From JHZhang at mdanderson.org Fri Jun 1 16:09:47 2007 From: JHZhang at mdanderson.org (JHZhang at mdanderson.org) Date: Fri, 1 Jun 2007 11:09:47 -0500 Subject: [rhn-users] Nessus require openssl-0.9.7d Message-ID: Our Enterprise level security agent will shut our host down if we don't upgrade the openssl version. The current version on this ES4 is 0.9.7a. When I do a up2date -i openssl it says that the package is already updated. I downloaded a newer version of rpm, tried to update by "rpm -Uhv openssl-0.9.7f-7.x86_64.rpm", a long list come up says that the libssl.so.4 is needed by various kinds of applications. I'm hoping I don't have to download all those newer versioned applications to manually update them together with openssl. Can somebody help me? Jun H. Zhang Biostatistics and Applied Mathematics MD Anderson Cancer Center 713-792-2606 From patelhn at telkom.co.za Mon Jun 4 06:39:27 2007 From: patelhn at telkom.co.za (Hiren Patel) Date: Mon, 04 Jun 2007 08:39:27 +0200 Subject: [rhn-users] Nessus require openssl-0.9.7d In-Reply-To: References: Message-ID: <1180939167.2723.13.camel@localhost.localdomain> run up2date -l and see if an update for openssl exists. i hope that rpm you downloaded is from redhat. if an update does not exist, ask redhat if they're going to be releasing an update for it. going with redhat packages as far as possible avoids maintenance. for something like openssl, i would not chop and change packages other than what redhat provide. On Fri, 2007-06-01 at 11:09 -0500, JHZhang at mdanderson.org wrote: > Our Enterprise level security agent will shut our host down if we don't > upgrade the openssl version. The current version on this ES4 is 0.9.7a. > When I do a > up2date -i openssl > it says that the package is already updated. > I downloaded a newer version of rpm, tried to update by "rpm -Uhv > openssl-0.9.7f-7.x86_64.rpm", > a long list come up says that the libssl.so.4 is needed by various kinds of > applications. I'm hoping I don't have to download all those newer versioned > applications to manually update them together with openssl. > > Can somebody help me? > > Jun H. Zhang > Biostatistics and Applied Mathematics > MD Anderson Cancer Center > 713-792-2606 > > > _______________________________________________ > rhn-users mailing list > rhn-users at redhat.com > https://www.redhat.com/mailman/listinfo/rhn-users -- Hiren Patel ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This e-mail and its contents are subject to the Telkom SA Limited e-mail legal notice available at http://www.telkom.co.za/TelkomEMailLegalNotice.PDF ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ From patelhn at telkom.co.za Mon Jun 4 10:00:52 2007 From: patelhn at telkom.co.za (Hiren Patel) Date: Mon, 04 Jun 2007 12:00:52 +0200 Subject: [rhn-users] proxying redhat updates Message-ID: <1180951252.2723.41.camel@localhost.localdomain> hi, would a standard proxy like squid cache update packages from redhat if a machine was pointed to use it as a proxy? we currently use up2date with SSL and i am therefore suspecting that the rpms themselves are getting cached by the proxy, can anyone confirm this? how else are people cacheing update packages without selling their house and buying redhats proxy/satellite solutions? -- Hiren Patel ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This e-mail and its contents are subject to the Telkom SA Limited e-mail legal notice available at http://www.telkom.co.za/TelkomEMailLegalNotice.PDF ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ From msuchy at redhat.com Mon Jun 4 11:38:14 2007 From: msuchy at redhat.com (=?ISO-8859-2?Q?Miroslav_Such=FD?=) Date: Mon, 04 Jun 2007 13:38:14 +0200 Subject: [rhn-users] proxying redhat updates In-Reply-To: <1180951252.2723.41.camel@localhost.localdomain> References: <1180951252.2723.41.camel@localhost.localdomain> Message-ID: <4663F9A6.6000307@redhat.com> Hiren Patel wrote: > would a standard proxy like squid cache update packages from redhat if a > machine was pointed to use it as a proxy? we currently use up2date with > SSL and i am therefore suspecting that the rpms themselves are getting > cached by the proxy, can anyone confirm this? Yes, you can use normal proxy (like squid) to cache rpms. You can do it by editing file /etc/sysconfig/rhn/up2date and change this options: enableProxy[comment]=Use a HTTP Proxy enableProxy=0 enableProxyAuth[comment]=To use an authenticated proxy or not enableProxyAuth=0 httpProxy[comment]=HTTP proxy in host:port format, e.g. squid.redhat.com:3128 httpProxy= But normal proxy will not cache as much as RHN Proxy. E.g: When you use normal proxy, rpms during kickstart is not cached. -- Miroslav Suchy RHN Sustaining Engineering, Red Hat From patelhn at telkom.co.za Mon Jun 4 12:14:31 2007 From: patelhn at telkom.co.za (Hiren Patel) Date: Mon, 04 Jun 2007 14:14:31 +0200 Subject: [rhn-users] proxying redhat updates In-Reply-To: <4663F9A6.6000307@redhat.com> References: <1180951252.2723.41.camel@localhost.localdomain> <4663F9A6.6000307@redhat.com> Message-ID: <1180959271.2723.56.camel@localhost.localdomain> thanks for the reply. when using up2date with ssl, does up2date not use ssl for everything, including the download of the packages? would a standard proxy like squid not relay ssl traffic from client to server without caching anything? i don't think i need to be caching rpms for kickstart installs, i have media, run kickstart installs using that, then run updates using up2date. On Mon, 2007-06-04 at 13:38 +0200, Miroslav Such? wrote: > Hiren Patel wrote: > > would a standard proxy like squid cache update packages from redhat if a > > machine was pointed to use it as a proxy? we currently use up2date with > > SSL and i am therefore suspecting that the rpms themselves are getting > > cached by the proxy, can anyone confirm this? > > Yes, you can use normal proxy (like squid) to cache rpms. You can do it > by editing file /etc/sysconfig/rhn/up2date and change this options: > enableProxy[comment]=Use a HTTP Proxy > enableProxy=0 > enableProxyAuth[comment]=To use an authenticated proxy or not > enableProxyAuth=0 > httpProxy[comment]=HTTP proxy in host:port format, e.g. > squid.redhat.com:3128 > httpProxy= > > But normal proxy will not cache as much as RHN Proxy. > E.g: When you use normal proxy, rpms during kickstart is not cached. > -- Hiren Patel ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This e-mail and its contents are subject to the Telkom SA Limited e-mail legal notice available at http://www.telkom.co.za/TelkomEMailLegalNotice.PDF ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ From patelhn at telkom.co.za Mon Jun 4 12:17:04 2007 From: patelhn at telkom.co.za (Hiren Patel) Date: Mon, 04 Jun 2007 14:17:04 +0200 Subject: [rhn-users] proxying redhat updates In-Reply-To: <4663F9A6.6000307@redhat.com> References: <1180951252.2723.41.camel@localhost.localdomain> <4663F9A6.6000307@redhat.com> Message-ID: <1180959424.2723.59.camel@localhost.localdomain> ah okay i found the configuration option. sorry for posting too early before checking up on this. useNoSSLForPackages[comment]=Use the noSSLServerURL for package, package list, and header fetching useNoSSLForPackages=0 thanks. On Mon, 2007-06-04 at 13:38 +0200, Miroslav Such? wrote: > Hiren Patel wrote: > > would a standard proxy like squid cache update packages from redhat if a > > machine was pointed to use it as a proxy? we currently use up2date with > > SSL and i am therefore suspecting that the rpms themselves are getting > > cached by the proxy, can anyone confirm this? > > Yes, you can use normal proxy (like squid) to cache rpms. You can do it > by editing file /etc/sysconfig/rhn/up2date and change this options: > enableProxy[comment]=Use a HTTP Proxy > enableProxy=0 > enableProxyAuth[comment]=To use an authenticated proxy or not > enableProxyAuth=0 > httpProxy[comment]=HTTP proxy in host:port format, e.g. > squid.redhat.com:3128 > httpProxy= > > But normal proxy will not cache as much as RHN Proxy. > E.g: When you use normal proxy, rpms during kickstart is not cached. > -- Hiren Patel ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This e-mail and its contents are subject to the Telkom SA Limited e-mail legal notice available at http://www.telkom.co.za/TelkomEMailLegalNotice.PDF ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ From msuchy at redhat.com Mon Jun 4 13:28:27 2007 From: msuchy at redhat.com (=?UTF-8?B?TWlyb3NsYXYgU3VjaMO9?=) Date: Mon, 04 Jun 2007 15:28:27 +0200 Subject: [rhn-users] proxying redhat updates In-Reply-To: <1180959271.2723.56.camel@localhost.localdomain> References: <1180951252.2723.41.camel@localhost.localdomain> <4663F9A6.6000307@redhat.com> <1180959271.2723.56.camel@localhost.localdomain> Message-ID: <4664137B.60709@redhat.com> Hiren Patel wrote: > when using up2date with ssl, does up2date not use ssl for everything, > including the download of the packages? would a standard proxy like > squid not relay ssl traffic from client to server without caching > anything? When you send SSL request from client to squid, it is decoded (squid is server for that machine) and again encoded and sent to rhn (squid is client for rhn). Caching is done as usually (do not cache POST request, ...). When you use SSL, squid use SSL. When you do not use it, squid do not use it too. Make sure your squid is compiled with --enable-ssl. Disclaimer: I've never done this specific configuration, I just know from documentation, this should work. -- Miroslav Suchy RHN Sustaining Engineering, Red Hat From JHZhang at mdanderson.org Wed Jun 6 13:31:07 2007 From: JHZhang at mdanderson.org (JHZhang at mdanderson.org) Date: Wed, 6 Jun 2007 08:31:07 -0500 Subject: [rhn-users] Nessus require openssl-0.9.7d Message-ID: The interesting thing I found out is that openssl-0.9.7a-43.16 is actually newer at patch level than openssl-0.9.7d. If the scanner agree with this RH version level explained, I should be fine. Thank you for your help Hiren. Jun H. Zhang Biostatistics and Applied Mathematics MD Anderson Cancer Center 713-792-2606 |---------+------------------------------------------> | | | | | | | | Hiren Patel| | | | | | Sent by:| | | rhn-users-bounces at redhat.com| | | | | | | | | 06/04/2007 01:39 AM| | | Please respond to patelhn;| | | Please respond to "Discussions| | | about Red Hat Network| | | (rhn.redhat.com)"| | | | | | | |---------+------------------------------------------> >-------------------------------------------------------------------------------------------------------| | | | | | | |To: | | "Discussions about Red Hat Network (rhn.redhat.com)" | |cc: | | | | | | | | | | | |Subject: | | Re: [rhn-users] Nessus require openssl-0.9.7d | | | >-------------------------------------------------------------------------------------------------------| run up2date -l and see if an update for openssl exists. i hope that rpm you downloaded is from redhat. if an update does not exist, ask redhat if they're going to be releasing an update for it. going with redhat packages as far as possible avoids maintenance. for something like openssl, i would not chop and change packages other than what redhat provide. On Fri, 2007-06-01 at 11:09 -0500, JHZhang at mdanderson.org wrote: > Our Enterprise level security agent will shut our host down if we don't > upgrade the openssl version. The current version on this ES4 is 0.9.7a. > When I do a > up2date -i openssl > it says that the package is already updated. > I downloaded a newer version of rpm, tried to update by "rpm -Uhv > openssl-0.9.7f-7.x86_64.rpm", > a long list come up says that the libssl.so.4 is needed by various kinds of > applications. I'm hoping I don't have to download all those newer versioned > applications to manually update them together with openssl. > > Can somebody help me? > > Jun H. Zhang > Biostatistics and Applied Mathematics > MD Anderson Cancer Center > 713-792-2606 > > > _______________________________________________ > rhn-users mailing list > rhn-users at redhat.com > https://www.redhat.com/mailman/listinfo/rhn-users -- Hiren Patel ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This e-mail and its contents are subject to the Telkom SA Limited e-mail legal notice available at http://www.telkom.co.za/TelkomEMailLegalNotice.PDF ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ _______________________________________________ rhn-users mailing list rhn-users at redhat.com https://www.redhat.com/mailman/listinfo/rhn-users From nicolas.greneche at ifn.fr Wed Jun 6 14:02:42 2007 From: nicolas.greneche at ifn.fr (GRENECHE Nicolas) Date: Wed, 6 Jun 2007 16:02:42 +0200 Subject: [rhn-users] Postgis on RHEL5 Message-ID: <5E3D22A4869BB94AA1138AB97660D8B69FD327@POPULUS.ifn.fr> Hi, I'd like to use postgis extension for postgresql. It's unavailable