[et-mgmt-tools] [ANNOUNCE] Cobbler 0.6.2 (pre) release
Maute, Kevin P CTR AFRL/VAOO
Kevin.Maute at WPAFB.AF.MIL
Wed Sep 26 15:46:37 UTC 2007
Yes, they are identical... I don't think I ever looked at this file
during my ramp up to know what the old one had. I also tried this with
and without iptables running
> -----Original Message-----
> From: et-mgmt-tools-bounces at redhat.com
> [mailto:et-mgmt-tools-bounces at redhat.com] On Behalf Of Michael DeHaan
> Sent: Wednesday, September 26, 2007 11:32 AM
> To: Fedora/Linux Management Tools
> Subject: Re: [et-mgmt-tools] [ANNOUNCE] Cobbler 0.6.2 (pre) release
>
> Maute, Kevin P CTR AFRL/VAOO wrote:
> > Actually, the only cobbler.conf file in /etc/httpd/conf.d
> is the old one
> > which is ~ a week old, no *.rpmnew
> >
> If it's a week old, perhaps you already had the right
> contents, which are...
>
> # This configuration file allows cobbler data
> # to be accessed over HTTP.
>
> AliasMatch ^/cblr(.*)?$ "/var/www/cobbler$1"
> AliasMatch ^/cobbler_track(.*)?$ "/var/www/cobbler$1"
> AliasMatch ^/cobbler(.*)?$ "/var/www/cobbler$1"
>
> <Directory "/var/www/cobbler">
> Options Indexes FollowSymLinks
> AllowOverride None
> Order allow,deny
> Allow from all
> </Directory>
>
> ProxyRequests off
>
> ProxyPass /cobbler_api http://localhost:25151/
> ProxyPassReverse /cobbler_api http://localhost:25151/
>
> # TO DO: SSL
>
> ProxyPass /cobbler_api_rw http://localhost:25152/
> ProxyPassReverse /cobbler_api_rw http://localhost:25152/
>
>
> ===
>
> snip.
>
> If you're still not authenticating correctly, I'm not sure what's up.
> I recently did make a patch that may play a role, however:
> http://git.fedoraproject.org/?p=hosted/cobbler;a=commitdiff;h=
cdc6eef91985545432ec222294b650e0d8269be1
> (which will definitely be included in 0.6.2-2 when I push it)
>
> You can check /var/log/cobbler/webui.log and
> /var/log/cobbler/cobblerd.log and you may see some more
> information there.
>
> >> -----Original Message-----
> >> From: et-mgmt-tools-bounces at redhat.com
> >> [mailto:et-mgmt-tools-bounces at redhat.com] On Behalf Of
> Michael DeHaan
> >> Sent: Wednesday, September 26, 2007 11:04 AM
> >> To: Fedora/Linux Management Tools
> >> Subject: Re: [et-mgmt-tools] [ANNOUNCE] Cobbler 0.6.2 (pre) release
> >>
> >> Maute, Kevin P CTR AFRL/VAOO wrote:
> >>
> >>> Thanks Michael & Al!
> >>>
> >>> I am somewhat of a newbie also with xmlrpc and am having trouble
> >>> authenticating to webui.
> >>>
> >>> I have selinux disabled and have "xmlrpc_rw_enabled: 1" and did a
> >>> "service cobblerd restart" after updating to 0.6.2-1 from
> >>>
> >> 0.6.1. I am
> >>
> >>> unclear what "anyusername = yourpasswordhere" means.
> >>>
> >> It means you can add your own username and password to the
> >> config file
> >> if you like.
> >> The testuser really should be removed (and will be, for when
> >> I push --
> >> doing that now).
> >>
> >> As for your connection problem, I can guess.
> >>
> >> Since you had a previous cobbler install, check
> >> /etc/httpd/conf.d/ and
> >> look for a cobbler.conf.rpmnew.
> >> That contains the new Apache routing for the XMLRPC parts.
> >> Replace the
> >> conf.d with the contents
> >> of the rpmnew, start httpd, and you should be good to go.
> >>
> >> I'll add that to the Wiki.
> >>
> >>
> >>> I tried the
> >>> testuser with its password but did not have any joy. I
> >>>
> >> also tried my
> >>
> >>> existing user/password combo. I am assuming auth.conf is
> similar to
> >>> .htaccess but am a little concerned about the clear text aspect.
> >>>
> >>>
> >> We're going to SSLify XMLRPC communications later, I'm sure,
> >> but here's
> >> what we're doing right now.
> >>
> >> Currently the xmlrpc interface for read-write operations is
> >> binding only
> >> to localhost. The WebUI
> >> is connecting to it via localhost, and you can visit the
> WebUI with
> >> https:// URLs. So your password
> >> is never broadcast outside the cobbler server in plaintext.
> >>
> >> auth.conf is not nearly as fancy as htaccess, it's just a list of
> >> username and passwords. And it lives in /etc with
> >> permissions such that only root can read it. We'll
> probably have more
> >> sophisticated access control around
> >> passwords later (pam maybe?) though for now, attaching only
> >> to localhost
> >> is secure when the user visits
> >> via https://. We should probably put in a redirect to ensure
> >> the WebUI
> >> isn't visited with http:// just to protect
> >> users who don't know better.
> >>
> >>
> >>
> >>
> >>
> >>
> >>> Thanks,
> >>> Kevin
> >>>
> >>>
> >>>
> >>>> -----Original Message-----
> >>>> From: et-mgmt-tools-bounces at redhat.com
> >>>> [mailto:et-mgmt-tools-bounces at redhat.com] On Behalf Of
> >>>>
> >> Michael DeHaan
> >>
> >>>> Sent: Tuesday, September 25, 2007 6:48 PM
> >>>> To: 'et-mgmt-tools at redhat.com'
> >>>> Subject: [et-mgmt-tools] [ANNOUNCE] Cobbler 0.6.2 (pre) release
> >>>>
> >>>> It's new Cobbler & koan time.
