Bug 786730 - The guest's entitlement cert was not revoked after migrating to another host.
Summary: The guest's entitlement cert was not revoked after migrating to another host.
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Subscription Asset Manager
Classification: Retired
Component: candlepin
Version: 1.0.0
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: rc
: ---
Assignee: Chris Duryee
QA Contact: SAM QE List
URL:
Whiteboard:
Depends On: 795452 795715 795820 796003
Blocks: 703617
TreeView+ depends on / blocked
 
Reported: 2012-02-02 09:04 UTC by Hui Wang
Modified: 2013-03-27 20:53 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-04-27 00:21:05 UTC


Attachments (Terms of Use)
Pool details info log (18.76 KB, application/octet-stream)
2012-02-02 09:32 UTC, Hui Wang
no flags Details

Comment 1 Hui Wang 2012-02-02 09:30:21 UTC
Additional info:
Get the the pool details on server via the following CLI, pls see the log in the attachment.

curl -k -u admin:admin https://sam-120131105430.redhat.com/headpin/api/owners/ACME_Corporation2/pools | python -mjson.tool.

Comment 2 Hui Wang 2012-02-02 09:32:13 UTC
Created attachment 559017 [details]
Pool details info log

Comment 4 Chris Duryee 2012-02-02 17:04:11 UTC
Hui,

Thanks for the detailed test scenario. However, I'm not able to reproduce this locally. Can you update to candlepin 0.5.15, and add the following to your /etc/candlepin/candlepin.conf?

log4j.logger.org.candlepin=DEBUG

After that, please restart tomcat6 and run your scenario again, and you should see debug messages related to org.candlepin.resource.ConsumerResource.

Once the scenario is done, please send me your /var/log/tomcat6/catalina.out and I will take a look.

Comment 12 Chris Duryee 2012-02-09 21:12:11 UTC
38f3054f11 0.5.18+ master

Hui,

We fixed the error that was coming back from virt-who, and it seems to have cleared up a few different problems. I am not able to reproduce the issue with the latest build.

Comment 14 Hui Wang 2012-02-13 07:42:25 UTC
(In reply to comment #12)
> 38f3054f11 0.5.18+ master
> 
> Hui,
> 
> We fixed the error that was coming back from virt-who, and it seems to have
> cleared up a few different problems. I am not able to reproduce the issue with
> the latest build.
Chirs,
I will verify the issue in the coming build of sam(HTB build #4)

Comment 15 Hui Wang 2012-02-13 08:18:19 UTC
(In reply to comment #14)
> (In reply to comment #12)
> > 38f3054f11 0.5.18+ master
> > 
> > Hui,
> > 
> > We fixed the error that was coming back from virt-who, and it seems to have
> > cleared up a few different problems. I am not able to reproduce the issue with
> > the latest build.
> Chirs,
Sorry, Chris.

> I will verify the issue in the coming build of sam(HTB build #4)

Comment 16 Hui Wang 2012-02-15 08:44:46 UTC
I verified the issue ,the result is FAIL.

Decription:

Subscribed two different bonus pools that created by HOST1 on GUEST G,then migrated GUEST G to HOST2,the consumed entitlement certs on GUEST could not be revoked. And virt-who will report error info when migrating.


The detials steps as following:

Version:
katello-glue-candlepin-0.1.233-2.el6.noarch
katello-httpd-ssl-key-pair-1.0-1.noarch
katello-cli-headpin-0.1.15-2.el6.noarch
katello-headpin-all-0.1.135-2.el6.noarch
katello-certs-tools-1.0.2-2.el6.noarch
katello-trusted-ssl-cert-1.0-1.noarch
katello-cli-common-0.1.40-2.el6.noarch
katello-headpin-0.1.135-2.el6.noarch
katello-qpid-broker-key-pair-1.0-1.noarch
katello-configure-0.1.61-2.el6.noarch
katello-common-0.1.233-2.el6.noarch
thumbslug-0.0.21-1.el6.noarch
candlepin-0.5.18-1.el6.noarch
virt-who-0.5-5.el5