in builtins channels. After googling, I saw that this extension should be available via EPEL. Is there an EPEL for RHEL5 ? Can I connect yum on it ? Thanks, Nicolas GRENECHE Network Administrator IFN Nogent (www.ifn.fr) M at il : ngreneche at ifn.fr Tel : 02 38 28 02 21 From patelhn at telkom.co.za Wed Jun 6 14:39:43 2007 From: patelhn at telkom.co.za (Hiren Patel) Date: Wed, 06 Jun 2007 16:39:43 +0200 Subject: [rhn-users] Postgis on RHEL5 In-Reply-To: <5E3D22A4869BB94AA1138AB97660D8B69FD327@POPULUS.ifn.fr> References: <5E3D22A4869BB94AA1138AB97660D8B69FD327@POPULUS.ifn.fr> Message-ID: <1181140783.2613.1.camel@localhost.localdomain> seems like there is an EPEL for RHEL5, http://mirrors.fedoraproject.org/publiclist/EPEL/5/ i don't see why you would not be able to configure yum to use those repositories. On Wed, 2007-06-06 at 16:02 +0200, GRENECHE Nicolas wrote: > Hi, > > I'd like to use postgis extension for postgresql. > It's unavailable in builtins channels. > > After googling, I saw that this extension should be available via EPEL. > Is there an EPEL for RHEL5 ? > > Can I connect yum on it ? > > Thanks, > > Nicolas GRENECHE > Network Administrator > IFN Nogent (www.ifn.fr) > M at il : ngreneche at ifn.fr > Tel : 02 38 28 02 21 > > _______________________________________________ > rhn-users mailing list > rhn-users at redhat.com > https://www.redhat.com/mailman/listinfo/rhn-users -- Hiren Patel ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This e-mail and its contents are subject to the Telkom SA Limited e-mail legal notice available at http://www.telkom.co.za/TelkomEMailLegalNotice.PDF ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ From patelhn at telkom.co.za Wed Jun 6 14:47:56 2007 From: patelhn at telkom.co.za (Hiren Patel) Date: Wed, 06 Jun 2007 16:47:56 +0200 Subject: [rhn-users] listing unsupported packages In-Reply-To: <1179228865.4463.13.camel@localhost.localdomain> References: <464993B4.5050803@bruker.de> <544663BCC5B1E34698C8150370A668F303C B1B51@USATL01ME253.amer.lendlease.com> <1179228865.4463.13.camel@localhost.localdomain> Message-ID: <1181141276.2613.4.camel@localhost.localdomain> just for reference sakes, this can be done using: yum list extras On Tue, 2007-05-15 at 13:34 +0200, Hiren Patel wrote: > > i quite liked using 'up2date --show-orphans' to get a list of packages > that i needed to manually update and maintain. i don't see how to do > this using yum or other tools in RHEL5. > -- Hiren Patel ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This e-mail and its contents are subject to the Telkom SA Limited e-mail legal notice available at http://www.telkom.co.za/TelkomEMailLegalNotice.PDF ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ From jsherril at redhat.com Wed Jun 6 16:22:34 2007 From: jsherril at redhat.com (Justin Sherrill) Date: Wed, 06 Jun 2007 12:22:34 -0400 Subject: [rhn-users] RHN Errata Alert: Important: tomcat security update In-Reply-To: <464993B4.5050803@bruker.de> References: <464993B4.5050803@bruker.de> Message-ID: <4666DF4A.2030903@redhat.com> Gabriella, The RHEL 5 equivalent of 'up2date -p' is 'rhn-profile-sync' and it is part of the 'rhn-client-tools' package. Hope that helps! Justin Sherrill, RHCE Global Support Services Red Hat Inc. Gabriella Schmidt wrote: > Hi all, > > I've just got an E-mail from Red Hat Network Alert for Red Hat > Enterprise Linux 5. > And this time I scrolled down to the lines > > This Errata Advisory may apply to the systems listed below. If you > know that > this errata does not apply to a system listed, it might be > possible that the > package profile for that server is out of date. In that case you > should run > 'up2date -p' as root on the system in question to refresh your > software profile. > > and I was wondering what is the replacement for 'up2date -p', yum does > not support this option. > Do I always need to schedule this update on the RHN page? > > regards > Gabriella > ------------------------------------------------------------------------ > > _______________________________________________ > rhn-users mailing list > rhn-users at redhat.com > https://www.redhat.com/mailman/listinfo/rhn-users From mark.ballard at murraystate.edu Wed Jun 6 15:59:14 2007 From: mark.ballard at murraystate.edu (mark.ballard at murraystate.edu) Date: Wed, 6 Jun 2007 10:59:14 -0500 Subject: [rhn-users] Autoreply: rhn-users Digest, Vol 40, Issue 3 Message-ID: <200706061801.l56I1eO7028266@mx1.redhat.com> Thank you for your e-mail. I'm currently out of the office until June 20, 2007. If you need immediate attention, please call our helpdesk (270) 809-2346. Regards, Mark Ballard From paul.boin at arl.army.mil Wed Jun 6 19:14:14 2007 From: paul.boin at arl.army.mil (Boin, Paul (Cont, ARL/CISD)) Date: Wed, 06 Jun 2007 15:14:14 -0400 Subject: [rhn-users] Apache not serving kickstart trees Message-ID: <46670786.1010003@arl.army.mil> I'm interested in booting from CD, and then installing from the kickstart trees offered by the satellite server. (4.2.1, subscribed to Satellite and Tools channels) I see the stuff I want in the filesystem, which in this case is: /var/satellite/rhn/kickstart/ks-rhel-i386-client-5/ I also see this URL in the Satellite GUI, under 'Kickstart Details | Operating System', so the Satellite seems to know about it: http://example.com/rhn/kickstart/ks-rhel-i386-client-5 Apache doesn't seem to want to serve those files via those URLs however. I get the satellite GUI, and 'Page Not Found'. Nothing particularly helpful in the apache logs either... Cheers. -- Paul Boin From roy at manistee.org Thu Jun 7 01:12:44 2007 From: roy at manistee.org (Anciso, Roy) Date: Wed, 6 Jun 2007 21:12:44 -0400 Subject: [rhn-users] Xen on Red Hat 5 and Windows Guests Message-ID: I'm running RH5 & Xen and have mutliple Windows 2003 guests running. The guest VMs start fine with 'xm create vmname' command however they do not auto start or shutdown cleanly. For auto starting I have created symbolic links in the /etc/xen/auto directory. In the xend.log I see the following: [2007-06-06 20:03:40 xend 2981] ERROR (XendDomain:268) Restore failed Traceback (most recent call last): File "/usr/lib64/python2.4/site-packages/xen/xend/XendDomain.py", line 263, in domain_restore_fd return XendCheckpoint.restore(self, fd) File "/usr/lib64/python2.4/site-packages/xen/xend/XendCheckpoint.py", line 144, in restore "not a valid guest state file: pfn count read") File "/usr/lib64/python2.4/site-packages/xen/xend/XendCheckpoint.py", line 50, in read_exact raise XendError(errmsg) XendError: not a valid guest state file: pfn count read Has anyone else run into this issue? Thanks Roy Anciso Director of Technology Manistee Intermediate School District 1710 Merkey Road Manistee, MI 49660 Ph: 231-723-4264 Fx: 231-723-1690 roy at manistee.org -------------- next part -------------- An HTML attachment was scrubbed... URL: From patelhn at telkom.co.za Thu Jun 7 11:26:23 2007 From: patelhn at telkom.co.za (Hiren Patel) Date: Thu, 07 Jun 2007 13:26:23 +0200 Subject: [rhn-users] Apache not serving kickstart trees In-Reply-To: <46670786.1010003@arl.army.mil> References: <46670786.1010003@arl.army.mil> Message-ID: <1181215583.3053.32.camel@localhost.localdomain> i have never worked with satellite server before, but from first thoughts it looks like an apache thing to me. try and find the path apache is not happy with, by moving one higher in the URL until it finds the page/path, eg. http://example.com/rhn/kickstart/ks-rhel-i386-client-5 http://example.com/rhn/kickstart/ http://example.com/rhn/ http://example.com/ short of having a look at the apache config file, it is difficult to try and diagnose the issue. On Wed, 2007-06-06 at 15:14 -0400, Boin, Paul (Cont, ARL/CISD) wrote: > I'm interested in booting from CD, and then installing from the > kickstart trees offered by the satellite server. (4.2.1, subscribed to > Satellite and Tools channels) > > I see the stuff I want in the filesystem, which in this case is: > > /var/satellite/rhn/kickstart/ks-rhel-i386-client-5/ > > I also see this URL in the Satellite GUI, under 'Kickstart Details | > Operating System', so the Satellite seems to know about it: > > http://example.com/rhn/kickstart/ks-rhel-i386-client-5 > > > Apache doesn't seem to want to serve those files via those URLs however. > I get the satellite GUI, and 'Page Not Found'. > > Nothing particularly helpful in the apache logs either... > > > Cheers. > > -- Hiren Patel ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This e-mail and its contents are subject to the Telkom SA Limited e-mail legal notice available at http://www.telkom.co.za/TelkomEMailLegalNotice.PDF ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ From m.watts at eris.qinetiq.com Thu Jun 7 12:05:43 2007 From: m.watts at eris.qinetiq.com (Mark Watts) Date: Thu, 7 Jun 2007 13:05:43 +0100 Subject: [rhn-users] Apache not serving kickstart trees In-Reply-To: <46670786.1010003@arl.army.mil> References: <46670786.1010003@arl.army.mil> Message-ID: <200706071305.46942.m.watts@eris.qinetiq.com> > I'm interested in booting from CD, and then installing from the > kickstart trees offered by the satellite server. (4.2.1, subscribed to > Satellite and Tools channels) > > I see the stuff I want in the filesystem, which in this case is: > > /var/satellite/rhn/kickstart/ks-rhel-i386-client-5/ > > I also see this URL in the Satellite GUI, under 'Kickstart Details | > Operating System', so the Satellite seems to know about it: > > http://example.com/rhn/kickstart/ks-rhel-i386-client-5 > > > Apache doesn't seem to want to serve those files via those URLs however. > I get the satellite GUI, and 'Page Not Found'. > > Nothing particularly helpful in the apache logs either... > > > Cheers. Probably better to ask on rhn-satellite-users at redhat.com Mark. -- Mark Watts BSc RHCE MBCS Senior Systems Engineer QinetiQ Trusted Information Management Trusted Solutions and Services Group GPG Key: http://keyserver.veridis.com:11371/search?q=0x455420ED -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From patelhn at telkom.co.za Tue Jun 12 07:45:29 2007 From: patelhn at telkom.co.za (Hiren Patel) Date: Tue, 12 Jun 2007 09:45:29 +0200 Subject: [rhn-users] yum-updatesd memory usage Message-ID: <1181634329.2555.14.camel@localhost.localdomain> hi all, is it just me or does yum-updatesd use a lot of memory by default? this is the 'top' entry from a machine i have: PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 2317 root 15 0 40648 19m 3424 S 0.0 7.9 0:07.09 yum-updatesd this particular machine does not have a lot of memory. -- Hiren Patel ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This e-mail and its contents are subject to the Telkom SA Limited e-mail legal notice available at http://www.telkom.co.za/TelkomEMailLegalNotice.PDF ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ From smooge at gmail.com Tue Jun 12 21:39:56 2007 From: smooge at gmail.com (Stephen John Smoogen) Date: Tue, 12 Jun 2007 15:39:56 -0600 Subject: [rhn-users] yum-updatesd memory usage In-Reply-To: <1181634329.2555.14.camel@localhost.localdomain> References: <1181634329.2555.14.camel@localhost.localdomain> Message-ID: <80d7e4090706121439i72f51020qdeda8d165c6049be@mail.gmail.com> On 6/12/07, Hiren Patel wrote: > > hi all, > > is it just me or does yum-updatesd use a lot of memory by default? > > this is the 'top' entry from a machine i have: > > PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND > 2317 root 15 0 40648 19m 3424 S 0.0 7.9 0:07.09 yum-updatesd > It is not just you.. the program could really use some refactoring (or something). Having seen yum-updatesd grow to 256 MB on a 256 MB system does give the feeling of well-being. I mostly disable it on machines until such time I feel that it is not going to be eating resources I need on my virtual machines. -- Stephen J Smoogen. -- CSIRT/Linux System Administrator How far that little candle throws his beams! So shines a good deed in a naughty world. = Shakespeare. "The Merchant of Venice" From bgmilne at staff.telkomsa.net Thu Jun 14 10:07:45 2007 From: bgmilne at staff.telkomsa.net (Buchan Milne) Date: Thu, 14 Jun 2007 12:07:45 +0200 Subject: [rhn-users] proxying redhat updates In-Reply-To: <1180959271.2723.56.camel@localhost.localdomain> References: <1180951252.2723.41.camel@localhost.localdomain> <4663F9A6.6000307@redhat.com> <1180959271.2723.56.camel@localhost.localdomain> Message-ID: <200706141207.52370.bgmilne@staff.telkomsa.net> On Monday, 4 June 2007, Hiren Patel wrote: > thanks for the reply. > > when using up2date with ssl, does up2date not use ssl for everything, > including the download of the packages? would a standard proxy like > squid not relay ssl traffic from client to server without caching > anything? That's why there is: