Attachment 607809 Details for Bug 852105 – verifying log

verifying log

log.txt (text/plain), 11.59 KB, created by Pavlina Bartikova on 2012-08-29 08:20:44 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Pavlina Bartikova

Created: 2012-08-29 08:20:44 UTC

Size: 11.59 KB

patch

obsolete

>pbartiko@redhat~$ curl --insecure --cert /home/pbartiko/.ssh/old_cert.pem https://cdn.redhat.com/content/dist/rhel/rhui/server/6/6Server/x86_64/rhui/2.0/iso/RHEL-6-RHUI-2-LATEST-Server-x86_64-DVD.iso > RHEL-6-RHUI-2.0-LATEST-Server-x86_64.iso
>  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
>                                 Dload  Upload   Total   Spent    Left  Speed
>100 33.7M  100 33.7M    0     0   835k      0  0:00:41  0:00:41 --:--:-- 1140k
>
>pbartiko@redhat~$ curl --insecure --cert /home/pbartiko/.ssh/new_cert.pem https://cdn.redhat.com/content/dist/rhel/rhui/server/6/6Server/x86_64/rhui/2/iso/RHEL-6-RHUI-2-LATEST-Server-x86_64-DVD.iso > RHEL-6-RHUI-2-LATEST-Server-x86_64.iso
>  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
>                                 Dload  Upload   Total   Spent    Left  Speed
>100 33.7M  100 33.7M    0     0   367k      0  0:01:34  0:01:34 --:--:--  448k
>
>pbartiko@redhat~$ sudo mount -o loop -t iso9660 RHEL-6.3-RHUI-2.1-20120827.0-Server-x86_64-DVD1.iso /mnt/latest/
>pbartiko@redhat~$ cat /mnt/latest/README 
>#### Red Hat Update Infrastructure ####
>
>Before installing and configuring the Red Hat Update Infrastructure please
>refer to the documentation for the proper steps:
>
>http://docs.redhat.com/docs/en-US/Red_Hat_Update_Infrastructure/index.html
>
>Review version specific release notes at the end of this file.
>
>*****************************************************************************
>= Release Notes RHUI 2.0.2 =
>
>== Updating ==
>
>Before following the instructions in the Red Hat Update Infrastructure 2.0
>Installation Guide available at docs.redhat.com to update to RHUI 2.0.2, some
>additional dependencies need to be installed.
>
>
>On the RHUA run:
>$ yum install PyPAM python-rhsm policycoreutils-python
>
>On the CDS run:
>$ yum install PyPAM
>
>After the above steps are completed, proceed with the update instructions from 
>the RHUI Installation guide.  Once those steps are completed, proceed to the 
>RHUA Configuration Updates secton below.
>
>=== RHUA Configuration Updates ===
>
>Step through the following manual configuration updates that are needed:
>
>----
>/etc/httpd/conf.d/pulp.conf -
>
>Change:
>WSGISocketPrefix /srv/pulp/
>
>To:
>WSGISocketPrefix run/wsgi
>----
>
>----
>/etc/pulp/pulp.conf - 
>
>Change:
>remove_old_packages: false
>
>To:
>remove_old_versions: false
>----
>
>----
>/etc/pulp/repo_auth.conf - 
>
>Add the following to the [main] section of the file:
>log_failed_cert: true
>log_failed_cert_verbose: false
>max_num_certs_in_chain: 100
>
>* Note: The log_failed_cert and log_failed_cert_verbose options can help with
>debugging client entitlement certificate issues.  Set them both to true for
>enhanced logging.
>
>Change the following lines:
>[repos]
>cert_location: /etc/pki/content/
>global_cert_location: /etc/pki/content/
>protected_repo_listing_file: /etc/pki/content/pulp-protected-repos
>To:
>[repos]
>cert_location: /etc/pki/pulp/content/
>global_cert_location: /etc/pki/pulp/content/
>protected_repo_listing_file: /etc/pki/pulp/content/pulp-protected-repos
>
>Add the following to the end of the file:
>[crl]
>location: /etc/pki/pulp/content
>----
>
>----
>/etc/rhui/rhui-tools.conf - 
>
>Add to the end of the file:
># Warnings will be issued if certificates expire within the set number of
># days
>expiration_warning: 30
>----
>
>----
>/etc/pulp/admin/admin.conf is a new config file that takes the place of
>/etc/pulp/client.conf
>
>The new file needs to be edited, change the host option from
>localhost.localdomain to the fully qualified domain name of the RHUA system:
>
>[server]
>host = localhost.localdomain
>----
>
>=== CDS Configuration Updates ===
>----
>/etc/pulp/cds.conf - 
>
>Change the following line:
>ca_cert_file = /etc/pki/content/pulp-server-ca.crt
>To:
>ca_cert_file = /etc/pki/pulp/content/pulp-server-ca.crt
