Red Hat Bugzilla – Bug 232902
Auto Apply Errata not working correctly.
Last modified: 2007-11-09 11:50:09 EST
Description of problem:
Taken from a rhn-list posting and my own review. It seems that Auto Apply Errata
is not working as expected within RHN 5.0.0 since its release into production on
I do not have full details yet, but sounds like it kicked in for this account
and scheduled the application of errata to *all* systems on the account, even
those where the errata was not appliciable, and also ignoring the flag for 'Auto
Creating this *public* bug for tracking.
Version-Release number of selected component (if applicable):
Not sure yet
Report came from:
Steps to Reproduce:
I'm not sure whether this is a hosted or proxy issue and I'm not sure
if it is operator error or something else that caused it. We have a
hosted environment running a current release proxy server with custom
channels. A product enhancement errata was released for some of those
custom channels a couple of days ago and today it was scheduled for
every system subscribed to the pertinent channels (or so it seems at a
Question 1: Should this errata be scheduled for machines which don't
have any relevant package installed? It was but this seems silly. They
picked it up and failed to install it harmlessly.
Question 2: Should it be scheduled for systems with auto errata update
set to no? It was. I can't tell how the scheduling is done, it is
listed as (none).
Question 3: Should systems with this errata scheduled but which have
auto errata updates set to no pick up the package and install it when
doing the next rhn_check? They did. This caused major grief as it
broke openAFS in this case and it seems to me that this should not
Can anyone shed any light on any of this for me? It has been an
immensely long week and I'm exhausted so maybe I'm not thinking too
clearly at the moment.
Having reviewed, it seems that there is a bug in the background daemon that
schedules to application of 'Apply Auto Errata'. I have placed this bug onto the
must fix list for the next scheduled minor maintence release of the RHN Hosted
web site to get fixed.
* Fixed overly "generous" logic in the ErrataQueueWorker which was causing
auto-errata updates to be applied to too many machines.
Suggested Test Plan:
1) Find an account which has errata auto-updates disabled.
2) Create and publish a new errata.
3) Wait for the errata to get applied.
You can monitor the progress of errata processing by:
3a) Edit /usr/share/rhn/classes/log4j.properties on scripts.back-webqa.redhat.com
3b) Add the following line:
3c) Bounce taskomatic: /sbin/service taskomatic restart
3d) Monitor the /var/log/rhn/rhn_taskomatic_daemon.log file
4) Once errata processing is complete, verify that the server used in step #1
does not have the errata scheduled.
looks like its not fixed.
ksmith is already looking in to it.
Ok. Let's try this again with a different test path. We'll need to simulate the
effects of prod-ops' errata scripts so some manual database munging is involved.
1) Use the /svn/trunk/eng/backend/server/test/test_errata_import_webqa.py script
to create a new errata. Change the advisory name before running the script. I've
used the house number part of my address to try and insure uniqueness.
2) After the script has run, execute the following SQL query against the webqa
select id from rhnErrata where created > sysdate - 1 and created < sysdate and
advisory like '%ADVISORY_NAME%'
Note: Replace the term ADVISORY_NAME with the unique value you selected in step
1. Make sure to leave the percent signs in place otherwise the query will not
3) Jot down the id returned from the query.
4) Create a work entry for taskomatic so it can process the new errata. This is
normally done by prod-ops' scripts, but we'll have to simulate it here.
insert into rhnErrataQueue values (ERRATA_ID, sysdate, sysdate, sysdate);
Note: Replace the term ERRATA_ID with the id from step 3.
5) Wait for taskomatic to process this record. I'd suggest waiting 15-20 minutes.
6) Login to an account which has servers with auto errata updates disabled.
7) Verify that these servers _do not_ have a pending errata action for the newly
Thanks kevin for the detailed test plan.
I've checked this in stage using my own account...
System 1007229597 has a bunch of errata scheduled (correct)
System 1007229598 does *not* have a bunch of errata scheduled (correct)
Moving to RELEASE_PENDING
Why no announcement to the community about this?
Daryl, can you elaborate?
I did on the email list.
This problem appears to be back as I have most of my auto-apply systems yet to
apply RHEL5.1 .. Some SSIDs for ya:
(I have lots more if necessary)
see bug 373131 re: comment #16