useNoSSLForPackages[comment]=Use the noSSLServerURL for package, package list, and header fetching useNoSSLForPackages=1 > i don't think i need to be caching rpms for kickstart installs, i have > media, run kickstart installs using that, then run updates using > up2date. > > On Mon, 2007-06-04 at 13:38 +0200, Miroslav Such? wrote: > > Hiren Patel wrote: > > > would a standard proxy like squid cache update packages from redhat if > > > a machine was pointed to use it as a proxy? we currently use up2date > > > with SSL and i am therefore suspecting that the rpms themselves are > > > getting cached by the proxy, can anyone confirm this? > > > > Yes, you can use normal proxy (like squid) to cache rpms. You can do it > > by editing file /etc/sysconfig/rhn/up2date and change this options: > > enableProxy[comment]=Use a HTTP Proxy > > enableProxy=0 > > enableProxyAuth[comment]=To use an authenticated proxy or not > > enableProxyAuth=0 > > httpProxy[comment]=HTTP proxy in host:port format, e.g. > > squid.redhat.com:3128 > > httpProxy= > > > > But normal proxy will not cache as much as RHN Proxy. > > E.g: When you use normal proxy, rpms during kickstart is not cached. -- Buchan Milne ISP Systems Specialist - Monitoring/Authentication Team Leader B.Eng,RHCE(803004789010797),LPIC-2(LPI000074592) http://en.wikipedia.org/wiki/List_of_Internet_slang_phrases -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available URL: From fwmailinglists at gmail.com Thu Jun 14 19:39:41 2007 From: fwmailinglists at gmail.com (Felix Windt) Date: Thu, 14 Jun 2007 12:39:41 -0700 Subject: [rhn-users] SpamAssassin update (RHSA-2007:0492) Message-ID: <02fe01c7aebb$c13657f0$3338000a@tehgeek> Hi, After reading RHSA-2007:0492 today, we ran a simple "up2date --update" to update the package. We then proceeded to restart the service: $ /etc/init.d/spamassassin restart Stopping spamd: [ OK ] Starting spamd: [27376] error: spamd: unable to determine home directory for user 'spmd' spamd: unable to determine home directory for user 'spmd' [FAILED] Checking the config file, we found: $ cat /etc/sysconfig/spamassassin # Options to spamd SPAMDOPTIONS="-d -x -m5 -uspmd -H/home/spamd" But: $ grep spam /etc/passwd spamd:x:52:52::/home/spamd:/sbin/nologin Editing the config file, changing it to use the existing user: $ cat /etc/sysconfig/spamassassin # Options to spamd SPAMDOPTIONS="-d -x -m5 -uspamd -H/home/spamd" Lead to success: $ /etc/init.d/spamassassin start Starting spamd: [ OK ] $ ps aux | grep spam | grep -v grep root 27386 0.1 0.2 114860 38744 ? Ss 12:06 0:00 /usr/bin/spamd -d -x -m5 -uspamd -H/home/spamd -r /var/run/spamd.pid spamd 27389 0.0 0.2 115388 39276 ? S 12:06 0:00 spamd child spamd 27390 0.0 0.2 114860 37160 ? S 12:06 0:00 spamd child The system is a Red Hat Enterprise Linux ES (v. 4 for AMD64/Intel EM64T) installation. Has anyone else been experiencing this? Thanks, Felix -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3092 bytes Desc: not available URL: From patelhn at telkom.co.za Fri Jun 15 08:07:26 2007 From: patelhn at telkom.co.za (Hiren Patel) Date: Fri, 15 Jun 2007 10:07:26 +0200 Subject: [rhn-users] repositories of trust? Message-ID: <1181894846.2606.35.camel@localhost.localdomain> hi all, apologies if this is not directly rhn related, but using the same tools on other repositories might make it somehow related, at least i hope so. i have a scenario where i require packages not provided by rhn, and have been thinking that the best way to use packages from external sources on production machines is to setup a build system of the same type to the production machines, download srpms, verify scripts and program sources using digital signatures etc, build and use. there are two issues, one being that some environments don't always have the resources to monitor these external packages for updates, run through the whole build process and testing process etc, second issue being that this cannot be automated easily enough. my question then is what external repositories do some of the folk use? simply configuring machines to use external repositories release this entire process off the system admins in an environment i would think, but to what level can one trust these sources for good maintenance, regular and timely updates etc. i know there are a few popular ones such as DAG. any advice would be appreciated. the other question, to what level would one steer off course on insisting that packages being used from external sources are compiled/built on the same distribution etc, for example for RHEL, my guess is that the next best thing would be EPEL, then maybe Centos extras/addons/contrib, then maybe fedora.. etc. how is this determined or planed by some? and one last question, how would one determine what version of fedora a RHEL release is based off? if package finding goes all the way down to fedora, i would imagine using packages from the release of fedora, that the version of RHEL one is using, is based off, would be the best way to go. any comments/suggestions/advice would be much appreciated. thanks. -- Hiren Patel ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This e-mail and its contents are subject to the Telkom SA Limited e-mail legal notice available at http://www.telkom.co.za/TelkomEMailLegalNotice.PDF ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ From Greg.Caetano at hp.com Fri Jun 15 17:11:44 2007 From: Greg.Caetano at hp.com (Caetano, Greg) Date: Fri, 15 Jun 2007 13:11:44 -0400 Subject: [rhn-users] RE: Error registering server with satellite-server Message-ID: I have a user that is receiving this "software updates setup unsuccessful" dialog box when registering a RHEL5 server to a v4.2.1 Satellite Server. The system is registered - we see the messages regarding sending the profile - the review subscription details screen appears - then this message box. We log into the satellite server and it appears to have a proper profile and we can interactively request updates from the server command line. Is this triggered because some service is not running "rhnsd" or yum-updatesd? It appears this message is from this code segment in /usr/share/rhn/up2date_client/gui.py self.finishPage.emit_stop_by_name("prepare") if rhnregGui.hasBaseChannelAndUpdates(): self.druid.finish.set_label(_("_Finish")) title = _("Finish setting up software updates") else: self.druid.finish.set_label(_("_Exit software update setup")) title = _("software updates setup unsuccessful") self.finishPagePrepare() Thanks Greg Greg Caetano HP TSG Linux Solutions Alliances Engineering Chicago, IL greg.caetano at hp.com Red Hat Certified Engineer RHCE#803004972711193 From jimlyle at gmail.com Tue Jun 19 16:56:54 2007 From: jimlyle at gmail.com (Jim Lyle) Date: Tue, 19 Jun 2007 12:56:54 -0400 Subject: [rhn-users] CLI Update Message-ID: Hello all, I am trying to put together a script that will go out and update my servers. The intention is to put it in cron, giving myself adequate leeway after testing of course :) I am subscribed to rhel-i386-es-4. I don't need assistance with the script, but rather the specific command. I see a ton of options for up2date, but all I want to do is update packages that are currently on the system. I see the following options for up2date, but neither quite fits: -i or --install wants a specific package name --installall *appears* to want to install *all* packages in that channel. Any suggestions? Yes, I could do it on the webpage, but currently do not have management entitlements, so would have do do each system individually and that would be a very very very last step. Thank you for your time!! -Jim -- "He who fights too long against dragons becomes a dragon himself; and if you gaze too long into the abyss, the abyss will gaze into you." From richa at firstlink.com Tue Jun 19 17:02:31 2007 From: richa at firstlink.com (Rich Archuleta) Date: Tue, 19 Jun 2007 11:02:31 -0600 Subject: [rhn-users] CLI Update References: Message-ID: Jim, Up2date -u might be your ticket. Regards, - Rich Archuleta - -----Original Message----- From: rhn-users-bounces at redhat.com [mailto:rhn-users-bounces at redhat.com] On Behalf Of Jim Lyle Sent: Tuesday, June 19, 2007 10:57 AM To: rhn-users at redhat.com Subject: [rhn-users] CLI Update Hello all, I am trying to put together a script that will go out and update my servers. The intention is to put it in cron, giving myself adequate leeway after testing of course :) I am subscribed to rhel-i386-es-4. I don't need assistance with the script, but rather the specific command. I see a ton of options for up2date, but all I want to do is update packages that are currently on the system. I see the following options for up2date, but neither quite fits: -i or --install wants a specific package name --installall *appears* to want to install *all* packages in that channel. Any suggestions? Yes, I could do it on the webpage, but currently do not have management entitlements, so would have do do each system individually and that would be a very very very last step. Thank you for your time!! -Jim -- "He who fights too long against dragons becomes a dragon himself; and if you gaze too long into the abyss, the abyss will gaze into you." _______________________________________________ rhn-users mailing list rhn-users at redhat.com https://www.redhat.com/mailman/listinfo/rhn-users From inode0 at gmail.com Tue Jun 19 17:03:00 2007 From: inode0 at gmail.com (inode0) Date: Tue, 19 Jun 2007 12:03:00 -0500 Subject: [rhn-users] CLI Update In-Reply-To: References: Message-ID: On 6/19/07, Jim Lyle wrote: > Hello all, > I am trying to put together a script that will go out and update my > servers. The intention is to put it in cron, giving myself adequate > leeway after testing of course :) I am subscribed to rhel-i386-es-4. > I don't need assistance with the script, but rather the specific > command. > > I see a ton of options for up2date, but all I want to do is update > packages that are currently on the system. > > I see the following options for up2date, but neither quite fits: > > -i or --install wants a specific package name > --installall *appears* to want to install *all* packages in that channel. > > Any suggestions? Yes, I could do it on the webpage, but currently do > not have management entitlements, so would have do do each system > individually and that would be a very very very last step. I think you are looking for -u rather than -i. John From duffy at redhat.com Tue Jun 19 17:04:01 2007 From: duffy at redhat.com (=?ISO-8859-1?Q?M=E1ir=EDn_Duffy?=) Date: Tue, 19 Jun 2007 13:04:01 -0400 Subject: [rhn-users] CLI Update In-Reply-To: References: Message-ID: <46780C81.9030405@redhat.com> Hi Jim! Jim Lyle wrote: > I see a ton of options for up2date, but all I want to do is update > packages that are currently on the system. > > I see the following options for up2date, but neither quite fits: > > -i or --install wants a specific package name > --installall *appears* to want to install *all* packages in that channel. It looks like other folks have already pointed you to the right command. I wanted to also point out that up2date has a lot more options than that. See 'man up2date' for a full list. ~m From jimlyle at gmail.com Tue Jun 19 17:06:21 2007 From: jimlyle at gmail.com (Jim Lyle) Date: Tue, 19 Jun 2007 13:06:21 -0400 Subject: [rhn-users] CLI Update In-Reply-To: References: Message-ID: Wow Rich, that was it. I looked again, I sure don't see that option, thank you very much! Have a great day! -Jim On 6/19/07, Rich Archuleta wrote: > Jim, > > Up2date -u might be your ticket. > > Regards, > > - Rich Archuleta - > > -----Original Message----- > From: rhn-users-bounces at redhat.com [mailto:rhn-users-bounces at redhat.com] > On Behalf Of Jim Lyle > Sent: Tuesday, June 19, 2007 10:57 AM > To: rhn-users at redhat.com > Subject: [rhn-users] CLI Update > > Hello all, > I am trying to put together a script that will go out and update my > servers. The intention is to put it in cron, giving myself adequate > leeway after testing of course :) I am subscribed to rhel-i386-es-4. > I don't need assistance with the script, but rather the specific > command. > > I see a ton of options for up2date, but all I want to do is update > packages that are currently on the system. > > I see the following options for up2date, but neither quite fits: > > -i or --install wants a specific package name > --installall *appears* to want to install *all* packages in that > channel. > > Any suggestions? Yes, I could do it on the webpage, but currently do > not have management entitlements, so would have do do each system > individually and that would be a very very very last step. > > Thank you for your time!! > -Jim > > > -- > "He who fights too long against dragons becomes > a dragon himself; and if you gaze too long into the > abyss, the