1.Install GUEST G on HOST H1 (The host is RHEV-H)
2.Resgister HOST H1 and GUEST G and HOST H2 to SAM useing
username/password/org(admin/admin/ACME_Corporation)
3.Start virt-who service on HOST H1
#service virt-who restart
4.Start virt-who service on HOST H2
#service virt-who restart
5.List available pool on Host1
[root@khong01 ca]# subscription-manager list --available
+-------------------------------------------+
    Available Subscriptions
+-------------------------------------------+

ProductName:          	Red Hat Enterprise Linux Server, Self-support (1-2 sockets)
                        (Up to 1 guest)
ProductId:            	RH0197181                
PoolId:               	8ac284f93580daf401358194065a01ea
Quantity:             	25                       
Multi-Entitlement:    	No                       
Expires:              	11/21/12                 
MachineType:          	physical                 

ProductName:          	High-Availability (8 sockets)
ProductId:            	RH1149049                
PoolId:               	8ac284f93580daf401358194063801db
Quantity:             	20                       
Multi-Entitlement:    	No                       
Expires:              	11/21/12                 
MachineType:          	physical                 

ProductName:          	Red Hat Enterprise Linux Desktop (50 pack), Standard
ProductId:            	RH0823221                
PoolId:               	8ac284f93580daf40135819405a201cc
Quantity:             	85000                    
Multi-Entitlement:    	No                       
Expires:              	11/01/12                 
MachineType:          	physical                 

ProductName:          	Red Hat Enterprise Linux AS (Standard L3)
ProductId:            	MCT0907                  
PoolId:               	8ac284f93580daf401358194051c01bb
Quantity:             	2                        
Multi-Entitlement:    	No                       
Expires:              	11/21/12                 
MachineType:          	physical                 

ProductName:          	Resilient Storage (8 sockets)
ProductId:            	RH1316844                
PoolId:               	8ac284f93580daf401358194046301ac
Quantity:             	19                       
Multi-Entitlement:    	No                       
Expires:              	05/12/12                 
MachineType:          	physical                 

ProductName:          	Red Hat Enterprise Linux Workstation, Standard
ProductId:            	RH0958488                
PoolId:               	8ac284f93580daf4013581940411019d
Quantity:             	42                       
Multi-Entitlement:    	No                       
Expires:              	07/05/12                 
MachineType:          	physical                 

6.List available pool on Guest G

[root@localhost ~]# subscription-manager  list --available
+-------------------------------------------+
    Available Subscriptions
+-------------------------------------------+


ProductName:       	Red Hat Enterprise Linux Server, Self-support (1-2 sockets)
                        (Up to 1 guest)
ProductId:         	RH0197181                
PoolId:            	8ac284f93580daf401358194065a01ea
Quantity:          	25                       
Multi-Entitlement: 	No                       
Expires:           	11/21/2012               
MachineType:       	physical                 


ProductName:       	High-Availability (8 sockets)
ProductId:         	RH1149049                
PoolId:            	8ac284f93580daf401358194063801db
Quantity:          	20                       
Multi-Entitlement: 	No                       
Expires:           	11/21/2012               
MachineType:       	physical                 


ProductName:       	Red Hat Enterprise Linux Desktop (50 pack), Standard
ProductId:         	RH0823221                
PoolId:            	8ac284f93580daf40135819405a201cc
Quantity:          	85000                    
Multi-Entitlement: 	No                       
Expires:           	11/01/2012               
MachineType:       	physical                 


ProductName:       	Red Hat Enterprise Linux AS (Standard L3)
ProductId:         	MCT0907                  
PoolId:            	8ac284f93580daf401358194051c01bb
Quantity:          	2                        
Multi-Entitlement: 	No                       
Expires:           	11/21/2012               
MachineType:       	physical                 


