[Spacewalk-list] Clients not Updating / Missing Python Files

P.Cookson at bham.ac.uk P.Cookson at bham.ac.uk
Thu Apr 4 11:42:59 UTC 2019


Merphis

You need to install Spacewalk's CA certificate on the client to enable SSL communication:

	# rpm -Uvh http://<spacewalk server name>/pub/rhn-org-trusted-ssl-cert-1.0-1.noarch.rpm

Add certificate to database:

	# certutil -d sql:/etc/pki/nssdb -An RHN-ORG-TRUSTED-SSL-CERT -t C,, -ai /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT

Test SSL communication works before attempting to register/re-register:

	# curl -v https://<spacewalk server name>


Regards
Phil

-----Original Message-----
From: spacewalk-list-bounces at redhat.com <spacewalk-list-bounces at redhat.com> On Behalf Of Merphis.Ellis at us.idemia.com
Sent: 04 April 2019 12:09
To: Robert Paschedag <robert.paschedag at web.de>; spacewalk-list at redhat.com
Cc: Patel, Nainesh <Nainesh.Patel at us.idemia.com>
Subject: Re: [Spacewalk-list] Clients not Updating / Missing Python Files

I am still getting the certificate error:

[Thu Apr  4 07:00:55 2019] up2date D: logininfo:{'X-RHN-Server-Id': 1000010009, 'X-RHN-Auth-Server-Time': '1554375655.77', 'X-RHN-Auth': 'kqGoAs+CkN0wXkEpWS0o+BEy2nvxD3MDrtrx16T6gBA=', 'X-RHN-Auth-Channels': [['centos_7_zabbix_4_0', '20190404060000', '1', '1']], 'X-RHN-Auth-User-Id': '', 'X-RHN-Auth-Expire-Offset': '3600.0'} [Thu Apr  4 07:00:56 2019] up2date Traceback (most recent call last):
  File "/usr/sbin/rhn_check", line 382, in __run_action
    (status, message, data) = CheckCli.__do_call(method, params, kwargs)
  File "/usr/sbin/rhn_check", line 374, in __do_call
    method = getMethod.getMethod(method, "/usr/share/rhn/", "actions")
  File "/usr/share/rhn/up2date_client/getMethod.py", line 83, in getMethod
    actions = __import__(modulename)
  File "/usr/share/rhn/actions/packages.py", line 295, in <module>
    yum_base = YumAction()
  File "/usr/share/rhn/actions/packages.py", line 69, in __init__
    self.doSackSetup()
  File "/usr/lib/python2.7/site-packages/yum/__init__.py", line 741, in doSackSetup
    return self._getSacks(archlist=archlist, thisrepo=thisrepo)
  File "/usr/lib/python2.7/site-packages/yum/__init__.py", line 778, in _getSacks
    self.repos.populateSack(which=repos)
  File "/usr/lib/python2.7/site-packages/yum/repos.py", line 386, in populateSack
    sack.populate(repo, mdtype, callback, cacheonly)
  File "/usr/lib/python2.7/site-packages/yum/yumRepo.py", line 227, in populate
    if self._check_db_version(repo, mydbtype):
  File "/usr/lib/python2.7/site-packages/yum/yumRepo.py", line 319, in _check_db_version
    return repo._check_db_version(mdtype)
  File "/usr/lib/python2.7/site-packages/yum/yumRepo.py", line 1515, in _check_db_version
    repoXML = self.repoXML
  File "/usr/lib/python2.7/site-packages/yum/yumRepo.py", line 1701, in <lambda>
    repoXML = property(fget=lambda self: self._getRepoXML(),
  File "/usr/share/yum-plugins/rhnplugin.py", line 567, in _getRepoXML
    return YumRepository._getRepoXML(self)
  File "/usr/lib/python2.7/site-packages/yum/yumRepo.py", line 1697, in _getRepoXML
    self._loadRepoXML(text=self.ui_id)
  File "/usr/lib/python2.7/site-packages/yum/yumRepo.py", line 1688, in _loadRepoXML
    return self._groupLoadRepoXML(text, self._mdpolicy2mdtypes())
  File "/usr/lib/python2.7/site-packages/yum/yumRepo.py", line 1662, in _groupLoadRepoXML
    if self._commonLoadRepoXML(text):
  File "/usr/lib/python2.7/site-packages/yum/yumRepo.py", line 1482, in _commonLoadRepoXML
    result = self._getFileRepoXML(local, text)
  File "/usr/lib/python2.7/site-packages/yum/yumRepo.py", line 1259, in _getFileRepoXML
    size=102400) # setting max size as 100K
  File "/usr/share/yum-plugins/rhnplugin.py", line 382, in _getFile
    start, end, copy_local, checkfunc, text, reget, cache, size)
  File "/usr/share/yum-plugins/rhnplugin.py", line 486, in _noExceptionWrappingGet
    raise urlException
<class 'yum.Errors.RepoError'>: failed to retrieve repodata/repomd.xml from centos_7_zabbix_4_0 error was [Errno 14] curl#51 - "Unable to communicate securely with peer: requested domain name does not match the server's certificate."