abyss will gaze into you." > > _______________________________________________ > rhn-users mailing list > rhn-users at redhat.com > https://www.redhat.com/mailman/listinfo/rhn-users > > _______________________________________________ > rhn-users mailing list > rhn-users at redhat.com > https://www.redhat.com/mailman/listinfo/rhn-users > -- "He who fights too long against dragons becomes a dragon himself; and if you gaze too long into the abyss, the abyss will gaze into you." From richa at firstlink.com Tue Jun 19 17:07:28 2007 From: richa at firstlink.com (Rich Archuleta) Date: Tue, 19 Jun 2007 11:07:28 -0600 Subject: [rhn-users] CLI Update References: Message-ID: You're more than welcome, Jim. - Rich - -----Original Message----- From: rhn-users-bounces at redhat.com [mailto:rhn-users-bounces at redhat.com] On Behalf Of Jim Lyle Sent: Tuesday, June 19, 2007 11:06 AM To: Discussions about Red Hat Network (rhn.redhat.com) Subject: Re: [rhn-users] CLI Update Wow Rich, that was it. I looked again, I sure don't see that option, thank you very much! Have a great day! -Jim On 6/19/07, Rich Archuleta wrote: > Jim, > > Up2date -u might be your ticket. > > Regards, > > - Rich Archuleta - > > -----Original Message----- > From: rhn-users-bounces at redhat.com [mailto:rhn-users-bounces at redhat.com] > On Behalf Of Jim Lyle > Sent: Tuesday, June 19, 2007 10:57 AM > To: rhn-users at redhat.com > Subject: [rhn-users] CLI Update > > Hello all, > I am trying to put together a script that will go out and update my > servers. The intention is to put it in cron, giving myself adequate > leeway after testing of course :) I am subscribed to rhel-i386-es-4. > I don't need assistance with the script, but rather the specific > command. > > I see a ton of options for up2date, but all I want to do is update > packages that are currently on the system. > > I see the following options for up2date, but neither quite fits: > > -i or --install wants a specific package name > --installall *appears* to want to install *all* packages in that > channel. > > Any suggestions? Yes, I could do it on the webpage, but currently do > not have management entitlements, so would have do do each system > individually and that would be a very very very last step. > > Thank you for your time!! > -Jim > > > -- > "He who fights too long against dragons becomes > a dragon himself; and if you gaze too long into the > abyss, the abyss will gaze into you." > > _______________________________________________ > rhn-users mailing list > rhn-users at redhat.com > https://www.redhat.com/mailman/listinfo/rhn-users > > _______________________________________________ > rhn-users mailing list > rhn-users at redhat.com > https://www.redhat.com/mailman/listinfo/rhn-users > -- "He who fights too long against dragons becomes a dragon himself; and if you gaze too long into the abyss, the abyss will gaze into you." _______________________________________________ rhn-users mailing list rhn-users at redhat.com https://www.redhat.com/mailman/listinfo/rhn-users From jef_umd at umd.umich.edu Tue Jun 19 18:43:36 2007 From: jef_umd at umd.umich.edu (jef e) Date: Tue, 19 Jun 2007 14:43:36 -0400 Subject: [rhn-users] Various RHN config options Message-ID: <467823D8.7030703@umd.umich.edu> Hi all, Looking at possibly deploying more RH systems here, and had a few questions regarding some of the RHN features I am reading about, and what my sales contact is telling me. I've done some reading at the RHN site, and watched some webcats, but some of it is still a bit vague on details and specifics. What I'm wondering about is the use of the Proxy vs. Satellite servers. Even though we are able to take advantage of some EDU pricing, Redhat still tends to price some things outside of our budget - so we could possibly take advantage of a Proxy server, but probably not a Satellite server. So, the question is, is there any advantage to running a Proxy server over just using basic RHN, other than bandwidth issue (which is not an issue for us)? Does the proxy give you any more control over managing servers at all? What about Push updating? Can that be done with a Proxy? Is the management still handled on the RHN side or at the proxy? We don't need to worry about provisioning or monitoring, as we already have systems in place that handle that. Perhaps going forward we would look into it, but right now we are mainly concerned with updates. Any info, experiences and links are appreciated. Thanks! jef From inode0 at gmail.com Tue Jun 19 18:51:59 2007 From: inode0 at gmail.com (inode0) Date: Tue, 19 Jun 2007 13:51:59 -0500 Subject: [rhn-users] Various RHN config options In-Reply-To: <467823D8.7030703@umd.umich.edu> References: <467823D8.7030703@umd.umich.edu> Message-ID: On 6/19/07, jef e wrote: > So, the question is, is there any advantage to running a Proxy server > over just using basic RHN, other than bandwidth issue (which is not an > issue for us)? Does the proxy give you any more control over managing > servers at all? What about Push updating? Can that be done with a Proxy? > Is the management still handled on the RHN side or at the proxy? Proxy servers work well for their main intended purpose, caching packages. As far as I know they have no "pushing" capabilities. In addition to what you get with RHN hosted a proxy server does support custom channels for making non-RHEL packages available to your users via up2date/yum and managing those packages within the RHN framework. This has worked well for us until recently. Normal management of machines and users is still all done via RHN at Red Hat. One other often missed feature of a proxy server at an edu is the included site subscription which to me is worth more than anything else, but this must be weighed against your needs and inclination to support systems not owned by your university. Some perhaps aren't even allowed to do this by local regulations. John From jef_umd at umd.umich.edu Tue Jun 19 19:41:41 2007 From: jef_umd at umd.umich.edu (jef e) Date: Tue, 19 Jun 2007 15:41:41 -0400 Subject: [rhn-users] Various RHN config options In-Reply-To: References: <467823D8.7030703@umd.umich.edu> Message-ID: <46783175.3060907@umd.umich.edu> inode0 wrote: > As far as I know they have no "pushing" capabilities. In addition to > what you get with RHN hosted a proxy server does support custom > channels for making non-RHEL packages available to your users via > up2date/yum and managing those packages within the RHN framework. This > has worked well for us until recently. We have very few packages that we build ourselves in our current Debian environment, but making our own repository has been helpful. Knowing that we could do the same with the proxy is good to know. I've not had to do this yet, but does the basic Hosted RHN let you push out updates to systems, or at least schedule automatic updating of them? (Rather than logging in to each one and doing 'up2date -u'?) > Normal management of machines and users is still all done via RHN at Red > Hat. Thats what I figured, despite sales person saying the opposite. :-) > One other often missed feature of a proxy server at an edu is the > included site subscription which to me is worth more than anything > else, but this must be weighed against your needs and inclination to > support systems not owned by your university. Some perhaps aren't even > allowed to do this by local regulations. We don't wish to get into the Redhat support game at the moment (we are stretched pretty thin as it is), so the site license is definitely not on our radar. :) For us, even the Department license is overkill at 500 subscriptions -- however, it does include a proxy server. If we take into account the cost of the number of individual subs. that we need plus the cost of adding a proxy server, the Department license isn't that much more expensive, even if we do have 'wasted' subscriptions. (Thus my questions about the proxy's usefulness - just trying to get a feel for what we might get out of it that isn't really mentioned in RH's literature and such.) Thanks much for the information. jef From inode0 at gmail.com Tue Jun 19 20:38:10 2007 From: inode0 at gmail.com (inode0) Date: Tue, 19 Jun 2007 15:38:10 -0500 Subject: [rhn-users] Various RHN config options In-Reply-To: <46783175.3060907@umd.umich.edu> References: <467823D8.7030703@umd.umich.edu> <46783175.3060907@umd.umich.edu> Message-ID: On 6/19/07, jef e wrote: > inode0 wrote: > > > As far as I know they have no "pushing" capabilities. In addition to > > what you get with RHN hosted a proxy server does support custom > > channels for making non-RHEL packages available to your users via > > up2date/yum and managing those packages within the RHN framework. This > > has worked well for us until recently. > > We have very few packages that we build ourselves in our current Debian > environment, but making our own repository has been helpful. Knowing > that we could do the same with the proxy is good to know. > > I've not had to do this yet, but does the basic Hosted RHN let you push > out updates to systems, or at least schedule automatic updating of them? > (Rather than logging in to each one and doing 'up2date -u'?) Yes you can schedule updates from the RHN hosted interface. Whether they will get picked up or not is another story. We honestly have not had very good luck with things scheduled via RHN actually working as one would expect, however I can't help but think our experience is unusual. If everyone had the problems we've had I can't really imagine anyone would use the scheduling features at all. If our users want errata applied automatically I now tell them to run up2date -u from cron once a day since that seems to be the only reliable option we have at the moment. This is not a push, and I think the design choice here is a good one. You schedule the action and then it sits queued on RHN until the machine checks in and picks it up. This allows more flexible network and firewall setups to work without making special arrangements. > > Normal management of machines and users is still all done via RHN at Red > > Hat. > > Thats what I figured, despite sales person saying the opposite. :-) > > > > One other often missed feature of a proxy server at an edu is the > > included site subscription which to me is worth more than anything > > else, but this must be weighed against your needs and inclination to > > support systems not owned by your university. Some perhaps aren't even > > allowed to do this by local regulations. > > We don't wish to get into the Redhat support game at the moment (we are > stretched pretty thin as it is), so the site license is definitely not > on our radar. :) Well, support was a bad word. More like be ok with your users using your proxy with their personal equipment as you would see fit to allow. > For us, even the Department license is overkill at 500 subscriptions -- > however, it does include a proxy server. If we take into account the > cost of the number of individual subs. that we need plus the cost of > adding a proxy server, the Department license isn't that much more > expensive, even if we do have 'wasted' subscriptions. (Thus my questions > about the proxy's usefulness - just trying to get a feel for what we > might get out of it that isn't really mentioned in RH's literature and > such.) The site subscription with a proxy (and I have no idea if the same is true in your arrangement) does not cover university equipment. I will say emphatically that our users are very happy with the proxy server's performance over the past years. The speed difference during large updates is very obvious. We also use it for network installs and users really like that (although that could of course be done elsewhere too). John From smal at ccmb.res.in Wed Jun 20 06:05:31 2007 From: smal at ccmb.res.in (Mahalingam Subramaniam) Date: Wed, 20 Jun 2007 11:35:31 +0530 (IST) Subject: [rhn-users] update issue Message-ID: <15897649.1182319531203.JavaMail.root@mailserver> Hello All Invariably and consistently there is an error message while l try to update the OS - RHEL AS 3 (Taroon Update3), as follows: https://xmlrpc.rhn.redhat.com/XMLRPC https://xmlrpc.rhn.redhat.com/XMLRPC https://xmlrpc.rhn.redhat.com/XMLRPC https://xmlrpc.rhn.redhat.com/XMLRPC https://xmlrpc.rhn.redhat.com/XMLRPC Error communicating with server. The message was: Connection timed out......... Could anybody figure out what could be the cause? I have been using both "up2date and yum" with various flags but it is futile.... Many more thanks in advance............. with more thanks michael albertina -------------- next part -------------- An HTML attachment was scrubbed... URL: From dthornton at star.net.uk Wed Jun 20 07:30:04 2007 From: dthornton at star.net.uk (David Thornton) Date: Wed, 20 