Bug 533333

Summary: Installation Guide incorrect at 8.5. Cloning the Satellite with Embedded DB step number 5
Product: Red Hat Satellite 5 Reporter: Michael Kearey <mkearey>
Component: Docs Installation GuideAssignee: John Ha <jha>
Status: CLOSED CURRENTRELEASE QA Contact: Martin Minar <mminar>
Severity: medium Docs Contact:
Priority: medium    
Version: 530CC: adstrong, cperry, mkoci, mminar, wmealing, xdmoon
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard: Fixed in the 5.4.0 Release - GA'd 2010-10-27
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2010-10-28 14:57:08 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 608749    

Description Michael Kearey 2009-11-06 07:35:49 UTC
Description of problem:
The Installation Guide describes a method to clone an existing Satellite in preparation for failover/HA.  The description is incorrect at step number 5

Version-Release number of selected component (if applicable):
Edition 5.3.0 of Installation Guide for RHN Satellite

How reproducible:
100%

Steps to Reproduce:
Follow guide and end up having clients unable to connect to a cloned Satellite with SSL
  
Actual results:
Clients fail to 'trust' the cloned Satellite

Expected results:
Clients should connect to and trust the cloned Satellite..


Additional info:

The relevant section quoted:

"If the primary Satellite fails, transfer the SSL certificates from it to the secondary. Refer to the Deploying the CA SSL Public Certificate to Clients section of the RHN Client Configuration Guide for precise instructions. "

That is not correct. We need to transfer the ssl key pair package from the main Satellite to the Standby Satellite, as discussed in the backup section:

http://www.redhat.com/docs/en-US/Red_Hat_Network_Satellite/5.3/Installation_Guide/html/s1-maintenance-backup.html

This way all the clients will have the correct _trusted_ certificate installed and will not require any changes.

The Installation Guide step 5 of "8.5. Cloning the Satellite with Embedded DB" should read:

"5 If the primary Satellite fails, transfer the SSL key pair RPM package in /root/ssl-build from the main to the cloned Satellite, and install the package. This ensures that RHN clients will _trust_ the standby/cloned Satellite."

Comment 6 Clifford Perry 2010-10-28 14:57:08 UTC
The 5.4.0 RHN Satellite and RHN Proxy release has occurred. This issue has been resolved with this release. 


RHEA-2010:0801 - RHN Satellite Server 5.4.0 Upgrade
https://rhn.redhat.com/rhn/errata/details/Details.do?eid=10332

RHEA-2010:0803 - RHN Tools enhancement update
https://rhn.redhat.com/rhn/errata/details/Details.do?eid=10333

RHEA-2010:0802 - RHN Proxy Server 5.4.0 bug fix update
https://rhn.redhat.com/rhn/errata/details/Details.do?eid=10334

RHEA-2010:0800 - RHN Satellite Server 5.4.0
https://rhn.redhat.com/rhn/errata/details/Details.do?eid=10335

Docs are available:

http://docs.redhat.com/docs/en-US/Red_Hat_Network_Satellite/index.html 

Regards,
Clifford