[Thu Apr  4 07:00:56 2019] up2date D: local action status: ((6,), 'Fatal error in Python code occurred', {}) [Thu Apr  4 07:00:56 2019] up2date D: rpcServer: Calling XMLRPC registration.welcome_message

-----Original Message-----
From: Robert Paschedag <robert.paschedag at web.de>
Sent: Thursday, April 04, 2019 6:46 AM
To: Ellis, Merphis <Merphis.Ellis at us.idemia.com>; spacewalk-list at redhat.com
Cc: Patel, Nainesh <Nainesh.Patel at us.idemia.com>
Subject: RE: RE: [Spacewalk-list] Clients not Updating / Missing Python Files

Am 4. April 2019 12:40:07 MESZ schrieb "Ellis, Merphis" <Merphis.Ellis at us.idemia.com>:
>When I run the rhn_check it does now pull a list of required updates 
>and then I see it try to go out to the internet to get the packages.
>Is there a way to have it pull them from the spacewalk server?  This is 
>a problem with our proxy in that it does not work very well when we try 
>to connect to the public repos using https (port 443).
>
>We have always worked around this by only connecting using http 
>(port80).

Just disable all non spacewalk repos and try again.
Robert

>
>-----Original Message-----
>From: Robert Paschedag <robert.paschedag at web.de>
>Sent: Thursday, April 04, 2019 2:53 AM
>To: Ellis, Merphis <Merphis.Ellis at us.idemia.com>; 
>spacewalk-list at redhat.com
>Cc: Patel, Nainesh <Nainesh.Patel at us.idemia.com>
>Subject: RE: RE: [Spacewalk-list] Clients not Updating / Missing Python 
>Files
>
>Am 3. April 2019 19:05:56 MESZ schrieb "Ellis, Merphis"
><Merphis.Ellis at us.idemia.com>:
>>I cleaned out one of the centos systems and changed the repo I was 
>>using to 
>>https://copr-be.cloud.fedoraproject.org/archive/spacewalk/2.7-client/R
>>H EL/7/x86_64/ Did the yum install again and now I see the files in 
>>the /usr/share/rhn that I believe I should.
>>
>>Reran the rhnreg_ks with the  --force
>>
>>I now am getting the error message "local action status: ((6,), 'Fatal 
>>error in Python code occurred', {}) "
>>
>>Attached is log from the rhn_check -vvvvvv
>
>And you really have the "errata.py" within the "actions" folder?
>
>Robert
>
>>
>>
>>
>>-----Original Message-----
>>From: Robert Paschedag <robert.paschedag at web.de>
>>Sent: Wednesday, April 03, 2019 8:36 AM
>>To: Ellis, Merphis <Merphis.Ellis at us.idemia.com>
>>Subject: Aw: RE: [Spacewalk-list] Clients not Updating / Missing
>Python
>>Files
>>
>>
>>
>>> Gesendet: Mittwoch, 03. April 2019 um 13:13 Uhr
>>> Von: "Ellis, Merphis" <Merphis.Ellis at us.idemia.com>
>>> An: "Robert Paschedag" <robert.paschedag at web.de>
>>> Betreff: RE: [Spacewalk-list] Clients not Updating / Missing Python 
>>> Files
>>>
>>> I am doing a yum install for
>>> rhn-client-tools
>>> rhn-check
>>> rhn-setup
>>> rhnsd
>>> m2crypto
>>> yum-rhn-plugin
>>> rhncfg-action
>>>
>>What distribution are you running?
>>
>>Maybe there is also a "rhncfg" package, but the /usr/share/rhn/actions 
>>directory should at least be there, as you installed the
>rhncfg-actions
>>package.
>>
>>Robert
>>
>>
>>>
>>>
>>>
>>> -----Original Message-----
