Bug 635792
Summary: | rhn-satellite-activate raising cert exceptions with negative ents | ||
---|---|---|---|
Product: | Red Hat Satellite 5 | Reporter: | Partha Aji <paji> |
Component: | Server | Assignee: | Justin Sherrill <jsherril> |
Status: | CLOSED NOTABUG | QA Contact: | Red Hat Satellite QA List <satqe-list> |
Severity: | medium | Docs Contact: | |
Priority: | low | ||
Version: | 540 | CC: | cperry, jsherril |
Target Milestone: | --- | ||
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2010-09-20 21:49:47 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | |||
Bug Blocks: | 487678 |
Description
Partha Aji
2010-09-20 17:43:24 UTC
I hit this as well. Best I can tell the number/value thrown is the difference between the Flex and the Physical entitlements and negating... So 500 Flex in new cert, 140 physical in new cert and we get error thrown about -360 (140 - 500 = -360). We got a fairly serious bug either in the schema for activation or code which passes values to schema for activation of entitlements in DB. Cliff [root@hp-dl585g5-01 ~]# rhn-satellite-activate --rhn-cert=./redhat-cperry-webdev-rhel6-flex-no-beta-debug-rhx.cert\?rev\=196195 -vv --ignore-version-mismatch RHN_PARENT: satellite.rhn.webdev.redhat.com HTTP_PROXY: None HTTP_PROXY_USERNAME: None HTTP_PROXY_PASSWORD: <password> CA_CERT: /usr/share/rhn/RHNS-CA-CERT Checking cert XML sanity and GPG signature: '/usr/bin/validate-sat-cert.pl --keyring /etc/webapp-keyring.gpg /etc/sysconfig/rhn/rhn-entitlement-cert.xml-1GQFZH' Database connectioned initialized: refer to /etc/rhn/rhn.conf Attempting local RHN Certificate push (and therefore activation) Executing: remote XMLRPC deactivation (if necessary). Executing: remote XMLRPC activation call. Executing: '/usr/bin/satellite-sync --list-channels --ca-cert /usr/share/rhn/RHNS-CA-CERT' Population of the Channel Family permissions failed. Return value: 6 Standard-out: 14:31:52 Red Hat Network Satellite - live synchronization 14:31:52 url: https://satellite.rhn.webdev.redhat.com 14:31:52 debug/output level: 1 14:31:52 db: rhnsat/<password>@rhnsat 14:31:52 14:31:52 Retrieving / parsing channel-families data 14:32:03 channel-families data complete +++ sending log as an email +++ Standard-error: SYNC ERROR: unhandled exception occurred: (Check logs/email for potentially more detail) <rhnFault class (code = 23, text = 'ORA-20290: (not_enough_entitlements_in_base_org) - You do not have enough entitlements in the base org.: org_id [1] family [rhel-rhaps] max [-360]')> (23, 'ORA-20290: (not_enough_entitlements_in_base_org) - You do not have enough entitlements in the base org.: org_id [1] family [rhel-rhaps] max [-360]', 'Could not update database entry.') ERROR: Population of the Channel Family permissions failed. [root@hp-dl585g5-01 ~]# grep -i rhaps redhat-cperry-* redhat-cperry-rhel6-lite.cert?rev=195961: <rhn-cert-field name="channel-families" flex="0" quantity="140" family="rhel-rhaps"/> redhat-cperry-webdev-rhel6-flex-no-beta-debug-rhx.cert?rev=196195: <rhn-cert-field name="channel-families" flex="500" quantity="140" family="rhel-rhaps"/> [root@hp-dl585g5-01 ~]# grep -i rhaps redhat-cperry-* /etc/sysconfig/rhn/rhn-entitlement-cert.xml redhat-cperry-rhel6-lite.cert?rev=195961: <rhn-cert-field name="channel-families" flex="0" quantity="140" family="rhel-rhaps"/> redhat-cperry-webdev-rhel6-flex-no-beta-debug-rhx.cert?rev=196195: <rhn-cert-field