ProductName:       	Resilient Storage (8 sockets)
ProductId:         	RH1316844                
PoolId:            	8ac284f93580daf401358194046301ac
Quantity:          	19                       
Multi-Entitlement: 	No                       
Expires:           	05/12/2012               
MachineType:       	physical                 


ProductName:       	Red Hat Enterprise Linux Workstation, Standard
ProductId:         	RH0958488                
PoolId:            	8ac284f93580daf4013581940411019d
Quantity:          	42                       
Multi-Entitlement: 	No                       
Expires:           	07/05/2012               
MachineType:       	physical                 


ProductName:       	Red Hat Enterprise Linux Server, Standard (1 Virtual
                        Machine up to 8 vCPUs)
ProductId:         	RH0127380                
PoolId:            	8ac284f93580daf40135819403e7018f
Quantity:          	2                        
Multi-Entitlement: 	No                       
Expires:           	11/21/2012               
MachineType:       	virtual   

7.Subscribe two different pools on HOST1
[root@khong01 ca]# subscription-manager subscribe --pool=8ac284f93580daf401358194065a01ea
Successfully consumed a subscription from the pool with id 8ac284f93580daf401358194065a01ea
Introspect error: Launch helper exited with unknown return code 1
[root@khong01 ca]# subscription-manager subscribe --pool=8ac284f93580daf401358194046301ac
Successfully consumed a subscription from the pool with id 8ac284f93580daf401358194046301ac
Introspect error: Launch helper exited with unknown return code 1

8.List availale pool on GUEST G after the HOST1 subscribing some subscriptions that can create bonus pool.
[root@localhost ~]# subscription-manager list --available
+-------------------------------------------+
    Available Subscriptions
+-------------------------------------------+


ProductName:       	Resilient Storage (8 sockets)
ProductId:         	RH1316844                
PoolId:            	8ac284f93580daf4013581c7e08f0b39
Quantity:          	unlimited                
Multi-Entitlement: 	No                       
Expires:           	05/12/2012               
MachineType:       	virtual    ^^^^^^^^^^^^^Bonus pool              


ProductName:       	Red Hat Enterprise Linux Server, Self-support (1-2 sockets)
                        (Up to 1 guest)
ProductId:         	RH0197181                
PoolId:            	8ac284f93580daf4013581c4984b09f0
Quantity:          	unlimited                
Multi-Entitlement: 	No                       
Expires:           	11/21/2012               
MachineType:       	virtual        ^^^^^^^^^^^^^Bonus pool             


ProductName:       	Red Hat Enterprise Linux Server, Self-support (1-2 sockets)
                        (Up to 1 guest)
ProductId:         	RH0197181                
PoolId:            	8ac284f93580daf401358194065a01ea
Quantity:          	24                       
Multi-Entitlement: 	No                       
Expires:           	11/21/2012               
MachineType:       	physical                 


ProductName:       	High-Availability (8 sockets)
ProductId:         	RH1149049                
PoolId:            	8ac284f93580daf401358194063801db
Quantity:          	20                       
Multi-Entitlement: 	No                       
Expires:           	11/21/2012               
MachineType:       	physical                 


ProductName:       	Red Hat Enterprise Linux Desktop (50 pack), Standard
ProductId:         	RH0823221                
PoolId:            	8ac284f93580daf40135819405a201cc
Quantity:          	85000                    
Multi-Entitlement: 	No                       
Expires:           	11/01/2012               
MachineType:       	physical                 


ProductName:       	Red Hat Enterprise Linux AS (Standard L3)
ProductId:         	MCT0907                  
PoolId:            	8ac284f93580daf401358194051c01bb
Quantity:          	2                        
Multi-Entitlement: 	No                       
Expires:           	11/21/2012               
MachineType:       	physical                 


