[Spacewalk-list] Spacewalk 2.8 OSAD problems

[Larry Clegg]

Greetings Spacers,



I’m running SW 2.8 on Centos 6.10.  This is a fresh install of both the OS
and SW.  I believe I might be running into issues with CNAME aliases.

My goal is to be able to use the friendly URL Alias but I can’t get it to
work with OSAD.



Actual hostname:  fr1-inf-lu-s01.inf.fr1.cloud.kyriba.com

Friendly Alias:  spacewalk.fr1.cloud.kyriba.com



During the SW install/configuration I answered the ssl-set-org-unit with
fr1-inf-lu-s01.inf.fr1.cloud.kyriba.com

I answered the ssl-set-cnames with spacewalk.fr1.cloud.kyriba.com



SW clients can successfully register with either actual FQDN and/or the
Alias.



The jabberd process on the SW server reports this:

Oct 11 18:50:04 fr1-inf-lu-s01 jabberd/c2s[2288]: [9] [::ffff:172.17.43.89,
port=36460] disconnect jid=unbound, packets: 0, bytes: 173

Oct 11 18:50:04 fr1-inf-lu-s01 jabberd/c2s[2288]: SASL callback for
non-existing host: spacewalk.fr1.cloud.kyriba.com

Oct 11 18:50:04 fr1-inf-lu-s01 jabberd/c2s[2288]: SASL callback for
non-existing host: spacewalk.fr1.cloud.kyriba.com

Oct 11 18:50:04 fr1-inf-lu-s01 jabberd/c2s[2288]: SASL callback for
non-existing host: spacewalk.fr1.cloud.kyriba.com

Oct 11 18:50:04 fr1-inf-lu-s01 jabberd/c2s[2288]: SASL callback for
non-existing host: spacewalk.fr1.cloud.kyriba.com

Oct 11 18:50:04 fr1-inf-lu-s01 jabberd/c2s[2288]: SASL callback for
non-existing host: spacewalk.fr1.cloud.kyriba.com

Oct 11 18:50:04 fr1-inf-lu-s01 jabberd/c2s[2288]: SASL callback for
non-existing host: spacewalk.fr1.cloud.kyriba.com



OSAD on the client reports this:

2018-10-11 19:22:44 rhn_log.log_error: Traceback (most recent call last):

  File "/usr/lib/python2.6/site-packages/osad/jabber_lib.py", line 264, in
setup_connection

    c = self._get_jabber_client(js)

  File "/usr/lib/python2.6/site-packages/osad/jabber_lib.py", line 336, in
_get_jabber_client

    c.connect()

  File "/usr/lib/python2.6/site-packages/osad/jabber_lib.py", line 633, in
connect

    raise SSLDisabledError

SSLDisabledError



2018-10-11 19:22:44 jabber_lib.main: Unable to connect to jabber servers,
sleeping 76 seconds





When I re-register the client using the “
fr1-inf-lu-s01.inf.fr1.cloud.kyriba.com” host name I get these messages:

[root at fr1-inf-lm-s02 ~]# service osad restart

Shutting down osad:                                        [  OK  ]

Starting osad: 2018-10-11 19:27:33 rhn_log.log_error: Traceback caught:

Traceback caught:

2018-10-11 19:27:33 rhn_log.log_error: Traceback (most recent call last):

  File "/usr/lib/python2.6/site-packages/osad/jabber_lib.py", line 660, in
connect

    ssl.do_handshake()

Error: [('SSL routines', 'SSL3_GET_SERVER_CERTIFICATE', 'certificate verify
failed')]



Traceback (most recent call last):

  File "/usr/lib/python2.6/site-packages/osad/jabber_lib.py", line 660, in
connect

    ssl.do_handshake()

Error: [('SSL routines', 'SSL3_GET_SERVER_CERTIFICATE', 'certificate verify
failed')]



                                                           [FAILED]



But on the SW server I now get this:

Oct 11 19:27:21 fr1-inf-lu-s01 jabberd/c2s[2288]: SASL callback for
non-existing host: spacewalk.fr1.cloud.kyriba.com

Oct 11 19:27:33 fr1-inf-lu-s01 jabberd/c2s[2288]: [9] [::ffff:172.17.43.89,
port=36782] connect

Oct 11 19:27:33 fr1-inf-lu-s01 jabberd/c2s[2288]: [9] [::ffff:172.17.43.89,
port=36782] disconnect jid=unbound, packets: 0, bytes: 0





*Larry E. Clegg*

Systems Engineer (SaaS Platform Operations) | *Kyriba*

[Cell Phone] +1 858-357-5579

[Address] 9620 Towne Centre Drive | Suite 250 | San Diego, California |
92121

www.kyriba.com | Facebook <https://www.facebook.com/KyribaCorp> | Twitter
<https://twitter.com/kyribacorp> | LinkedIn
<http://www.linkedin.com/company/kyriba-corporation> | Blog
<http://www.kyriba.com/blog>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20181011/73123ebd/attachment.htm>