[et-mgmt-tools] [ANNOUNCE] Cobbler 0.6.2 (pre) release
Maute, Kevin P CTR AFRL/VAOO
Kevin.Maute at WPAFB.AF.MIL
Wed Sep 26 15:20:00 UTC 2007
Actually, the only cobbler.conf file in /etc/httpd/conf.d is the old one
which is ~ a week old, no *.rpmnew
> -----Original Message-----
> From: et-mgmt-tools-bounces at redhat.com
> [mailto:et-mgmt-tools-bounces at redhat.com] On Behalf Of Michael DeHaan
> Sent: Wednesday, September 26, 2007 11:04 AM
> To: Fedora/Linux Management Tools
> Subject: Re: [et-mgmt-tools] [ANNOUNCE] Cobbler 0.6.2 (pre) release
> Maute, Kevin P CTR AFRL/VAOO wrote:
> > Thanks Michael & Al!
> > I am somewhat of a newbie also with xmlrpc and am having trouble
> > authenticating to webui.
> > I have selinux disabled and have "xmlrpc_rw_enabled: 1" and did a
> > "service cobblerd restart" after updating to 0.6.2-1 from
> 0.6.1. I am
> > unclear what "anyusername = yourpasswordhere" means.
> It means you can add your own username and password to the
> config file
> if you like.
> The testuser really should be removed (and will be, for when
> I push --
> doing that now).
> As for your connection problem, I can guess.
> Since you had a previous cobbler install, check
> /etc/httpd/conf.d/ and
> look for a cobbler.conf.rpmnew.
> That contains the new Apache routing for the XMLRPC parts.
> Replace the
> conf.d with the contents
> of the rpmnew, start httpd, and you should be good to go.
> I'll add that to the Wiki.
> > I tried the
> > testuser with its password but did not have any joy. I
> also tried my
> > existing user/password combo. I am assuming auth.conf is similar to
> > .htaccess but am a little concerned about the clear text aspect.
> We're going to SSLify XMLRPC communications later, I'm sure,
> but here's
> what we're doing right now.
> Currently the xmlrpc interface for read-write operations is
> binding only
> to localhost. The WebUI
> is connecting to it via localhost, and you can visit the WebUI with
> https:// URLs. So your password
> is never broadcast outside the cobbler server in plaintext.
> auth.conf is not nearly as fancy as htaccess, it's just a list of
> username and passwords. And it lives in /etc with
> permissions such that only root can read it. We'll probably have more
> sophisticated access control around
> passwords later (pam maybe?) though for now, attaching only
> to localhost
> is secure when the user visits
> via https://. We should probably put in a redirect to ensure
> the WebUI
> isn't visited with http:// just to protect
> users who don't know better.
> > Thanks,
> > Kevin
> >> -----Original Message-----
> >> From: et-mgmt-tools-bounces at redhat.com
> >> [mailto:et-mgmt-tools-bounces at redhat.com] On Behalf Of
> Michael DeHaan
> >> Sent: Tuesday, September 25, 2007 6:48 PM
> >> To: 'et-mgmt-tools at redhat.com'
> >> Subject: [et-mgmt-tools] [ANNOUNCE] Cobbler 0.6.2 (pre) release
> >> It's new Cobbler & koan time.
> >> The new feature this time is the Cobbler Web UI, for which
> I have to
> >> give a big hand to Al Tobey for coding up a *massive* chunk of it.
> >> The WUI recently gained the ability to edit kickstart files and is
> >> really shiny (IMHO) at this point. While the rest of
> cobbler we'll
> >> consider "stable", the Web UI component should be
> considered a "beta"
> >> just for this 1st release. Definitely help test it out though,
> >> and report back your findings/ideas/comments. If you or
> >> fellow admins
> >> need to make tweaks from time to time and need a better
> >> way of visualizing your provisioning configuration, the WebUI is
> >> probably for you.
> >> As mentioned before, the setup instructions are on the
> Wiki, so just
> >> follow these steps once things are installed:
> >> https://hosted.fedoraproject.org/projects/cobbler/wiki/CobblerWebUi
> >> Unless you've been requesting a feature (in which case, it
> >> probably was
> >> added), the other changes are relatively minor
> >> and you might not notice them. I've sent emails out about
> >> most of them
> >> already. One thing admins should note is that
> >> /var/lib/cobbler/settings is finally packaged as a config file, so
> >> you'll get an "rpmnew" for the new settings. That will
> >> be moved into /etc probably in the next release and all
> will be right
> >> with config files :)
> >> So ... I'm uploading the 0.6.2 RPM's today for folks to have
> >> a chance to
> >> try things out before pushing to the mirrors on Friday.
> >> http://cobbler.et.redhat.com/download/cobbler-0.6.2-1.src.rpm
> >> http://cobbler.et.redhat.com/download/koan-0.6.2-1.src.rpm
> >> FYI -- The changelogs might look rather long, though it's
> >> been about a
> >> month since the last release and lots of folks have been
> >> working off the source-control versions. So things are
> rather well
> >> tested...
> >> For Cobbler:
> >> - cobbler repo auto-add to discover yum repos automatically
> >> (requires a
> >> rather new yum)
> >> - fix bug that allows empty mac addresses (None) in dhcpd.conf
> >> - kickstarts automatically save kickstart file used to
> >> /root/cobbler.ks
> >> - allow multiple (comma-seperated) values for --virt-size
> >> - removed deprecated 'enchant' function (use SSH and koan instead)
> >> - cleanup of a few unused settings
> >> - allow for serialization modules to be selected in
> >> /etc/cobbler/modules.conf
> >> - patch to allow for reposync of specific repos, even if not
> >> set to update
> >> - added --dhcp-tag section for better DHCP customization (esp with
> >> multiple subnets)
> >> - added Apache proxying around XMLRPC port for wider network access
> >> - refactor XMLRPC API and establish a read-write API
> >> - allow for configuring of read-write XMLRPC users in
> >> /etc/cobbler/auth.conf
> >> - WebUI
> >> - packaged /var/lib/cobbler/settings as a config file
> >> - added BuildRequires to help build on other platforms
> >> - relocate cgi-bin files to cgi-bin/cobbler for namespacing
> >> - fix syslog logging for systems not in the cobbler DB.
> >> For koan
> >> - Allow for multiple values (comma seperated) to --virt-path
> >> - Allow for multiple virt file sizes
> >> - Refactoring around the virt bits
> >> - Remove legacy sys.path hack as enchant has been removed
> >> (just use SSH)
> >> - Try port 80 proxied XMLRPC by default (first) before trying 25151
> >> As usual, a huge thanks to everyone who submitted patches,
> emails, or
> >> hangs out in #cobbler.
> >> --Michael
> >> _______________________________________________
> >> et-mgmt-tools mailing list
> >> et-mgmt-tools at redhat.com
> >> https://www.redhat.com/mailman/listinfo/et-mgmt-tools
> > _______________________________________________
> > et-mgmt-tools mailing list
> > et-mgmt-tools at redhat.com
> > https://www.redhat.com/mailman/listinfo/et-mgmt-tools
> et-mgmt-tools mailing list
> et-mgmt-tools at redhat.com
More information about the et-mgmt-tools