[Spacewalk-list] Yum Fails For Clients Behind Proxy
Nick Kitmitto
nick.kitmitto at cleardata.com
Wed May 14 15:30:22 UTC 2014
Hi Thomas,
Spacewalk-client-repo is at 2.1-2
Spacewalk itself is at 2.1
# Automatically generated Red Hat Update Agent config file, do not edit.
# Format: 1.0
tmpDir[comment]=Use this Directory to place the temporary transport files
tmpDir=/tmp
disallowConfChanges[comment]=Config options that can not be overwritten by a config update action
disallowConfChanges=noReboot;sslCACert;useNoSSLForPackages;noSSLServerURL;serverURL;disallowConfChanges
skipNetwork[comment]=Skips network information in hardware profile sync during registration.
skipNetwork=0
stagingContent[comment]=Retrieve content of future actions in advance
stagingContent=1
networkRetries[comment]=Number of attempts to make at network connections before giving up
networkRetries=1
hostedWhitelist[comment]=RHN Hosted URL's
hostedWhitelist=
enableProxy[comment]=Use a HTTP Proxy
enableProxy=0
writeChangesToLog[comment]=Log to /var/log/up2date which packages has been added and removed
writeChangesToLog=0
serverURL[comment]=Remote server URL (use FQDN)
serverURL=https://proxy-server-FQDN/XMLRPC
proxyPassword[comment]=The password to use for an authenticated proxy
proxyPassword=
stagingContentWindow[comment]=How much forward we should look for future actions. In hours.
stagingContentWindow=24
proxyUser[comment]=The username for an authenticated proxy
proxyUser=
versionOverride[comment]=Override the automatically determined system version
versionOverride=
sslCACert[comment]=The CA cert used to verify the ssl server
sslCACert=/usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT
retrieveOnly[comment]=Retrieve packages only
retrieveOnly=0
debug[comment]=Whether or not debugging is enabled
debug=0
httpProxy[comment]=HTTP proxy in host:port format, e.g. squid.redhat.com:3128
httpProxy=
useNoSSLForPackages[comment]=Use the noSSLServerURL for package, package list, and header fetching (disable Akamai)
useNoSSLForPackages=0
systemIdPath[comment]=Location of system id
systemIdPath=/etc/sysconfig/rhn/systemid
enableProxyAuth[comment]=To use an authenticated proxy or not
enableProxyAuth=0
noReboot[comment]=Disable the reboot actions
noReboot=0
Thanks,
Nick Kitmitto
System Engineer
ClearDATA
Healthcare Cloud Computing
and Information Security
602-635-4004 24x7 Help Line
www.cleardata.net<http://www.cleardata.net/>
This email may contain confidential and privileged material for the sole use of the intended recipient. Any review, use, distribution or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive for the recipient), please contact the sender by reply email and delete all copies of this message.
From: spacewalk-list-bounces at redhat.com [mailto:spacewalk-list-bounces at redhat.com] On Behalf Of Thomas Foster
Sent: Wednesday, May 14, 2014 3:03 AM
To: spacewalk-list at redhat.com
Subject: Re: [Spacewalk-list] Yum Fails For Clients Behind Proxy
What does your /etc/sysconfig/rhn/up2date file say on the client...also what release?
On May 14, 2014 1:33 AM, "Nick Kitmitto" <nick.kitmitto at cleardata.com<mailto:nick.kitmitto at cleardata.com>> wrote:
I recently setup proxy servers and got them functional and registered properly through Spacewalk. I can now use the proxy servers to register the clients in the respective datacenter, however when I try to install with yum, it fails. Is there something I need to do to the proxy servers so they start handing out packages that are in the repos on the master?
Here’s the error on the client:
[root at hostname rhn]# yum repolist
Loaded plugins: fastestmirror, rhnplugin, security
This system is receiving updates from RHN Classic or Red Hat Satellite.
Determining fastest mirrors
repo id repo name status
centos-base-64bit CentOS Base 64Bit 0
epel-64bit EPEL 64Bit 0
repolist: 0
[root at hostname rhn]# yum install xclock
Loaded plugins: fastestmirror, rhnplugin, security
This system is receiving updates from RHN Classic or Red Hat Satellite.
Loading mirror speeds from cached hostfile
Error: Cannot retrieve repository metadata (repomd.xml) for repository: centos-base-64bit. Please verify its path and try again
Here’s what I see on the proxy:
==> ssl_access_log <==
10.210.0.70 - - [13/May/2014:22:26:32 -0700] "POST /XMLRPC HTTP/1.1" 200 2042
==> ssl_request_log <==
[13/May/2014:22:26:32 -0700] 10.210.0.70 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /XMLRPC HTTP/1.1" 2042
==> ssl_access_log <==
10.210.0.70 - - [13/May/2014:22:26:32 -0700] "POST /XMLRPC HTTP/1.1" 200 1103
==> ssl_request_log <==
[13/May/2014:22:26:32 -0700] 10.210.0.70 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /XMLRPC HTTP/1.1" 1103
==> ssl_access_log <==
10.210.0.70 - - [13/May/2014:22:26:33 -0700] "POST /XMLRPC HTTP/1.1" 200 1103
==> ssl_request_log <==
[13/May/2014:22:26:33 -0700] 10.210.0.70 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /XMLRPC HTTP/1.1" 1103
==> ssl_access_log <==
10.210.0.70 - - [13/May/2014:22:26:33 -0700] "POST /XMLRPC HTTP/1.1" 200 1103
==> ssl_request_log <==
[13/May/2014:22:26:33 -0700] 10.210.0.70 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /XMLRPC HTTP/1.1" 1103
Here’s what I see on the master:
[13/May/2014:22:26:34 -0700] 10.209.0.86 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /XMLRPC HTTP/1.1" 2042
[13/May/2014:22:26:34 -0700] 10.209.0.86 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /XMLRPC HTTP/1.1" 1103
[13/May/2014:22:26:35 -0700] 10.209.0.86 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /XMLRPC HTTP/1.1" 1103
[13/May/2014:22:26:35 -0700] 10.209.0.86 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /XMLRPC HTTP/1.1" 1103
Thanks in advance if you’re able to help!
Regards,
Nick Kitmitto
System Engineer
ClearDATA
Healthcare Cloud Computing
and Information Security
602-635-4004<tel:602-635-4004> 24x7 Help Line
www.cleardata.net<http://www.cleardata.net/>
This email may contain confidential and privileged material for the sole use of the intended recipient. Any review, use, distribution or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive for the recipient), please contact the sender by reply email and delete all copies of this message.
_______________________________________________
Spacewalk-list mailing list
Spacewalk-list at redhat.com<mailto:Spacewalk-list at redhat.com>
https://www.redhat.com/mailman/listinfo/spacewalk-list
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20140514/02b89a75/attachment.htm>
More information about the Spacewalk-list
mailing list