[Spacewalk-list] Yum Fails For Clients Behind Proxy

Wed May 14 16:25:33 UTC 2014

Check firewall..
On May 14, 2014 12:13 PM, "Nick Kitmitto" <nick.kitmitto at cleardata.com>
wrote:

>  [root at cdn-phx2lc01 ~]# netstat -ant 1 | grep proxy server
>
> tcp        0      1 Localserver:56858
> proxyserver:443             SYN_                            SENT
>
>
>
> I get that with XMLRPC and get nothing without XMLRPC.  So it is
> communicating with XMLRPC but nothing is coming back it seems.
>
>
>
>
>
> Nick Kitmitto
>
> System Engineer
>
> *Clear**DATA*
>
> Healthcare Cloud Computing
>
> and Information Security
>
> 602-635-4004 24x7 Help Line
>
> www.cleardata.net
>
>
>
> This email may contain confidential and privileged material for the sole
> use of the intended recipient. Any review, use, distribution or disclosure
> by others is strictly prohibited. If you are not the intended recipient (or
> authorized to receive for the recipient), please contact the sender by
> reply email and delete all copies of this message.
>
>
>
> *From:* spacewalk-list-bounces at redhat.com [mailto:
> spacewalk-list-bounces at redhat.com] *On Behalf Of *Thomas Foster
> *Sent:* Wednesday, May 14, 2014 9:04 AM
> *To:* spacewalk-list at redhat.com
> *Subject:* Re: [Spacewalk-list] Yum Fails For Clients Behind Proxy
>
>
>
> If you run netstat -ant 1 and grep for the ip to your proxy server do you
> see it even listed...try with xmlrpc and without xmlrpc in the
> file..(testing if communication is even working to server)
>
> On May 14, 2014 12:01 PM, "Nick Kitmitto" <nick.kitmitto at cleardata.com>
> wrote:
>
>  Here’s the error without the XMLRPC:
>
>
>
> [root at hostname  rhn]# yum install xclock
>
> Loaded plugins: fastestmirror, rhnplugin, security
>
> There was an error communicating with RHN.
>
> Red Hat Satellite or RHN Classic support will be disabled.
>
> Error communicating with server. The message was:
>
> Broken response from the server.
>
> Determining fastest mirrors
>
> Setting up Install Process
>
> No package xclock available.
>
> Error: Nothing to do
>
>
>
> Nick Kitmitto
>
> System Engineer
>
> *Clear**DATA*
>
> Healthcare Cloud Computing
>
> and Information Security
>
> 602-635-4004 24x7 Help Line
>
> www.cleardata.net
>
>
>
> This email may contain confidential and privileged material for the sole
> use of the intended recipient. Any review, use, distribution or disclosure
> by others is strictly prohibited. If you are not the intended recipient (or
> authorized to receive for the recipient), please contact the sender by
> reply email and delete all copies of this message.
>
>
>
> *From:* spacewalk-list-bounces at redhat.com [mailto:
> spacewalk-list-bounces at redhat.com] *On Behalf Of *Thomas Foster
> *Sent:* Wednesday, May 14, 2014 8:54 AM
> *To:* spacewalk-list at redhat.com
> *Subject:* Re: [Spacewalk-list] Yum Fails For Clients Behind Proxy
>
>
>
> If you are on rhel 5 that should work, if not take the XMLRPC off of the
> url and see if it works...
>
> On May 14, 2014 11:50 AM, "Nick Kitmitto" <nick.kitmitto at cleardata.com>
> wrote:
>
>  Hi Thomas,
>
>
>
> Spacewalk-client-repo is at 2.1-2
>
> Spacewalk itself is at 2.1
>
>
>
>
>
> # Automatically generated Red Hat Update Agent config file, do not edit.
>
> # Format: 1.0
>
> tmpDir[comment]=Use this Directory to place the temporary transport files
>
> tmpDir=/tmp
>
>
>
> disallowConfChanges[comment]=Config options that can not be overwritten by
> a config update action
>
>
> disallowConfChanges=noReboot;sslCACert;useNoSSLForPackages;noSSLServerURL;serverURL;disallowConfChanges
>
>
>
> skipNetwork[comment]=Skips network information in hardware profile sync
> during registration.