Jun 2007 08:30:04 +0100 Subject: [rhn-users] CLI Update References: Message-ID: <105163f2-1f00-11dc-9e06-001185c@rocketseed.star.net.uk> http://www.star.net.uk Why not schedule the updates via rhn? David David Thornton --------------------------------------------- dthornton at star.net.uk T: 0871 641 2492 M: 07917 008738 F: 01285 884491 www.star.net.uk Star - Technology at your command -----Original Message----- From: rhn-users-bounces at redhat.com [mailto:rhn-users-bounces at redhat.com] On Behalf Of Jim Lyle Sent: 19 June 2007 17:57 To: rhn-users at redhat.com Subject: [rhn-users] CLI Update Hello all, I am trying to put together a script that will go out and update my servers. The intention is to put it in cron, giving myself adequate leeway after testing of course :) I am subscribed to rhel-i386-es-4. I don't need assistance with the script, but rather the specific command. I see a ton of options for up2date, but all I want to do is update packages that are currently on the system. I see the following options for up2date, but neither quite fits: -i or --install wants a specific package name --installall *appears* to want to install *all* packages in that channel. Any suggestions? Yes, I could do it on the webpage, but currently do not have management entitlements, so would have do do each system individually and that would be a very very very last step. Thank you for your time!! -Jim -- "He who fights too long against dragons becomes a dragon himself; and if you gaze too long into the abyss, the abyss will gaze into you." _______________________________________________ rhn-users mailing list rhn-users at redhat.com https://www.redhat.com/mailman/listinfo/rhn-users ______________________________________________________________________ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email ______________________________________________________________________ Star Technology Services Limited is a company registered in England and Wales with registered office at Brighouse Court, Barnett Way, Barnwood, Gloucester, GL4 3RT, United Kingdom, Company Number 3077786, VAT Number 810943641. 1) This email is confidential and may contain privileged or copyright information. You may not present this message to another party without consent from the sender. If you are not the named recipient of this email or have received this email in error please notify the sender by email and delete this email. You are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited. 2) This email is not a binding agreement and does not conclude an agreement without the express confirmation by a director of the Company. 3)The Company does not certify that this email is free of viruses or defects and recommends that you undertake your virus checking procedures prior to use. 4) The Company does not consent to its employees sending non-solicited emails which contravene the law. In the event that you believe this email is such, please notify the Company in order for the appropriate corrective action to be taken. 5) Any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the Company. Any actions taken on the basis of this email are at the reader?s own risk. 6) The sender of this email is expressly required not to make any defamatory statements. Any such communication is contrary to Company policy and outside the scope of the employment of the individual concerned. The Company will not accept any liability in respect of such communication, and the employee responsible will be personally liable for any damages or other liability arising. -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: rocketseed_insert1.jpg Type: image/jpeg Size: 11766 bytes Desc: not available URL: From mertensb at mazdaeur.com Wed Jun 20 15:55:42 2007 From: mertensb at mazdaeur.com (Mertens, Bram) Date: Wed, 20 Jun 2007 17:55:42 +0200 Subject: [rhn-users] Manage system configuration files through RHN Message-ID: Hello all, I'm investigating the possibility to manage our RH servers through RHN. Currently we are running various versions with various levels of updates installed and managing these has ebcome quite a challenge. On top of that we are in the process of implementing a new corporate policy on security which is posing further restrictions which I'd like to be able to fullfill this way as well. >From the documentation I read so far I gather that most of the things I'd like to be able to do are possible with RHN but so far I haven't found the documentation that shows exactly HOW to do so. This makes it difficult to determine whether or not what I believe is possible actually is or not. Also there are probably alternatives to consider as well and I'm hoping to get some info on that from you. 1) Can we deploy RHN in an enviroment where not all clients that are to connect to RHN are running the same version of RH or are not updated to the same level? The idea is to standardize most of these servers but there several servers that must be kept at a lower version/update level. 2) Is user management handled at all by RHN? Or do we need to look into something like PAM authentication with an LDAP server? Something like Red Hat Directory server? 3) We'd also like to manage /etc/sudoers, /etc/hosts, etc. Through this tool, it appears to us that we'd need the RHN Provisioning service for this as the Management service doesn't appear to include this possibility. Is there any documentation available about this specific option? Specifically what is possible and what not? Restarting services like logrotate after modifying a configuration file, which files can be served this way, etc. Thanks in advance Bram Mazda Motor Logistics Europe NV, Blaasveldstraat 162, B-2830 Willebroek VAT BE 406.024.281, RPR Mechelen, ING 310-0092504-52, IBAN : BE64 3100 0925 0452, SWIFT : BBRUBEBB From deterlin at us.ibm.com Wed Jun 20 17:26:12 2007 From: deterlin at us.ibm.com (Keith Deterling) Date: Wed, 20 Jun 2007 13:26:12 -0400 Subject: [rhn-users] Re: rhn-users Digest, Vol 40, Issue 12 In-Reply-To: <20070620160006.B672B73420@hormel.redhat.com> Message-ID: We use cfengine for this task for local users and configuration files. It scales very well to about 10-50 servers. http://www.cfengine.org/ > 2) Is user management handled at all by RHN? Or do we need to look into > something like PAM authentication with an LDAP server? Something like > Red Hat Directory server? > 3) We'd also like to manage /etc/sudoers, /etc/hosts, etc. Through this > tool, it appears to us that we'd need the RHN Provisioning service for > this as the Management service doesn't appear to include this > possibility. Is there any documentation available about this specific > option? Specifically what is possible and what not? Restarting > services like logrotate after modifying a configuration file, which > files can be served this way, etc. Keith Deterling deterlin at us.ibm.com Advisory IT Specialist Unix & Intel Server Services - IBM Account IBM Global Services - Americas Service Delivery ? Server Systems Operation Team Essex, Junction, VT 05242 ? Bldg. 967 ? 1C2009 Tie-Line 8-446-3535 or (802) 769-3535 Fax: (802)-769-4253 (T/L: 8-446-4253) In Hoc Pengo Vinces rhn-users-request @redhat.com Sent by: To rhn-users-bounces rhn-users at redhat.com @redhat.com cc Subject 06/20/2007 12:00 rhn-users Digest, Vol 40, Issue 12 PM Please respond to rhn-users at redhat. com Send rhn-users mailing list submissions to rhn-users at redhat.com To subscribe or unsubscribe via the World Wide Web, visit https://www.redhat.com/mailman/listinfo/rhn-users or, via email, send a message with subject or body 'help' to rhn-users-request at redhat.com You can reach the person managing the list at rhn-users-owner at redhat.com When replying, please edit your Subject line so it is more specific than "Re: Contents of rhn-users digest..." Today's Topics: 1. Manage system configuration files through RHN (Mertens, Bram) ---------------------------------------------------------------------- Message: 1 Date: Wed, 20 Jun 2007 17:55:42 +0200 From: "Mertens, Bram" Subject: [rhn-users] Manage system configuration files through RHN To: Message-ID: Content-Type: text/plain; charset="US-ASCII" Hello all, I'm investigating the possibility to manage our RH servers through RHN. Currently we are running various versions with various levels of updates installed and managing these has ebcome quite a challenge. On top of that we are in the process of implementing a new corporate policy on security which is posing further restrictions which I'd like to be able to fullfill this way as well. >From the documentation I read so far I gather that most of the things I'd like to be able to do are possible with RHN but so far I haven't found the documentation that shows exactly HOW to do so. This makes it difficult to determine whether or not what I believe is possible actually is or not. Also there are probably alternatives to consider as well and I'm hoping to get some info on that from you. 1) Can we deploy RHN in an enviroment where not all clients that are to connect to RHN are running the same version of RH or are not updated to the same level? The idea is to standardize most of these servers but there several servers that must be kept at a lower version/update level. 2) Is user management handled at all by RHN? Or do we need to look into something like PAM authentication with an LDAP server? Something like Red Hat Directory server? 3) We'd also like to manage /etc/sudoers, /etc/hosts, etc. Through this tool, it appears to us that we'd need the RHN Provisioning service for this as the Management service doesn't appear to include this possibility. Is there any documentation available about this specific option? Specifically what is possible and what not? Restarting services like logrotate after modifying a configuration file, which files can be served this way, etc. Thanks in advance Bram Mazda Motor Logistics Europe NV, Blaasveldstraat 162, B-2830 Willebroek VAT BE 406.024.281, RPR Mechelen, ING 310-0092504-52, IBAN : BE64 3100 0925 0452, SWIFT : BBRUBEBB ------------------------------ _______________________________________________ rhn-users mailing list rhn-users at redhat.com https://www.redhat.com/mailman/listinfo/rhn-users End of rhn-users Digest, Vol 40, Issue 12 ***************************************** From jsherril at redhat.com Wed Jun 20 18:07:16 2007 From: jsherril at redhat.com (Justin Sherrill) Date: Wed, 20 Jun 2007 14:07:16 -0400 Subject: [rhn-users] update issue In-Reply-To: <15897649.1182319531203.JavaMail.root@mailserver> References: <15897649.1182319531203.JavaMail.root@mailserver> Message-ID: <46796CD4.8000905@redhat.com> Hi, 1) Are you using an http proxy? If so, is it configured properly in /etc/sysconfig/rhn/up2date ? 2) If not, are you able to run: # telnet xmlrpc.rhn.redhat.com 443 successfully? This should test network connectivity to RHN's server. Justin Mahalingam Subramaniam wrote: > Hello All > > Invariably and consistently there is an error message while l try to > update the OS - RHEL AS 3 (Taroon Update3), as follows: > > https://xmlrpc.rhn.redhat.com/XMLRPC > https://xmlrpc.rhn.redhat.com/XMLRPC > https://xmlrpc.rhn.redhat.com/XMLRPC > https://xmlrpc.rhn.redhat.com/XMLRPC > https://xmlrpc.rhn.redhat.com/XMLRPC > Error communicating with server. The message was: > Connection timed out......... > > Could anybody figure out what could be the cause? I have been using > both "up2date and yum" with various flags but it is futile.... Many > more thanks in advance............. > > with more thanks > michael albertina > > ------------------------------------------------------------------------ > > _______________________________________________ > rhn-users mailing list > rhn-users at redhat.com > https://www.redhat.com/mailman/listinfo/rhn-users From mertensb at mazdaeur.com Thu Jun 21 06:20:57 2007 From: mertensb at mazdaeur.com (Mertens, Bram) Date: Thu, 21 Jun 2007 08:20:57 +0200 Subject: [rhn-users] Re: rhn-users Digest, Vol 40, Issue 12 In-Reply-To: References: <20070620160006.B672B73420@hormel.redhat.com> Message-ID: > Mazda Motor Logistics Europe NV, Blaasveldstraat 162, B-2830 Willebroek VAT BE 406.024.281, RPR Mechelen, ING 310-0092504-52, IBAN : BE64 3100 0925 0452, SWIFT : BBRUBEBB -----Original Message----- > From: rhn-users-bounces at redhat.com > [mailto:rhn-users-bounces at redhat.com] On Behalf Of Keith Deterling > Sent: woensdag 20 juni 2007 19:26 > To: rhn-users at redhat.com > Cc: rhn-users at redhat.com; rhn-users-bounces at redhat.com > Subject: [rhn-users] Re: rhn-users Digest, Vol 40, Issue 12 > > > We use cfengine for this task for local users and configuration files. > It scales very well to about 10-50 servers. > > http://www.cfengine.org/ > > > 2) Is user management handled at all by RHN? Or do we need > to