Red Hat Satellite engineering is moving the tracking of its product development work on Satellite to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "Satellite project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs will be migrated starting at the end of May. If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "Satellite project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/SAT-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 872305 - When importing manifest, Katello doesn't scope the client certificate to access CDN by owner
Summary: When importing manifest, Katello doesn't scope the client certificate to acce...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Satellite
Classification: Red Hat
Component: Content Management
Version: 6.0.1
Hardware: Unspecified
OS: Unspecified
unspecified
high
Target Milestone: Unspecified
Assignee: Ivan Necas
QA Contact: Corey Welton
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-11-01 18:42 UTC by Ivan Necas
Modified: 2019-09-25 20:45 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
When there were two organizations or more in System Engine, importing a corrupted manifest in one organization stopped repositories from the other organizations to be imported, eventhough the manifest from the second organization is valid. Changes have been made to the process so that when a manifest is imported, the product id is now paired with the organization. Other organizations should have access to their repositories regardless of another organization's corrupted manifest.
Clone Of:
Environment:
Last Closed: 2012-12-04 19:57:42 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2012:1543 0 normal SHIPPED_LIVE Important: CloudForms System Engine 1.1 update 2012-12-05 00:39:57 UTC

Description Ivan Necas 2012-11-01 18:42:57 UTC
Description of problem:
Instead of using owner specific client certificate to access CDN, the first certificate for the product is used (across all owners). This break the multi-tenancy.

Version-Release number of selected component (if applicable):


How reproducible:
Always

Steps to Reproduce:
1. create 2 organizations
2. import manifest from https://bugzilla.redhat.com/show_bug.cgi?id=852910
   this manifest has certificates not acceptable by cdn = no repositories are included after import
3. import ordinary simple manifest with RHEL into the second organization
  
Actual results:
No repositories are imported into the second repository

Expected results:
The second organization should have access to their repositories, no matter what happens in other orgs

Additional info:

Comment 1 Ivan Necas 2012-11-02 09:53:15 UTC
Fix in PR https://github.com/Katello/katello/pull/982

Comment 3 Ivan Necas 2012-11-02 13:23:56 UTC
Fixed in commit

  Branch: refs/heads/master
  Commit: ad5b565ac2f367d07b4d969ae62828adc6992ffd
  Author: Ivan Necas <inecas>
  Date:   2012-11-01 (Thu, 01 Nov 2012)

  Changed paths:
    M src/app/models/glue/candlepin/product.rb
    M src/lib/resources/candlepin.rb

  Log Message:
  -----------
  872305 - scope product certificate search by organization

Comment 6 Corey Welton 2012-11-06 17:41:28 UTC
QE Verified - after attempting to import the aforementioned "bad" manifest in Org1, I then successfully imported a valid manifest into org2 and was able to see relevant repos.

CloudForms System Engine Version: 1.1.12-20.el6cf

Comment 8 errata-xmlrpc 2012-12-04 19:57:42 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHSA-2012-1543.html

Comment 9 Mike McCune 2013-08-16 18:20:45 UTC
getting rid of 6.0.0 version since that doesn't exist


Note You need to log in before you can comment on or make changes to this bug.