Bug 533333 - Installation Guide incorrect at 8.5. Cloning the Satellite with Embedded DB step number 5
Summary: Installation Guide incorrect at 8.5. Cloning the Satellite with Embedded DB ...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Satellite 5
Classification: Red Hat
Component: Docs Installation Guide
Version: 530
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: John Ha
QA Contact: Martin Minar
URL:
Whiteboard: Fixed in the 5.4.0 Release - GA'd 201...
Depends On:
Blocks: sat540-docs
TreeView+ depends on / blocked
 
Reported: 2009-11-06 07:35 UTC by Michael Kearey
Modified: 2018-11-14 20:26 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2010-10-28 14:57:08 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Michael Kearey 2009-11-06 07:35:49 UTC
Description of problem:
The Installation Guide describes a method to clone an existing Satellite in preparation for failover/HA.  The description is incorrect at step number 5

Version-Release number of selected component (if applicable):
Edition 5.3.0 of Installation Guide for RHN Satellite

How reproducible:
100%

Steps to Reproduce:
Follow guide and end up having clients unable to connect to a cloned Satellite with SSL
  
Actual results:
Clients fail to 'trust' the cloned Satellite

Expected results:
Clients should connect to and trust the cloned Satellite..


Additional info:

The relevant section quoted:

"If the primary Satellite fails, transfer the SSL certificates from it to the secondary. Refer to the Deploying the CA SSL Public Certificate to Clients section of the RHN Client Configuration Guide for precise instructions. "

That is not correct. We need to transfer the ssl key pair package from the main Satellite to the Standby Satellite, as discussed in the backup section:

http://www.redhat.com/docs/en-US/Red_Hat_Network_Satellite/5.3/Installation_Guide/html/s1-maintenance-backup.html

This way all the clients will have the correct _trusted_ certificate installed and will not require any changes.

The Installation Guide step 5 of "8.5. Cloning the Satellite with Embedded DB" should read:

"5 If the primary Satellite fails, transfer the SSL key pair RPM package in /root/ssl-build from the main to the cloned Satellite, and install the package. This ensures that RHN clients will _trust_ the standby/cloned Satellite."

Comment 6 Clifford Perry 2010-10-28 14:57:08 UTC
The 5.4.0 RHN Satellite and RHN Proxy release has occurred. This issue has been resolved with this release. 


RHEA-2010:0801 - RHN Satellite Server 5.4.0 Upgrade
https://rhn.redhat.com/rhn/errata/details/Details.do?eid=10332

RHEA-2010:0803 - RHN Tools enhancement update
https://rhn.redhat.com/rhn/errata/details/Details.do?eid=10333

RHEA-2010:0802 - RHN Proxy Server 5.4.0 bug fix update
https://rhn.redhat.com/rhn/errata/details/Details.do?eid=10334

RHEA-2010:0800 - RHN Satellite Server 5.4.0
https://rhn.redhat.com/rhn/errata/details/Details.do?eid=10335

Docs are available:

http://docs.redhat.com/docs/en-US/Red_Hat_Network_Satellite/index.html 

Regards,
Clifford


Note You need to log in before you can comment on or make changes to this bug.