-
Language:
English
-
Language:
English
Red Hat Training
A Red Hat training course is available for Red Hat Satellite
Installation Guide
Red Hat Network Satellite
Edition 1
Abstract
Chapter 1. Introduction
1.1. Red Hat Network
- Scalability — with Red Hat Network, a single system administrator can set up and maintain hundreds or thousands of Red Hat systems more easily, accurately, and quickly than they could maintain a single system without Red Hat Network.
- Standard Protocols — standard protocols are used to maintain security and increase capability. For example, XML-RPC gives Red Hat Network the ability to do much more than merely download files.
- Security — all communication between registered systems and Red Hat Network takes place over secure Internet connections.
- View Errata Alerts — easily view Errata Alerts for all your client systems through one website.
- Scheduled Actions — use the website to schedule actions, including Errata Updates, package installs, and software profile updates.
- Simplification — maintaining Red Hat systems becomes a simple, automated process.
1.2. RHN Satellite Server
- Security — an end-to-end secure connection is maintained from the client systems to the RHN Satellite Server without connecting to the public Internet.
- Efficiency — packages are delivered significantly faster over a local area network.
- Control — clients' System Profiles are stored on the local RHN Satellite Server, not on the central Red Hat Network Servers.
- Customized updates — create a truly automated package delivery system for custom software packages required by client systems, as well as Red Hat packages. Custom channels allow fine-grained control of the delivery of custom packages.
- Access control — system administrators can be restricted to access only those systems within their maintenance responsibilities.
- Bandwidth management — the bandwidth used for transactions between the clients and the RHN Satellite Server is controlled by the organization on the local area network; RHN Satellite Server clients do not have to compete with other clients accessing the central Red Hat Network file servers.
- Scalability — RHN Satellite Server may oversee an entire organization's servers in combination with RHN Proxy Server.
1.3. Terms to Understand
- Channel — A channel is a list of software packages. There are two types of channels: base channels and child channels. A base channel consists of a list of packages based on a specific architecture and Red Hat release. A child channel is a channel associated with a base channel that contains extra packages.
- Organization Administrator — An Organization Administrator is a user role with the highest level of control over an organization's Red Hat Network account. Members of this role can add other users, systems, and system groups to the organization as well as remove them. A Red Hat Network organization must have at least one Organization Administrator.
- certificate authority — A Channel Administrator is a user role with full access to channel management capabilities. Users with this role are capable of creating channels, assigning packages to channels, cloning channels, and deleting channels. This role can be assigned by an Organization Administrator through the Users tab of the RHN website.
- Red Hat Update Agent — The Red Hat Update Agent is the Red Hat Network client application that allows users to retrieve and install new or updated packages for the client system on which the application is run. For Red Hat Enterprise Linux 5 users, use the
yum
command; for Red Hat Enterprise Linux 4 and lower, use theup2date
command. - Traceback — A traceback is a detailed description of "what went wrong" that is useful for troubleshooting the RHN Satellite Server. Tracebacks are automatically generated when a critical error occurs and are mailed to the individual(s) designated in the RHN Satellite Server's configuration file.
1.4. How it Works
- Database — for the Stand-Alone Database, this may be the organization's existing database or, preferably, a separate machine. RHN Satellite Server supports Oracle 9i R2. For the Embedded Database, the database comes bundled with RHN Satellite Server and is installed on the same machine as the Satellite during the installation process.
- RHN Satellite Server — core "business logic" and entry point for Red Hat Update Agent running on client systems. The RHN Satellite Server also includes an Apache HTTP Server (serving XML-RPC requests).
- RHN Satellite Server Web interface — advanced system, system group, user, and channel management interface.
- RPM Repository — package repository for Red Hat RPM packages and custom RPM packages identified by the organization.
- Management Tools:
- Database and file system synchronization tools
- RPM importing tools
- Channel maintenance tools (Web-based)
- Errata management tools (Web-based)
- User management tools (Web-based)
- Client system and system grouping tools (Web-based)
- Red Hat Update Agent on the client systems
Important
Figure 1.1. Using RHN Satellite Server and RHN Proxy Server Together
1.5. Summary of Steps
- After an evaluation, you contact your Red Hat sales representative to purchase RHN Satellite Server.
