Re: [Spacewalk-list] Centos 7 - Spacewalk Services
On 09/07/2017 05:45 PM, Ron Skantz wrote: > Hi Tomas, > > Yes I would use the wrapper command “spacewalk-service start/stop/status” to > start spacewalk manually – once I have disabled the systemd controlled > auto-start of Spacewalk services. > > But “spacewalk-service” is not what systemctl calls to start all the > Spacewalk services – hence my original question: “What is the master file in > systemd that starts all spacewalk-service processes?” There is no single systemd service file for all services. There's spacewalk.target I think, but that probably won't help. You can use spacewalk-service to enable/disable too: # spacewalk-service disable See: https://linux.die.net/man/8/spacewalk-service Best regards Sebastian > > root@gglspace1:~ $ systemctl disable spacewalk.service > Failed to execute operation: No such file or directory > root@gglspace1:~ $ > > From: spacewalk-list-boun...@redhat.com > [mailto:spacewalk-list-boun...@redhat.com] On Behalf Of Tomáš Kašpárek > Sent: Thursday, September 07, 2017 10:26 AM > To: spacewalk-list@redhat.com > Subject: Re: [Spacewalk-list] Centos 7 - Spacewalk Services > > > EXTERNAL > Hello Ron, > > you can use spacewalk-service command which is wrapper around all Spacewalk > services. It features all the commands like start, stop and restart. > To disable the services you can use systemctl disable $SERVICE_NAME (old way > of chkconfig $SERVICE_NAME still works). > As for failed services you can use journalctl -l -u osa-dispatcher to > investigate logs. > > Tomas > On 09/07/2017 04:12 PM, Ron Skantz wrote: > Hello, hope your day is going well… > > What is the master file in systemd that starts all spacewalk-service > processes? I am fairly new to systemd and I have not been able to figure out > how all the Spacewalk services start. > I am running Spacewalk 2.6 on Centos 7 (default local postgres db). I would > like to turn off the auto-start of Spacewalk and just start spacewalk from > the command line if I reboot the server. > > Why? Because when the spacewalk starts automatically these services never > start right: > [cid:image001.jpg@01D327CE.20FA30D0] > > I have tried to add some dependencies as described in several bug reports, > but none of those fixes have worked 100% of the time for me. > > Thanks for any info you can give on this. > > Ron > > > PRIVILEGED AND CONFIDENTIAL: This electronic message and any attachments are > confidential property of the sender. The information is intended only for the > use of the person to whom it was addressed. Any other interception, copying, > accessing, or disclosure of this message is prohibited. The sender takes no > responsibility for any unauthorized reliance on this message. If you have > received this message in error, please immediately notify the sender and > purge the message you received. Do not forward this message without > permission. > > > > > > > ___ > > Spacewalk-list mailing list > > Spacewalk-list@redhat.com<mailto:Spacewalk-list@redhat.com> > > https://www.redhat.com/mailman/listinfo/spacewalk-list<https://www.redhat.com/mailman/listinfo/spacewalk-list> > > > > ___ > Spacewalk-list mailing list > Spacewalk-list@redhat.com > https://www.redhat.com/mailman/listinfo/spacewalk-list > -- Sebastian Meyer Linux Consultant & Trainer Tel.: +49-172-2057471 Mail: me...@b1-systems.de B1 Systems GmbH Osterfeldstraße 7 / 85088 Vohburg / http://www.b1-systems.de GF: Ralph Dehner / Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537 ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
[Spacewalk-list] API endpoint for repository 'Has signed metadata'
Hi, I had a look at the API to create/modify/delete repositories. I noticed that there is an undocumented* API call createRepo which accepts a boolean, which I assume is the 'Has signed metadata'** checkbox you can find in the webinterface. It seems though, that there are no API calls to check for that setting, or set it after repo creation. Is that correct? * client.api.getApiCallList(key) lists it in the output, but it's not in the docs: http://spacewalk.redhat.com/documentation/api/2.6/handlers/ChannelSoftwareHandler.html#createRepo ** introduced here: https://www.redhat.com/archives/spacewalk-devel/2011-March/003313.html Best regards -- Sebastian Meyer Linux Consultant & Trainer Mail: me...@b1-systems.de B1 Systems GmbH Osterfeldstraße 7 / 85088 Vohburg / http://www.b1-systems.de GF: Ralph Dehner / Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537 ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Spacewalk 2.2 PAM module NOT found !!!