ProductName:       	Resilient Storage (8 sockets)
ProductId:         	RH1316844                
PoolId:            	8ac284f93580daf401358194046301ac
Quantity:          	18                       
Multi-Entitlement: 	No                       
Expires:           	05/12/2012               
MachineType:       	physical                 


ProductName:       	Red Hat Enterprise Linux Workstation, Standard
ProductId:         	RH0958488                
PoolId:            	8ac284f93580daf4013581940411019d
Quantity:          	42                       
Multi-Entitlement: 	No                       
Expires:           	07/05/2012               
MachineType:       	physical                 


ProductName:       	Red Hat Enterprise Linux Server, Standard (1 Virtual
                        Machine up to 8 vCPUs)
ProductId:         	RH0127380                
PoolId:            	8ac284f93580daf40135819403e7018f
Quantity:          	2                        
Multi-Entitlement: 	No                       
Expires:           	11/21/2012               
MachineType:       	virtual                  

9.Subscribe some pools on GUEST G

[root@localhost ~]# subscription-manager subscribe --pool=8ac284f93580daf4013581c4984b09f0
Successfully subscribed the system to Pool 8ac284f93580daf4013581c4984b09f0
[root@localhost ~]# subscription-manager subscribe --pool=8ac284f93580daf4013581c7e08f0b39
Successfully subscribed the system to Pool 8ac284f93580daf4013581c7e08f0b39

10.List consumed pool on GUEST G
[root@localhost ~]# subscription-manager list --consumed
+-------------------------------------------+
    Consumed Product Subscriptions
+-------------------------------------------+


ProductName:        	Red Hat Enterprise Linux Resilient Storage (for RHEL Server)
ContractNumber:     	2635105                  
AccountNumber:      	1508153                  
SerialNumber:       	4411548740349357844      
Active:             	True                     
QuantityUsed:       	1                        
Begins:             	01/12/2011               
Expires:            	05/12/2012               


ProductName:        	Red Hat Enterprise Linux High Availability (for RHEL Server)
ContractNumber:     	2635105                  
AccountNumber:      	1508153                  
SerialNumber:       	4411548740349357844      
Active:             	True                     
QuantityUsed:       	1                        
Begins:             	01/12/2011               
Expires:            	05/12/2012               


ProductName:        	Red Hat Enterprise Linux Server
ContractNumber:     	2635105                  
AccountNumber:      	1508153                  
SerialNumber:       	7923768945056727465      
Active:             	True                     
QuantityUsed:       	1                        
Begins:             	11/21/2011               
Expires:            	11/21/2012               

11.Migrate the GUEST G from HOST1 to HOST2

12.Check the virt-who report info on HOST1 and HOST2

On HOST1
Sending update to updateConsumer: ['2f2e18c5-fb00-4c2f-a638-184a42110187', '8480ebe4-3875-4fcc-ac6f-c0676ec8b0c5']
Sending update to updateConsumer: ['2f2e18c5-fb00-4c2f-a638-184a42110187', '8480ebe4-3875-4fcc-ac6f-c0676ec8b0c5']
Sending update to updateConsumer: ['2f2e18c5-fb00-4c2f-a638-184a42110187', '8480ebe4-3875-4fcc-ac6f-c0676ec8b0c5']
Sending update to updateConsumer: ['2f2e18c5-fb00-4c2f-a638-184a42110187', '8480ebe4-3875-4fcc-ac6f-c0676ec8b0c5']
Sending update to updateConsumer: ['2f2e18c5-fb00-4c2f-a638-184a42110187', '8480ebe4-3875-4fcc-ac6f-c0676ec8b0c5']
Sending update to updateConsumer: ['2f2e18c5-fb00-4c2f-a638-184a42110187']
Sending update to updateConsumer: ['2f2e18c5-fb00-4c2f-a638-184a42110187']
Sending update to updateConsumer: ['2f2e18c5-fb00-4c2f-a638-184a42110187']
Sending update to updateConsumer: ['2f2e18c5-fb00-4c2f-a638-184a42110187']