>>> From: Robert Paschedag <robert.paschedag at web.de>
>>> Sent: Wednesday, April 03, 2019 1:38 AM
>>> To: Ellis, Merphis <Merphis.Ellis at us.idemia.com>
>>> Subject: Re: [Spacewalk-list] Clients not Updating / Missing Python 
>>> Files
>>>
>>> Am 2. April 2019 23:50:24 MESZ schrieb "Ellis, Merphis"
>><Merphis.Ellis at us.idemia.com>:
>>> >I am not getting any of the folders in the /use/share/rhn after a
>>yum
>>> >install of the packages and registering of the client
>>>
>>> Which packages did you install?
>>>
>>>
>>> >
>>> >Sent from my iPhone
>>> >
>>> >> On Apr 2, 2019, at 5:48 PM, Robert Paschedag
>>> ><robert.paschedag at web.de> wrote:
>>> >>
>>> >> Am 2. April 2019 19:02:45 MESZ schrieb "Ellis, Merphis"
>>> ><Merphis.Ellis at us.idemia.com>:
>>> >>> Does this need port 5222 open to work?
>>> >>
>>> >> No. Port 5222 is used by osad from client to server (5222). If 
>>> >> you're
>>> >not using osad, the clients "rhnsd" or "rhn_check" will do this via 
>>> >port 443
>>> >>
>>> >> Robert
>>> >>>
>>> >>> -----Original Message-----
>>> >>> From: Robert Paschedag <robert.paschedag at web.de>
>>> >>> Sent: Monday, April 01, 2019 2:43 PM
>>> >>> To: spacewalk-list at redhat.com; Ellis, Merphis 
>>> >>> <Merphis.Ellis at us.idemia.com>; spacewalk-list at redhat.com
>>> >>> Subject: Re: [Spacewalk-list] Clients not Updating / Missing 
>>> >>> Python Files
>>> >>>
>>> >>> Am 1. April 2019 20:18:51 MESZ schrieb "Ellis, Merphis"
>>> >>> <Merphis.Ellis at us.idemia.com>:
>>> >>>> I am trying to get a spacewalk server up and going.   I was
>able
>>to
>>> >>>> install Spacewalk 2.7 and getting several clients registered.
>>I
>>> >am
>>> >>>> now trying to push a couple updates from a public repo.  The
>>> >Spacewalk
>>> >>>> server has populated the channel with the updates.
>>> >>>>
>>> >>>> I scheduled the updates, this task fails with an Client
>>execution
>>> >>>> returned "Invalid function call attempted " (code 6)
>>> >>>
>>> >>> The "errata.py" action is missing in /usr/share/rhn/actions
>>> >>>
>>> >>> It is responsible for package installation..
>>> >>>
>>> >>> You can just copy this file from another client (e.g. CentOS)
>>> >>>
>>> >>> Robert
>>> >>>
>>> >>>>
>>> >>>> Me a google spend several hours looking and it runs out that on
>>> >these
>>> >>>> clients the /usr/share/rhn only has a couple certificates?
>>> >>>>
>>> >>>> I am missing the folders actions, certs classes config-defaults 
>>> >>>> lib osad rhnpush satellite_exported search server
>up2date_client
>>
>>> >>>> upload_server wsgi  and servers other files?
>>> >>>>
>>> >>>> Anyone know which rpm I need to look at rerunning? Or how to
>fix
>>> >this?
>>> >>>>
>>> >>>>
>>> >>>>
>>> >>>> Making plans actionable!
>>> >>>>
>>> >>>>
>>> >>>> Regards,
>>> >>>>
>>> >>>>
>>> >>>>
>>> >>>>
>>> >>>> Merphis Ellis
>>> >>>>
>>> >>>>
>>> >>>>
>>> >>>> M. +1 850 556-6313
>>> >>>> E.
>>> >>>> merphis.ellis at us.idemia.com<mailto:merphis.ellis at us.idemia.com>
>>> >>>> 125 McAlpin Dr
>>> >>>> Winterville, GA 30683
>>> >>>>
>>> >>>>
>>> >>>>
>>> >>>>
>>> >>>>
>>> >>>>
>>> >>>>