Hi, you created the PAM file, edited the /etc/rhn/rhn.conf file and restarted Spacewalk? If you did all that, I'm not sure why that field would be disabled. Regards Sebastian On 30.01.2017 16:55, Rose Dowson wrote: > Hi, > > I have the same problem. I did all the configuration but when I want to > create a user like this : > > "To enable a user to authenticate against PAM, select the checkbox > labeled *Pluggable > Authentication Modules (PAM)*. It is positioned below the password and > password confirmation fields on the *Create User* page" > > I haven't > > *checkbox labeled Pluggable Authentication Modules (PAM).* > So what should I do to activate this? > > Thank you for the help. > > Best Regards, > > 2017-01-30 13:37 GMT+01:00 Sebastian Meyer <me...@b1-systems.de>: > >> Hi, >> >> PAM authentication is documented in the Red Hat documents for Satellite: >> https://access.redhat.com/documentation/en-US/Red_Hat_Satellite/5.6/html/ >> Installation_Guide/sect-Installation_Guide-Maintenance-Implementing_PAM_ >> Authentication.html >> >> Regards, >> Sebastian >> >> On 29.01.2017 14:54, KHOUILDI Arij wrote: >>> Hi, >>> >>> I have installed spacewalk 2.2 and I want to have the authentication >> via PAM. I did all the configuration but, when I want to create new user >> and check PAM I haven't this option. >>> I didn't know what is the problem. >>> Please see the attached files. >>> >>> >>> Thank you for the help. >>> >>> Best Regards, >>> >>> Arij Khouildi >>> Ingénieur Système >>> Sagemcom Software & Technologies >>> 34, Avenue de Paris Mégrine 2033 >>> Mobile: (+216) 58 58 25 56 >>> Email: arij.khoui...@sagemcom.com<mailto:arij.khoui...@sagemcom.com> >>> >>> >>> " Ce courriel et les documents qui lui sont joints peuvent contenir des >>> informations confidentielles ou ayant un caractère privé. >>> S'ils ne vous sont pas destinés nous vous signalons qu'il est >> strictement interdit de les >>> divulguer, de les reproduire ou d'en utiliser de quelque manière que ce >>> soit le contenu. Si ce message vous a été transmis par erreur, merci d'en >>> informer l'expéditeur et de supprimer immédiatement de votre système >>> informatique ce courriel ainsi que tous les documents qui y sont >> attachés" >>> >>>** >>> >>> " This e-mail and any attached documents may contain confidential or >>> proprietary information. If you are not the intended recipient, you are >>> notified that any dissemination, copying of this e-mail and any >> attachments >>> thereto or use of their contents by any means whatsoever is strictly >>> prohibited. If you have received this e-mail in error, please advise the >>> sender immediately and delete this e-mail and all attached documents >>> from your computer system." >>> # >>> >>> >>> >>> >>> ___ >>> Spacewalk-list mailing list >>> Spacewalk-list@redhat.com >>> https://www.redhat.com/mailman/listinfo/spacewalk-list >>> >> >> -- >> Sebastian Meyer >> Linux Consultant & Trainer >> Mail: me...@b1-systems.de >> >> B1 Systems GmbH >> Osterfeldstraße 7 / 85088 Vohburg / http://www.b1-systems.de >> GF: Ralph Dehner / Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537 >> >> ___ >> Spacewalk-list mailing list >> Spacewalk-list@redhat.com >> https://www.redhat.com/mailman/listinfo/spacewalk-list > > > > ___ > Spacewalk-list mailing list > Spacewalk-list@redhat.com > https://www.redhat.com/mailman/listinfo/spacewalk-list > -- Sebastian Meyer Linux Consultant & Trainer Mail: me...@b1-systems.de B1 Systems GmbH Osterfeldstraße 7 / 85088 Vohburg / http://www.b1-systems.de GF: Ralph Dehner / Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537 ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Spacewalk 2.2 PAM module NOT found !!!
