[Spacewalk-list] Problem setting up proxy

Tue Jan 24 00:56:45 UTC 2012

On 1/23/2012 6:53 PM, Lopez, Abel wrote:
> Hey all,
> Using the latest version of spacewalk and following the steps on the
> wiki, I am able to install a proxy, but when I click on the
> "Proxy" button under "Details" of my host, I get
>
>
>   Permission Error
>
> You do not have the appropriate permission set to access the requested
> page. You may have reached this error page in one of several ways:
>
>  1. Your login session has expired. For security reasons, Red Hat
>     Network terminates your login session after 15 minutes of
>     inactivity. To sign in again, click here
>     <https://spacewalk.usa.tribune.com/>.
>  2. You've found an error in our site. Please contact your Support
>     representative with details of how you received this message.
>  3. Your browser does not have cookies enabled. The Red Hat Network
>     requires cookies in order to function; if you have disabled them,
>     please re-enable them to use the site.
>  4. You've done something naughty. Stop it.
>
>
> The logs are somewhat useless, any one have a hint?
>
>
> _______________________________________________
> Spacewalk-list mailing list
> Spacewalk-list at redhat.com
> https://www.redhat.com/mailman/listinfo/spacewalk-list
Abel,

Back on Mon, 16 Jan 2012, Jan Pazdziora suggested the following to me:
> Could you please apply the following patch to
> /etc/httpd/conf.d/zz-spacewalk-www.conf, restart httpd and see
> if it fixes the problem for you?
>
> diff --git a/spacewalk/config/etc/httpd/conf.d/zz-spacewalk-www.conf b/spacewalk/config/etc/httpd/conf.d/zz-spacewalk-www.conf
> index cde64a3..33fcaeb 100644
> --- a/spacewalk/config/etc/httpd/conf.d/zz-spacewalk-www.conf
> +++ b/spacewalk/config/etc/httpd/conf.d/zz-spacewalk-www.conf
> @@ -161,7 +161,7 @@ PerlModule PXT::ApacheAuth
>  	<Files proxy.pxt>
>  		ForceType text/pxt
>  		SetHandler perl-script
> -		require acl mixin RHN::Access::System user_role(org_admin); system_feature(ftr_proxy_capable); org_channel_family(rhn-proxy); child_channel_candidate(rhn-proxy)
> +		require acl mixin RHN::Access::System user_role(org_admin); system_feature(ftr_proxy_capable) or system_is_proxy(); org_channel_family(rhn-proxy) or system_is_proxy(); child_channel_candidate(rhn-proxy) or system_is_proxy()
>  	</Files>
>  
>  	<Files activation.pxt>
>
> -- 
> Jan Pazdziora
> Principal Software Engineer, Satellite Engineering, Red Hat
However, after applying the patch, the "500 Error" message changed to
the following:
> I tried clicking on the "Proxy" link for the System that 
> is a Spacewalk Proxy and received the following traceback 
> via e-mail as well as a "500 Error - Internal Server Error", 
> but this time only listing one item: 
> "1. You've found an error in the site. Please report this error 
> to your local administrator with details of how you received this message."
>
> The following exception occurred while executing this request:
>  GET /network/systems/details/proxy.pxt?sid=1000010042 HTTP/1.1 (from 
> browser)  /network/systems/details/proxy.pxt (from Apache)
>
> Date:
>   Mon Jan 16 09:36:20 2012
>
> Headers:
>   Accept: 
> text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
>   Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
>   Accept-Encoding: gzip, deflate
>   Accept-Language: en-us,en;q=0.5
>   Connection: keep-alive
>   Cookie: pxt-session-cookie=33165x905d9829f5f732eeada9d0bf770694ba
>   Host: tpa-spacewalk-01.example.local
>   Referer: 
> https://tpa-spacewalk-01.example.local/rhn/systems/details/Overview.do?sid=1000010042
>   User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:9.0.1) 
> Gecko/20100101 Firefox/9.0.1
>   X-ClickOnceSupport: ( .NET CLR 3.5.30729; .NET4.0E)
>
> Form variables:
>   sid => 1000010042
>
> User Information:
>   User alocaluser (id 2, org_id 1)
>
> Error notes:
>   (none)
>
> Initial Request:
>   Yes
>
> Error message:
>   RHN::Exception: User '2' attempted to access proxy interface without 
> permission.
>   Sniglets::Servers /usr/share/perl5/vendor_perl/Sniglets/Servers.pm 
> 150 RHN::Exception::throw
>   PXT::Parser /usr/share/perl5/vendor_perl/PXT/Parser.pm 160 
> Sniglets::Servers::proxy_entitlement_form
>   PXT::Parser /usr/share/perl5/vendor_perl/PXT/Parser.pm 72 
> PXT::Parser::expand_tag
>   PXT::ApacheHandler /usr/share/perl5/vendor_perl/PXT/ApacheHandler.pm 
> 500 PXT::Parser::expand_tags
>   PXT::ApacheHandler /usr/share/perl5/vendor_perl/PXT/ApacheHandler.pm 
> 103 PXT::ApacheHandler::pxt_parse_data
>   PXT::ApacheHandler /usr/share/perl5/vendor_perl/PXT/ApacheHandler.pm 
> 103 (eval)
>   main -e 0 PXT::ApacheHandler::handler
>   main -e 0 (eval)
>     
> My account "alocaluser" is an Organizational Administrator.
>
> Thinking that the error may be tied to "Organizational Administrator" 
> permission, I logged in with
> my user that is the "Satellite Administrator".  I received the same 
> e-mail traceback error as above.
>
> The /var/log/httpd/error_log contains:
>
> [Mon Jan 16 09:41:39 2012] [error] Execution of 
> /var/www/html/network/systems/details/proxy.pxt
> failed at Mon Jan 16 09:41:39 2012: RHN::Exception: User '1' attempted 
> to access proxy interface without
> permission.\n  Sniglets::Servers 
> /usr/share/perl5/vendor_perl/Sniglets/Servers.pm 150 
> RHN::Exception::throw\n
> PXT::Parser /usr/share/perl5/vendor_perl/PXT/Parser.pm 160 
> Sniglets::Servers::proxy_entitlement_form\n
> PXT::Parser /usr/share/perl5/vendor_perl/PXT/Parser.pm 72 
> PXT::Parser::expand_tag\n  PXT::ApacheHandler
> /usr/share/perl5/vendor_perl/PXT/ApacheHandler.pm 500 
> PXT::Parser::expand_tags\n  PXT::ApacheHandler
> /usr/share/perl5/vendor_perl/PXT/ApacheHandler.pm 103 
> PXT::ApacheHandler::pxt_parse_data\n
> PXT::ApacheHandler /usr/share/perl5/vendor_perl/PXT/ApacheHandler.pm 
> 103 (eval)\n  main -e 0
> PXT::ApacheHandler::handler\n  main -e 0 (eval)
>
> Hope this helps uncover the permissions problem
It sounds like we are both experiencing the same issue.