>>> >>>> [Idemia]<https://www.idemia.com/>
>>> >>>>
>>> >>>>
>>> >>>> Join us on
>>> >>>>
>>> >>>> [Facebook]<https://www.facebook.com/IdemiaGroup/>
>>> >>>>
>>> >>>> [Twitter]<https://twitter.com/IdemiaGroup>
>>> >>>>
>>> >>>> [LinkedIn]<https://www.linkedin.com/company-beta/3488/>
>>> >>>>
>>> >>>> [Youtube]<https://www.youtube.com/user/SafranMorpho/>
>>> >>>>
>>> >>>>
>>> >>>>
>>> >>>>
>>> >>>>
>>> >>>>
>>> >>>> [www.idemia.com]<https://www.idemia.com/>
>>> >>>>
>>> >>>>
>>> >>>>
>>> >>>>
>>> >>>> [OT-MORPHO is now IDEMIA]
>>> >>>>
>>> >>>>
>>> >>>>
>>> >>>>
>>> >>>>
>>> >>>> ________________________________
>>> >>>>
>>> >>>> This message is only for the use of the intended recipient and 
>>> >>>> may contain information that is CONFIDENTIAL and PROPRIETARY to
>>IDEMIA.
>>> >If
>>> >>>> you are not the intended recipient, please erase all copies of 
>>> >>>> the message and its attachments and notify the sender
>>immediately.
>>> >>>
>>> >>>
>>> >>> --
>>> >>> sent from my mobile device
>>> >>>
>>> >>>
>>> >>> ________________________________
>>> >>>
>>> >>> This message is only for the use of the intended recipient and
>>may
>>> >>> contain information that is CONFIDENTIAL and PROPRIETARY to
>>IDEMIA.
>>> >If
>>> >>> you are not the intended recipient, please erase all copies of
>>the
>>> >>> message and its attachments and notify the sender immediately.
>>> >>
>>> >>
>>> >> --
>>> >> sent from my mobile device
>>> >>
>>> >
>>> >________________________________
>>> >
>>> >This message is only for the use of the intended recipient and may 
>>> >contain information that is CONFIDENTIAL and PROPRIETARY to IDEMIA.
>>> >If you are not the intended recipient, please erase all copies of
>>the
>>> >message and its attachments and notify the sender immediately.
>>>
>>>
>>> --
>>> sent from my mobile device
>>>
>>>
>>> ________________________________
>>>
>>> This message is only for the use of the intended recipient and may
>>contain information that is CONFIDENTIAL and PROPRIETARY to IDEMIA. If 
>>you are not the intended recipient, please erase all copies of the 
>>message and its attachments and notify the sender immediately.
>>>
>
>
>--
>sent from my mobile device
>
>
>________________________________
>
>This message is only for the use of the intended recipient and may 
>contain information that is CONFIDENTIAL and PROPRIETARY to IDEMIA. If 
>you are not the intended recipient, please erase all copies of the 
>message and its attachments and notify the sender immediately.


--
sent from my mobile device


________________________________

This message is only for the use of the intended recipient and may contain information that is CONFIDENTIAL and PROPRIETARY to IDEMIA. If you are not the intended recipient, please erase all copies of the message and its attachments and notify the sender immediately.

_______________________________________________
Spacewalk-list mailing list
Spacewalk-list at redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list




More information about the Spacewalk-list mailing list