look into > > something like PAM authentication with an LDAP server? > Something like > > Red Hat Directory server? > > > 3) We'd also like to manage /etc/sudoers, /etc/hosts, etc. > Through this > > tool, it appears to us that we'd need the RHN Provisioning > service for > > this as the Management service doesn't appear to include this > > possibility. Is there any documentation available about > this specific > > option? Specifically what is possible and what not? Restarting > > services like logrotate after modifying a configuration file, which > > files can be served this way, etc. There doesn't appear to be RPMs for cfengine on the disks we have, where would I get "offical" Red Hat builds of this tool? It appears you can only download the source from the site. I've only looked into it quickly but it appears that user management through this tool is limited to copying /etc/passwd and /etc/shadow to various hosts. Does that mean you can't do things like allow user X to log on on server A and B but not on server C? Thanks in advance [...] From smal at ccmb.res.in Thu Jun 21 06:53:43 2007 From: smal at ccmb.res.in (Mahalingam Subramaniam) Date: Thu, 21 Jun 2007 12:23:43 +0530 (IST) Subject: [rhn-users] update issue In-Reply-To: <46796CD4.8000905@redhat.com> Message-ID: <11124697.1182408823338.JavaMail.root@mailserver> Hello Mr. Justin Yes, we are using proxy server to access the internet. Moreover, I am not able to access the RNN server as I am getting connection timed out error message from http://www.xmlrpc.rhn.redhat.com/XMLRPC. server. with kind regards s.mahalingam S.Mahalingam Bioinformatics Centre Centre for Cellular and Molecular Biology Habsiguda, Uppal Road, Hyderabad 500 007 Ph:+91-40-27192773, 27192774 +91-40-27160222 - 41 (20 Lines) Ext: 2773, 2774 Fax: :+91-40-27160591, 27160311 E-mail: smal at ccmb.res.in smal8 at yahoo.com http://www.ccmb.res.in -- Original Message -- From: Justin Sherrill To: "Discussions about Red Hat Network (rhn.redhat.com)" Date: Wed, 20 Jun 2007 14:07:16 -0400 Subject: Re: [rhn-users] update issue Hi, 1) Are you using an http proxy? If so, is it configured properly in /etc/sysconfig/rhn/up2date ? 2) If not, are you able to run: # telnet xmlrpc.rhn.redhat.com 443 successfully? This should test network connectivity to RHN's server. Justin Mahalingam Subramaniam wrote: > Hello All > > Invariably and consistently there is an error message while l try to > update the OS - RHEL AS 3 (Taroon Update3), as follows: > > https://xmlrpc.rhn.redhat.com/XMLRPC > https://xmlrpc.rhn.redhat.com/XMLRPC > https://xmlrpc.rhn.redhat.com/XMLRPC > https://xmlrpc.rhn.redhat.com/XMLRPC > https://xmlrpc.rhn.redhat.com/XMLRPC > Error communicating with server. The message was: > Connection timed out......... > > Could anybody figure out what could be the cause? I have been using > both "up2date and yum" with various flags but it is futile.... Many > more thanks in advance............. > > with more thanks > michael albertina > > ------------------------------------------------------------------------ > > _______________________________________________ > rhn-users mailing list > rhn-users at redhat.com > https://www.redhat.com/mailman/listinfo/rhn-users _______________________________________________ rhn-users mailing list rhn-users at redhat.com https://www.redhat.com/mailman/listinfo/rhn-users -------------- next part -------------- An HTML attachment was scrubbed... URL: From KLinville at IntegraBank.com Thu Jun 21 15:46:31 2007 From: KLinville at IntegraBank.com (Kris Linville) Date: Thu, 21 Jun 2007 10:46:31 -0500 Subject: [rhn-users] Kris Linville/MainOffice/Integra is out of the office. Message-ID: I will be out of the office starting Thu 06/21/2007 and will not return until Fri 06/22/2007. If you are in need of immediate assistance, please contact the IT Support team at extension 9555. Otherwise, I will contact you upon my return to the office. Thank you, CONFIDENTIALITY NOTICE: The materials in this electronic mail transmission (including attachments) are private and confidential and are the property of the sender and Integra Bank. The information contained in the material is intended only for the use of the named addressee(s). If you are not a named addressee, be advised that any unauthorized disclosure, copying, distribution or the taking of any action in reliance on the contents of this material is strictly prohibited. If you have received this electronic mail transmission in error, please immediately notify the sender by sending an e-mail message and thereafter, destroy it immediately. From mertensb at mazdaeur.com Tue Jun 26 14:03:40 2007 From: mertensb at mazdaeur.com (Mertens, Bram) Date: Tue, 26 Jun 2007 16:03:40 +0200 Subject: [rhn-users] Using up2date behind a proxy that requires authentication Message-ID: Hi I would like to register a server with RHN but I am unable to get past the proxy server. According to https://rhn.redhat.com/help/faq/#61 setting "proxyUrl" and "enableProxy" is all that is needed but I guess this doesn't take authentication into account. Next I configured my username and password according to https://rhn.redhat.com/help/reference/s1-up2date-config.html but I still get the following error: Proxy Authentication Required ( The ISA Server requires authorization to fulfill the request. Access to the Web Proxy service is denied. ) I get this error even after changing the protocol for serverUrl to http. After setting the following values in ~/.elinks/elinks.conf I am able to open http://xmlrpc.rhn.redhat.com/XMLRPC but not https://xmlrpc.rhn.redhat.com/XMLRPC. When I try to access the https Url I get a "host not found" message. # cat .elinks/elinks.conf set protocol.http.proxy.host = "http://proxy.mle.mazdaeur.com:80" set protocol.http.proxy.user = "mertensb" set protocol.http.proxy.passwd = "xxxxx" Setting protocol.https.proxy.host does not appear to be possible with this version. Setting the HTTPS_PROXY variable doesn't help either. How am I supposed to configure up2date so I can access RHN through a proxy with authentication? And: How can I do this without writing a clear-text password in a plain text file? Thanks in advance. Bram Mertens Mazda Motor Logistics Europe NV, Blaasveldstraat 162, B-2830 Willebroek VAT BE 406.024.281, RPR Mechelen, ING 310-0092504-52, IBAN : BE64 3100 0925 0452, SWIFT : BBRUBEBB From michael.mansour at hp.com Wed Jun 27 05:02:23 2007 From: michael.mansour at hp.com (Mansour, Michael) Date: Wed, 27 Jun 2007 13:02:23 +0800 Subject: [rhn-users] Using up2date behind a proxy that requiresauthentication In-Reply-To: References: Message-ID: <58727644D357E1429F7095BD0A2970940514E092@sgpexc05.asiapacific.cpqcorp.net> Hi Bram, The error you've defined here: Proxy Authentication Required ( The ISA Server requires authorization to fulfill the request. Access to the Web Proxy service is denied. ) is not an error generated by anything Red Hat, it's referring to the Microsoft Internet and Acceleration Server (ISA) which is what your site seems to be using for it's access to the internet. My suggestion would be to raise a case with your admins at your work and ask them why your account cannot be authenticated on their proxy server. Regards, Michael. -----Original Message----- From: rhn-users-bounces at redhat.com [mailto:rhn-users-bounces at redhat.com] On Behalf Of Mertens, Bram Sent: Wednesday, June 27, 2007 12:04 AM To: rhn-users at redhat.com Subject: [rhn-users] Using up2date behind a proxy that requiresauthentication Hi I would like to register a server with RHN but I am unable to get past the proxy server. According to https://rhn.redhat.com/help/faq/#61 setting "proxyUrl" and "enableProxy" is all that is needed but I guess this doesn't take authentication into account. Next I configured my username and password according to https://rhn.redhat.com/help/reference/s1-up2date-config.html but I still get the following error: Proxy Authentication Required ( The ISA Server requires authorization to fulfill the request. Access to the Web Proxy service is denied. ) I get this error even after changing the protocol for serverUrl to http. After setting the following values in ~/.elinks/elinks.conf I am able to open http://xmlrpc.rhn.redhat.com/XMLRPC but not https://xmlrpc.rhn.redhat.com/XMLRPC. When I try to access the https Url I get a "host not found" message. # cat .elinks/elinks.conf set protocol.http.proxy.host = "http://proxy.mle.mazdaeur.com:80" set protocol.http.proxy.user = "mertensb" set protocol.http.proxy.passwd = "xxxxx" Setting protocol.https.proxy.host does not appear to be possible with this version. Setting the HTTPS_PROXY variable doesn't help either. How am I supposed to configure up2date so I can access RHN through a proxy with authentication? And: How can I do this without writing a clear-text password in a plain text file? Thanks in advance. Bram Mertens Mazda Motor Logistics Europe NV, Blaasveldstraat 162, B-2830 Willebroek VAT BE 406.024.281, RPR Mechelen, ING 310-0092504-52, IBAN : BE64 3100 0925 0452, SWIFT : BBRUBEBB _______________________________________________ rhn-users mailing list rhn-users at redhat.com https://www.redhat.com/mailman/listinfo/rhn-users From michael.mansour at hp.com Wed Jun 27 07:31:11 2007 From: michael.mansour at hp.com (Mansour, Michael) Date: Wed, 27 Jun 2007 15:31:11 +0800 Subject: [rhn-users] Manage system configuration files through RHN In-Reply-To: References: Message-ID: <58727644D357E1429F7095BD0A2970940514E19E@sgpexc05.asiapacific.cpqcorp.net> Hi Bram, There's various solutions for the queries you ask below, but for point 3, I use csync2 which scales to hundreds of nodes without issues. csync2 has the ability to run different configs and restart services based on config file changes. I have tried cfengine, but found it too complicated to setup for something as simple as syncing data. For point 1, RHN basically notifies you of updates to servers, but doesn't speficially "manage" the differences or similiarities between servers. For this I use the Cluster module in Webmin, which generates a database of installed packages and can compare server(s) against server(s). For point 2, user management is usually best done using LDAP on an enterprise scale. If you have a small number of machines, or clustered machines, you can get away with csync2 and local passwd files. For enterprise level, I recommend OpenLDAP. Regards, Michael. -----Original Message----- From: rhn-users-bounces at redhat.com [mailto:rhn-users-bounces at redhat.com] On Behalf Of Mertens, Bram Sent: Thursday, June 21, 2007 1:56 AM To: rhn-users at redhat.com Subject: [rhn-users] Manage system configuration files through RHN Hello all, I'm investigating the possibility to manage our RH servers through RHN. Currently we are running various versions with various levels of updates installed and managing these has ebcome quite a challenge. On top of that we are in the process of implementing a new corporate policy on security which is posing further restrictions which I'd like to be able to fullfill this way as well. >From the documentation I read so far I gather that most of the things I'd like to be able to do are possible with RHN but so far I haven't found the documentation that shows exactly HOW to do so. This makes it difficult to determine whether or not what I believe is possible actually is or not. Also there are probably alternatives to consider as well and I'm hoping to get some info on that from you. 1) Can we deploy RHN in an enviroment where not all clients that are to connect to RHN are running the same version of RH or are not updated to the same level? The idea is to standardize most of these servers but there several servers that must be kept at a lower version/update level. 2) Is user management handled at all by RHN? Or do we need to look into something like PAM authentication with an LDAP server? Something like Red Hat Directory server? 