com/mailman/listinfo/spacewalk-list__;!!MXVguWEtGgZw!dn0TRgvRSZTM6Aw5zPRCknsj3kD8t4RRR0wD3S8Lr6QTiLqcG25goRWR5SSIXYd4yg$" class="">https://www.redhat.com/mailman/listinfo/spacewalk-list</a><br class=""> </div> </div> <span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">_______________________________________________</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""> <span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">Spacewalk-list mailing list</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""> <a href="mailto:Spacewalk-list@redhat.com" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">Spacewalk-list@redhat.com</a><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""> <a href="https://urldefense.com/v3/__https://www.redhat.com/mailman/listinfo/spacewalk-list__;!!MXVguWEtGgZw!dn0TRgvRSZTM6Aw5zPRCknsj3kD8t4RRR0wD3S8Lr6QTiLqcG25goRWR5SSIXYd4yg$" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">https://urldefense.com/v3/__https://www.redhat.com/mailman/listinfo/spacewalk-list__;!!MXVguWEtGgZw!dn0TRgvRSZTM6Aw5zPRCknsj3kD8t4RRR0wD3S8Lr6QTiLqcG25goRWR5SSIXYd4yg$</a><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class=""></span></div> </blockquote> </div> <br class=""> </div> </body> </html>