- Your Red Hat contact sends you an RHN Entitlement Certificate via email.
- Your Red Hat contact creates a Satellite-entitled account on the RHN website and sends you the login information.
- Log into the RHN website (rhn.redhat.com) and download the distribution ISOs for Red Hat Enterprise Linux AS 3 or 4 and RHN Satellite Server 5.0.0. These can be found within the Downloads tab of the respective Channel Details pages. Refer to the RHN Reference Guide for instructions.
- While still logged into the RHN website, download the Channel Content ISOs to be served by your Satellite, also available through the Downloads tab of your Satellite's Channel Details page. These Channel Content ISOs differ from the distribution ISOs previously mentioned in that they contain metadata necessary for parsing and serving packages by Satellite.
- If installing a Stand-Alone Database, prepare your database instance using the formula provided in Chapter 2, Requirements.
- Install Red Hat Enterprise Linux AS and then RHN Satellite Server 5.0.0 on the Satellite machine.
- Create the first user account on the Satellite by opening the Satellite's hostname in a Web browser and clicking Create Account. This will be the Satellite Administrator's (also referred to as the Organization Administrator) account.
- Use the RHN Satellite Synchronization Tool to import the channels and associated packages into the Satellite.
- Register a representative machine for each distribution type, or channel (Red Hat Enterprise Linux AS 2.1, 3, 4), to the Satellite.
- Copy (using SCP) the
rhn_register
andup2date
configuration files from the/etc/sysconfig/rhn/
directory of each machine individually to the/pub/
directory on the Satellite. Therhn-org-trusted-ssl-cert-*.noarch.rpm
will already be there. - Download and install from the Satellite the configuration files and
rhn-org-trusted-ssl-cert-*.noarch.rpm
on the remaining client systems of the same distribution type. Repeat this and the previous step until all distribution types are complete. - Through the Satellite's website, create an Activation Key for each distribution aligned to the appropriate base channel. At this point, system groups and child channels may also be predefined.
- Run the Activation Key from the command line (
rhnreg_ks
) of each client system. Note that this step can be scripted to batch register and reconfigure all remaining client systems in a distribution. - Record all relevant usernames, passwords and other login information and store in multiple secure places.
- Now that the Satellite is populated with standard Red Hat channels and packages and all clients are connected to it, you may begin creating and serving custom channels and packages. Once the custom RPMs are developed, you can import them into the Satellite using RHN Push and add custom channels in which to store them through the Satellite's website. Refer to the RHN Channel Management Guide for details.
1.6. Upgrades
Chapter 2. Requirements
2.1. Software Requirements
- Base operating system — RHN Satellite Server is supported with Red Hat Enterprise Linux AS 3 Update 5 or later, or Red Hat Enterprise Linux AS 4 or later. The operating system can be installed from disc, local ISO image, kickstart, or any of the methods supported by Red Hat, but must provide the
@Base
package group and thentp
package.Note
When Red Hat Enterprise Linux is mentioned, it refers to the x86, 32-bit version. All other variants of Red Hat Enterprise Linux are currently unsupported as a base operating system for the Satellite.
Warning
Permissive
when presented with options for SELinux support. To do this for kickstart installation, include the command selinux --permissive
or wait for the install to complete, edit the /etc/selinux/config
file to read SELINUX=permissive
and reboot the system.
- Satellite installation disc or ISO — this contains the RHN Satellite Server Installation Program. All packages required in order to suport the Program are installed automatically, and require no intervention from the user.
Note
@Base
package group and the ntp
package can lead to package conflicts.
- Channel content — All software packages and data exported for all entitled Red Hat channels. This content may be loaded directly on the Satellite after installation using the RHN Satellite Synchronization Tool or obtained from your Red Hat representative if synchronization is not possible, such as in a disconnected environment.