3) We'd also like to manage /etc/sudoers, /etc/hosts, etc. Through this tool, it appears to us that we'd need the RHN Provisioning service for this as the Management service doesn't appear to include this possibility. Is there any documentation available about this specific option? Specifically what is possible and what not? Restarting services like logrotate after modifying a configuration file, which files can be served this way, etc. Thanks in advance Bram Mazda Motor Logistics Europe NV, Blaasveldstraat 162, B-2830 Willebroek VAT BE 406.024.281, RPR Mechelen, ING 310-0092504-52, IBAN : BE64 3100 0925 0452, SWIFT : BBRUBEBB _______________________________________________ rhn-users mailing list rhn-users at redhat.com https://www.redhat.com/mailman/listinfo/rhn-users From patelhn at telkom.co.za Wed Jun 27 07:51:01 2007 From: patelhn at telkom.co.za (Hiren Patel) Date: Wed, 27 Jun 2007 09:51:01 +0200 Subject: [rhn-users] Using up2date behind a proxy that requiresauthentication In-Reply-To: References: Message-ID: <1182930661.2523.27.camel@localhost.localdomain> i used up2date --configure to set my proxy parameters, and they are something like: 3. enableProxy Yes 4. enableProxyAuth Yes 11. httpProxy myproxy:port 22. proxyPassword mypassword 23. proxyUser myproxyuser works for me with an ISA proxy server. On Tue, 2007-06-26 at 16:03 +0200, Mertens, Bram wrote: > Hi > > I would like to register a server with RHN but I am unable to get past > the proxy server. > > According to https://rhn.redhat.com/help/faq/#61 setting "proxyUrl" and > "enableProxy" is all that is needed but I guess this doesn't take > authentication into account. > > Next I configured my username and password according to > https://rhn.redhat.com/help/reference/s1-up2date-config.html > but I still get the following error: > Proxy Authentication Required ( The ISA Server > requires authorization to fulfill the request. > Access to the Web Proxy service is denied. ) > > I get this error even after changing the protocol for serverUrl to http. > > After setting the following values in ~/.elinks/elinks.conf I am able to > open http://xmlrpc.rhn.redhat.com/XMLRPC but not > https://xmlrpc.rhn.redhat.com/XMLRPC. When I try to access the https > Url I get a "host not found" message. > > # cat .elinks/elinks.conf > set protocol.http.proxy.host = "http://proxy.mle.mazdaeur.com:80" > set protocol.http.proxy.user = "mertensb" > set protocol.http.proxy.passwd = "xxxxx" > > Setting protocol.https.proxy.host does not appear to be possible with > this version. Setting the HTTPS_PROXY variable doesn't help either. > > How am I supposed to configure up2date so I can access RHN through a > proxy with authentication? > > And: How can I do this without writing a clear-text password in a plain > text file? > > Thanks in advance. > > Bram Mertens > > > > Mazda Motor Logistics Europe NV, Blaasveldstraat 162, B-2830 Willebroek > VAT BE 406.024.281, RPR Mechelen, ING 310-0092504-52, IBAN : BE64 3100 0925 0452, SWIFT : BBRUBEBB > > > _______________________________________________ > rhn-users mailing list > rhn-users at redhat.com > https://www.redhat.com/mailman/listinfo/rhn-users -- Hiren Patel | Ops Specialist | ISS Infrastructure | Telkom E-Mail: patelhn at telkom.co.za Office: +27 12 680 3460 | Fax: +27 12 680 3299 | Cell: +27 73 456 7980 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This e-mail and its contents are subject to the Telkom SA Limited e-mail legal notice available at http://www.telkom.co.za/TelkomEMailLegalNotice.PDF ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ From mertensb at mazdaeur.com Wed Jun 27 10:21:32 2007 From: mertensb at mazdaeur.com (Mertens, Bram) Date: Wed, 27 Jun 2007 12:21:32 +0200 Subject: [rhn-users] Using up2date behind a proxy that requiresauthentication In-Reply-To: <1182930661.2523.27.camel@localhost.localdomain> References: <1182930661.2523.27.camel@localhost.localdomain> Message-ID: Thanks! enableProxyAuth was the one I needed, if you configure the username and password throught the GUI this is set automatically. It works, but I'm a bit concerned about leaving my password in plain text on the system like that. I would prefer it if the applications prompted you for it. Thanks again for the help. Bram > Mazda Motor Logistics Europe NV, Blaasveldstraat 162, B-2830 Willebroek VAT BE 406.024.281, RPR Mechelen, ING 310-0092504-52, IBAN : BE64 3100 0925 0452, SWIFT : BBRUBEBB -----Original Message----- > From: rhn-users-bounces at redhat.com > [mailto:rhn-users-bounces at redhat.com] On Behalf Of Hiren Patel > Sent: woensdag 27 juni 2007 9:51 > To: Discussions about Red Hat Network (rhn.redhat.com) > Subject: Re: [rhn-users] Using up2date behind a proxy that > requiresauthentication > > > i used up2date --configure to set my proxy parameters, and they are > something like: > > 3. enableProxy Yes > 4. enableProxyAuth Yes > 11. httpProxy myproxy:port > 22. proxyPassword mypassword > 23. proxyUser myproxyuser > > works for me with an ISA proxy server. > > On Tue, 2007-06-26 at 16:03 +0200, Mertens, Bram wrote: > > Hi > > > > I would like to register a server with RHN but I am unable > to get past > > the proxy server. > > > > According to https://rhn.redhat.com/help/faq/#61 setting > "proxyUrl" and > > "enableProxy" is all that is needed but I guess this doesn't take > > authentication into account. > > > > Next I configured my username and password according to > > https://rhn.redhat.com/help/reference/s1-up2date-config.html > > but I still get the following error: > > Proxy Authentication Required ( The ISA Server > > requires authorization to fulfill the request. > > Access to the Web Proxy service is denied. ) > > > > I get this error even after changing the protocol for > serverUrl to http. > > > > After setting the following values in ~/.elinks/elinks.conf > I am able to > > open http://xmlrpc.rhn.redhat.com/XMLRPC but not > > https://xmlrpc.rhn.redhat.com/XMLRPC. When I try to access > the https > > Url I get a "host not found" message. > > > > # cat .elinks/elinks.conf > > set protocol.http.proxy.host = "http://proxy.mle.mazdaeur.com:80" > > set protocol.http.proxy.user = "mertensb" > > set protocol.http.proxy.passwd = "xxxxx" > > > > Setting protocol.https.proxy.host does not appear to be > possible with > > this version. Setting the HTTPS_PROXY variable doesn't help either. > > > > How am I supposed to configure up2date so I can access RHN through a > > proxy with authentication? > > > > And: How can I do this without writing a clear-text > password in a plain > > text file? > > > > Thanks in advance. > > > > Bram Mertens [...] From mertensb at mazdaeur.com Wed Jun 27 10:39:34 2007 From: mertensb at mazdaeur.com (Mertens, Bram) Date: Wed, 27 Jun 2007 12:39:34 +0200 Subject: [rhn-users] Manage system configuration files through RHN In-Reply-To: <58727644D357E1429F7095BD0A2970940514E19E@sgpexc05.asiapacific.cpqcorp.net> References: <58727644D357E1429F7095BD0A2970940514E19E@sgpexc05.asiapacific.cpqcorp.net> Message-ID: Hey Michael, Thanks for the suggestion, I'll certainly look into csync2. Concerning the user management we're going to test authenticating against a radius server. This should be able to check against the 3 domains in our Active Directory. Regards Bram > Mazda Motor Logistics Europe NV, Blaasveldstraat 162, B-2830 Willebroek VAT BE 406.024.281, RPR Mechelen, ING 310-0092504-52, IBAN : BE64 3100 0925 0452, SWIFT : BBRUBEBB -----Original Message----- > From: rhn-users-bounces at redhat.com > [mailto:rhn-users-bounces at redhat.com] On Behalf Of Mansour, Michael > Sent: woensdag 27 juni 2007 9:31 > To: Discussions about Red Hat Network (rhn.redhat.com) > Subject: RE: [rhn-users] Manage system configuration files through RHN > > Hi Bram, > > There's various solutions for the queries you ask below, but for point > 3, I use csync2 which scales to hundreds of nodes without issues. > > csync2 has the ability to run different configs and restart services > based on config file changes. > > I have tried cfengine, but found it too complicated to setup for > something as simple as syncing data. > > For point 1, RHN basically notifies you of updates to servers, but > doesn't speficially "manage" the differences or similiarities between > servers. For this I use the Cluster module in Webmin, which > generates a > database of installed packages and can compare server(s) against > server(s). > > For point 2, user management is usually best done using LDAP on an > enterprise scale. If you have a small number of machines, or clustered > machines, you can get away with csync2 and local passwd files. For > enterprise level, I recommend OpenLDAP. > > Regards, > > Michael. > > -----Original Message----- > From: rhn-users-bounces at redhat.com > [mailto:rhn-users-bounces at redhat.com] > On Behalf Of Mertens, Bram > Sent: Thursday, June 21, 2007 1:56 AM > To: rhn-users at redhat.com > Subject: [rhn-users] Manage system configuration files through RHN > > Hello all, > > I'm investigating the possibility to manage our RH servers > through RHN. > Currently we are running various versions with various levels > of updates > installed and managing these has ebcome quite a challenge. > > On top of that we are in the process of implementing a new corporate > policy on security which is posing further restrictions which I'd like > to be able to fullfill this way as well. > > >From the documentation I read so far I gather that most of the things > I'd like to be able to do are possible with RHN but so far I haven't > found the documentation that shows exactly HOW to do so. > This makes it > difficult to determine whether or not what I believe is possible > actually is or not. Also there are probably alternatives to > consider as > well and I'm hoping to get some info on that from you. > > 1) Can we deploy RHN in an enviroment where not all clients > that are to > connect to RHN are running the same version of RH or are not > updated to > the same level? > The idea is to standardize most of these servers but there several > servers that must be kept at a lower version/update level. > > 2) Is user management handled at all by RHN? Or do we need > to look into > something like PAM authentication with an LDAP server? Something like > Red Hat Directory server? > > 3) We'd also like to manage /etc/sudoers, /etc/hosts, etc. > Through this > tool, it appears to us that we'd need the RHN Provisioning service for > this as the Management service doesn't appear to include this > possibility. Is there any documentation available about this specific > option? Specifically what is possible and what not? Restarting > services like logrotate after modifying a configuration file, which > files can be served this way, etc. > > Thanks in advance > > Bram > > > > Mazda Motor Logistics Europe NV, Blaasveldstraat 162, B-2830 > Willebroek > VAT BE 406.024.281, RPR Mechelen, ING 310-0092504-52, IBAN : > BE64 3100 > 0925 0452, SWIFT : BBRUBEBB > > > _______________________________________________ > rhn-users mailing list > rhn-users at redhat.com > https://www.redhat.com/mailman/listinfo/rhn-users > > _______________________________________________ > rhn-users mailing list > rhn-users at redhat.com > https://www.redhat.com/mailman/listinfo/rhn-users > From JBrownIII at rccl.com Wed Jun 27 13:10:34 2007 From: JBrownIII at rccl.com (JBrownIII at rccl.com) Date: Wed, 27 Jun 2007 09:10:34 -0400 Subject: [rhn-users] Using up2date behind a proxy that requiresauthentication Message-ID: An HTML attachment was scrubbed... URL: From mertensb at mazdaeur.com Thu Jun 28 06:15:48 2007 From: mertensb at mazdaeur.com (Mertens, Bram) Date: Thu, 28 Jun 2007 08:15:48 +0200 Subject: [rhn-users] FW: How to maintain RedHat Server that cannot be connected to Internet Message-ID: Hi Pierre, I'm forwarding your message to the list as it appears you sent it only to me directly.[1] Regarding your question: Perhaps you could install a satellite server that can connect to the internet and have your boxes connect to this one? I'm looking into this myself at the moment so I can't tell you much about it but it might suit your needs. Kind regards Bram Mertens [1] Perhaps you replied to one of my posts? If so please keep in mind that this will cause problems for people using a mail client that allows "threading" related posts. Netiquette requires one to start a new thread when posting about a new problem. ________________________________ From: Monlong Pierre [mailto:pierre.monlong at cnes.fr] Sent: woensdag 27 juni 2007 13:42 To: Mertens, Bram Subject: How to maintain RedHat Server that cannot be connected to Internet I have several redhat servers, that cannot be connected to Internet. For the installation we have connected one time these servers to register them to RHN, and to make a first upgrade by downloading of rpm tar archive through the web interface. But now, we cannot connect them to Internet to update the installed packages. So the profil (installed package) of these server on the RHN are 8 months old. How to update my profil off line ? Why Redhat don't have a tools to generate a file (encrypted and signed if needed) That we can inject in the rhn web interface to update the installed rpm packages. Thank for your help. Mazda Motor Logistics Europe NV, Blaasveldstraat 162, B-2830 Willebroek VAT BE 406.024.281, RPR Mechelen, ING 310-0092504-52, IBAN : BE64 3100 0925 0452, SWIFT : BBRUBEBB From pierre.monlong at cnes.fr Thu Jun 28 11:15:15 2007 From: pierre.monlong at cnes.fr (Monlong Pierre) Date: Thu, 28 Jun 2007 13:15:15 +0200 Subject: [rhn-users] FW: How to maintain RedHat Server that cannot beconnected to Internet Message-ID: Thank you for your answer. We cannot install nor a satellite server nor a proxy server as Our two redhat servers are on a completely isolated network. Thus, it's not optimized to install a server for upgrade only for two servers. Satellite or proxy server are perhaps uselful for server farm with lot of servers but not adapted for small installation like us. Thank you -----Message d'origine----- De?: rhn-users-bounces at redhat.com [mailto:rhn-users-bounces at redhat.com] Envoy??: jeudi 28 juin 2007 03:16 ??: Discussions about Red Hat Network (rhn.redhat.com) Objet?: [rhn-users] FW: How to maintain RedHat Server that cannot beconnected to Internet Hi Pierre, I'm forwarding your message to the list as it appears you sent it only to me directly.