[Spacewalk-list] osad not working with Spacewalk proxy server

Sean Carolan scarolan at gmail.com
Fri Feb 17 19:48:17 UTC 2012


On Thu, Feb 16, 2012 at 4:53 PM, Jeremy Davis <jdavis4102 at gmail.com> wrote:
> If a server is connecting to a Spacewalk Proxy server you will need to use
> the SSL Cert that was generated for that proxy server. This Cert will be in
> the same location as the app server but on the proxy server.

How is /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT supposed to be created
on the proxy machine?  On most of our "normal" client servers, we
simply use wget to pull this file so that OSAD will work.  But if the
proxy server is supposed to have a different cert in this location,
how does it get created?  Here's what happens if I try to configure
the proxy without this file in place:

[root at spacewalkproxy01 ~]# configure-proxy.sh
RHN Parent [spacewalk02.company.com]:
CA Chain [/usr/share/rhn/RHNS-CA-CERT]: /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT
Error: File /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT is not readable by
nobody user.

Forgive me for all the noob questions; I'm still learning how all this
stuff fits together.  The documentation on the SSL setup is a bit
thin...




More information about the Spacewalk-list mailing list