2.2. Hardware Requirements
Table 2.1. Stand-Alone Database and Embedded Database Satellite Hardware Requirements
Stand-Alone Database | Embedded Database |
---|---|
Required - Pentium IV processor, 2.4GHz, 512K cache or equivalent | Required - Pentium IV processor, 2.4GHz, 512K cache or equivalent |
Recommended - Pentium IV processor, 2.4GHz dual processor, 512K cache or equivalent | Recommended - Pentium IV processor, 2.4GHz dual processor, 512K cache or equivalent |
Required - 2 GB of memory | Required - 2 GB of memory |
Recommended - 4 GB of memory | Strongly recommended - 4 GB of memory |
3 GB storage for base install of Red Hat Enterprise Linux AS | 3 GB storage for base install of Red Hat Enterprise Linux AS |
6 GB storage per channel, in the /var/satellite/ directory by default but configurable at install | 6 GB storage per channel, in the /var/satellite/ directory by default but configurable at install |
Recommended - an external SAN for more reliable backups | Recommended - an external SAN for more reliable backups |
12 GB storage for the database repository, in the /rhnsat partition (local storage only) | |
Strongly recommended - a SCSI drive connected to a level 5 RAID | |
Separate partition (or better, a separate set of physical disks) for storing backups. This can be any directory specifiable at backup time. |
- Two processors
- 2 GB of memory
/etc/sysconfig/rhn/rhnsd
configuration file of the client systems significantly increases the load on those components.
- The Stand-Alone Database must not run on the same server as the RHN Satellite Server.
- The package repository may be any large storage device easily and securely accessed by the other components. The space requirements depend on the number of packages that will be stored. Default Red Hat channels contain approximately 3 GB of packages each, and that size grows with each synchronization; customers must also account for the space requirements of packages in their own private channels. Whatever storage solution the customer chooses, its mount point may be defined during the installation process.
2.3. Database Requirements
- 192 KB per client system
- 64 MB per channel
- The number of public Red Hat packages imported (typical: 5000)
- The number of private packages to be managed (typical: 500)
- The number of systems to be managed (typical: 1000)
- The number of packages installed on the average system (typical: 500)
- ALTER SESSION
- CREATE SEQUENCE
- CREATE SYNONYM
- CREATE TABLE
- CREATE VIEW
- CREATE PROCEDURE
- CREATE TRIGGER
- CREATE TYPE
- CREATE SESSION
- Security Identifier (SID)
- Listener Port
- Username
- Uniform Extent Size
- Auto Segment Space Management
Note
2.4. Additional Requirements
- Full AccessClient systems need full network access to the RHN Satellite Server solution's services and ports.
- Firewall RulesRHN strongly recommends firewalling the RHN Satellite Server solution from the Internet. However, various TCP ports must be opened on the Satellite, depending on your implementation of RHN Satellite Server:
Table 2.2. Ports to open on the Satellite
Port Direction Reason 80 Outbound Satellite uses this port to reach rhn.redhat.com, xmlrpc.rhn.redhat.com and satellite.rhn.redhat.com(unless running in a disconnected mode for Satellite) 80 Inbound WebUI and client requests come in via either http or https 443 Inbound WebUI and client requests come in via either http or https 443 Outbound To reach rhn.redhat.com, xmlrpc.rhn.redhat.com and satellite.rhn.redhat.com(unless running in a disconnected mode for Satellite) 4545 Outbound RHN Satellite Server Monitoring makes connections to rhnmd
running on client systems, if Monitoring is enabled and probes are configured for registered systems.5222 Inbound If you plan to push actions to client systems 5269 Inbound If you push actions to an RHN Proxy Server - Synchronized System TimesThere is great time sensitivity when connecting to a Web server running SSL (Secure Sockets Layer); it is imperative that the time settings on the clients and server be reasonably close together so the SSL certificate does not expire before or during use. For this reason, Red Hat requires the Satellite and all client systems to use Network Time Protocol (NTP). This also applies to the separate database machine in RHN Satellite Server with Stand-Alone Database, which must also be set to the same time zone as the Satellite.
- Fully Qualified Domain Name (FQDN)The system upon which the RHN Satellite Server will be installed must resolve its own FQDN properly. If this is not the case, cookies will not work properly on the website.
Note
It is important that the hostname of a Satellite contains no uppercase letters. A hostname that includes uppercase letters can causejabberd
to fail. - Functioning Domain Name Service (DNS)For the RHN Satellite Server's domain name to be resolved by its clients, it and they must all be linked to a working DNS server in the customer environment.
- An Entitlement CertificateThe customer will receive, via email from the sales representative, a signed Entitlement Certificate explaining the services provided by Red Hat through RHN Satellite Server. This certificate will be required during the installation process.
