[katello-devel] yum repolist causes http 403 error

[Rytis Sileika]

Hi,

I seem to have hit this bug:
https://bugzilla.redhat.com/show_bug.cgi?id=896485 but on 1.3 Katello.

So basically:

- New client registered with username/password (activation keys seem to be
broken in 1.3)
- Products/repos assigned to the system via Katello UI
- Candlepin cert installed on the client
- The following works fine:
  - subscription-manage repos --list
- yum repolist (or any yum command) results in http403:
 # yum repolist
Loaded plugins: product-id, subscription-manager
Updating certificate-based repositories.

Please use yum-config-manager to configure which software
repositories are used with Red Hat Subscription Management.

https://upprp01a.bskyb.com/pulp/repos/MyOrg/Production//custom/EPEL_EL6/EPEL_EL6_x86_64/repodata/repomd.xml:
[Errno 14] PYCURL ERROR 22 - "The requested URL returned error: 403"
Trying other mirror.


I tried:
- setting "insecure=1" in rhsm config
- removing custom repos from the system and leaving only redhat. it
basically complains on the first repo on the list that it is trying to
process

In the httpd logs:

<IP> - - [01/May/2013:09:58:41 +0000] "GET
/subscription/consumers/b25a46ff-c823-4eab-90e5-d85e83956ffd/certificates/serials
HTTP/1.1" 200 248
<IP> - - [01/May/2013:09:58:45 +0000] "GET
/subscription/consumers/b25a46ff-c823-4eab-90e5-d85e83956ffd/release
HTTP/1.1" 200 17
<IP> - - [01/May/2013:09:58:45 +0000] "GET
/pulp/repos/MyOrg/Production//custom/EPEL_EL6/EPEL_EL6_x86_64/repodata/repomd.xml
HTTP/1.1" 403 386


So some of the https requests come through ok.


Any ideas how to fix this? Right now none of the systems are able to use
any of the repos... :(


Thanks!!

Cheers,
Rytis
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/katello-devel/attachments/20130501/5a2bcb53/attachment.htm>