[Spacewalk-list] RHEL 6.x repository not syncing from parentchannel

Tue Jan 10 06:22:48 UTC 2017

Am 9. Januar 2017 22:46:39 MEZ schrieb Daryl Rose <darylrose at outlook.com>:
>I would like to say thank you to Jeremy, Paul, Robert and all who
>helped me with this issue.  After much banging of the head on the wall,
>I finally got this working.
>
>Thank you once again. I really appreciate the help, and again, I
>apology for any angry tones that I may have posted previously.  My
>frustration got the better of me, and I don't want anyone on the list
>thinking that is my normal demeanor.
>
>Daryl
>
>
>________________________________
>From: spacewalk-list-bounces at redhat.com
><spacewalk-list-bounces at redhat.com> on behalf of jma at schaubroeck.be
><jma at schaubroeck.be>
>Sent: Thursday, January 5, 2017 4:52 AM
>To: spacewalk-list at redhat.com
>Subject: Re: [Spacewalk-list] RHEL 6.x repository not syncing from
>parentchannel
>
>
>Hi Daryl
>
>A few pointers:
>
>*   CA Cert: should be under /etc/rhsm/ca/redhat-uep.pem as your system
>is registered with RHN. (if not, either use "find" or another tool to
>look for it, or use google, you should be able to download it)
>*   SSL Client Cert and SSL Client Key: these are both in the
>entitlement certificates you can download. You can choose to split them
>in two files or just keep them together (both should work iirc)
>
>Add all 3 under Systems -> Kickstart -> GPG and SSL keys (choose SSL as
>type) and give them a clear name. Then you will be able to choose them
>in the dropdown menu for the repo config.
>
>
>Regards,
>
>Jeremy
>
>On 4/01/2017 16:16, Daryl Rose wrote:
>
>Hello Jeremy,
>
>
>Thank you for the information, and sorry for the late reply.  Holidays
>and a heavy work load prevented me from getting back to this topic.
>
>
>Actually, you are the first person to specifically answer some of these
>questions.   I do specifically remember asking the question, more than
>once, what am I missing?  So, I believe the answer to that question is
>the SSL keys.  I don't remember when I setup the original server
>setting up keys, but I must have if it had worked.
>
>
>I've read through the documentation, and I've read the
>subscription-manager man page, but I'm not really sure how to get the
>keys and what to do with them once I do get them.  I am able to
>download the server entitlement from the Red Hat subscription, but I'm
>not sure if that is what I need or not.  Also, I'm not familiar enough
>with certificates and I don't want to start trying commands that I am
>not familiar with and break my current configuration, which I know can
>happen.
>
>
>When I look at the repository page in the WUI, I see three SSL
>settings.
>
>  *   SSL CA Certificate
>  *   SSL Client Certificate
>  *   SSL Client Key
>
>I'm assuming these are what I have to set, correct?  In the drop down,
>there is only a single choice,
>
>  *   RHN-ORG-TRUSTED-SSL-CERT
>
>I tried selecting that in the past, but that did not resolve this
>issue.  Do I have to install the entitlement that I downloaded from Red
>Hat into the RHN-ORG-TRUSTED-SSL-CERT?
>
>If someone can point me in the right direction of how to get the certs,
>and how to add them into Spacewalk without breaking my current
>configuration, I would appreciate it.
>
>Thank you.
>
>Daryl
>
>
>________________________________
>From:
>spacewalk-list-bounces at redhat.com<mailto:spacewalk-list-bounces at redhat.com>
><spacewalk-list-bounces at redhat.com><mailto:spacewalk-list-bounces at redhat.com>
>on behalf of jma at schaubroeck.be<mailto:jma at schaubroeck.be>
