Bug 1980709

Summary:	Oval report report generation fails with 'OVAL content is missing and download failed with error: 403 "Forbidden"' error.
Product:	Red Hat Satellite	Reporter:	Jameer Pathan <jpathan>
Component:	SCAP Plugin	Assignee:	Ondřej Pražák <oprazak>
Status:	CLOSED ERRATA	QA Contact:	Jameer Pathan <jpathan>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	6.10.0	CC:	mhulan, oprazak, osousa
Target Milestone:	6.10.0	Keywords:	Triaged
Target Release:	Unused
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	tfm-rubygem-smart_proxy_openscap-0.9.1	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-11-16 14:12:32 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Jameer Pathan 2021-07-09 10:50:36 UTC

Description of problem:
Oval report report generation fails with 'OVAL content is missing and download failed with error: 403 "Forbidden"' error.

Version-Release number of selected component (if applicable):
- Satellite 6.10.0 snap 8
- tfm-rubygem-smart_proxy_openscap-0.9.0-1.el7sat.noarch
- ansiblerole-foreman_scap_client-0.2.0-1.el7sat.noarch
- rubygem-foreman_scap_client-0.5.0-1.el8sat.noarch

How reproducible:
- Always

Steps to Reproduce:
1. Create OVAL Policy
2. Assign it to a hostgroup.
3. Register a content host with satellite using created hostgroup.
4. Run scap ansible role to configure host.
5 Try generation oval report

Actual results:
[root@dhcp-3-161 ~]# foreman_scap_client oval 1
File /var/lib/openscap/oval_content/f42bb0bec2aa8dbe9267a2375fc2f87466c2559b4fa60027902d937f38a10ba5.oval.xml.bz2 is missing. Downloading it from proxy.
Download OVAL content xml from: https://satellite.example.com:9090/compliance/oval_policies/1/oval_content/f42bb0bec2aa8dbe9267a2375fc2f87466c2559b4fa60027902d937f38a10ba5
OVAL content is missing and download failed with error: 403 "Forbidden"


Expected results:
- Oval report generated and uploaded successfully to satellite.

Additional info:

Comment 1 Ondřej Pražák 2021-07-14 06:15:59 UTC

Connecting redmine issue https://projects.theforeman.org/issues/32969 from this bug

Comment 2 Jameer Pathan 2021-08-05 09:17:35 UTC

Verified

Verified with:
- Satellite 6.10.0 snap 11
- tfm-rubygem-smart_proxy_openscap-0.9.1-1.el7sat.noarch

Test steps:
1. Create OVAL Policy
2. Assign it to a hostgroup.
3. Register a content host with satellite using created hostgroup.
4. Run scap ansible role to configure host.
5. Try generating oval report

Observation:
- Oval report generated and uploaded successfully to satellite.

[root@dhcp-3-184 ~]# foreman_scap_client oval 3
File /var/lib/openscap/oval_content/e2e0c093d52b31cf3e381f100bc5f51cfaf173b83e7e13ed169051cf901257fc.oval.xml.bz2 is missing. Downloading it from proxy.
Download OVAL content xml from: https://satellite.example.com:9090/compliance/oval_policies/3/oval_content/e2e0c093d52b31cf3e381f100bc5f51cfaf173b83e7e13ed169051cf901257fc
DEBUG: running: oscap oval eval --results /tmp/d20210805-24812-1rur7ug/results.xml /var/lib/openscap/oval_content/e2e0c093d52b31cf3e381f100bc5f51cfaf173b83e7e13ed169051cf901257fc.oval.xml.bz2

DEBUG: running: /usr/bin/env bzip2 /tmp/d20210805-24812-1rur7ug/results.xml
Uploading results to https://satellite.example.com:9090/compliance/oval_reports/3
Report successfully uploaded at 2021-08-05 05:10:21 -0400

Comment 5 errata-xmlrpc 2021-11-16 14:12:32 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: Satellite 6.10 Release), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2021:4702