Bug 1980709 - Oval report report generation fails with 'OVAL content is missing and download failed with error: 403 "Forbidden"' error.
Summary: Oval report report generation fails with 'OVAL content is missing and downloa...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Satellite
Classification: Red Hat
Component: SCAP Plugin
Version: 6.10.0
Hardware: Unspecified
OS: Unspecified
unspecified
high
Target Milestone: 6.10.0
Assignee: Ondřej Pražák
QA Contact: Jameer Pathan
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-07-09 10:50 UTC by Jameer Pathan
Modified: 2021-11-16 14:12 UTC (History)
3 users (show)

Fixed In Version: tfm-rubygem-smart_proxy_openscap-0.9.1
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2021-11-16 14:12:32 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Foreman Issue Tracker 32969 0 Normal Closed Skip trusted host check for OVAL endpoints 2021-07-14 06:16:01 UTC
Red Hat Product Errata RHSA-2021:4702 0 None None None 2021-11-16 14:12:42 UTC

Description Jameer Pathan 2021-07-09 10:50:36 UTC
Description of problem:
Oval report report generation fails with 'OVAL content is missing and download failed with error: 403 "Forbidden"' error.

Version-Release number of selected component (if applicable):
- Satellite 6.10.0 snap 8
- tfm-rubygem-smart_proxy_openscap-0.9.0-1.el7sat.noarch
- ansiblerole-foreman_scap_client-0.2.0-1.el7sat.noarch
- rubygem-foreman_scap_client-0.5.0-1.el8sat.noarch

How reproducible:
- Always

Steps to Reproduce:
1. Create OVAL Policy
2. Assign it to a hostgroup.
3. Register a content host with satellite using created hostgroup.
4. Run scap ansible role to configure host.
5 Try generation oval report

Actual results:
[root@dhcp-3-161 ~]# foreman_scap_client oval 1
File /var/lib/openscap/oval_content/f42bb0bec2aa8dbe9267a2375fc2f87466c2559b4fa60027902d937f38a10ba5.oval.xml.bz2 is missing. Downloading it from proxy.
Download OVAL content xml from: https://satellite.example.com:9090/compliance/oval_policies/1/oval_content/f42bb0bec2aa8dbe9267a2375fc2f87466c2559b4fa60027902d937f38a10ba5
OVAL content is missing and download failed with error: 403 "Forbidden"


Expected results:
- Oval report generated and uploaded successfully to satellite.

Additional info:

Comment 1 Ondřej Pražák 2021-07-14 06:15:59 UTC
Connecting redmine issue https://projects.theforeman.org/issues/32969 from this bug

Comment 2 Jameer Pathan 2021-08-05 09:17:35 UTC
Verified

Verified with:
- Satellite 6.10.0 snap 11
- tfm-rubygem-smart_proxy_openscap-0.9.1-1.el7sat.noarch

Test steps:
1. Create OVAL Policy
2. Assign it to a hostgroup.
3. Register a content host with satellite using created hostgroup.
4. Run scap ansible role to configure host.
5. Try generating oval report

Observation:
- Oval report generated and uploaded successfully to satellite.

[root@dhcp-3-184 ~]# foreman_scap_client oval 3
File /var/lib/openscap/oval_content/e2e0c093d52b31cf3e381f100bc5f51cfaf173b83e7e13ed169051cf901257fc.oval.xml.bz2 is missing. Downloading it from proxy.
Download OVAL content xml from: https://satellite.example.com:9090/compliance/oval_policies/3/oval_content/e2e0c093d52b31cf3e381f100bc5f51cfaf173b83e7e13ed169051cf901257fc
DEBUG: running: oscap oval eval --results /tmp/d20210805-24812-1rur7ug/results.xml /var/lib/openscap/oval_content/e2e0c093d52b31cf3e381f100bc5f51cfaf173b83e7e13ed169051cf901257fc.oval.xml.bz2

DEBUG: running: /usr/bin/env bzip2 /tmp/d20210805-24812-1rur7ug/results.xml
Uploading results to https://satellite.example.com:9090/compliance/oval_reports/3
Report successfully uploaded at 2021-08-05 05:10:21 -0400

Comment 5 errata-xmlrpc 2021-11-16 14:12:32 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: Satellite 6.10 Release), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2021:4702


Note You need to log in before you can comment on or make changes to this bug.