[Pulp-list] Pulp RHEL Repo Download Forbidden??

Baird, Josh jbaird at follett.com
Tue May 5 11:23:19 UTC 2015


Hi Gavin,

I am having the same problem.  I just noticed that it was occurring yesterday.  I re-issued new entitlement certificates with valid expiration dates from RHN and the problem is still occurring.  I have verified that my certificates contain path/entitlements for the channels that I am trying to sync (via rct cat-cert).  Occasionally, Pulp will be able to download the metadata for certain channels, but then get 'Forbidden' when downloading individual packages.  Other times, it will throw a 'Forbidden' before being able to download the metadata as you pasted below.

I am going to hopefully spend some time working with the developers in #pulp today to get this figured out.  I have a feeling it is CDN related, but I'm not exactly sure at this point.

Thanks,

Josh

From: pulp-list-bounces at redhat.com [mailto:pulp-list-bounces at redhat.com] On Behalf Of Gavin Jones
Sent: Tuesday, May 05, 2015 12:13 AM
To: pulp-list at redhat.com
Subject: [Pulp-list] Pulp RHEL Repo Download Forbidden??



Hi Everyone, I seem to be getting an error when downloading from the Redhat Repos. This has only just stopped working and has been working fine for months.

It looks to be certificate related I believe from the logs.


* Firstly I have not changed anything on the pulp side
* I have checked my subscriptions are still active and the hosts that are connected to RHEL are still connected.


- Pulp Version:

rpm -qa | grep -i pulp

python-pulp-client-lib-2.6.0-1.el7.noarch
pulp-rpm-plugins-2.6.0-1.el7.noarch
python-pulp-bindings-2.6.0-1.el7.noarch
python-kombu-3.0.24-5.pulp.el7.noarch
python-isodate-0.5.0-4.pulp.el7.noarch
pulp-admin-client-2.6.0-1.el7.noarch
pulp-rpm-admin-extensions-2.6.0-1.el7.noarch
python-pulp-common-2.6.0-1.el7.noarch
pulp-server-2.6.0-1.el7.noarch
pulp-selinux-2.6.0-1.el7.noarch
python-pulp-rpm-common-2.6.0-1.el7.noarch


- Attempting to download the repo.

Please see below:

pulp-admin rpm repo sync run --repo-id=rhel-7-server-rhn-tools-rpms
+----------------------------------------------------------------------+
        Synchronizing Repository [rhel-7-server-rhn-tools-rpms]
+----------------------------------------------------------------------+

This command may be exited via ctrl+c without affecting the request.


Downloading metadata...
[\]
... failed

Forbidden


Task Failed

Importer indicated a failed response



- Error Log

journalctl -f

ay 05 13:33:05 pulp01.rap.local pulp[2741]: pulp_rpm.plugins.importers.yum.sync:INFO: Downloading metadata from https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/rhn-tools/os/.
May 05 13:33:05 pulp01.rap.local pulp[2741]: requests.packages.urllib3.connectionpool:INFO: Starting new HTTPS connection (1): cdn.redhat.com<http://cdn.redhat.com>
May 05 13:33:06 pulp01.rap.local pulp[2741]: pulp_rpm.plugins.importers.yum.sync:ERROR: (2741-28000) sync failed
May 05 13:33:06 pulp01.rap.local pulp[2741]: pulp_rpm.plugins.importers.yum.sync:ERROR: (2741-28000) Traceback (most recent call last):
May 05 13:33:06 pulp01.rap.local pulp[2741]: pulp_rpm.plugins.importers.yum.sync:ERROR: (2741-28000)   File "/usr/lib/python2.7/site-packages/pulp_rpm/plugins/importers/yum/sync.py",...e 104, in run
May 05 13:33:06 pulp01.rap.local pulp[2741]: pulp_rpm.plugins.importers.yum.sync:ERROR: (2741-28000)     metadata_files = self.get_metadata()
May 05 13:33:06 pulp01.rap.local pulp[2741]: pulp_rpm.plugins.importers.yum.sync:ERROR: (2741-28000)   File "/usr/lib/python2.7/site-packages/pulp_rpm/plugins/importers/yum/sync.py",... get_metadata
May 05 13:33:06 pulp01.rap.local pulp[2741]: pulp_rpm.plugins.importers.yum.sync:ERROR: (2741-28000)     raise FailedException(str(e))
May 05 13:33:06 pulp01.rap.local pulp[2741]: pulp_rpm.plugins.importers.yum.sync:ERROR: (2741-28000) FailedException: Forbidden
May 05 13:33:06 pulp01.rap.local pulp[2554]: celery.worker.job:ERROR: (2554-28000) Task pulp.server.managers.repo.sync.sync[81644b21-6bec-47dd-a31b-552baa2a27a8] raised unexpected: P...d response',)
May 05 13:33:06 pulp01.rap.local pulp[2554]: celery.worker.job:ERROR: (2554-28000) Traceback (most recent call last):
May 05 13:33:06 pulp01.rap.local pulp[2554]: celery.worker.job:ERROR: (2554-28000)   File "/usr/lib/python2.7/site-packages/celery/app/trace.py", line 240, in trace_task
May 05 13:33:06 pulp01.rap.local pulp[2554]: celery.worker.job:ERROR: (2554-28000)     R = retval = fun(*args, **kwargs)
May 05 13:33:06 pulp01.rap.local pulp[2554]: celery.worker.job:ERROR: (2554-28000)   File "/usr/lib/python2.7/site-packages/pulp/server/async/tasks.py", line 328, in __call__
May 05 13:33:06 pulp01.rap.local pulp[2554]: celery.worker.job:ERROR: (2554-28000)     return super(Task, self).__call__(*args, **kwargs)
May 05 13:33:06 pulp01.rap.local pulp[2554]: celery.worker.job:ERROR: (2554-28000)   File "/usr/lib/python2.7/site-packages/celery/app/trace.py", line 437, in __protected_call__
May 05 13:33:06 pulp01.rap.local pulp[2554]: celery.worker.job:ERROR: (2554-28000)     return self.run(*args, **kwargs)
May 05 13:33:06 pulp01.rap.local pulp[2554]: celery.worker.job:ERROR: (2554-28000)   File "/usr/lib/python2.7/site-packages/pulp/server/managers/repo/sync.py", line 114, in sync
May 05 13:33:06 pulp01.rap.local pulp[2554]: celery.worker.job:ERROR: (2554-28000)     raise PulpExecutionException(_('Importer indicated a failed response'))
May 05 13:33:06 pulp01.rap.local pulp[2554]: celery.worker.job:ERROR: (2554-28000) PulpExecutionException: Importer indicated a failed response
May 05 13:33:06 pulp01.rap.local pulp[2554]: celery.worker.job:INFO: Task pulp.server.async.tasks._release_resource[e8f32211-ccc5-4918-b4d5-ada23e15ecf4] succeeded in 0.010533269s: None

is there a clean way to fix this issue without Deleting the entire repo and going through the process of setting this up again?

Thanks for your time.




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/pulp-list/attachments/20150505/844b7fbb/attachment.htm>


More information about the Pulp-list mailing list