>
> skipNetwork=0
>
>
>
> stagingContent[comment]=Retrieve content of future actions in advance
>
> stagingContent=1
>
>
>
> networkRetries[comment]=Number of attempts to make at network connections
> before giving up
>
> networkRetries=1
>
>
>
> hostedWhitelist[comment]=RHN Hosted URL's
>
> hostedWhitelist=
>
>
>
> enableProxy[comment]=Use a HTTP Proxy
>
> enableProxy=0
>
>
>
> writeChangesToLog[comment]=Log to /var/log/up2date which packages has been
> added and removed
>
> writeChangesToLog=0
>
>
>
> serverURL[comment]=Remote server URL (use FQDN)
>
> serverURL=https://proxy-server-FQDN/XMLRPC
>
>
>
> proxyPassword[comment]=The password to use for an authenticated proxy
>
> proxyPassword=
>
>
>
> stagingContentWindow[comment]=How much forward we should look for future
> actions. In hours.
>
> stagingContentWindow=24
>
>
>
> proxyUser[comment]=The username for an authenticated proxy
>
> proxyUser=
>
>
>
> versionOverride[comment]=Override the automatically determined system
> version
>
> versionOverride=
>
>
>
> sslCACert[comment]=The CA cert used to verify the ssl server
>
> sslCACert=/usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT
>
>
>
> retrieveOnly[comment]=Retrieve packages only
>
> retrieveOnly=0
>
>
>
> debug[comment]=Whether or not debugging is enabled
>
> debug=0
>
>
>
> httpProxy[comment]=HTTP proxy in host:port format, e.g.
> squid.redhat.com:3128
>
> httpProxy=
>
>
>
> useNoSSLForPackages[comment]=Use the noSSLServerURL for package, package
> list, and header fetching (disable Akamai)
>
> useNoSSLForPackages=0
>
>
>
> systemIdPath[comment]=Location of system id
>
> systemIdPath=/etc/sysconfig/rhn/systemid
>
>
>
> enableProxyAuth[comment]=To use an authenticated proxy or not
>
> enableProxyAuth=0
>
>
>
> noReboot[comment]=Disable the reboot actions
>
> noReboot=0
>
>
>
> Thanks,
>
>
>
> Nick Kitmitto
>
> System Engineer
>
> *Clear**DATA*
>
> Healthcare Cloud Computing
>
> and Information Security
>
> 602-635-4004 24x7 Help Line
>
> www.cleardata.net
>
>
>
> This email may contain confidential and privileged material for the sole
> use of the intended recipient. Any review, use, distribution or disclosure
> by others is strictly prohibited. If you are not the intended recipient (or
> authorized to receive for the recipient), please contact the sender by
> reply email and delete all copies of this message.
>
>
>
> *From:* spacewalk-list-bounces at redhat.com [mailto:
> spacewalk-list-bounces at redhat.com] *On Behalf Of *Thomas Foster
> *Sent:* Wednesday, May 14, 2014 3:03 AM
> *To:* spacewalk-list at redhat.com
> *Subject:* Re: [Spacewalk-list] Yum Fails For Clients Behind Proxy
>
>
>
> What does your /etc/sysconfig/rhn/up2date file say on the client...also
> what release?
>
> On May 14, 2014 1:33 AM, "Nick Kitmitto" <nick.kitmitto at cleardata.com>
> wrote:
>
>  I recently setup proxy servers and got them functional and registered
> properly through Spacewalk.  I can now use the proxy servers to register
> the clients in the respective datacenter, however when I try to install
> with yum, it fails.  Is there something I need to do to the proxy servers
> so they start handing out packages that are in the repos on the master?
>
>
>
> *Here’s the error on the client:*
>
>
>
> [root at hostname rhn]# yum repolist
>
> Loaded plugins: fastestmirror, rhnplugin, security
>
> This system is receiving updates from RHN Classic or Red Hat Satellite.
>
> Determining fastest mirrors
>
> repo id
>                                          repo
> name
> status
>
> centos-base-64bit
> CentOS Base 64Bit
>                                    0
>
> epel-64bit
> EPEL
> 64Bit
> 0
>
> repolist: 0
>
> [root at hostname rhn]# yum install xclock
>
> Loaded plugins: fastestmirror, rhnplugin, security
>
> This system is receiving updates from RHN Classic or Red Hat Satellite.
