Bug 796915

Summary: RHEV-H 6.2 register to SAM failed via TUI.
Product: Red Hat Enterprise Linux 6 Reporter: Chris Pelland <cpelland>
Component: ovirt-nodeAssignee: Mike Burns <mburns>
Status: CLOSED ERRATA QA Contact: Virtualization Bugs <virt-bugs>
Severity: urgent Docs Contact:
Priority: urgent    
Version: 6.2CC: acathrow, apevec, bsarathy, cpelland, cshao, gouyang, jboggs, khong, leiwang, mburns, moli, ovirt-maint, pm-eus, ycui
Target Milestone: rcKeywords: ZStream
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: ovirt-node-2.0.2-0.14.3.git3eac501.el6_2.9 Doc Type: Bug Fix
Doc Text:
In order to register to SAM, the SAM certificate must be extracted from the SAM server and hosted on a web server. There is a separate bug (790835) to make the cert available in SAM by default.
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-03-26 15:18:35 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 787995    
Bug Blocks:    
Attachments:
Description Flags
rhsm.log none

Description Chris Pelland 2012-02-23 21:05:25 UTC
This bug has been copied from bug #787995 and has been proposed
to be backported to 6.2 z-stream (EUS).

Comment 4 Mike Burns 2012-02-23 21:10:18 UTC
http://gerrit.virt.bos.redhat.com/gerrit/49

Comment 6 cshao 2012-02-28 04:15:49 UTC
Test version:
rhev-hypervisor6-6.2-20120227.0.el6_2

Register RHEV-H to SAM via TUI got failed with below methods.

Test method 1:
Login: admin__________ Password: *****____
Profile Name (optional): _____________________________
[ ] RHN [ ] Satellite [*] Subscription Asset Manager   
URL:  https://10.66.111.14/headpinset_________      
CA :  ________________________________________  (keep CA blank)


Test method 2:
Login: admin__________ Password: *****____
Profile Name (optional): _____________________________
[ ] RHN [ ] Satellite [*] Subscription Asset Manager   
URL:  https://10.66.111.14/headpinset_________      
CA :  https://10.66.111.14/pub/RHN-ORG-TRUSTED-SSL-CERT     


Test method 3:
Login: admin__________ Password: *****____
Profile Name (optional): _____________________________
[ ] RHN [ ] Satellite [*] Subscription Asset Manager   
URL:  https://10.66.111.14/headpinset_________      
CA :  /etc/rhsm/ca/candlepin-local.pem

I think the RHEV-H will download CA from in /etc/rhsm/ca/candlepin-local.pem.

I register RHEV-H to SAM by command can successful with below Workaround:
1). Download certificate from SAM server to local host.
scp root.111.14:/etc/candlepin/certs/candlepin-ca.crt /etc/rhsm/ca/

2). Rename certificate in local host.
cp candlepin-ca.crt candlepin-local.pem

3). Configuration sam
subscription-manager config --server.hostname=s1-sam-server.rhevh.englab.nay.redhat.com --server.prefix="/headpin/api" --server.port=443 --rhsm.baseurl="https://s1-sam-server.rhevh.englab.nay.redhat.com:8088" --rhsm.repo_ca_cert="/etc/rhsm/ca/candlepin-local.pem"

4). Add sam server to hosts file.
vi /etc/hosts
10.66.111.14 s1-sam-server.rhevh.englab.nay.redhat.com

subscription-manager register --org=ACME_Corporation
U:admin
P:admin
The system has been registered with id: fba31afa-e3b7-4b26-b1f5-9ab870f83b96

Comment 8 cshao 2012-02-29 08:25:18 UTC
I place the cert on web server "http://10.66.11.102/test", register to SAM still failed.


Login: admin__________ Password: *****__________ 
[ ] RHN [ ] Satellite [*] Subscription Asset Manager   
URL:  https://s1-sam-server.rhevh.englab.nay.redhat.com/headpinset
CA :  http://10.66.11.102/test/candlepin-local.pem


An Exception Has Occurred
global name 'logger' is not defined

Traceback (most recent call last): 
File "/usr/libexec/ovirt-config-setup", line 1672, in start 
self.process_config()  
File "/usr/libexec/ovirt-config-setup",
line 1519, in process_config
ret = p.action()
 File 
"/usr/lib/python2.6/site-packages/ovirt_co 
nfig_setup/rhn.py", line 413, in action
File
"/usr/lib/python2.6/site-packages/ovirt_co
nfig_setup/rhn.py", line 166, in run_rhsm 
NameError: global name 'logger' is not defined

Comment 9 Mike Burns 2012-02-29 13:44:12 UTC
This was a bad backport.  The logger command isn't used in 6.2.  A new build will be coming shortly.

Comment 14 cshao 2012-03-01 04:02:10 UTC
Created attachment 566727 [details]
rhsm.log

Comment 15 cshao 2012-03-01 08:45:53 UTC
TUI: The configuration of register to SAM can't write to /etc/rhsm/rhsm.conf, so I run the work around manually.

So change bug status to ASSIGNED.

Comment 19 Guohua Ouyang 2012-03-02 05:18:24 UTC
set bug status to verified and request technical note like c#10 in bug 786049

Comment 20 Mike Burns 2012-03-02 10:50:14 UTC
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
In order to register to SAM, the SAM certificate must be extracted from the SAM server and hosted on a web server.  There is a separate bug (790835) to make the cert available in SAM by default.

Comment 22 errata-xmlrpc 2012-03-26 15:18:35 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHSA-2012-0422.html