[Spacewalk-list] failing yum update through 1.8 proxy

[Maria Iano]

On Dec 14, 2012, at 10:26 AM, Michael Mraka wrote:

> Maria Iano wrote:
> %
> % On Dec 14, 2012, at 4:47 AM, Michael Mraka wrote:
> %
> % >Maria Iano wrote:
> % >% I have just activated a 1.8 spacewalk proxy server on CentOS 5  
> i386.
> % >% I am able to register a new system to it, and I am able to list
> % >% updates, but if I try to install them they fail to download. If I
> % >% edit up2date to point to the spacewalk server itself the update
> % >% downloads successfully and installs. This only happens when I  
> point
> % >% to the proxy server.
> % >%
> % >% It looked like this was
> % >% https://bugzilla.redhat.com/show_bug.cgi?id=872721 but I  
> implemented
> % >% the fix at http://git.fedorahosted.org/cgit/spacewalk.git/commit/?id=5f00038675c58c5a401d0c4a5cbfa332c28a4405
> % >% and it has not fixed this for me.
> % >...
> % >% [Wed Dec 12 16:30:22 2012] [error]   File
> % >"/usr/lib/python2.4/site-packages/spacewalk/common/rhnCache.py",
> % >% line 156, in _safe_create
> % >% [Wed Dec 12 16:30:22 2012] [error]     fd = os.open(fname,
> % >% os.O_WRONLY | os.O_CREAT | os.O_EXCL, 0644)
> % >% [Wed Dec 12 16:30:22 2012] [error] OSError: [Errno 13] Permission
> % >% denied: '/var/cache/rhn/list_all_packages-rpmforge-el5-i386'
> % >
> % >Hi Maria,
> % >
> % >Why httpd can't access
> % >/var/cache/rhn/list_all_packages-rpmforge-el5-i386?
> % >Are there correct permissions on /var/cache/rhn and
> % >/var/cache/rhn/list_all_packages-rpmforge-el5-i386?
> %
> % Hi Michael,
> %
> % # ls -al /var/cache/rhn
> % total 32
> % drwxr-xr-x   4 apache apache 4096 Oct 31 16:34 .
> % drwxr-xr-x  13 root   root   4096 Dec  4 15:07 ..
> % drwxr-xr-x 111 root   root   4096 Dec 10 12:43 repodata
> % drwxr-xr-x 112 root   root   4096 Dec 14 08:06 reposync
> %
> % As far as I can see those permissions look like they should work.
> % There is no /var/cache/rhn/list_all_packages-rpmforge-el5-i386. Is
> % that the problem, is that supposed to already be on the spacewalk
> % server?
>
> No, it should be created when needed. So what's the reason why httpd
> can't create the file (e.g. does
> su - apache -c 'echo >> /var/cache/rhn/list_all_packages-rpmforge- 
> el5-i386'
> works)? Maybe wrong selinux labels on directory?

It works when I try to do it as apache, it is able to create the file:

# su - apache -s /bin/bash
-bash-3.2$ echo >> /var/cache/rhn/list_all_packages-rpmforge-el5-i386
-bash-3.2$ ls -al /var/cache/rhn/list_all_packages-rpmforge-el5-i386
-rw-r--r-- 1 apache apache 1 Dec 14 10:50 /var/cache/rhn/ 
list_all_packages-rpmforge-el5-i386

I have selinux in permissive mode while I'm troubleshooting this.

Thanks,
Maria