>----
>
>----
>/etc/pulp/repo_auth.conf - 
>
>Add the following to the [main] section of the file:
>log_failed_cert: true
>log_failed_cert_verbose: false
>max_num_certs_in_chain: 100
>
>* Note: The log_failed_cert and log_failed_cert_verbose options can help with
>debugging client entitlement certificate issues.  Set them both to true for
>enhanced logging.
>
>Change the following lines:
>[repos]
>cert_location: /etc/pki/content/
>global_cert_location: /etc/pki/content/
>protected_repo_listing_file: /etc/pki/content/pulp-protected-repos
>To:
>[repos]
>cert_location: /etc/pki/pulp/content/
>global_cert_location: /etc/pki/pulp/content/
>protected_repo_listing_file: /etc/pki/pulp/content/pulp-protected-repos
>
>Add the following to the end of the file:
>[crl]
>location: /etc/pki/pulp/content
>----
>
>=== pulp-migrate on the RHUA ===
>
>After the configuration changes are completed on the RHUA and each CDS,
>run pulp-migrate as the root user on the RHUA, and restart the pulp-server
>service again:
>
>$ pulp-migrate
>database migration to version 38 complete
>$ service pulp-server restart
>Stopping httpd:                                            [  OK  ]
>Stopping Qpid AMQP daemon:                                 [  OK  ]
>Stopping mongod:                                           [  OK  ]
>Starting mongod:                                           [  OK  ]
>Starting Qpid AMQP daemon:                                 [  OK  ]
>Starting httpd:                                            [  OK  ]
>
>Note: the pulp-migrate command could take up to 1 hour to run.
>
>Restart the pulp-cds service on the CDS as well to pick up the configuration
>changes.
>
>== SELinux ==
>
>To enable SELinux first stop the pulp-server service on the RHUA and pulp-cds
>service on the CDS.
>
>You can now enable SELinux if you so choose on the RHUA and each CDS by
>editing the /etc/selinux/config file or running "setenforce 1"
>
>Start the pulp-server service on the RHUA and the pulp-cds service on the CDS
>after enabling SELinux.
>
>== Features ==
>
> * SELinux - RHUI can now run with SELinux enabled.
> * RHEL 6.2 - RHUI has added support for installing and running on RHEL 6.2.
> * Certificate expiration monitoring - The expiration dates of the entitlment
>   CA and identity certificate are now monitored as part of the `rhui-manager
>   status` command.
> * Status return codes - The `rhui-manager status` command now returns
>   meaningful return codes.  If there are multiple problems, the return codes
>   are logically OR'd together so that it can be determined exactly what went
>   wrong.  The return codes are:
>   ** Ok = 0
>   ** Repository sync error = 1
>   ** CDS sync error = 2
>   ** CDS heartbeat error = 4
>   ** Identity certificate expiration warning = 8
>   ** Identity certificate expiration error = 16
>   ** Entitlement CA certificate expiration warning = 32
>   ** Entitlement CA certificate expiration error = 64
> * Repository sync status performance - The time it takes to get the status of a repository sync has been improved.
> * Client SSL verification with a CA chain - Clients can verify a CDS server's
>   SSL certificate that is signed by an intermediate CA if the full CA chain is
>   provided during client configuration rpm generation.
>
>
>== Known Issues ==
>
>* qpidd AVC denial - A SELinux AVC denial may be logged in
>  /var/log/audit/audit.log for qpidd trying to access the resource 'name="tmp"'.
>  This denial can be safely ignored.  See
>  https://bugzilla.redhat.com/show_bug.cgi?id=790759 for more information.
>
>* qpidd segfault with nss-3.13.1-6.el6_2 - An nss update caused a segfault with
>  qpidd.  nss-3.13.1-6.el6_2 is incompatible with qpidd, update to a newer
>  version, or downgrade to an older version.  
>
>  ** To downgrade to an older version if no update is available run:
>  $ yum downgrade nss nss-tools nss-sysinit
>  ** See https://bugzilla.redhat.com/show_bug.cgi?id=797426 for more information.
>*****************************************************************************
>
>*****************************************************************************
