Bug 1533052 - Add FQDN detection to setup and config utilities.
Summary: Add FQDN detection to setup and config utilities.
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Spacewalk
Classification: Community
Component: Installation
Version: 2.7
Hardware: All
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: Jan Dobes
QA Contact: Red Hat Satellite QA List
URL:
Whiteboard:
Depends On:
Blocks: space29
TreeView+ depends on / blocked
 
Reported: 2018-01-10 11:14 UTC by Laurence Rochfort
Modified: 2019-01-15 07:59 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2019-01-15 07:59:25 UTC
Embargoed:


Attachments (Terms of Use)

Description Laurence Rochfort 2018-01-10 11:14:05 UTC
Description of problem:
spacewalk-setup and spacewalk-hostname-rename presently only detect the
shortname as would be returned by "uname -n", not the FQDN as would be
detected by checking /etc/hosts, or a reverse DNS lookup in a correctly configured DNS environment.

This causes SSL verification failure when clients make a request against
against the FQDN. The SSL certificate has components populated with the shortname rather than FQDN, and as such verification fails when clients provide the FQDN because it doesn't match the shortname found in the SSL cert.

It also causes the Spacewalk server name to be populated with the shortname
which can cause problems for client registration and Inter Server
Synchronisation AuthN.

spacewalk-setup and spacewalk-hostname-rename should attempt to obtain the
FQDN and only fallback to providing the shortname if all attempts to identify
the FQDN fails.

Version-Release number of selected component (if applicable):
All

How reproducible:
On a system with the shortname in /etc/hostname or /etc/sysconfig/network, run spacewalk-setup or spacewalk-hostname-rename. The shortname will be detected and used to populate components of the SSL certificate.

Comment 1 Laurence Rochfort 2018-02-15 11:35:23 UTC
Additionally, having a shortname detected by spacewalk-setup-jabberd causes SSL validation failure for jabberd clients and osa-dispatcher.

spacewalk-setup-jabberd also updated to correctly detect the FQDN.

Comment 2 Laurence Rochfort 2018-02-15 11:36:27 UTC
GitHub PR 625 created with proposed fix.

ttps://github.com/spacewalkproject/spacewalk/pull/625

Comment 3 Laurence Rochfort 2018-02-16 10:04:49 UTC
Additionally, add FQDN detection to spacecmd.

Comment 4 Jiří Dostál 2018-03-27 09:04:52 UTC
spacewalk
f8a7cc0181e2fc3b0e49bb4cc79453289458a21d
d5caec0bae9421ea792dda515732f02de6ac8283

Comment 5 Jiří Dostál 2018-04-20 11:28:48 UTC
Above commits have been reverted for 2.8, removing from space28

Comment 6 Jiří Dostál 2018-05-29 08:09:59 UTC
spacewalk
1bcde51c72fd569ba8e36a7f6bdf78e1967c6499
6a8bcfde37692bade3cf3882e7934cda47aa38a3

Comment 7 Michael Mráka 2018-11-26 09:43:59 UTC
Move Spacewalk 2.9 bugs ON_QA.

Comment 8 Michael Mráka 2019-01-15 07:59:25 UTC
Spacewalk 2.9 has been released.
https://github.com/spacewalkproject/spacewalk/wiki/ReleaseNotes29


Note You need to log in before you can comment on or make changes to this bug.