><jma at schaubroeck.be><mailto:jma at schaubroeck.be>
>Sent: Tuesday, December 20, 2016 10:29 AM
>To: spacewalk-list at redhat.com<mailto:spacewalk-list at redhat.com>
>Subject: Re: [Spacewalk-list] RHEL 6.x repository not syncing from
>parentchannel
>
>
>Hi Daryl
>
>At the risk of repeating something someone else has already said,
>here's my thoughts:
>
>Spacewalk-repo-sync and the subscription manager registration are two
>separate things. I don't think anyone doubts that your server is
>registered all fine with RedHat and that all the relevant yum commands
>work. But as far as I know the two are unrelated.
>
>If you want to sync directly with Spacewalk itself (spacewalk-repo-sync
>is that, and it uses the repo config you set within spacewalk) then you
>will have to use the way Paul described:
>
>2) using a the same URL and keys as subscription manager, the URLs for
>the repos and the SSL keys can be retrieved from subscritpion manager
>on a registered host or through access.redhat.com by drilling into the
>subscriptions.
>
>the scheduling and exact options like the URL and if a SSL cert is
>used are configured on each repository through the spacewalk web
>interface. by the way this is the url you were being asked about.
>
>Aka: in your repository configuration in spacewalk you have to enter
>the correct URL, along with an SSL CA Certificate, SSL Client
>Certificate and SSL Client Key. The info where to get these and how to
>use them has been posted on the list a few times.
>
>Now the URL should be fine from what I read, but did you check the SSL
>cert/key? Are they the ones for your current registered server or for
>the old one? Are they still valid? (I had mine expire earlier this
>year, took me a while to figure out that was the issue) If there is an
>issue with these the sync will just outright fail without much useful
>info. Example:
>
>Sync started: Sun Nov 20 20:30:00 2016
>['/usr/bin/spacewalk-repo-sync', '--channel', 'rhel-6-server-x86_64',
>'--type', 'yum', '']
>Repo URL: <whatever correct URL for whatever repo you want>
>ERROR: Cannot retrieve repository metadata (repomd.xml) for repository:
>rhel-6-server-x86_64. Please verify its path and try again
>Sync completed.
>Total time: 0:00:00
>
>Regards,
>Jeremy
>
>On 20/12/2016 16:44, Daryl Rose wrote:
>
>Robert,
>
>
>Thank you for the reply, and I apologize if I came off angry in my
>reply to you before.
>
>
>In your comments you kept asking about the URL.  As I've stated many
>times previously, the server is registered, and entitled properly. 
>I've been able to prove this many different ways.  By running the yum
>command, by using the subscription-manager command to verify my
>entitlement etc....  I even opened a ticket with Red Hat to verify the
>entitlement, but because I mentioned Spacewalk in the ticket they told
>me to go pound sand because I don't have a Satellite subscription.   
>But that was just a feel good ticket anyway.  I know that the URL that
>I am using is accurate, because I can run the "yum repolist", "yum
>update" and "reposync" command and they all work.  There is something
>else that is broke.
>
>
>You and others tell me to look at the logs, however, there is nothing
>in the logs to point me in the direction on what the issue is. I've
>posted the only error that I receive.  Oh, one thing that I have failed
>to mention is that I disabled the schedule a couple of weeks ago when
>this issue first started.  So that takes taskomatic out of the picture.
>I have been using the "spacewalk-repo-sync" command from the command
>line trying to troubleshoot this issue. That is why in all of my
