Bug 1656029

Summary: Describe token_duration in provisioning guide
Product: Red Hat Satellite Reporter: Kenny Tordeurs <ktordeur>
Component: DocumentationAssignee: Melanie Corr <mcorr>
Status: CLOSED CURRENTRELEASE QA Contact: Sergei Petrosian <spetrosi>
Severity: medium Docs Contact:
Priority: medium    
Version: 6.4.0CC: mcorr
Target Milestone: Unspecified   
Target Release: Unused   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-12-06 15:50:23 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Kenny Tordeurs 2018-12-04 13:44:22 UTC 
Document URL: 
https://access.redhat.com/documentation/en-us/red_hat_satellite/6.4/html-single/provisioning_guide/

Section Number and Name: 
Probably somewhere here:
https://access.redhat.com/documentation/en-us/red_hat_satellite/6.4/html-single/provisioning_guide/#Provisioning_Bare_Metal_Hosts-Creating_New_Hosts_with_PXE-less_Provisioning

Describe the issue: 
No mention about token_duration in provisioning guide

Suggestions for improvement: 

Satellite 6 offers a security feature in accessing ISO images being loaded by pxelinux.0 binary to the booting host. For each individual host to be kick-started, Satellite generates unique token that needs to be provided in URL of the iso image to be downloaded. Generating and providing of this token is done automatically via Satellite and TFTP server.

Validity of this token is X minutes by default in Satellite 6.0 and 360 minutes from Satellite 6.1 onwards. This time out is adjustable via token_duration (Administer => Settings => Provisioning) option. Therefore, reboot of the host shall be performed within configured time frame , since creating the host in Satellite for provisioning.

The token_duration can be disabled by setting it to 0

Additional information:
Comment 1 Melanie Corr 2018-12-04 14:01:46 UTC 
Thank you for raising this bug.
Comment 10 Melanie Corr 2018-12-06 15:50:23 UTC 

https://access.redhat.com/documentation/en-us/red_hat_satellite/6.3/html/provisioning_guide/provisioning_bare_metal_hosts#Provisioning_Bare_Metal_Hosts-Security_Token_in_the_Boot_Process

https://access.redhat.com/documentation/en-us/red_hat_satellite/6.4/html/provisioning_guide/provisioning_bare_metal_hosts#Provisioning_Bare_Metal_Hosts-Security_Token_in_the_Boot_Process