Bug 1441702

Summary: NoVNC doesn't work because katello-apache.key isn't readable by foreman user
Product: Red Hat Satellite Reporter: Stephen Benjamin <stbenjam>
Component: InstallationAssignee: Stephen Benjamin <stbenjam>
Status: CLOSED ERRATA QA Contact: Ondřej Pražák <oprazak>
Severity: medium Docs Contact:
Priority: medium    
Version: 6.3.0CC: bbuckingham, jcallaha, oprazak, riehecky
Target Milestone: UnspecifiedKeywords: Triaged
Target Release: Unused   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-02-21 16:44:36 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
console in UI none

Description Stephen Benjamin 2017-04-12 13:55:06 UTC 
Description of problem:

Foreman launches a websockify process that listens using the apache key/cert, and websockify silently fails if it can't read the cert or key.  The key is owned by apache:foreman but is mode 600.


Version-Release number of selected component (if applicable):
6.3 nightly

How reproducible:
Always

Steps to Reproduce:
1. Install 6.3 nightly
2. Provision a VM on libvirt/rhev/etc
3. Try to view the NoVNC console in the UI

Actual results:
Websocket error

Expected results:
Console loads

Additional info:

Workaround is chmod 660 /etc/pki/katello/private/katello-apache.key
Comment 1 Stephen Benjamin 2017-04-12 13:57:43 UTC 
(Correction: It's actually 400, and should be 440)
Comment 2 Stephen Benjamin 2017-04-12 13:58:32 UTC 
Created redmine issue http://projects.theforeman.org/issues/19259 from this bug
Comment 4 Satellite Program 2017-05-18 14:06:40 UTC 
Moving this bug to POST for triage into Satellite 6 since the upstream issue http://projects.theforeman.org/issues/19259 has been resolved.
Comment 5 Ondřej Pražák 2017-08-09 10:27:22 UTC 
Created attachment 1311154 [details]
console in UI

Verified.

Sat-6.3.0 snap 10
Comment 6 Satellite Program 2018-02-21 16:44:36 UTC 
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA.

For information on the advisory, and where to find the updated files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2018:0336