On HOST2
Sending update to updateConsumer: []
Sending update to updateConsumer: ['8480ebe4-3875-4fcc-ac6f-c0676ec8b0c5']
Runtime Error null at java.util.HashMap$HashIterator.nextEntry:810
Traceback (most recent call last):
  File "/usr/share/virt-who/virt-who.py", line 143, in _send
  File "/usr/share/virt-who/subscriptionmanager.py", line 80, in sendVirtGuests
SubscriptionManagerError: Runtime Error null at java.util.HashMap$HashIterator.nextEntry:810
Error in communication with candlepin, trying to recover
Sending update to updateConsumer: ['8480ebe4-3875-4fcc-ac6f-c0676ec8b0c5']
Runtime Error null at java.util.HashMap$HashIterator.nextEntry:810
Traceback (most recent call last):
  File "/usr/share/virt-who/virt-who.py", line 143, in _send
  File "/usr/share/virt-who/subscriptionmanager.py", line 80, in sendVirtGuests
SubscriptionManagerError: Runtime Error null at java.util.HashMap$HashIterator.nextEntry:810
Unable to recover, retry in 60 seconds.
Sending update to updateConsumer: ['8480ebe4-3875-4fcc-ac6f-c0676ec8b0c5']
Sending update to updateConsumer: ['8480ebe4-3875-4fcc-ac6f-c0676ec8b0c5']


13.Refresh the date on GUEST G

[root@localhost ~]# subscription-manager  refresh
All local data refreshed 
              
14.List the consumed pool on GUEST G
[root@localhost ~]# subscription-manager list --consumed
+-------------------------------------------+
    Consumed Product Subscriptions
+-------------------------------------------+


ProductName:        	Red Hat Enterprise Linux Resilient Storage (for RHEL Server)
ContractNumber:     	2635105                  
AccountNumber:      	1508153                  
SerialNumber:       	4411548740349357844     ^^^^^^^^^^^^^^^^Do not revoked 
Active:             	True                     
QuantityUsed:       	1                        
Begins:             	01/12/2011               
Expires:            	05/12/2012               


ProductName:        	Red Hat Enterprise Linux High Availability (for RHEL Server)
ContractNumber:     	2635105                  
AccountNumber:      	1508153                  
SerialNumber:       	4411548740349357844  ^^^^^^^^^^^^^^^Do not revoked    
Active:             	True                     
QuantityUsed:       	1                        
Begins:             	01/12/2011               
Expires:            	05/12/2012               


ProductName:        	Red Hat Enterprise Linux Server
ContractNumber:     	2635105                  
AccountNumber:      	1508153                  
SerialNumber:       	7923768945056727465 ^^^^^^^^^^^^^^Do not revoked     
Active:             	True                     
QuantityUsed:       	1                        
Begins:             	11/21/2011               
Expires:            	11/21/2012

Comment 20 Chris Duryee 2012-02-16 20:43:10 UTC
0340ec915 master 0.5.20+

Comment 22 Hui Wang 2012-02-28 06:47:33 UTC
I verified the issue on RHEV-H, the result is PASS.

After migrating the guest to another host, the guest's entitlement cert will be revoked.

Version-Release number of selected component (if applicable):
katello-glue-candlepin-0.1.300-1.el6.noarch
katello-certs-tools-1.0.2-2.el6.noarch
katello-cli-common-0.1.100-2.el6.noarch
katello-httpd-ssl-key-pair-1.0-1.noarch
katello-headpin-0.1.140-3.el6.noarch
katello-headpin-all-0.1.140-3.el6.noarch
katello-selinux-0.1.7-1.el6.noarch
katello-configure-0.1.100-7.el6.noarch
katello-trusted-ssl-cert-1.0-1.noarch
katello-qpid-broker-key-pair-1.0-1.noarch
katello-common-0.1.300-1.el6.noarch
katello-cli-headpin-0.1.15-2.el6.noarch
candlepin-0.5.22-1.el6.noarch
candlepin-tomcat6-0.5.22-1.el6.noarch
thumbslug-0.0.21-1.el6.noarch

