After applying the change described here, I now get 500 Error in the GUI, and this error in error_log [Wed Jan 25 09:45:29 2012] [error] Execution of /var/www/html/network/systems/details/proxy.pxt failed at Wed Jan 25 09:45:29 2012: RHN::Exception: User '1' attempted to access proxy interface without permission.\n Sniglets::Servers /usr/lib/perl5/vendor_perl/5.8.8/Sniglets/Servers.pm 150 RHN::Exception::throw\n PXT::Parser /usr/lib/perl5/vendor_perl/5.8.8/PXT/Parser.pm 160 Sniglets::Servers::proxy_entitlement_form\n PXT::Parser /usr/lib/perl5/vendor_perl/5.8.8/PXT/Parser.pm 72 PXT::Parser::expand_tag\n PXT::ApacheHandler /usr/lib/perl5/vendor_perl/5.8.8/PXT/ApacheHandler.pm 500 PXT::Parser::expand_tags\n PXT::ApacheHandler /usr/lib/perl5/vendor_perl/5.8.8/PXT/ApacheHandler.pm 103 PXT::ApacheHandler::pxt_parse_data\n PXT::ApacheHandler /usr/lib/perl5/vendor_perl/5.8.8/PXT/ApacheHandler.pm 103 (eval)\n main -e 0 PXT::ApacheHandler::handler\n main -e 0 (eval)
On 1/16/12 4:15 AM, "Jan Pazdziora" <[email protected]> wrote: >On Tue, Jan 10, 2012 at 02:13:40PM -0500, Scott Worthington wrote: >> On Tuesday, January 10, 2012 10:33:54 AM, Jan Pazdziora wrote: >> >> [...] >> >> > The error is >> > >> > [error] acl fail: user_role(org_admin); >>system_feature(ftr_proxy_capable); org_channel_family(rhn-proxy); >>child_channel_candidate(rhn-proxy) at >>/usr/lib/perl5/vendor_perl/5.8.8/PXT/ApacheAuth.pm line 141. >> > >> > in /var/log/httpd/error_log. >> > >> > Mirek, can you investigate? >> > >> >> Since the Spacewalk Proxy successfully activated to Spacewalk, I >> >> assumed all was go. >> > >> > Yes, your Proxy should be good to go, you just won't be able to see it >> > on the WebUI. >> > >> >> Any idea where else I should look to find out why I am getting a >> >> permission error? >> > >> > It's a .pxt page, so under /var/log/httpd. >> >> Yes, just as you said, I found the errors the /var/log/httpd/error_log >> as: >> >> acl fail: user_role(org_admin); system_feature(ftr_proxy_capable); >> org_channel_family(rhn-prdidate(rhn-proxy) at >> /usr/share/perl5/vendor_perl/PXT/ApacheAuth.pm line 141 > >Could you please apply the following patch to >/etc/httpd/conf.d/zz-spacewalk-www.conf, restart httpd and see >if it fixes the problem for you? > >diff --git a/spacewalk/config/etc/httpd/conf.d/zz-spacewalk-www.conf >b/spacewalk/config/etc/httpd/conf.d/zz-spacewalk-www.conf >index cde64a3..33fcaeb 100644 >--- a/spacewalk/config/etc/httpd/conf.d/zz-spacewalk-www.conf >+++ b/spacewalk/config/etc/httpd/conf.d/zz-spacewalk-www.conf >@@ -161,7 +161,7 @@ PerlModule PXT::ApacheAuth > <Files proxy.pxt> > ForceType text/pxt > SetHandler perl-script >- require acl mixin RHN::Access::System user_role(org_admin); >system_feature(ftr_proxy_capable); org_channel_family(rhn-proxy); >child_channel_candidate(rhn-proxy) >+ require acl mixin RHN::Access::System user_role(org_admin); >system_feature(ftr_proxy_capable) or system_is_proxy(); >org_channel_family(rhn-proxy) or system_is_proxy(); >child_channel_candidate(rhn-proxy) or system_is_proxy() > </Files> > > <Files activation.pxt> > >-- >Jan Pazdziora >Principal Software Engineer, Satellite Engineering, Red Hat > >_______________________________________________ >Spacewalk-list mailing list >[email protected] >https://www.redhat.com/mailman/listinfo/spacewalk-list _______________________________________________ Spacewalk-list mailing list [email protected] https://www.redhat.com/mailman/listinfo/spacewalk-list