>= Release Notes RHUI 2.0.3 =
>
>== Updating ==
>If updating from RHUI 2.0 or RHUI 2.0.1, make sure to follow all the update 
>steps detailed in the RHUI 2.0.2 release notes section.
>
>Otherwise, the update steps from the RHUI Installation guide can be followed.
>
>Once the update steps are completed however, the pulp-migrate command needs
>to be run and the pulp-server service restarted on the RHUA:
>
>$ pulp-migrate
>database migration to version 40 complete
>$ service pulp-server restart
>Stopping httpd:                                            [  OK  ]
>Stopping Qpid AMQP daemon:                                 [  OK  ]
>Stopping mongod:                                           [  OK  ]
>Starting mongod:                                           [  OK  ]
>Starting Qpid AMQP daemon:                                 [  OK  ]
>Starting httpd:                                            [  OK  ]
>
>Note: the pulp-migrate command could take up to 1 hour to run.
>
>== Features / Bug fixes ==
>* The following bugs have been resolved:
>  ** Bug 804188 - no migration for timeout_delta on task_snapshot
>     https://bugzilla.redhat.com/show_bug.cgi?id=804188
>  ** Bug 805046 - ks distribution directory traceback after upgrading to 
>     RHUI 2.0.2
>     https://bugzilla.redhat.com/show_bug.cgi?id=805046
>  ** Bug 805192 - migration 35 is very slow when lots of errata are
>     present
>     https://bugzilla.redhat.com/show_bug.cgi?id=805192
>  ** Bug 805616 - mongo error in log "key too large to index"
>     https://bugzilla.redhat.com/show_bug.cgi?id=805616
>
>== Known Issues ==
>
>* qpidd AVC denial - A SELinux AVC denial may be logged in
>  /var/log/audit/audit.log for qpidd trying to access the resource 'name="tmp"'.
>  This denial can be safely ignored.  See
>  https://bugzilla.redhat.com/show_bug.cgi?id=790759 for more information.
>
>* qpidd segfault with nss-3.13.1-6.el6_2 - An nss update caused a segfault with
>  qpidd.  nss-3.13.1-6.el6_2 is incompatible with qpidd, update to a newer
>  version, or downgrade to an older version.  
>
>  ** To downgrade to an older version if no update is available run:
>  $ yum downgrade nss nss-tools nss-sysinit
>  ** See https://bugzilla.redhat.com/show_bug.cgi?id=797426 for more information.
>
>*****************************************************************************
>
>*****************************************************************************
>= Release Notes RHUI 2.1 =
>
>== ISO Download ==
>There was a change in the URL that is used to download the RHUI ISO from the
>Red Hat customer portal.  The updated URL is documented in the installation
>guide.  However, customers who already have a RHUI content certificate will
>need to either regenerate their content certificate or use the following URL
>instead:
>
>https://cdn.redhat.com/content/dist/rhel/rhui/server/6/6Server/x86_64/rhui/2.0/iso/RHEL-6-RHUI-2-LATEST-Server-x86_64-DVD.iso
>
>== Errata ==
>See the errata for RHUI 2.1 available at https://rhn.redhat.com/errata/rhel6-rhui-errata.html
>for the features and bugs addressed in this release.
>
>== Updating ==
>If updating from RHUI 2.0 or RHUI 2.0.1, make sure to follow all the update
>steps detailed in the RHUI 2.0.2 release notes section.
>
>Otherwise, the update steps from the RHUI Installation guide can be followed.
>
>Once the update steps are completed however, the pulp-migrate command needs
>to be run and the pulp-server service restarted on the RHUA:
>
>$ pulp-migrate
>database migration to version 41 complete
>$ service pulp-server restart
>Stopping httpd:                                            [  OK  ]
>Stopping Qpid AMQP daemon:                                 [  OK  ]
>Stopping mongod:                                           [  OK  ]
>Starting mongod:                                           [  OK  ]
>Starting Qpid AMQP daemon:                                 [  OK  ]
>Starting httpd:                                            [  OK  ]
>
>Note: the pulp-migrate command could take up to 1 hour to run.
>*****************************************************************************
>

Actions: View

Attachments on bug 852105: 607809