Red Hat Bugzilla – Bug 1265394
Unauthorized: Invalid credentials for request
Last modified: 2015-09-24 18:41:38 EDT
Created attachment 1075983 [details]
Description of problem: Appears to be a reappearance of bug # 998033
When trying to register a rhel 7.1 system a message returns with the error "Unauthorized: Invalid credentials for request"
Version-Release number of selected component (if applicable): RHEL 7.1
How reproducible: continuous
Steps to Reproduce:
1. subscription-manager register
2. subscription-manager register --username _______ --password _______
3. subscription-manager register --username _______ --password _______ --auto-attach
Actual results: Unauthorized: Invalid credentials for request
Expected results: Successful registration
Additional info: /var/log/rhsm/rhsm.log is attached.
The top of your rhsm.log shows...
2015-09-20 03:26:04,121 [DEBUG] rhsmd @identity.py:131 - Loading consumer info from identity certificates.
2015-09-20 03:26:04,121 [DEBUG] rhsmd @identity.py:143 - Reload of consumer identity cert /etc/pki/consumer/cert.pem raised an exception with msg: [Errno 2] No such file or directory: '/etc/pki/consumer/key.pem'
A successful registration using subscription-manager will land two files...
You appear to be missing the key.
I'll bet you registered a consumer using the customer portal web app and then downloaded the consumer cert and then copied it into /etc/pki/consumer/cert.pem. I'll bet the key actually appended to the end of cert.pem.
On the other hand, I see this in the logs...
2015-09-21 08:45:32,291 [DEBUG] subscription-manager @connection.py:420 - Loaded CA certificates from /etc/rhsm/ca/: candlepin-stage.pem, redhat-uep.pem, katello-server-ca.pem
which indicates to me that you are probably registering to a katello server. Maybe your katello server was re-deployed and now you have a bad ca cert and stale consumer.
Bottom line... you are missing etc/pki/consumer/key.pem
I completely missed that. Sorry for the bug report.