[1] Regarding your question: Perhaps you could install a satellite server that can connect to the internet and have your boxes connect to this one? I'm looking into this myself at the moment so I can't tell you much about it but it might suit your needs. Kind regards Bram Mertens [1] Perhaps you replied to one of my posts? If so please keep in mind that this will cause problems for people using a mail client that allows "threading" related posts. Netiquette requires one to start a new thread when posting about a new problem. ________________________________ From: Monlong Pierre [mailto:pierre.monlong at cnes.fr] Sent: woensdag 27 juni 2007 13:42 To: Mertens, Bram Subject: How to maintain RedHat Server that cannot be connected to Internet I have several redhat servers, that cannot be connected to Internet. For the installation we have connected one time these servers to register them to RHN, and to make a first upgrade by downloading of rpm tar archive through the web interface. But now, we cannot connect them to Internet to update the installed packages. So the profil (installed package) of these server on the RHN are 8 months old. How to update my profil off line ? Why Redhat don't have a tools to generate a file (encrypted and signed if needed) That we can inject in the rhn web interface to update the installed rpm packages. Thank for your help. Mazda Motor Logistics Europe NV, Blaasveldstraat 162, B-2830 Willebroek VAT BE 406.024.281, RPR Mechelen, ING 310-0092504-52, IBAN : BE64 3100 0925 0452, SWIFT : BBRUBEBB _______________________________________________ rhn-users mailing list rhn-users at redhat.com https://www.redhat.com/mailman/listinfo/rhn-users From inode0 at gmail.com Thu Jun 28 19:58:49 2007 From: inode0 at gmail.com (inode0) Date: Thu, 28 Jun 2007 14:58:49 -0500 Subject: [rhn-users] FW: How to maintain RedHat Server that cannot beconnected to Internet In-Reply-To: References: Message-ID: On 6/28/07, Monlong Pierre wrote: > We cannot install nor a satellite server nor a proxy server as Our two redhat servers are on > a completely isolated network. > > Thus, it's not optimized to install a server for upgrade only for two servers. Satellite or proxy > server are perhaps uselful for server farm with lot of servers but not adapted for small > installation like us. Have you checked with Red Hat about this directly? I think they might sell updates on CD or via some other mechanism for isolated networks. I recall hearing that in the past anyway. John From pierre.monlong at cnes.fr Thu Jun 28 20:20:51 2007 From: pierre.monlong at cnes.fr (Monlong Pierre) Date: Thu, 28 Jun 2007 22:20:51 +0200 Subject: [rhn-users] FW: How to maintain RedHat Server that cann otbeconnected to Internet Message-ID: Until now we have downloaded updates trough the Web Interface of rhn (we can create tar archive with up to 25 rpms). The problem is that, if I don't want to download again previously installed rpms as I can't update the package list of my servers, I need to sort manual wich updates have been previously installed from wich have not been installed ! It's too long ! I have to sort about 280 rpms for one server! On the rhn faqs or docs, it seems that if the server is not connected, there is no solution (except perhaps with satellite server but this solution is not acceptable according to our secpolicy). Thus the function that permit to download tar archive with 25 rpms doesn't work since 2 weeks (server internal error), and I have no answer about this pb from Redhat form https://rhn.redhat.com/help/contact.pxt. Perhaps the solution is to change of distro. -----Message d'origine----- De?: rhn-users-bounces at redhat.com [mailto:rhn-users-bounces at redhat.com] Envoy??: jeudi 28 juin 2007 16:59 ??: Discussions about Red Hat Network (rhn.redhat.com) Objet?: Re: RE : [rhn-users] FW: How to maintain RedHat Server that cannotbeconnected to Internet On 6/28/07, Monlong Pierre wrote: > We cannot install nor a satellite server nor a proxy server as Our two redhat servers are on > a completely isolated network. > > Thus, it's not optimized to install a server for upgrade only for two servers. Satellite or proxy > server are perhaps uselful for server farm with lot of servers but not adapted for small > installation like us. Have you checked with Red Hat about this directly? I think they might sell updates on CD or via some other mechanism for isolated networks. I recall hearing that in the past anyway. John _______________________________________________ rhn-users mailing list rhn-users at redhat.com https://www.redhat.com/mailman/listinfo/rhn-users From mark.uy at nth.com Thu Jun 28 20:36:31 2007 From: mark.uy at nth.com (Mark Uy) Date: Thu, 28 Jun 2007 13:36:31 -0700 Subject: [rhn-users] Please remove me from this distribution. Message-ID: <43EA3487A1BF6F41B5AAC801FA379ED88313BB@EXCHANGE2K.nthgen.nth.com> -------------- next part -------------- An HTML attachment was scrubbed... URL: From inode0 at gmail.com Thu Jun 28 20:57:38 2007 From: inode0 at gmail.com (inode0) Date: Thu, 28 Jun 2007 15:57:38 -0500 Subject: [rhn-users] Please remove me from this distribution. In-Reply-To: <43EA3487A1BF6F41B5AAC801FA379ED88313BB@EXCHANGE2K.nthgen.nth.com> References: <43EA3487A1BF6F41B5AAC801FA379ED88313BB@EXCHANGE2K.nthgen.nth.com> Message-ID: On 6/28/07, Mark Uy wrote: rpm -e mark.uy at nth.com John From Frank_LaMon at csx.com Thu Jun 28 21:03:32 2007 From: Frank_LaMon at csx.com (Lamon, Frank III) Date: Thu, 28 Jun 2007 17:03:32 -0400 Subject: [rhn-users] Please remove me from this distribution. In-Reply-To: References: <43EA3487A1BF6F41B5AAC801FA379ED88313BB@EXCHANGE2K.nthgen.nth.com> Message-ID: <7F25CC1020F11E48AD05C13FECC550DF0CF66D@TJAX2742EXCH.csxt.ad.csx.com> Just in case: rpm -ev --nodeps mark.uy at nth.com Frank -----Original Message----- From: rhn-users-bounces at redhat.com [mailto:rhn-users-bounces at redhat.com] On Behalf Of inode0 Sent: Thursday, June 28, 2007 4:58 PM To: Discussions about Red Hat Network (rhn.redhat.com) Subject: Re: [rhn-users] Please remove me from this distribution. On 6/28/07, Mark Uy wrote: rpm -e mark.uy at nth.com John _______________________________________________ rhn-users mailing list rhn-users at redhat.com https://www.redhat.com/mailman/listinfo/rhn-users ----------------------------------------- This email transmission and any accompanying attachments may contain CSX privileged and confidential information intended only for the use of the intended addressee. Any dissemination, distribution, copying or action taken in reliance on the contents of this email by anyone other than the intended recipient is strictly prohibited. If you have received this email in error please immediately delete it and notify sender at the above CSX email address. Sender and CSX accept no liability for any damage caused directly or indirectly by receipt of this email. From raymond.baladad at hp.com Thu Jun 28 23:46:38 2007 From: raymond.baladad at hp.com (Baladad, Raymond Allan V) Date: Fri, 29 Jun 2007 07:46:38 +0800 Subject: [rhn-users] Please remove me from this distribution. In-Reply-To: <43EA3487A1BF6F41B5AAC801FA379ED88313BB@EXCHANGE2K.nthgen.nth.com> References: <43EA3487A1BF6F41B5AAC801FA379ED88313BB@EXCHANGE2K.nthgen.nth.com> Message-ID: <2674D534E5640A44960FAD17D6A33A810898FDA3@manexc01.asiapacific.cpqcorp.net> -------------- next part -------------- An HTML attachment was scrubbed... URL: From patelhn at telkom.co.za Fri Jun 29 06:42:17 2007 From: patelhn at telkom.co.za (Hiren Patel) Date: Fri, 29 Jun 2007 08:42:17 +0200 Subject: [rhn-users] Please remove me from this distribution. In-Reply-To: <7F25CC1020F11E48AD05C13FECC550DF0CF66D@TJAX2742EXCH.csxt.ad.csx.com> References: <43EA3487A1BF6F41B5AAC801FA379ED88313BB@EXCHANGE2K.nthgen.nth.co m> <7F25CC1020F11E48AD05C13FECC550DF0CF66D@TJAX2742EXCH.csxt.ad.csx.com> Message-ID: <1183099337.2531.0.camel@localhost.localdomain> LOL! geeks! ;-) On Thu, 2007-06-28 at 17:03 -0400, Lamon, Frank III wrote: > Just in case: > > rpm -ev --nodeps mark.uy at nth.com > > Frank > > -----Original Message----- > From: rhn-users-bounces at redhat.com [mailto:rhn-users-bounces at redhat.com] > On Behalf Of inode0 > Sent: Thursday, June 28, 2007 4:58 PM > To: Discussions about Red Hat Network (rhn.redhat.com) > Subject: Re: [rhn-users] Please remove me from this distribution. > > On 6/28/07, Mark Uy wrote: > > rpm -e mark.uy at nth.com > > John > > _______________________________________________ > rhn-users mailing list > rhn-users at redhat.com > https://www.redhat.com/mailman/listinfo/rhn-users > ----------------------------------------- > This email transmission and any accompanying attachments may > contain CSX privileged and confidential information intended only > for the use of the intended addressee. Any dissemination, > distribution, copying or action taken in reliance on the contents > of this email by anyone other than the intended recipient is > strictly prohibited. If you have received this email in error > please immediately delete it and notify sender at the above CSX > email address. Sender and CSX accept no liability for any damage > caused directly or indirectly by receipt of this email. > > _______________________________________________ > rhn-users mailing list > rhn-users at redhat.com > https://www.redhat.com/mailman/listinfo/rhn-users -- Hiren Patel | Ops Specialist | ISS Infrastructure | Telkom E-Mail: patelhn at telkom.co.za Office: +27 12 680 3460 | Fax: +27 12 680 3299 | Cell: +27 73 456 7980 The animals are not as stupid as one thinks -- they have neither doctors nor lawyers. -- L. Docquier ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This e-mail and its contents are subject to the Telkom SA Limited e-mail legal notice available at http://www.telkom.co.za/TelkomEMailLegalNotice.PDF ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ From Greg.Caetano at hp.com Fri Jun 29 14:25:46 2007 From: Greg.Caetano at hp.com (Caetano, Greg) Date: Fri, 29 Jun 2007 10:25:46 -0400 Subject: [rhn-users] RE: [rhn-satellite-users] RE: Error registering server with satellite-server In-Reply-To: <20070629142123.GK15446@redhat.com> References: <20070629142123.GK15446@redhat.com> Message-ID: The system does get registered properly and you can immediately perform an "yum update" command with no issue. Regards Greg -----Original Message----- From: Jan Pazdziora [mailto:jpazdziora at redhat.com] Sent: Friday, June 29, 2007 9:21 AM To: Caetano, Greg Cc: Discussions about Red Hat Network (rhn.redhat.com); rhn-satellite-users at redhat.com Subject: Re: [rhn-satellite-users] RE: Error registering server with satellite-server On Fri, Jun 15, 2007 at 01:11:44PM -0400, Caetano, Greg wrote: > I have a user that is receiving this "software updates setup > unsuccessful" dialog box when registering a RHEL5 server to a v4.2.1 > Satellite Server. > > The system is registered - we see the messages regarding sending the > profile - the review subscription details screen appears - then this > message box. We log into the satellite server and it appears to have a > proper profile and we can interactively request updates from the > server command line. > > Is this triggered because some service is not running "rhnsd" or > yum-updatesd? > > It appears this message is from this code segment in > /usr/share/rhn/up2date_client/gui.py > > self.finishPage.emit_stop_by_name("prepare") > if rhnregGui.hasBaseChannelAndUpdates(): > self.druid.finish.set_label(_("_Finish")) > title = _("Finish setting up software updates") > else: > self.druid.finish.set_label(_("_Exit software update > setup")) > title = _("software updates setup unsuccessful") > self.finishPagePrepare() Does the system have an update entitlement? The source code of the hasBaseChannelAndUpdates check says: Returns a bool indicating whether the system has registered, subscribed to a base channel, and has at least update entitlements. Uses information from the most recent time the create profile screen was run through. -- Jan Pazdziora Satellite Sustaining Engineering, Red Hat