Bug 497110
Summary: | spacewalk-certs-tools, rhn-ssl-tool has traceback with option --gen-ca | ||
---|---|---|---|
Product: | Red Hat Satellite Proxy 5 | Reporter: | Petr Sklenar <psklenar> |
Component: | Installer | Assignee: | Devan Goodwin <dgoodwin> |
Status: | CLOSED CURRENTRELEASE | QA Contact: | Petr Sklenar <psklenar> |
Severity: | high | Docs Contact: | |
Priority: | urgent | ||
Version: | unspecified | CC: | bperkins, jhutar, msuchy |
Target Milestone: | --- | Keywords: | Reopened |
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | sat530 | Doc Type: | Bug Fix |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2009-09-10 14:38:25 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | |||
Bug Blocks: | 456999 |
Description
Petr Sklenar
2009-04-22 12:25:10 UTC
when I add users jabber+jabberd, then it works Description of the problem: when we are installing proxy using webui installer from hosted, it do not have "enable push" option - which is perfectly valid since hosted do not support this. When push is not enabled, then jabberd is not installed - still perfectly valid since we do not need it for anything. But rhn_ssl_tool.py expect jabberd user since commit 023fc16f4aca7c477730246f945200290c6f2f52 Accepted. Assigning to Devan per commit: http://git.fedorahosted.org/git/?p=spacewalk.git;a=commitdiff; h=023fc16f4aca7c477730246f945200290c6f2f52 Should be a simple check. Two ways to go about this, I'm making a choice for one but will document both incase anyone sees any problems with it. (1) Change the ownership to fall back on root:root if jabberd user isn't found. (very easy) (2) Don't include jabberd.pem in the generated rpm at all if jabberd user isn't found on the system where the rpm is built. I'm taking path (1) as I don't really know for sure how this RPM could be used and it seems less likely to introduce problems elsewhere if we keep the jabberd cert included. [17:09] <dgoodwin> msuchy: just drafting a comment now I think I have a feeling which direction to take [17:09] <dgoodwin> msuchy: comment posted [17:15] <msuchy> dgoodwin: I'm not sure with 1) what will happen if you install proxy withou jabber, run this toll, install resulted package (therefore as root:root) and then reinstall proxy with jabber and generate new package, will it be then installed as jabberd:jabberd ? [17:15] <msuchy> dgoodwin: I suppose that 2) can be safe [17:15] <dgoodwin> should come out as jabberd:jabberd if you regenerate the rpm and re-install [17:15] <dgoodwin> hmmm maybe [17:16] <dgoodwin> i will test, a root:root jabberd 0600 is probably useless anyhow [17:16] <msuchy> dgoodwin: yeah, correct 1) will work, but I will personaly vote for 2) [17:17] <dgoodwin> msuchy: yeah i think i agree with you, i'll change that and go with 2) Implemented option (2) and tested upgrades from versions with and without the cert, seems to work fine. Committed to: spacewalk.git: 3b28f1a152a00d3dee084494c9cac79f9c38243b satellite.git: 9583f21ad84032be78ee6f1697e4d692cbe3d5d5 Mistake on my part, this ticket is not yet on QA, the commit was made after the merge. Moved this ON_QA when infact I missed the merge window. Back to modified. reproduced with old and it works with latest version: spacewalk-certs-tools-0.5.5-5.el4sat Created cert works with RHN proxy 5.2 PASS verified in stage An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on therefore solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHEA-2009-1433.html |