[Spacewalk-list] register client via spacewalk proxy

James Hogarth james.hogarth at gmail.com
Tue May 11 10:25:40 UTC 2010


Hi,

Sorry didn't reply Monday but had a bit of a busier day than I had
anticipated here....

This is approximately my structure....

Development systems <--> Spacewalk <--> NAT/Firewall/VPN <-->
Spacewalk Proxy <--> Production Systems

There is a 1 to 1 NAT for communication between spacewalk and the
spacewalk proxy. On the spacewalk proxy the spacewalk hostname
resolves to the NAT'd address of the spacewalk system rather than it's
true address. On the spacewalk system the proxy has it's hostname
resolve to the NAT'd address of the proxy rather than it's true
address.

The production systems only know about the spacewalk proxy and of
course resolve that to it's true address but have no knowledge of
(cannot resolve much less communicate) with the spacewalk server
itself.

First thing to do before installing rhn-proxy is to ensure that all
hostnames resolve as you would expect them to and that traffic can
travel through the NATs without errors (use netcat or something
similar to test connectivity).

Once you are sure any ACLs are in place and the NATs are functioning
correctly then follow the proxy install documentation.

Make sure you have copied /root/ssl-build from your spacewalk server
to the same location on your spacewalk proxy.

Once you've got that far (hostnames resolving, TCP traffic flowing
correctly and the install documents followed) post with any problems
and I'll be happy to help :)

James




More information about the Spacewalk-list mailing list