[et-mgmt-tools] [ANNOUNCE] Cobbler 0.6.2 (pre) release
Maute, Kevin P CTR AFRL/VAOO
Kevin.Maute at WPAFB.AF.MIL
Wed Sep 26 15:51:31 UTC 2007
DOH! You might want to mention what you told me earlier about
restarting httpd in the wiki also for those of use who tend to more
literal than they should be!!!
> -----Original Message-----
> From: et-mgmt-tools-bounces at redhat.com
> [mailto:et-mgmt-tools-bounces at redhat.com] On Behalf Of Maute,
> Kevin P CTR AFRL/VAOO
> Sent: Wednesday, September 26, 2007 11:47 AM
> To: Fedora/Linux Management Tools
> Subject: RE: [et-mgmt-tools] [ANNOUNCE] Cobbler 0.6.2 (pre) release
>
> Yes, they are identical... I don't think I ever looked at this file
> during my ramp up to know what the old one had. I also tried
> this with
> and without iptables running
>
> > -----Original Message-----
> > From: et-mgmt-tools-bounces at redhat.com
> > [mailto:et-mgmt-tools-bounces at redhat.com] On Behalf Of
> Michael DeHaan
> > Sent: Wednesday, September 26, 2007 11:32 AM
> > To: Fedora/Linux Management Tools
> > Subject: Re: [et-mgmt-tools] [ANNOUNCE] Cobbler 0.6.2 (pre) release
> >
> > Maute, Kevin P CTR AFRL/VAOO wrote:
> > > Actually, the only cobbler.conf file in /etc/httpd/conf.d
> > is the old one
> > > which is ~ a week old, no *.rpmnew
> > >
> > If it's a week old, perhaps you already had the right
> > contents, which are...
> >
> > # This configuration file allows cobbler data
> > # to be accessed over HTTP.
> >
> > AliasMatch ^/cblr(.*)?$ "/var/www/cobbler$1"
> > AliasMatch ^/cobbler_track(.*)?$ "/var/www/cobbler$1"
> > AliasMatch ^/cobbler(.*)?$ "/var/www/cobbler$1"
> >
> > <Directory "/var/www/cobbler">
> > Options Indexes FollowSymLinks
> > AllowOverride None
> > Order allow,deny
> > Allow from all
> > </Directory>
> >
> > ProxyRequests off
> >
> > ProxyPass /cobbler_api http://localhost:25151/
> > ProxyPassReverse /cobbler_api http://localhost:25151/
> >
> > # TO DO: SSL
> >
> > ProxyPass /cobbler_api_rw http://localhost:25152/
> > ProxyPassReverse /cobbler_api_rw http://localhost:25152/
> >
> >
> > ===
> >
> > snip.
> >
> > If you're still not authenticating correctly, I'm not sure
> what's up.
> > I recently did make a patch that may play a role, however:
> > http://git.fedoraproject.org/?p=hosted/cobbler;a=commitdiff;h=
> cdc6eef91985545432ec222294b650e0d8269be1
> > (which will definitely be included in 0.6.2-2 when I push it)
> >
> > You can check /var/log/cobbler/webui.log and
> > /var/log/cobbler/cobblerd.log and you may see some more
> > information there.
> >
> > >> -----Original Message-----
> > >> From: et-mgmt-tools-bounces at redhat.com
> > >> [mailto:et-mgmt-tools-bounces at redhat.com] On Behalf Of
> > Michael DeHaan
> > >> Sent: Wednesday, September 26, 2007 11:04 AM
> > >> To: Fedora/Linux Management Tools
> > >> Subject: Re: [et-mgmt-tools] [ANNOUNCE] Cobbler 0.6.2
> (pre) release
> > >>
> > >> Maute, Kevin P CTR AFRL/VAOO wrote:
> > >>
> > >>> Thanks Michael & Al!
> > >>>
> > >>> I am somewhat of a newbie also with xmlrpc and am having trouble
> > >>> authenticating to webui.
> > >>>
> > >>> I have selinux disabled and have "xmlrpc_rw_enabled: 1"
> and did a
> > >>> "service cobblerd restart" after updating to 0.6.2-1 from
> > >>>
> > >> 0.6.1. I am
> > >>
> > >>> unclear what "anyusername = yourpasswordhere" means.
> > >>>
> > >> It means you can add your own username and password to the
> > >> config file
> > >> if you like.