Hi, PAM authentication is documented in the Red Hat documents for Satellite: https://access.redhat.com/documentation/en-US/Red_Hat_Satellite/5.6/html/Installation_Guide/sect-Installation_Guide-Maintenance-Implementing_PAM_Authentication.html Regards, Sebastian On 29.01.2017 14:54, KHOUILDI Arij wrote: > Hi, > > I have installed spacewalk 2.2 and I want to have the authentication via > PAM. I did all the configuration but, when I want to create new user and > check PAM I haven't this option. > I didn't know what is the problem. > Please see the attached files. > > > Thank you for the help. > > Best Regards, > > Arij Khouildi > Ingénieur Système > Sagemcom Software & Technologies > 34, Avenue de Paris Mégrine 2033 > Mobile: (+216) 58 58 25 56 > Email: arij.khoui...@sagemcom.com<mailto:arij.khoui...@sagemcom.com> > > > " Ce courriel et les documents qui lui sont joints peuvent contenir des > informations confidentielles ou ayant un caractère privé. > S'ils ne vous sont pas destinés nous vous signalons qu'il est strictement > interdit de les > divulguer, de les reproduire ou d'en utiliser de quelque manière que ce > soit le contenu. Si ce message vous a été transmis par erreur, merci d'en > informer l'expéditeur et de supprimer immédiatement de votre système > informatique ce courriel ainsi que tous les documents qui y sont attachés" > >** > > " This e-mail and any attached documents may contain confidential or > proprietary information. If you are not the intended recipient, you are > notified that any dissemination, copying of this e-mail and any attachments > thereto or use of their contents by any means whatsoever is strictly > prohibited. If you have received this e-mail in error, please advise the > sender immediately and delete this e-mail and all attached documents > from your computer system." > # > > > > > _______ > Spacewalk-list mailing list > Spacewalk-list@redhat.com > https://www.redhat.com/mailman/listinfo/spacewalk-list > -- Sebastian Meyer Linux Consultant & Trainer Mail: me...@b1-systems.de B1 Systems GmbH Osterfeldstraße 7 / 85088 Vohburg / http://www.b1-systems.de GF: Ralph Dehner / Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537 ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Need to setup monthly patching - while keeping base release frozen.
Hi Michael, On 12.01.2017 21:36, Shaw, Michael wrote: > Hello, > > I walked into an environment that had no frozen channels and monthly patching > happened by whatever was available in the channel at the time, i.e. if there > was a kernel upgrade then the kernel upgraded. This has ended up causing > issues. > > I have since then locked all of the hosts and created base OS channels, i.e. > RHEL5.11, RHEL6.8, RHEL7.1, RHEL7.2, etc. I have also started creating a > monthly patch channels but how can I merge the channels? > > I need to keep the hosts at certain release level, i.e. RHEL7.2, but still > apply monthly patches. It doesn't seem like there is a straight forward way > to do this? You do realize that Red Hat just updates the latest minor release till some point in time when they decide, okay that's now our new minor release? Then there won't be any new updates for the old minor release. You could look into the EUS channels where minor releases get updates for up to 24 months: https://access.redhat.com/articles/rhel-eus Regards Sebastian > > Regards, > > Mike > --- > Mike Shaw - Linux Systems Administrator > ITS - Production Operations - PaaS > Phone-919.541.6003Skype-live:mdshaw89 > RTI International > ms...@rti.org<mailto:ms...@rti.org> > > > > > ___ > Spacewalk-list mailing list > Spacewalk-list@redhat.com > https://www.redhat.com/mailman/listinfo/spacewalk-list > -- Sebastian Meyer Linux Consultant & Trainer Mail: me...@b1-systems.de B1 Systems GmbH Osterfeldstraße 7 / 85088 Vohburg / http://www.b1-systems.de GF: Ralph Dehner / Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537 ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] RHEL 6.x repository not syncing from parentchannel
Hallo Robert, On 19.12.2016 18:35, Robert Paschedag wrote: > Please, answer to "all" so the list gets informed, too. Wenn du deinen Client fixen könntest, Threads nicht zu zerstören indem er bei jeder Antwort einen neuen erstellt, wäre das ebenfalls super. :) Grüße Sebastian -- Sebastian Meyer Linux Consultant & Trainer Tel.: +49-172-2057471 Mail: me...@b1-systems.de B1 Systems GmbH Osterfeldstraße 7 / 85088 Vohburg / http://www.b1-systems.de GF: Ralph Dehner / Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537 ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] question about local repos with spacewalk.