name="channel-families" flex="500" quantity="140" family="rhel-rhaps"/> /etc/sysconfig/rhn/rhn-entitlement-cert.xml: <rhn-cert-field name="channel-families" flex="500" quantity="140" family="rhel-rhaps"/> [root@hp-dl585g5-01 ~]# rhn-satellite-activate --vv usage: rhn-satellite-activate [options] rhn-satellite-activate: error: no such option: --vv [root@hp-dl585g5-01 ~]# rhn-satellite-activate -vv NOTE: using backup cert as default: /etc/sysconfig/rhn/rhn-entitlement-cert.xml RHN_PARENT: satellite.rhn.webdev.redhat.com HTTP_PROXY: None HTTP_PROXY_USERNAME: None HTTP_PROXY_PASSWORD: <password> CA_CERT: /usr/share/rhn/RHNS-CA-CERT Checking cert XML sanity and GPG signature: '/usr/bin/validate-sat-cert.pl --keyring /etc/webapp-keyring.gpg /etc/sysconfig/rhn/rhn-entitlement-cert.xml-g3wvec' Database connectioned initialized: refer to /etc/rhn/rhn.conf Attempting local RHN Certificate push (and therefore activation) Executing: remote XMLRPC deactivation (if necessary). Executing: remote XMLRPC activation call. Executing: '/usr/bin/satellite-sync --list-channels --ca-cert /usr/share/rhn/RHNS-CA-CERT' Population of the Channel Family permissions failed. Return value: 6 Standard-out: 14:38:45 Red Hat Network Satellite - live synchronization 14:38:45 url: https://satellite.rhn.webdev.redhat.com 14:38:45 debug/output level: 1 14:38:46 db: rhnsat/<password>@rhnsat 14:38:46 14:38:46 Retrieving / parsing channel-families data 14:38:49 channel-families data complete +++ sending log as an email +++ Standard-error: SYNC ERROR: unhandled exception occurred: (Check logs/email for potentially more detail) <rhnFault class (code = 23, text = 'ORA-20290: (not_enough_entitlements_in_base_org) - You do not have enough entitlements in the base org.: org_id [1] family [rhel-rhaps] max [-360]')> (23, 'ORA-20290: (not_enough_entitlements_in_base_org) - You do not have enough entitlements in the base org.: org_id [1] family [rhel-rhaps] max [-360]', 'Could not update database entry.') ERROR: Population of the Channel Family permissions failed. [root@hp-dl585g5-01 ~]# [root@hp-dl585g5-01 ~]# cat /etc/motd ** ** ** ** ** ** ** ** ** ** ** ** ** ** ** ** ** ** This System is reserved by cperry. To return this system early. You can run the command: return2beaker.sh Ensure you have your logs off the system before returning to Beaker To extend your reservation time. You can run the command: extendtesttime.sh This is an interactive script. You will be prompted for how many hours you would like to extend the reservation. Please use this command responsibly, Everyone uses these machines. You should verify the watchdog was updated succesfully after you extend your reservation. https://beaker.engineering.redhat.com/recipes/34942 For ssh, kvm, serial and power control operations please look here: https://beaker.engineering.redhat.com/view/hp-dl585g5-01.rhts.eng.bos.redhat.com Beaker Test information: HOSTNAME=hp-dl585g5-01.rhts.eng.bos.redhat.com JOBID=18735 RECIPEID=34942 RESULT_SERVER=127.0.0.1:7088 DISTRO=RHEL5-Server-U5 ARCHITECTURE=x86_64 ** ** ** ** ** ** ** ** ** ** ** ** ** ** ** ** ** ** [root@hp-dl585g5-01 ~]# The real issue here is that quantity in the certs should be flex + normal quantity, but this addition isn't being done. If you edit the cert and add the flex number to quantity and leave the flex number alone it works just fine. Closing as not a bug for satellite since hosted needs the change. |