> > >> The testuser really should be removed (and will be, for when
> > >> I push --
> > >> doing that now).
> > >>
> > >> As for your connection problem, I can guess.
> > >>
> > >> Since you had a previous cobbler install, check
> > >> /etc/httpd/conf.d/ and
> > >> look for a cobbler.conf.rpmnew.
> > >> That contains the new Apache routing for the XMLRPC parts.
> > >> Replace the
> > >> conf.d with the contents
> > >> of the rpmnew, start httpd, and you should be good to go.
> > >>
> > >> I'll add that to the Wiki.
> > >>
> > >>
> > >>> I tried the
> > >>> testuser with its password but did not have any joy. I
> > >>>
> > >> also tried my
> > >>
> > >>> existing user/password combo. I am assuming auth.conf is
> > similar to
> > >>> .htaccess but am a little concerned about the clear text aspect.
> > >>>
> > >>>
> > >> We're going to SSLify XMLRPC communications later, I'm sure,
> > >> but here's
> > >> what we're doing right now.
> > >>
> > >> Currently the xmlrpc interface for read-write operations is
> > >> binding only
> > >> to localhost. The WebUI
> > >> is connecting to it via localhost, and you can visit the
> > WebUI with
> > >> https:// URLs. So your password
> > >> is never broadcast outside the cobbler server in plaintext.
> > >>
> > >> auth.conf is not nearly as fancy as htaccess, it's just
> a list of
> > >> username and passwords. And it lives in /etc with
> > >> permissions such that only root can read it. We'll
> > probably have more
> > >> sophisticated access control around
> > >> passwords later (pam maybe?) though for now, attaching only
> > >> to localhost
> > >> is secure when the user visits
> > >> via https://. We should probably put in a redirect to ensure
> > >> the WebUI
> > >> isn't visited with http:// just to protect
> > >> users who don't know better.
> > >>
> > >>
> > >>
> > >>
> > >>
> > >>
> > >>> Thanks,
> > >>> Kevin
> > >>>
> > >>>
> > >>>
> > >>>> -----Original Message-----
> > >>>> From: et-mgmt-tools-bounces at redhat.com
> > >>>> [mailto:et-mgmt-tools-bounces at redhat.com] On Behalf Of
> > >>>>
> > >> Michael DeHaan
> > >>
> > >>>> Sent: Tuesday, September 25, 2007 6:48 PM
> > >>>> To: 'et-mgmt-tools at redhat.com'
> > >>>> Subject: [et-mgmt-tools] [ANNOUNCE] Cobbler 0.6.2 (pre) release
> > >>>>
> > >>>> It's new Cobbler & koan time.
> > >>>>
> > >>>> The new feature this time is the Cobbler Web UI, for which
> > >>>>
> > >> I have to
> > >>
> > >>>> give a big hand to Al Tobey for coding up a *massive*
> > chunk of it.
> > >>>> The WUI recently gained the ability to edit kickstart
> > files and is
> > >>>> really shiny (IMHO) at this point. While the rest of
> > >>>>
> > >> cobbler we'll
> > >>
> > >>>> consider "stable", the Web UI component should be
> > >>>>
> > >> considered a "beta"
> > >>
> > >>>> just for this 1st release. Definitely help test it out though,
> > >>>> and report back your findings/ideas/comments. If you or
> > >>>> fellow admins
> > >>>> need to make tweaks from time to time and need a better
> > >>>> way of visualizing your provisioning configuration,
> the WebUI is
> > >>>> probably for you.
> > >>>>
> > >>>> As mentioned before, the setup instructions are on the
> > >>>>
> > >> Wiki, so just
> > >>
> > >>>> follow these steps once things are installed:
> > >>>>
> > >>>>
> > https://hosted.fedoraproject.org/projects/cobbler/wiki/CobblerWebUi
> > >>>>
> > >>>> Unless you've been requesting a feature (in which case, it
> > >>>> probably was
> > >>>> added), the other changes are relatively minor
> > >>>> and you might not notice them. I've sent emails out about
> > >>>> most of them
> > >>>> already. One thing admins should note is that
> > >>>> /var/lib/cobbler/settings is finally packaged as a
> > config file, so
> > >>>> you'll get an "rpmnew" for the new settings. That will
> > >>>> be moved into /etc probably in the next release and all
> > >>>>
> > >> will be right
> > >>
> > >>>> with config files :)
> > >>>>
> > >>>> So ... I'm uploading the 0.6.2 RPM's today for folks to have
> > >>>> a chance to
> > >>>> try things out before pushing to the mirrors on Friday.
