[Spacewalk-list] Yum Fails For Clients Behind Proxy
Nick Kitmitto
nick.kitmitto at cleardata.com
Wed May 14 15:57:14 UTC 2014
Here’s the error without the XMLRPC:
[root at hostname rhn]# yum install xclock
Loaded plugins: fastestmirror, rhnplugin, security
There was an error communicating with RHN.
Red Hat Satellite or RHN Classic support will be disabled.
Error communicating with server. The message was:
Broken response from the server.
Determining fastest mirrors
Setting up Install Process
No package xclock available.
Error: Nothing to do
Nick Kitmitto
System Engineer
ClearDATA
Healthcare Cloud Computing
and Information Security
602-635-4004 24x7 Help Line
www.cleardata.net<http://www.cleardata.net/>
This email may contain confidential and privileged material for the sole use of the intended recipient. Any review, use, distribution or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive for the recipient), please contact the sender by reply email and delete all copies of this message.
From: spacewalk-list-bounces at redhat.com [mailto:spacewalk-list-bounces at redhat.com] On Behalf Of Thomas Foster
Sent: Wednesday, May 14, 2014 8:54 AM
To: spacewalk-list at redhat.com
Subject: Re: [Spacewalk-list] Yum Fails For Clients Behind Proxy
If you are on rhel 5 that should work, if not take the XMLRPC off of the url and see if it works...
On May 14, 2014 11:50 AM, "Nick Kitmitto" <nick.kitmitto at cleardata.com<mailto:nick.kitmitto at cleardata.com>> wrote:
Hi Thomas,
Spacewalk-client-repo is at 2.1-2
Spacewalk itself is at 2.1
# Automatically generated Red Hat Update Agent config file, do not edit.
# Format: 1.0
tmpDir[comment]=Use this Directory to place the temporary transport files
tmpDir=/tmp
disallowConfChanges[comment]=Config options that can not be overwritten by a config update action
disallowConfChanges=noReboot;sslCACert;useNoSSLForPackages;noSSLServerURL;serverURL;disallowConfChanges
skipNetwork[comment]=Skips network information in hardware profile sync during registration.
skipNetwork=0
stagingContent[comment]=Retrieve content of future actions in advance
stagingContent=1
networkRetries[comment]=Number of attempts to make at network connections before giving up
networkRetries=1
hostedWhitelist[comment]=RHN Hosted URL's
hostedWhitelist=
enableProxy[comment]=Use a HTTP Proxy
enableProxy=0
writeChangesToLog[comment]=Log to /var/log/up2date which packages has been added and removed
writeChangesToLog=0
serverURL[comment]=Remote server URL (use FQDN)
serverURL=https://proxy-server-FQDN/XMLRPC
proxyPassword[comment]=The password to use for an authenticated proxy
proxyPassword=
stagingContentWindow[comment]=How much forward we should look for future actions. In hours.
stagingContentWindow=24
proxyUser[comment]=The username for an authenticated proxy
proxyUser=
versionOverride[comment]=Override the automatically determined system version
versionOverride=
sslCACert[comment]=The CA cert used to verify the ssl server
sslCACert=/usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT
retrieveOnly[comment]=Retrieve packages only
retrieveOnly=0
debug[comment]=Whether or not debugging is enabled
debug=0
httpProxy[comment]=HTTP proxy in host:port format, e.g. squid.redhat.com:3128<http://squid.redhat.com:3128>
httpProxy=
useNoSSLForPackages[comment]=Use the noSSLServerURL for package, package list, and header fetching (disable Akamai)
useNoSSLForPackages=0
systemIdPath[comment]=Location of system id
systemIdPath=/etc/sysconfig/rhn/systemid
enableProxyAuth[comment]=To use an authenticated proxy or not
enableProxyAuth=0
noReboot[comment]=Disable the reboot actions
noReboot=0
Thanks,
Nick Kitmitto
System Engineer
ClearDATA
Healthcare Cloud Computing
and Information Security
602-635-4004<tel:602-635-4004> 24x7 Help Line
www.cleardata.net<http://www.cleardata.net/>
This email may contain confidential and privileged material for the sole use of the intended recipient. Any review, use, distribution or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive for the recipient), please contact the sender by reply email and delete all copies of this message.