>
> Loading mirror speeds from cached hostfile
>
> Error: Cannot retrieve repository metadata (repomd.xml) for repository:
> centos-base-64bit. Please verify its path and try again
>
>
>
>
>
> *Here’s what I see on the proxy:*
>
>
>
>
>
> ==> ssl_access_log <==
>
> 10.210.0.70 - - [13/May/2014:22:26:32 -0700] "POST /XMLRPC HTTP/1.1" 200
> 2042
>
>
>
> ==> ssl_request_log <==
>
> [13/May/2014:22:26:32 -0700] 10.210.0.70 TLSv1.2 DHE-RSA-AES256-GCM-SHA384
> "POST /XMLRPC HTTP/1.1" 2042
>
>
>
> ==> ssl_access_log <==
>
> 10.210.0.70 - - [13/May/2014:22:26:32 -0700] "POST /XMLRPC HTTP/1.1" 200
> 1103
>
>
>
> ==> ssl_request_log <==
>
> [13/May/2014:22:26:32 -0700] 10.210.0.70 TLSv1.2 DHE-RSA-AES256-GCM-SHA384
> "POST /XMLRPC HTTP/1.1" 1103
>
>
>
> ==> ssl_access_log <==
>
> 10.210.0.70 - - [13/May/2014:22:26:33 -0700] "POST /XMLRPC HTTP/1.1" 200
> 1103
>
>
>
> ==> ssl_request_log <==
>
> [13/May/2014:22:26:33 -0700] 10.210.0.70 TLSv1.2 DHE-RSA-AES256-GCM-SHA384
> "POST /XMLRPC HTTP/1.1" 1103
>
>
>
> ==> ssl_access_log <==
>
> 10.210.0.70 - - [13/May/2014:22:26:33 -0700] "POST /XMLRPC HTTP/1.1" 200
> 1103
>
>
>
> ==> ssl_request_log <==
>
> [13/May/2014:22:26:33 -0700] 10.210.0.70 TLSv1.2 DHE-RSA-AES256-GCM-SHA384
> "POST /XMLRPC HTTP/1.1" 1103
>
>
>
> *Here’s what I see on the master:*
>
>
>
> [13/May/2014:22:26:34 -0700] 10.209.0.86 TLSv1.2 DHE-RSA-AES256-GCM-SHA384
> "POST /XMLRPC HTTP/1.1" 2042
>
> [13/May/2014:22:26:34 -0700] 10.209.0.86 TLSv1.2 DHE-RSA-AES256-GCM-SHA384
> "POST /XMLRPC HTTP/1.1" 1103
>
> [13/May/2014:22:26:35 -0700] 10.209.0.86 TLSv1.2 DHE-RSA-AES256-GCM-SHA384
> "POST /XMLRPC HTTP/1.1" 1103
>
> [13/May/2014:22:26:35 -0700] 10.209.0.86 TLSv1.2 DHE-RSA-AES256-GCM-SHA384
> "POST /XMLRPC HTTP/1.1" 1103
>
>
>
> Thanks in advance if you’re able to help!
>
>
>
> Regards,
>
>
>
> Nick Kitmitto
>
> System Engineer
>
> *Clear**DATA*
>
> Healthcare Cloud Computing
>
> and Information Security
>
> 602-635-4004 24x7 Help Line
>
> www.cleardata.net
>
>
>
> This email may contain confidential and privileged material for the sole
> use of the intended recipient. Any review, use, distribution or disclosure
> by others is strictly prohibited. If you are not the intended recipient (or
> authorized to receive for the recipient), please contact the sender by
> reply email and delete all copies of this message.
>
>
>
>
> _______________________________________________
> Spacewalk-list mailing list
> Spacewalk-list at redhat.com
> https://www.redhat.com/mailman/listinfo/spacewalk-list
>
>
> _______________________________________________
> Spacewalk-list mailing list
> Spacewalk-list at redhat.com
> https://www.redhat.com/mailman/listinfo/spacewalk-list
>
>
> _______________________________________________
> Spacewalk-list mailing list
> Spacewalk-list at redhat.com
> https://www.redhat.com/mailman/listinfo/spacewalk-list
>
>
> _______________________________________________
> Spacewalk-list mailing list
> Spacewalk-list at redhat.com
> https://www.redhat.com/mailman/listinfo/spacewalk-list
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20140514/d4979134/attachment.htm>