[Spacewalk-list] Spacewalk 1.5 Monitoring issue

[David Nutter]

On Fri, Aug 05, 2011 at 11:48:01AM +0530, trm asn wrote:

*snip*

> Here I am getting another error after changing the above mentioned
> parameters,
> 
> Status: UNKNOWN, The RHN Monitoring Daemon (RHNMD) is not responding: Auto
> configuration failed 11851:error:0200100D:system library:fopen:Permission
> denied:bss_file.c:122:fopen('/etc/pki/tls/openssl.cnf','rb')
> 11851:error:2006D002:BIO routines:BIO_new_file:system lib:bss_file.c:127:
> 11851:error:0E078002:configuration file routines:DEF_LOAD:system
> lib:conf_def.c:199:. Please make sure the daemon is running and the host is
> accessible from the monitoring scout. Command was: /usr/bin/ssh -l nocpulse
> -p 4545 -i /var/lib/nocpulse/.ssh/nocpulse-identity -o
> StrictHostKeyChecking=no -o BatchMode=yes 192.169.1.20  /bin/sh -s

Have you got SELinux in enforcing mode? If so check your audit log. I
think you'll find that the security context for the monitoring scout
isn't allowed to access files with a context of cert_t like
/etc/pki/tls/openssl.cnf

Looks like the spacewalk selinux policy needs a tweak as well. 

I'm currently running in Disabled mode so I don't have sample messages
to hand to confirm this hunch. 

Regards,

-- 
David Nutter  				Tel: +44 (0)131 650 4888
BioSS, JCMB, King's Buildings, Mayfield Rd, EH9 3JZ. Scotland, UK 

Biomathematics and Statistics Scotland (BioSS) is formally part of The
James Hutton Institute (JHI), a registered Scottish charity No. SC041796
and a company limited by guarantee No. SC374831