From: spacewalk-list-bounces at redhat.com<mailto:spacewalk-list-bounces at redhat.com> [mailto:spacewalk-list-bounces at redhat.com<mailto:spacewalk-list-bounces at redhat.com>] On Behalf Of Thomas Foster
Sent: Wednesday, May 14, 2014 3:03 AM
To: spacewalk-list at redhat.com<mailto:spacewalk-list at redhat.com>
Subject: Re: [Spacewalk-list] Yum Fails For Clients Behind Proxy
What does your /etc/sysconfig/rhn/up2date file say on the client...also what release?
On May 14, 2014 1:33 AM, "Nick Kitmitto" <nick.kitmitto at cleardata.com<mailto:nick.kitmitto at cleardata.com>> wrote:
I recently setup proxy servers and got them functional and registered properly through Spacewalk. I can now use the proxy servers to register the clients in the respective datacenter, however when I try to install with yum, it fails. Is there something I need to do to the proxy servers so they start handing out packages that are in the repos on the master?
Here’s the error on the client:
[root at hostname rhn]# yum repolist
Loaded plugins: fastestmirror, rhnplugin, security
This system is receiving updates from RHN Classic or Red Hat Satellite.
Determining fastest mirrors
repo id repo name status
centos-base-64bit CentOS Base 64Bit 0
epel-64bit EPEL 64Bit 0
repolist: 0
[root at hostname rhn]# yum install xclock
Loaded plugins: fastestmirror, rhnplugin, security
This system is receiving updates from RHN Classic or Red Hat Satellite.
Loading mirror speeds from cached hostfile
Error: Cannot retrieve repository metadata (repomd.xml) for repository: centos-base-64bit. Please verify its path and try again
Here’s what I see on the proxy:
==> ssl_access_log <==
10.210.0.70 - - [13/May/2014:22:26:32 -0700] "POST /XMLRPC HTTP/1.1" 200 2042
==> ssl_request_log <==
[13/May/2014:22:26:32 -0700] 10.210.0.70 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /XMLRPC HTTP/1.1" 2042
==> ssl_access_log <==
10.210.0.70 - - [13/May/2014:22:26:32 -0700] "POST /XMLRPC HTTP/1.1" 200 1103
==> ssl_request_log <==
[13/May/2014:22:26:32 -0700] 10.210.0.70 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /XMLRPC HTTP/1.1" 1103
==> ssl_access_log <==
10.210.0.70 - - [13/May/2014:22:26:33 -0700] "POST /XMLRPC HTTP/1.1" 200 1103
==> ssl_request_log <==
[13/May/2014:22:26:33 -0700] 10.210.0.70 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /XMLRPC HTTP/1.1" 1103
==> ssl_access_log <==
10.210.0.70 - - [13/May/2014:22:26:33 -0700] "POST /XMLRPC HTTP/1.1" 200 1103
==> ssl_request_log <==
[13/May/2014:22:26:33 -0700] 10.210.0.70 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /XMLRPC HTTP/1.1" 1103
Here’s what I see on the master:
[13/May/2014:22:26:34 -0700] 10.209.0.86 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /XMLRPC HTTP/1.1" 2042
[13/May/2014:22:26:34 -0700] 10.209.0.86 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /XMLRPC HTTP/1.1" 1103
[13/May/2014:22:26:35 -0700] 10.209.0.86 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /XMLRPC HTTP/1.1" 1103
[13/May/2014:22:26:35 -0700] 10.209.0.86 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /XMLRPC HTTP/1.1" 1103
Thanks in advance if you’re able to help!
Regards,
Nick Kitmitto
System Engineer
ClearDATA
Healthcare Cloud Computing
and Information Security
602-635-4004<tel:602-635-4004> 24x7 Help Line
www.cleardata.net<http://www.cleardata.net/>
This email may contain confidential and privileged material for the sole use of the intended recipient. Any review, use, distribution or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive for the recipient), please contact the sender by reply email and delete all copies of this message.
_______________________________________________
Spacewalk-list mailing list
Spacewalk-list at redhat.com<mailto:Spacewalk-list at redhat.com>
https://www.redhat.com/mailman/listinfo/spacewalk-list
_______________________________________________
Spacewalk-list mailing list
Spacewalk-list at redhat.com<mailto:Spacewalk-list at redhat.com>
https://www.redhat.com/mailman/listinfo/spacewalk-list
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20140514/7a7a77da/attachment.htm>
More information about the Spacewalk-list
mailing list