Description of problem: Candlepin requires a single API call to port 8080 during initialization. This can be tricky to allow for users with firewall rules that restrict localhost traffic. Version-Release number of selected component (if applicable): 6.2.7 Candlepin requires access to port 8080 on localhost for the installation to succeed. We can add a firewall rule for this in the docs, but it is a one-time thing that only needs to be enabled during install, and can then be disabled. Additionally, the firewall rule would have to be crafted to not allow access from other hosts. The server.xml default will bind it to 0.0.0.0 instead of 127.0.0.1. Once the installation is complete, users have to remember to disable 8080 on localhost again. Ideally, the initialization could occur without this one-time call to this port. Then we could just remove the 8080 listener entirely.
@Barnaby - Why was this set back to the installer? The request from Beav seems to be for Candlepin not to require this API call at all.
I understood the request to be, have a way to not require the API call at all. That change would be for the installer to insert the admin user directly into the database. I will happily work that with the installer team but it would be happening outside of the candlepin API. Short of that, I don't see a reason the existing API couldn't be called via port 8443.
Created redmine issue http://projects.theforeman.org/issues/19095 from this bug
Thank you for your interest in Satellite 6. We have evaluated this request, and we do not expect this to be implemented in the product in the foreseeable future. We are therefore closing this out as WONTFIX. If you have any concerns about this, please feel free to contact Rich Jerrido or Bryan Kearney. Thank you.