> >>>>
> >>>> The new feature this time is the Cobbler Web UI, for which
> >>>>
> >> I have to
> >>
> >>>> give a big hand to Al Tobey for coding up a *massive*
> chunk of it.
> >>>> The WUI recently gained the ability to edit kickstart
> files and is
> >>>> really shiny (IMHO) at this point. While the rest of
> >>>>
> >> cobbler we'll
> >>
> >>>> consider "stable", the Web UI component should be
> >>>>
> >> considered a "beta"
> >>
> >>>> just for this 1st release. Definitely help test it out though,
> >>>> and report back your findings/ideas/comments. If you or
> >>>> fellow admins
> >>>> need to make tweaks from time to time and need a better
> >>>> way of visualizing your provisioning configuration, the WebUI is
> >>>> probably for you.
> >>>>
> >>>> As mentioned before, the setup instructions are on the
> >>>>
> >> Wiki, so just
> >>
> >>>> follow these steps once things are installed:
> >>>>
> >>>>
> https://hosted.fedoraproject.org/projects/cobbler/wiki/CobblerWebUi
> >>>>
> >>>> Unless you've been requesting a feature (in which case, it
> >>>> probably was
> >>>> added), the other changes are relatively minor
> >>>> and you might not notice them. I've sent emails out about
> >>>> most of them
> >>>> already. One thing admins should note is that
> >>>> /var/lib/cobbler/settings is finally packaged as a
> config file, so
> >>>> you'll get an "rpmnew" for the new settings. That will
> >>>> be moved into /etc probably in the next release and all
> >>>>
> >> will be right
> >>
> >>>> with config files :)
> >>>>
> >>>> So ... I'm uploading the 0.6.2 RPM's today for folks to have
> >>>> a chance to
> >>>> try things out before pushing to the mirrors on Friday.
> >>>>
> >>>> http://cobbler.et.redhat.com/download/cobbler-0.6.2-1.src.rpm
> >>>> http://cobbler.et.redhat.com/download/koan-0.6.2-1.src.rpm
> >>>>
> >>>> FYI -- The changelogs might look rather long, though it's
> >>>> been about a
> >>>> month since the last release and lots of folks have been
> >>>> working off the source-control versions. So things are
> >>>>
> >> rather well
> >>
> >>>> tested...
> >>>>
> >>>> For Cobbler:
> >>>> - cobbler repo auto-add to discover yum repos automatically
> >>>> (requires a
> >>>> rather new yum)
> >>>> - fix bug that allows empty mac addresses (None) in dhcpd.conf
> >>>> - kickstarts automatically save kickstart file used to
> >>>> /root/cobbler.ks
> >>>> - allow multiple (comma-seperated) values for --virt-size
> >>>> - removed deprecated 'enchant' function (use SSH and
> koan instead)
> >>>> - cleanup of a few unused settings
> >>>> - allow for serialization modules to be selected in
> >>>> /etc/cobbler/modules.conf
> >>>> - patch to allow for reposync of specific repos, even if not
> >>>> set to update
> >>>> - added --dhcp-tag section for better DHCP customization
> (esp with
> >>>> multiple subnets)
> >>>> - added Apache proxying around XMLRPC port for wider
> network access
> >>>> - refactor XMLRPC API and establish a read-write API
> >>>> - allow for configuring of read-write XMLRPC users in
> >>>> /etc/cobbler/auth.conf
> >>>> - WebUI
> >>>> - packaged /var/lib/cobbler/settings as a config file
> >>>> - added BuildRequires to help build on other platforms
> >>>> - relocate cgi-bin files to cgi-bin/cobbler for namespacing
> >>>> - fix syslog logging for systems not in the cobbler DB.
> >>>>
> >>>> For koan
> >>>> - Allow for multiple values (comma seperated) to --virt-path
> >>>> - Allow for multiple virt file sizes
> >>>> - Refactoring around the virt bits
> >>>> - Remove legacy sys.path hack as enchant has been removed
> >>>> (just use SSH)
> >>>> - Try port 80 proxied XMLRPC by default (first) before
> trying 25151
> >>>>
> >>>> As usual, a huge thanks to everyone who submitted patches,
> >>>>
> >> emails, or
> >>
> >>>> hangs out in #cobbler.
> >>>>
> >>>> --Michael
> >>>>
> >>>>
> >>>> _______________________________________________
> >>>> et-mgmt-tools mailing list
> >>>> et-mgmt-tools at redhat.com
> >>>> https://www.redhat.com/mailman/listinfo/et-mgmt-tools
> >>>>
> >>>>
> >>>>
> >>> _______________________________________________
> >>> et-mgmt-tools mailing list
> >>> et-mgmt-tools at redhat.com
> >>> https://www.redhat.com/mailman/listinfo/et-mgmt-tools
> >>>
> >>>
> >> _______________________________________________
> >> et-mgmt-tools mailing list
> >> et-mgmt-tools at redhat.com
> >> https://www.redhat.com/mailman/listinfo/et-mgmt-tools
> >>
> >>
> >
> > _______________________________________________
> > et-mgmt-tools mailing list
> > et-mgmt-tools at redhat.com
> > https://www.redhat.com/mailman/listinfo/et-mgmt-tools
> >
>
> _______________________________________________
> et-mgmt-tools mailing list
> et-mgmt-tools at redhat.com
> https://www.redhat.com/mailman/listinfo/et-mgmt-tools
>
More information about the et-mgmt-tools
mailing list