Hi Jason, don't clone the repository to local, just let the spacewalk do the cloning. Spacewalk sorts the packages into it's own structure and serves them via tomcat, not as a normal repository. If you are talking about RHEL repositories there's been a thread a few weeks ago, describing the necessary steps to get those into Spacewalk without first syncing them to a RHEL system. Sebastian On 23.02.2016 15:05, ja...@monsterjam.org wrote: > I have spacewalk 2.4 up and working on a RHEL server.. I have synced a repo > on the internet to my > local spacwalk server and done a createrepo on that directory.. When I add a > channel to spacewalk and add > my local repository and tell it to "sync" it seems to copy all the rpms over > to /var/satellite wich > duplicates all those rpms.. Is there a better way to do this to avoid the > duplication of rpms? > > Jason > > ___ > Spacewalk-list mailing list > Spacewalk-list@redhat.com > https://www.redhat.com/mailman/listinfo/spacewalk-list > -- Sebastian Meyer Linux Consultant & Trainer Mail: me...@b1-systems.de B1 Systems GmbH Osterfeldstraße 7 / 85088 Vohburg / http://www.b1-systems.de GF: Ralph Dehner / Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537 signature.asc Description: OpenPGP digital signature ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Systems Overview Slow for +1k Instances
Hi Tomas, that bugzilla doesn't seem to be public. --- You are not authorized to access bug #1214437. Most likely the bug has been restricted for internal development processes and we cannot grant access. --- Regards Sebastian On 09.09.2015 10:54, Tomas Lestach wrote: > Not sure, if this BZ is relevant for you [1], > but it was fixed even after Spacewalk 2.3 release. > > > Regards, > -- > Tomas Lestach > Red Hat Satellite Engineering, Red Hat > > [1] https://bugzilla.redhat.com/show_bug.cgi?id=1214437 > > > > - Original Message - >> From: "Andy Seed" <pips...@gmail.com> >> To: spacewalk-list@redhat.com >> Sent: Tuesday, September 8, 2015 11:12:26 PM >> Subject: [Spacewalk-list] Systems Overview Slow for +1k Instances >> >> >> >> Hi, >> >> >> I'm wondering if anybody has experienced slow lag accessing the >> Systems tab in the Web UI. >> >> >> >> >> We are using Oracle Linux 6.5 for our Spacewalk master with the >> Oracle Spacewalk 2.2 release. We have multiple Spacewalk proxies, >> each will manage 1k instances up to a total of 6 proxies. We have a >> separate Oracle db server running 11G R2. What we are seeing is a >> long lag when accessing the Systems Overview page. >> >> >> We've tried all the standard tuning for Java and tomcat, all the >> recommended tuning for Spacewalk and Satellite configurations with >> no change. >> >> >> When we have 100 OL instances registered it takes 5 sec flicking >> between Overview and the Systems tab. >> >> >> When we increase this to 350 OL instances we see the lag jump to 15 >> secs, then increasing up to 1100 OL instances this lag is up to 70 >> secs. This is not going to be workable when we start increasing to >> +5k instances. >> >> >> Thanks in advance >> Andy >> ___ >> Spacewalk-list mailing list >> Spacewalk-list@redhat.com >> https://www.redhat.com/mailman/listinfo/spacewalk-list > > ___ > Spacewalk-list mailing list > Spacewalk-list@redhat.com > https://www.redhat.com/mailman/listinfo/spacewalk-list > -- Sebastian Meyer Linux Consultant & Trainer B1 Systems GmbH Osterfeldstraße 7 / 85088 Vohburg / http://www.b1-systems.de GF: Ralph Dehner / Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537 signature.asc Description: OpenPGP digital signature ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Channels vs. Repos
