Bug 1112664 - 'Access denied' when registering using --consumerid
Summary: 'Access denied' when registering using --consumerid
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Satellite
Classification: Red Hat
Component: Registration
Version: 6.0.3
Hardware: Unspecified
OS: Unspecified
high
medium
Target Milestone: Unspecified
Assignee: Dustin Tsang
QA Contact: sthirugn@redhat.com
URL: http://projects.theforeman.org/issues...
Whiteboard:
Depends On: 1126376 1128455
Blocks:
TreeView+ depends on / blocked
 
Reported: 2014-06-24 12:45 UTC by Tomas Lestach
Modified: 2019-09-26 18:11 UTC (History)
7 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2014-09-11 12:20:05 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)
relevant part of /var/log/foreman/production.log (12.15 KB, text/x-log)
2014-06-24 12:45 UTC, Tomas Lestach
no flags Details


Links
System ID Private Priority Status Summary Last Updated
Foreman Issue Tracker 6367 0 None None None 2016-04-22 15:56:47 UTC

Description Tomas Lestach 2014-06-24 12:45:02 UTC
Created attachment 911709 [details]
relevant part of /var/log/foreman/production.log

Description of problem:
I created a content-host profile on sat6 using hammer and wanted to register and attach a client machine to the existing profile. The registration process failed with 'Access denied'.

Version-Release number of selected component (if applicable):
Satellite-6.0.3-RHEL-6-20140620.0

How reproducible:
always

Steps to Reproduce:
1. on sat6 server:
# hammer content-host create --organization-id 1 --name try 
Name:                  try
ID:                    08044f08-ec92-4215-a2dc-3cb4f524c31f
Description:           Initial Registration Params
Location:              None
Lifecycle Environment: Library
Content View:          Default Organization View
Entitlement Status:    valid
Release Version:       
Autoheal:              true

Content host created

2. on the client machine:
# rpm -qa katello-ca-consumer*
#
# rpm -Uvh http://ibm-x3650-05.ovirt.rhts.eng.bos.redhat.com/pub/katello-ca-consumer-latest.noarch.rpm
Retrieving http://ibm-x3650-05.ovirt.rhts.eng.bos.redhat.com/pub/katello-ca-consumer-latest.noarch.rpm
Preparing...                ########################################### [100%]
   1:katello-ca-consumer-ibm########################################### [100%]
#
# rpm -qa katello-ca-consumer*katello-ca-consumer-ibm-x3650-05.ovirt.rhts.eng.bos.redhat.com-1.0-1
#
# subscription-manager register --consumerid 08044f08-ec92-4215-a2dc-3cb4f524c31f --force 
Username: admin
Password: 
Access denied

Actual results:
Access denied

Expected results:
Successful registration and attachment with the existing profile

Additional info:
Relevant part of /var/log/foreman/production.log in attachment.
This is a real blocker for system profile migration from Sat5.

Comment 3 Dustin Tsang 2014-06-24 21:33:39 UTC
redmine issue created

Comment 5 sthirugn@redhat.com 2014-08-10 14:25:49 UTC
Failed and blocked with https://bugzilla.redhat.com/show_bug.cgi?id=1128455.  Move this to ON_QA when 1128455 is fixed and ready to test.

Comment 6 Dustin Tsang 2014-08-11 15:29:56 UTC
1126376 moved to post; moving to on_qa

Comment 7 sthirugn@redhat.com 2014-08-14 05:38:56 UTC
Verified.

# curl -X POST -H "Accept:application/json" -H "Content-Type: application/json" -u admin:changeme --insecure -d '{"type":"system","facts":{"1":"1"}, "organization_id":3, "name":"testsystem12.redhat.com","environment_id":3, "content_view_id":3}' https://cloud-qe-14.idm.lab.bos.redhat.com/katello/api/systems
**this created content host successfully**

On the client:
# subscription-manager register --consumerid='70da499c-d450-47e5-a5a4-633160dcc270'
Username: admin
Password: 
The system has been registered with ID: 70da499c-d450-47e5-a5a4-633160dcc270

Version Tested:
GA Snap 5 - Satellite-6.0.4-RHEL-6-20140813.2

* apr-util-ldap-1.3.9-3.el6_0.1.x86_64
* candlepin-0.9.23-1.el6_5.noarch
* candlepin-common-1.0.1-1.el6_5.noarch
* candlepin-scl-1-5.el6_4.noarch
* candlepin-scl-quartz-2.1.5-5.el6_4.noarch
* candlepin-scl-rhino-1.7R3-1.el6_4.noarch
* candlepin-scl-runtime-1-5.el6_4.noarch
* candlepin-selinux-0.9.23-1.el6_5.noarch
* candlepin-tomcat6-0.9.23-1.el6_5.noarch
* elasticsearch-0.90.10-4.el6sat.noarch
* foreman-1.6.0.40-1.el6sat.noarch
* foreman-compute-1.6.0.40-1.el6sat.noarch
* foreman-gce-1.6.0.40-1.el6sat.noarch
* foreman-libvirt-1.6.0.40-1.el6sat.noarch
* foreman-ovirt-1.6.0.40-1.el6sat.noarch
* foreman-postgresql-1.6.0.40-1.el6sat.noarch
* foreman-proxy-1.6.0.27-1.el6sat.noarch
* foreman-selinux-1.6.0.6-1.el6sat.noarch
* foreman-vmware-1.6.0.40-1.el6sat.noarch
* katello-1.5.0-28.el6sat.noarch
* katello-ca-1.0-1.noarch
* katello-certs-tools-1.5.6-1.el6sat.noarch
* katello-installer-0.0.59-1.el6sat.noarch
* openldap-2.4.23-34.el6_5.1.x86_64
* openldap-devel-2.4.23-34.el6_5.1.x86_64
* pulp-katello-0.3-3.el6sat.noarch
* pulp-nodes-common-2.4.0-0.30.beta.el6sat.noarch
* pulp-nodes-parent-2.4.0-0.30.beta.el6sat.noarch
* pulp-puppet-plugins-2.4.0-0.30.beta.el6sat.noarch
* pulp-puppet-tools-2.4.0-0.30.beta.el6sat.noarch
* pulp-rpm-plugins-2.4.0-0.30.beta.el6sat.noarch
* pulp-selinux-2.4.0-0.30.beta.el6sat.noarch
* pulp-server-2.4.0-0.30.beta.el6sat.noarch
* python-ldap-2.3.10-1.el6.x86_64
* ruby193-rubygem-net-ldap-0.3.1-3.el6sat.noarch
* ruby193-rubygem-runcible-1.1.0-2.el6sat.noarch

Comment 8 Bryan Kearney 2014-09-11 12:20:05 UTC
This was delivered with Satellite 6.0 which was released on 10 September 2014.


Note You need to log in before you can comment on or make changes to this bug.