[Spacewalk-list] Failed Hostname Change with Spacewalk-Hostname-Rename script

Tomas Lestach tlestach at redhat.com
Fri Feb 25 09:23:35 UTC 2011


On 02/24/2011 09:13 PM, jdfire at cox.net wrote:
> Tomas,
>
> The server.pem that is generated via the Spacewalk-hostname-rename script still contains the old hostname it never changes that hostname to the correct hostname. It seems that the only way to change this hostname is to modify the rhn-ca-openssl.cnf (by changing the hostname within) and then run the rhn-ssl-tool --gen-ca and rhn-ssl-tool --gen-server. This will update the hostname in all SSL certs to allow me to move them to the correct locations. It seems the hostname script doesn't do this for me.

If you're sure about it, please file a BZ, I'll check it, when I find 
some time.

Regards,
Tomas
--
Tomas Lestach
RHN Satellite Engineering, Red Hat

>
> Kind regards,
> JD
>
>
> ---- Tomas Lestach<tlestach at redhat.com>  wrote:
>> On 02/24/2011 05:36 PM, jdfire at cox.net wrote:
>>> Hello Keith,
>>>
>>> Thank you for the response. While waiting for a response I have tried many different things. The one thing that has resolved this issue is as follows. It seems the script is missing a few steps or is not performing all the steps it should to complete the hostname change. Please review the steps below to see if there is anyway to modify the hostname script to resolve these issues.
>>>
>>> 1: Perform hostname change on Spacewalk Application server.
>>> 2: Perform reboot on Spacewalk Application server.
>>> 3: Execute spacewalk-hostname-rename script.
>>> 3a: Script didn't generate the correct hostname info for the server.pem file used by jabber.
>>
>> Could you be more specific? spacewalk-hostname-rename script generates
>> new server.pem for you.
>>
>>> 3b: Generated new crt,key,pem files by modifing openssl.cnf to reflect new hostname.
>>
>> So far I know, there's no need to modify openssl.cnf or any other file
>> manually.
>>
>>
>> Regards,
>> Tomas
>> --
>> Tomas Lestach
>> RHN Satellite Engineering, Red Hat
>>
>>> 4: Copy new cert to proxy /usr/share/rhn/ location and change the client to the correct hostname.
>>> 5: On proxy server remove contents of ssl-build and reconfigured Spacewalk proxy server (This generated new SSL certs).
>>> 6: remove jabber DB on the Spacewalk Application server.
>>> 7: Remove osad-auth.conf file on client and restart osad. (proxy server and clients.) (This didn't work until a jabber DB removal happened and the correct SSL cert was on the client.)
>>> 8: Verified all is working as it should.
>>>
>>> Thank you for your time and have a great day!
>>>
>>> Kind regards,
>>> JD
>>>
>>> ---- "Hagberg wrote:
>>>> Try stopping osad on the client, delete the /etc/sysconfig/rhn/osad-auth.conf file then restart osad.
>>>>
>>>> Keith
>>>>
>>>> -----Original Message-----
>>>> From: spacewalk-list-bounces at redhat.com [mailto:spacewalk-list-bounces at redhat.com] On Behalf Of jdfire at cox.net
>>>> Sent: Wednesday, February 23, 2011 3:33 PM
>>>> To: spacewalk-list at redhat.com
>>>> Subject: [Spacewalk-list] Failed Hostname Change with Spacewalk-Hostname-Rename script
>>>>
>>>> Hello All,
>>>>
>>>> I have been trying to figure out what went wrong during the process of changing my hostname on my Spacewalk Application server.
>>>>
>>>> I performed the steps as outlined on https://fedorahosted.org/spacewalk/wiki/SpacewalkHostnameRename.
>>>>
>>>> My problem is in regards to osad. It seems that after changing the client to reflect the recent hostname change osad restart(without error) but never connects to the Spacewalk server. It also seems the /pub/ SSL cert doesn't contain the correct hostname that was just changed.
>>>>
>>>> I also have a proxy server that clients connect to and I couldn't find any documentation on how to handle the Spacewalk Application server hostname change for proxy servers that are connected.
>>>>
>>>> Please let me know what I need to do in order to resolve this issue. I am at a lost as to what to do next.
>>>>
>>>> Thank you for your time and have a great day!
>>>>
>>>> Kind regards,
>>>> JD
>>>>
>>>> _______________________________________________
>>>> Spacewalk-list mailing list
>>>> Spacewalk-list at redhat.com
>>>> https://www.redhat.com/mailman/listinfo/spacewalk-list
>>>>
>>>> _______________________________________________
>>>> Spacewalk-list mailing list
>>>> Spacewalk-list at redhat.com
>>>> https://www.redhat.com/mailman/listinfo/spacewalk-list
>>>
>>> _______________________________________________
>>> Spacewalk-list mailing list
>>> Spacewalk-list at redhat.com
>>> https://www.redhat.com/mailman/listinfo/spacewalk-list
>>
>> _______________________________________________
>> Spacewalk-list mailing list
>> Spacewalk-list at redhat.com
>> https://www.redhat.com/mailman/listinfo/spacewalk-list
>




More information about the Spacewalk-list mailing list