Steps:
1.Install guest on host1
2.Guest consumed the bonus pool of host1
3.Migrate the guest to host2
4.Check the guest's entitlement cert

[root@dhcp-66-73-63 ~]# subscription-manager list --consumed
+-------------------------------------------+
    Consumed Product Subscriptions
+-------------------------------------------+


ProductName:        	Red Hat Enterprise Linux Server
ContractNumber:     	2635105                  
AccountNumber:      	1508153                  
SerialNumber:       	4634514514970481884      
Active:             	True                     
QuantityUsed:       	1                        
Begins:             	11/21/2011               
Expires:            	11/21/2012               


ProductName:        	Red Hat Enterprise Linux High Availability (for RHEL Server)
ContractNumber:     	2635105                  
AccountNumber:      	1508153                  
SerialNumber:       	4885456719074048531      
Active:             	True                     
QuantityUsed:       	1                        
Begins:             	11/21/2011               
Expires:            	11/21/2012               

[root@dhcp-66-73-63 ~]# subscription-manager refresh
All local data refreshed
[root@dhcp-66-73-63 ~]# subscription-manager list --consumed
No Consumed subscription pools to list
[root@dhcp-66-73-63 ~]# service rhsmcertd restart
Stopping rhsmcertd                                         [  OK  ]
Starting rhsmcertd 240 1440                                [  OK  ]
[root@dhcp-66-73-63 ~]# subscription-manager list --consumed
No Consumed subscription pools to list

Comment 23 Hui Wang 2012-02-28 12:26:20 UTC
Chris,
Pls move the status to ON_QA, then I will change the status to verified.

Comment 24 Bryan Kearney 2012-02-28 12:58:31 UTC
per comment 23.

Comment 25 Hui Wang 2012-02-29 05:32:33 UTC
Change the status to verified as comment 22.

Comment 26 Hui Wang 2012-03-02 07:55:43 UTC
Chris,
The issue on rhev-h is ok. But the issue is still existing on Xen. When migrating guest from host1 to host2, the guest's entitlement cert that consumed host1's bonus pool will be revoked. But re-migrating the guest from host2 to host1, the guest's entitlement cert that consumed host2's bonus pool can't be revoked.

Comment 27 Chris Duryee 2012-03-06 14:55:08 UTC
Hui,

I'm not able to repro this issue locally. I'll try to get online tonight so we can try to replicate the issue.

Comment 28 Hui Wang 2012-03-07 09:48:38 UTC
(In reply to comment #27)
> Hui,
> 
> I'm not able to repro this issue locally. I'll try to get online tonight so we
> can try to replicate the issue.

Chris,

I verified the issue on the latest SAM(HTB 7), the result on Xen and rhev-h is PASS.

Version:
katello-headpin-all-0.1.141-1.el6.noarch
katello-common-0.1.301-2.el6.noarch
katello-configure-0.1.100-7.el6.noarch
katello-trusted-ssl-cert-1.0-1.noarch
katello-qpid-broker-key-pair-1.0-1.noarch
katello-certs-tools-1.0.2-2.el6.noarch
katello-selinux-0.1.8-1.el6.noarch
katello-cli-common-0.1.100-2.el6.noarch
katello-httpd-ssl-key-pair-1.0-1.noarch
katello-cli-headpin-0.1.15-2.el6.noarch
katello-glue-candlepin-0.1.301-2.el6.noarch
katello-headpin-0.1.141-1.el6.noarch
candlepin-0.5.23-1.el6.noarch
candlepin-tomcat6-0.5.23-1.el6.noarch
thumbslug-0.0.21-1.el6.noarch


Note You need to log in before you can comment on or make changes to this bug.