[Spacewalk-list] Recent httpd/mod_ssl Update break Proxy (2.5) no delivery of repomd etc. to clients (Known Error??)

Tomáš Kašpárek tkaspare at redhat.com
Wed Aug 16 10:01:28 UTC 2017


Hello,

update of yum-rhn-plugin package on your clients should resolve your 
problems.
Additionally putting [1] into /etc/httpd/conf.d/aa-spacewalk-server.conf 
can serve as temporary workaround.

Tomas

[1] - 
https://raw.githubusercontent.com/spacewalkproject/spacewalk/master/backend/apache-conf/aa-spacewalk-server.conf

On 08/16/2017 11:28 AM, Cody Skidmore wrote:
> I ran into this just a couple of hours ago. While this applies to 
> Apache 2.4, the HTTPProtocolOptions unsafe config worked for my 
> Spacewalk 2.3 instance running on CentOS 6 with Apache 2.2.
> https://bugzilla.redhat.com/show_bug.cgi?id=1445428#c2
>
> Cody Skidmore
> Fuqua School of Business
> Duke University
>
>> On Aug 16, 2017, at 5:06 AM, Matthias Gruber <MGruber at metzler.com 
>> <mailto:MGruber at metzler.com>> wrote:
>>
>> Hi!
>>
>> We have a SpaceWalk 2.5 with several proxy running, all on CentOS 6.9
>>
>> After patching the first two Proxies this week, the clients which are 
>> attached to this updated proxies  doesnt receiving any updates anymore
>>
>> Simply getting:
>> root at lvasp-uimvmgmt ~]# yum repolist
>> Loaded plugins: fastestmirror, rhnplugin
>> This system is receiving updates from RHN Classic or Red Hat Satellite.
>> Loading mirror speeds from cached hostfile
>> repo id   repo name                          status
>> clone-basis-chnl-os-centos-6  clone-basis-chnl-os-centos-6           
>>               0
>> clone-chnl-os-centos-6-base clone-chnl-os-centos-6-base               
>>          0
>> clone-chnl-os-centos-6-update_2017-08 
>> clone-chnl-os-centos-6-update_2017-08                        0
>> clone-chnl-spacewalk-25-client-centos-6 
>> clone-chnl-spacewalk-25-client-centos-6                        0
>> repolist: 0
>> [root at lvasp-uimvmgmt ~]#
>>
>> a yum update delivers
>> [root at lvasp-uimvmgmt ~]# yum update
>> Loaded plugins: fastestmirror, rhnplugin
>> This system is receiving updates from RHN Classic or Red Hat Satellite.
>> Setting up Update Process
>> Loading mirror speeds from cached hostfile
>> Error: Cannot retrieve repository metadata (repomd.xml) for 
>> repository: clone-basis-chnl-os-centos-6. Please verify its path and 
>> try again
>> [root at lvasp-uimvmgmt ~]#
>>
>> However, the only change on the proxy for this example between two 
>> month, the privious it was working, are patches
>>
>> [root at lvasp-swp043 ~]# yum history list
>> Loaded plugins: fastestmirror, rhnplugin
>> This system is receiving updates from RHN Classic or Red Hat Satellite.
>> ID     | Login user               | Date and time    | Action(s)     
>>  | Altered
>> ------------------------------------------------------------------------------- 
>>
>>     17 | System <unset>           | 2017-08-15 04:15 | E, I, U    |   
>> 13 EE
>>     16 | System <unset>           | 2017-07-11 04:16 | E, I, U    |   
>> 16 EE
>> ....
>>
>> [root at lvasp-swp043 ~]# yum history info 17
>> Loaded plugins: fastestmirror, rhnplugin
>> This system is receiving updates from RHN Classic or Red Hat Satellite.
>> Transaction ID : 17
>> Begin time     : Tue Aug 15 04:15:41 2017
>> Begin rpmdb    : 473:93beb7d664b07e2e33a54e88e6b10e37da9ce7ed
>> End time       :          04:17:13 2017 (92 seconds)
>> End rpmdb      : 473:e19a7257b45854883ad4d129c53b10530b3eb870
>> User           : System <unset>
>> Return-Code    : Success
>> Command Line   : -y update