Hi Brian, in production you don't want to push all updated packages manually into channels. That's what repos are for: Upstream CentOS releases an update, that's in the repo and get's synced automatically into your channel. Otherwise you would have to keep tabs on all your distributions and check for updates to download the .rpm and push it to the channel. As Kobus pointed out, rhnpush is used mostly for single or self-built rpms, that don't have a repository. Though I'd suggest creating repositories for self-built rpms aswell. It's not that hard ;) Another use case for rhnpush would be an offline spacewalk installation. You'd download the updates somewhere else, and push those to the spacewalk channels manually. This is only necessary in very restrictive environments. Regards, Sebastian On 26.08.2015 15:17, Brian C. Huffman wrote: All, I'm just getting started with spacewalk and I followed on online guide to set up channels and repos for CentOS systems. But then I found out that I can also add packages to the channel itself with no underlying repo. So, what's the benefit of having repos? What scenarios would require repos? In what scenarios would it not make sense to use repos? Thanks, Brian ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list -- Sebastian Meyer Linux Consultant Trainer B1 Systems GmbH Osterfeldstraße 7 / 85088 Vohburg / http://www.b1-systems.de GF: Ralph Dehner / Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537 signature.asc Description: OpenPGP digital signature ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] problems with osad
-5FManager_XMPPDumpingd=BQIF-gc=_8VcuiJ--MukFqz6Sy5gel64o52_IbhiNdatg8Zb5Gsr=b7IEz3ofaK6POXcDGRHJcwu-GqbKHox-4tfx-bQLxLom=GYrj7GE9nD2eN90AdDoTRjarEsgB39EugzpSnrXHIjAs=JIrQMKoWUoDQ3Fn8jd_0pf4ZJKHZJ2TSrAdc8vLOxtwe= In your setup instructions are still valid, while commands need a little tweaking. Hth, -- Silvio Moioli SUSE LLC Maxfeldstraße 5, 90409 Nürnberg Germany ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://urldefense.proofpoint.com/v2/url?u=https-3A__www.redhat.com_mailman_listinfo_spacewalk-2Dlistd=BQIF-gc=_8VcuiJ--MukFqz6Sy5gel64o52_IbhiNdatg8Zb5Gsr=b7IEz3ofaK6POXcDGRHJcwu-GqbKHox-4tfx-bQLxLom=GYrj7GE9nD2eN90AdDoTRjarEsgB39EugzpSnrXHIjAs=i4ObyA0JwB0e4M4t4fv1f6qA5LegFDsSUGU5ql2LN38e= ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list -- Sebastian Meyer Linux Consultant Trainer B1 Systems GmbH Osterfeldstraße 7 / 85088 Vohburg / http://www.b1-systems.de GF: Ralph Dehner / Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537 signature.asc Description: OpenPGP digital signature ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
Re: [Spacewalk-list] Getting SSL to work on SLES 11
Hi Daryl, On 12.08.2015 18:30, Daryl Rose wrote: * ln -s /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT /usr/share/pki/trust/anchors/RHN-ORG-TRUSTED-SSL-CERT.pem * update-ca-certificates That step is for SLES12, not SLES11. For the latter you should use Anyway, I found a posting on this list from February of this year. Bernd Helber and similar problems that I'm having and Michael Calmer provided this reply: Take care that the CA certificate is copied to /etc/ssl/certs/ with the suffix .pem and you run a c_rehash /etc/ssl/certs/ E.g.: $ cp /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT \ /etc/ssl/certs/RHN-ORG-TRUSTED-SSL-CERT.pem $ c_rehash /etc/ssl/certs/ As for the next error, that might be a problem with the OpenSSL 0.9.8 on the SLES Client: http://sourceforge.net/p/curl/bugs/1037/?limit=10page=3#c9b6 This allowed me to get past the first error that I was receiving, but now I have a different error. I am now getting this error: ?snip? Download (curl) error for 'https://FQ SW Server/XMLRPC/GET-REQ/sles11sp3_channel/repodata/repomd.xml?head_requests=no': Error code: Unrecognized error Error message: error:14077458:SSL routines:SSL23_GET_SERVER_HELLO:reason(1112) /snip Fully disabling SSLv3 on the Apache side might help. IIRC that's what they do on SUSE Manager. If you don't have any SLES10 or EL4 clients that should be okay. (Not sure about EL5) There should be some file containing 'SSLProtocol all -SSLv2 ...' in the apache/httpd config directory in /etc. If there's no '-SSLv3' in that line, add it after the '-SSLv2' and restart/reload apache. Best regards Sebastian -- Sebastian Meyer Linux Consultant Trainer B1 Systems GmbH Osterfeldstraße 7 / 85088 Vohburg / http://www.b1-systems.de GF: Ralph Dehner / Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537 signature.asc Description: OpenPGP digital signature ___ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list