>previous updates I kept specifying spacewalk-repo-sync.  But that is my
>fault for not mentioning that before.
>
>
>With that said, I don't care how many verbose v's I put at the end of
>the command, the only error that I get is the error that I've been
>posting.
>
>
>Here is what I get in the channel log:
>
>2016/12/20 09:12:22 -05:00 Sync of channel started.
>
>2016/12/20 09:12:22 -05:00 2595 0.0.0.0:
>server/rhnChannel.channel_info('rhel-6-server-rpms',)
>2016/12/20 09:12:22 -05:00 Repo URL: <RHEL URL HERE>
>2016/12/20 09:12:22 -05:00 Sync of channel completed in 0:00:00.
>
>Here is what I get in the reposync.log:
>2016/12/20 09:12:22 -05:00 Command: ['/usr/bin/spacewalk-repo-sync',
>'--channel', 'rhel-6-server-rpms', '-vvv']
>2016/12/20 09:12:22 -05:00 2595 0.0.0.0:
>server/rhnChannel.isCustomChannel(136,)
>2016/12/20 09:12:22 -05:00 2595 0.0.0.0:
>server/rhnChannel.isCustomChannel(136, 'is a custom channel')
>2016/12/20 09:12:22 -05:00 2595 0.0.0.0:
>server/rhnChannel.isCustomChannel(133,)
>2016/12/20 09:12:22 -05:00 2595 0.0.0.0:
>server/rhnChannel.isCustomChannel(133, 'is a custom channel')
>2016/12/20 09:12:22 -05:00 2595 0.0.0.0:
>server/rhnChannel.isCustomChannel(103,)
>2016/12/20 09:12:22 -05:00 2595 0.0.0.0:
>server/rhnChannel.isCustomChannel(103, 'is a custom channel')
>2016/12/20 09:12:22 -05:00 2595 0.0.0.0:
>server/rhnChannel.isCustomChannel(122,)
>2016/12/20 09:12:22 -05:00 2595 0.0.0.0:
>server/rhnChannel.isCustomChannel(122, 'is a custom channel')
>2016/12/20 09:12:22 -05:00 2595 0.0.0.0:
>server/rhnChannel.isCustomChannel(129,)
>2016/12/20 09:12:22 -05:00 2595 0.0.0.0:
>server/rhnChannel.isCustomChannel(129, 'is a custom channel')
>2016/12/20 09:12:22 -05:00 2595 0.0.0.0:
>server/rhnChannel.isCustomChannel(120,)
>2016/12/20 09:12:22 -05:00 2595 0.0.0.0:
>server/rhnChannel.isCustomChannel(120, 'is a custom channel')
>2016/12/20 09:12:22 -05:00 2595 0.0.0.0:
>server/rhnChannel.isCustomChannel(121,)
>2016/12/20 09:12:22 -05:00 2595 0.0.0.0:
>server/rhnChannel.isCustomChannel(121, 'is a custom channel')
>2016/12/20 09:12:22 -05:00 2595 0.0.0.0:
>server/rhnChannel.isCustomChannel(131,)
>2016/12/20 09:12:22 -05:00 2595 0.0.0.0:
>server/rhnChannel.isCustomChannel(131, 'is a custom channel')
>2016/12/20 09:12:22 -05:00 2595 0.0.0.0:
>server/rhnChannel.isCustomChannel(124,)
>2016/12/20 09:12:22 -05:00 2595 0.0.0.0:
>server/rhnChannel.isCustomChannel(124, 'is a custom channel')
>2016/12/20 09:12:22 -05:00 2595 0.0.0.0:
>server/rhnChannel.isCustomChannel(138,)
>2016/12/20 09:12:22 -05:00 2595 0.0.0.0:
>server/rhnChannel.isCustomChannel(138, 'is a custom channel')
>2016/12/20 09:12:22 -05:00 2595 0.0.0.0:
>server/rhnChannel.isCustomChannel(134,)
>2016/12/20 09:12:22 -05:00 2595 0.0.0.0:
>server/rhnChannel.isCustomChannel(134, 'is a custom channel')
>2016/12/20 09:12:22 -05:00 ======================================
>2016/12/20 09:12:22 -05:00 | Channel: rhel-6-server-rpms
>2016/12/20 09:12:22 -05:00 ======================================
>2016/12/20 09:12:22 -05:00 Sync of channel started.
>Please check 'reposync/rhel-6-server-rpms.log' for sync log of this
>channel.
>2016/12/20 09:12:22 -05:00 Sync of channel completed.
>2016/12/20 09:12:22 -05:00 Total time: 0:00:00
>
>Not much information to go on.
>
>Thanks
>
>Daryl
>
>________________________________
>
>From:
>spacewalk-list-bounces at redhat.com<mailto:spacewalk-list-bounces at redhat.com>
><spacewalk-l
Hi Daryl,

Glad you finally solved your problem. Could you please tell, how you solved it? Somebody else just got the same error. So your input could also help others. 

Thanks 

Robert