>> Transaction performed with:
>>     Installed rpm-4.8.0-55.el6.x86_64 
>> @anaconda-CentOS-201605220104.x86_64/6.8
>>     Installed yum-3.2.29-81.el6.centos.noarch 
>> @clone-chnl-os-centos-6-base
>>     Installed yum-metadata-parser-1.1.2-16.el6.x86_64 
>> @anaconda-CentOS-201605220104.x86_64/6.8
>>     Installed yum-plugin-fastestmirror-1.1.30-40.el6.noarch 
>> @clone-chnl-os-centos-6-base
>>     Installed yum-rhn-plugin-2.5.5-1.el6.noarch 
>> @spacwalkintermediateclientrepo
>> Packages Altered:
>>     Updated bind-libs-32:9.8.2-0.62.rc1.el6_9.2.x86_64 
>>  @clone-chnl-os-centos-6-update_2017-06
>>     Update    32:9.8.2-0.62.rc1.el6_9.4.x86_64 
>>  @clone-chnl-os-centos-6-update_2017-08
>>     Updated bind-utils-32:9.8.2-0.62.rc1.el6_9.2.x86_64 
>> @clone-chnl-os-centos-6-update_2017-06
>>     Update     32:9.8.2-0.62.rc1.el6_9.4.x86_64 
>> @clone-chnl-os-centos-6-update_2017-08
>>     Updated httpd-2.2.15-59.el6.centos.x86_64 
>> @clone-chnl-os-centos-6-base
>>     Update  2.2.15-60.el6.centos.4.x86_64 
>> @clone-chnl-os-centos-6-update_2017-08
>>     Updated httpd-tools-2.2.15-59.el6.centos.x86_64 
>> @clone-chnl-os-centos-6-base
>>     Update      2.2.15-60.el6.centos.4.x86_64 
>> @clone-chnl-os-centos-6-update_2017-08
>>     Erase kernel-2.6.32-642.11.1.el6.x86_64 
>> @clone-chnl-os-centos-6-update_2016-12
>>     Install kernel-2.6.32-696.6.3.el6.x86_64 
>>  @clone-chnl-os-centos-6-update_2017-08
>>     Updated kernel-doc-2.6.32-696.3.2.el6.noarch 
>>  @clone-chnl-os-centos-6-update_2017-07
>>     Update     2.6.32-696.6.3.el6.noarch 
>>  @clone-chnl-os-centos-6-update_2017-08
>>     Updated kernel-firmware-2.6.32-696.3.2.el6.noarch 
>> @clone-chnl-os-centos-6-update_2017-07
>>     Update          2.6.32-696.6.3.el6.noarch 
>> @clone-chnl-os-centos-6-update_2017-08
>>     Updated mod_ssl-1:2.2.15-59.el6.centos.x86_64 
>> @clone-chnl-os-centos-6-base
>>     Update  1:2.2.15-60.el6.centos.4.x86_64 
>> @clone-chnl-os-centos-6-update_2017-08
>>     Updated perf-2.6.32-696.3.2.el6.x86_64 
>>  @clone-chnl-os-centos-6-update_2017-07
>>     Update 2.6.32-696.6.3.el6.x86_64 
>>  @clone-chnl-os-centos-6-update_2017-08
>>     Updated procps-3.2.8-45.el6.x86_64  @clone-chnl-os-centos-6-base
>>     Update 3.2.8-45.el6_9.1.x86_64 
>>  @clone-chnl-os-centos-6-update_2017-08
>>     Updated selinux-policy-3.7.19-307.el6.noarch 
>>  @clone-chnl-os-centos-6-base
>>     Update         3.7.19-307.el6_9.2.noarch 
>>  @clone-chnl-os-centos-6-update_2017-08
>>     Updated selinux-policy-targeted-3.7.19-307.el6.noarch 
>> @clone-chnl-os-centos-6-base
>>     Update                  3.7.19-307.el6_9.2.noarch 
>> @clone-chnl-os-centos-6-update_2017-08
>> Scriptlet output:
>>    1 warning:  erase unlink of 
>> /lib/modules/2.6.32-642.11.1.el6.x86_64/modules.order failed: No such 
>> file or directory
>>    2 warning:  erase unlink of 
>> /lib/modules/2.6.32-642.11.1.el6.x86_64/modules.networking failed: No 
>> such file or directory
>>    3 warning:  erase unlink of 
>> /lib/modules/2.6.32-642.11.1.el6.x86_64/modules.modesetting failed: 
>> No such file or directory
>>    4 warning:  erase unlink of 
>> /lib/modules/2.6.32-642.11.1.el6.x86_64/modules.drm failed: No such 
>> file or directory
>>    5 warning:  erase unlink of 
>> /lib/modules/2.6.32-642.11.1.el6.x86_64/modules.block failed: No such 
>> file or directory
>>
>>
>> There are new http. + mod_ssl  and yum delivered and installed.
>>
>> I simply rolled that back. and the proxy now runs perfect again.
>>
>>
