[Spacewalk-list] osad problems

[Taco Scargo]

Joshua,

I made the changes you proposed.
Unfortunately this has not made the error go away.

My setup completed fine. Running the x86_64 version (0.6).
I did a yum update later which installed a later release of version 0.6

Still puzzled ...

Should /var/www/html/pub/RHN-ORG-TRUSTED-SSL-CERT be the same as the
cert in /etc/pki/spacewalk/jabberd/server.pem ?

As the one in /var/html/pub has serial number fe:b5:57:35:7a:de:60:98,
The one in /etc/pki/spacewalk/jabberd has serial number
fe:b5:57:35:7a:de:60:99

Regards,

Taco

Taco Scargo | Infrastructure Architect DC&P | TomTom | Oosterdoksstraat
114 | 1011 DK Amsterdam The Netherlands | E: taco.scargo at tomtom.com | T:
+ 31 20 7575 840 office | M: + 31 6 4543 4628

-----Original Message-----
From: spacewalk-list-bounces at redhat.com
[mailto:spacewalk-list-bounces at redhat.com] On Behalf Of Joshua Roys
Sent: 22 September 2009 15:46
To: spacewalk-list at redhat.com
Subject: Re: [Spacewalk-list] osad problems

On 09/22/2009 09:36 AM, Taco Scargo wrote:
> Miroslav,
>
> My /etc/jabberd/c2s.xml file contains:
>      <pemfile>/etc/jabberd/server.pem</pemfile>
>
> My /etc/rhn/default/rhn_osa-dispatcher.conf file contains:
>
> osa_ssl_cert  = /usr/share/rhn/RHNS-OSA-CERT
>
> which doesn't exist at all.
>
> I had been hoping this would be an easy yum install exercise.
>
> Maybe someone can point me how to create a working certificate and
configure the files.
>
> Thanks,
>
> Taco
>

Hello,

/etc/jabberd/c2s.xml should contain
   <pemfile>/etc/pki/spacewalk/jabberd/server.pem</pemfile>

but in my config, this is commented out.  Look for the <id> tag:
   <id realm='' register-enable='true' require-starttls='false' 
pemfile='/etc/pki/spacewalk/jabberd/server.pem'>F.Q.D.N</id>

And make sure the pemfile is readable by the jabber user (not the 
jabberd user).

Also, grep cert /etc/rhn/* ... you should have a 
osa-dispatcher.osa_ssl_cert = /var/www/html/pub/RHN-ORG-TRUSTED-SSL-CERT

line.

It's strange your configs are not correct - did spacewalk-setup not 
complete successfully?

Hope that helps,

Joshua Roys


This e-mail message contains information which is confidential and may be privileged. It is intended for use by the addressee only. If you are not the intended addressee, we request that you notify the sender immediately and delete or destroy this e-mail message and any attachment(s), without copying, saving, forwarding, disclosing or using its contents in any other way. TomTom N.V., TomTom International BV or any other company belonging to the TomTom group of companies will not be liable for damage relating to the communication by e-mail of data, documents or any other information.