> > >>>>
> > >>>> http://cobbler.et.redhat.com/download/cobbler-0.6.2-1.src.rpm
> > >>>> http://cobbler.et.redhat.com/download/koan-0.6.2-1.src.rpm
> > >>>>
> > >>>> FYI -- The changelogs might look rather long, though it's
> > >>>> been about a
> > >>>> month since the last release and lots of folks have been
> > >>>> working off the source-control versions. So things are
> > >>>>
> > >> rather well
> > >>
> > >>>> tested...
> > >>>>
> > >>>> For Cobbler:
> > >>>> - cobbler repo auto-add to discover yum repos automatically
> > >>>> (requires a
> > >>>> rather new yum)
> > >>>> - fix bug that allows empty mac addresses (None) in dhcpd.conf
> > >>>> - kickstarts automatically save kickstart file used to
> > >>>> /root/cobbler.ks
> > >>>> - allow multiple (comma-seperated) values for --virt-size
> > >>>> - removed deprecated 'enchant' function (use SSH and
> > koan instead)
> > >>>> - cleanup of a few unused settings
> > >>>> - allow for serialization modules to be selected in
> > >>>> /etc/cobbler/modules.conf
> > >>>> - patch to allow for reposync of specific repos, even if not
> > >>>> set to update
> > >>>> - added --dhcp-tag section for better DHCP customization
> > (esp with
> > >>>> multiple subnets)
> > >>>> - added Apache proxying around XMLRPC port for wider
> > network access
> > >>>> - refactor XMLRPC API and establish a read-write API
> > >>>> - allow for configuring of read-write XMLRPC users in
> > >>>> /etc/cobbler/auth.conf
> > >>>> - WebUI
> > >>>> - packaged /var/lib/cobbler/settings as a config file
> > >>>> - added BuildRequires to help build on other platforms
> > >>>> - relocate cgi-bin files to cgi-bin/cobbler for namespacing
> > >>>> - fix syslog logging for systems not in the cobbler DB.
> > >>>>
> > >>>> For koan
> > >>>> - Allow for multiple values (comma seperated) to --virt-path
> > >>>> - Allow for multiple virt file sizes
> > >>>> - Refactoring around the virt bits
> > >>>> - Remove legacy sys.path hack as enchant has been removed
> > >>>> (just use SSH)
> > >>>> - Try port 80 proxied XMLRPC by default (first) before
> > trying 25151
> > >>>>
> > >>>> As usual, a huge thanks to everyone who submitted patches,
> > >>>>
> > >> emails, or
> > >>
> > >>>> hangs out in #cobbler.
> > >>>>
> > >>>> --Michael
> > >>>>
> > >>>>
> > >>>> _______________________________________________
> > >>>> et-mgmt-tools mailing list
> > >>>> et-mgmt-tools at redhat.com
> > >>>> https://www.redhat.com/mailman/listinfo/et-mgmt-tools
> > >>>>
> > >>>>
> > >>>>
> > >>> _______________________________________________
> > >>> et-mgmt-tools mailing list
> > >>> et-mgmt-tools at redhat.com
> > >>> https://www.redhat.com/mailman/listinfo/et-mgmt-tools
> > >>>
> > >>>
> > >> _______________________________________________
> > >> et-mgmt-tools mailing list
> > >> et-mgmt-tools at redhat.com
> > >> https://www.redhat.com/mailman/listinfo/et-mgmt-tools
> > >>
> > >>
> > >
> > > _______________________________________________
> > > et-mgmt-tools mailing list
> > > et-mgmt-tools at redhat.com
> > > https://www.redhat.com/mailman/listinfo/et-mgmt-tools
> > >
> >
> > _______________________________________________
> > et-mgmt-tools mailing list
> > et-mgmt-tools at redhat.com
> > https://www.redhat.com/mailman/listinfo/et-mgmt-tools
> >
>
> _______________________________________________
> et-mgmt-tools mailing list
> et-mgmt-tools at redhat.com
> https://www.redhat.com/mailman/listinfo/et-mgmt-tools
>
More information about the et-mgmt-tools
mailing list