>> Is this a known error? Any Workaround, something I missed?
>>
>> Cheers
>> Matthias Gruber
>>
>>
>>
>>
>> ------------------------------------------------------------------------------------
>> METZLER
>> Informationstechnologie
>>
>> Matthias Gruber
>> IT-Infrastruktur & -Betrieb
>>
>> B. Metzler seel. Sohn & Co.
>> Kommanditgesellschaft auf Aktien
>> Untermainanlage 1
>> 60329 Frankfurt am Main
>> Telefon (0 69) 21 04 - 43 30
>> Telefax (0 69) 21 04 - 40 40
>> MGruber at metzler.com <mailto:MGruber at metzler.com>
>> www.metzler.com <x-msg://48/www.metzler.com>
>>
>>
>>
>> Von: Daryl Rose <darylrose at outlook.com <mailto:darylrose at outlook.com>>
>> An: "spacewalk-list at redhat.com <mailto:spacewalk-list at redhat.com>" 
>> <spacewalk-list at redhat.com <mailto:spacewalk-list at redhat.com>>
>> Datum: 15.08.2017 16:27
>> Betreff: [Spacewalk-list] error was [Errno 14] HTTPS Error 400 - Bad 
>> Request
>> Gesendet von: spacewalk-list-bounces at redhat.com 
>> <mailto:spacewalk-list-bounces at redhat.com>
>> ------------------------------------------------------------------------
>>
>>
>>
>> Earlier this summer I had to upgrade my proxy server with v2.6.   
>> After which I started experiencing errors with my SLES servers 
>> receiving "HTTPS Error 400 - Bad Request" errors.  I was adviced to 
>> update the zypper library, which resolved this issue. I am now 
>> getting the same error with CentOS 7.3 servers.  I would assume that 
>> I need to upgrade a yum library package, but I'm not sure which one. 
>>  Please advice.
>>
>> Thank you.
>>
>> Daryl_______________________________________________
>> Spacewalk-list mailing list
>> Spacewalk-list at redhat.com <mailto:Spacewalk-list at redhat.com>
>> https://www.redhat.com/mailman/listinfo/spacewalk-list
>>
>>
>>
>>
>> Persönlich haftende Gesellschafter: Harald Illy, Michael Klaus, 
>> Friedrich von Metzler, Emmerich Müller, Gerhard Wiesheu
>> Vorsitzender des Aufsichtsrates: Dr. Christoph Schücking
>> Sitz der Gesellschaft: Frankfurt am Main, Handelsregisternummer: HRB 
>> 27 515
>>
>> Diese Nachricht ist vertraulich. Sollten Sie nicht der vorgesehene 
>> Empfänger sein, so bitten wir Sie höflich, dies unverzüglich dem 
>> Absender mitzuteilen und die Nachricht zu löschen. Es ist unzulässig, 
>> die Nachricht unbefugt weiterzuleiten oder zu kopieren. Da wir nicht 
>> die Echtheit oder Vollständigkeit der in dieser Nachricht enthaltenen 
>> Informationen garantieren oder zusichern können, sind die 
>> vorstehenden Ausführungen rechtlich nicht bindend. Eine Haftung 
>> hierfür wird ausgeschlossen.
>> This message is confidential. If you are not the intended recipient, 
>> we kindly ask you to inform the sender and delete the information. 
>> Any unauthorised dissemination or copying hereof is prohibited. As we 
>> cannot guarantee or assure the genuineness or completeness of the 
>> information contained in this message, the statements set forth above 
>> are not legally binding. Accordingly we cannot accept any liability 
>> for their contents. _______________________________________________
>> Spacewalk-list mailing list
>> Spacewalk-list at redhat.com <mailto:Spacewalk-list at redhat.com>
>> https://www.redhat.com/mailman/listinfo/spacewalk-list
>
>
>
> _______________________________________________
> Spacewalk-list mailing list
> Spacewalk-list at redhat.com
> https://www.redhat.com/mailman/listinfo/spacewalk-list

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20170816/4de1b983/attachment.htm>


More information about the Spacewalk-list mailing list