Bug 1209938

Summary:	Prerequisities: firewall to allow ports 5647 and 5646
Product:	Red Hat Satellite	Reporter:	Pavel Moravec <pmoravec>
Component:	Docs Install Guide	Assignee:	Athene Chan <achan>
Status:	CLOSED CURRENTRELEASE	QA Contact:	David O'Brien <daobrien>
Severity:	high	Docs Contact:
Priority:	high
Version:	6.1.0	CC:	mmurray, xdmoon
Target Milestone:	Unspecified
Target Release:	Unused
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-05-05 04:42:27 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1115190

Description Pavel Moravec 2015-04-08 13:25:34 UTC

Description of problem:
firewall rules need to allow incoming TCP connections to port 5647. qdrouterd listens there and e.g. content hosts running goferd needs to connect there.


Version-Release number of selected component (if applicable):
Sat 6.1. RC5


How reproducible:
100%


Steps to Reproduce:
1. Have firewall per install manual (port 5647 is not mentioned there)
2. Have content host with katello-agent installed
3. Check in /var/log/messages that goferd fails to connect to the satellite that port


Actual results:


Expected results:


Additional info:

Comment 1 Pavel Moravec 2015-04-08 13:26:57 UTC

Forgot to mention: both ports 5647 and 5646 need to be allowed in Satellite and also in external capsules.

Comment 2 Pavel Moravec 2015-04-09 06:16:40 UTC

Raising blocker? as not having this in docs would have severe impact to production, including inability to apply an errata to a content host.

Please also mention adding the two new ports to _upgrade_ guide, as Sat6.0 does not have this requirement.

Comment 4 RHEL Program Management 2015-04-21 16:04:30 UTC

Since this issue was entered in Red Hat Bugzilla, the release flag has been
set to ? to ensure that it is properly evaluated for this release.