- A Red Hat Network AccountCustomers who connect to the central Red Hat Network Servers to receive incremental updates must have an external account with Red Hat Network. This account should be set up at the time of purchase with the sales representative.
Warning
Do not subscribe your RHN Satellite Server to any of the following child channels available on RHN Hosted:- Red Hat Developer Suite
- Red Hat Application Server
- Red Hat Extras
Subscribing to these channels and updating your Satellite (such as by runningup2date
) may install newer, incompatible versions of critical software components, causing the Satellite to fail. - Backups of Login InformationIt is imperative that customers keep track of all primary login information. For RHN Satellite Server, this includes usernames and passwords for the Organization Administrator account on rhn.redhat.com, the primary administrator account on the Satellite itself, SSL certificate generation, and database connection (which also requires a SID, or net service name). Red Hat strongly recommends this information be copied onto two separate floppy disks, printed out on paper, and stored in a fireproof safe.
- The entire RHN Satellite Server solution should be protected by a firewall if the Satellite accesses or is accessed via the Internet. An Internet connection is not required for RHN Satellite Servers running in completely disconnected environments. This feature instead uses Channel Content ISOs that can be downloaded to a separate system to synchronize the Satellite with the central Red Hat Network Servers. All other RHN Satellite Servers should be synchronized directly over the Internet.
- All unnecessary ports should be firewalled off. Client systems connect to RHN Satellite Server over ports 80, 443, and 4545 (if Monitoring is enabled). In addition, if you plan to enable the pushing of actions from the Satellite to client systems, as described in Section 8.10, “Enabling Push to Clients”, you must allow inbound connections on port 5222. Finally, if the Satellite will also push to an RHN Proxy Server, you must also allow inbound connections on port 5269.
- No system components should be directly, publicly available. No user other than the system administrators should have shell access to these machines.
- All unnecessary services should be disabled using ntsysv or
chkconfig
. - The
httpd
service should be enabled. - If the Satellite serves Monitoring-entitled systems and you wish to acknowledge via email the alert notifications you receive, you must configure sendmail to properly handle incoming mail as described in Section 4.4, “Sendmail Configuration”.
- The RHN Satellite Server Installation Guide — This guide, which you are now reading, provides the essential steps necessary to get an RHN Satellite Server up and running.
- The RHN Client Configuration Guide — This guide explains how to configure the systems to be served by an RHN Proxy Server or RHN Satellite Server. (This will also likely require referencing The RHN Reference Guide, which contains steps for registering and updating systems.)
- The RHN Channel Management Guide — This guide identifies in great detail the recommended methods for building custom packages, creating custom channels, and managing private Errata.
- The RHN Reference Guide — This guide describes how to create RHN accounts, register and update systems, and use the RHN website to its utmost potential. This guide will probably come in handy throughout the installation and configuration process.
Chapter 3. Example Topologies
- The total number of client systems to be served by the RHN Satellite Server.
- The maximum number of clients expected to connect concurrently to the RHN Satellite Server.
- The number of custom packages and channels to be served by the RHN Satellite Server.
- The number of RHN Satellite Servers being used in the customer environment.
- The number of RHN Proxy Servers being used in the customer environment.
3.1. Single Satellite Topology
Figure 3.1. Single Satellite Topology
3.2. Multiple Satellite Horizontally Tiered Topology
rhn-satellite-exporter
and satellite-sync -m
commands. This feature is discussed in detail in Section 6.1.1, “rhn-satellite-exporter
”.
Figure 3.2. Multiple Satellite Horizontally Tiered Topology
3.3. Satellite-Proxy Vertically Tiered Topology
Figure 3.3. Satellite-Proxy Vertically Tiered Topology
Chapter 4. Installation
4.1. Base Install
- Allocate plenty of space to the partitions storing data. The default location for channel packages is
/var/satellite/
. For RHN Satellite Server with Embedded Database, remember the database RPMs go in the/opt/
partition, while the database itself is built in/rhnsat/
. Refer to Section 2.2, “Hardware Requirements” for precise specifications. - Enable Network Time Protocol (NTP) on the Satellite and separate database, if it exists, and select the appropriate time zone. All client systems should already be running the
ntpd
daemon and be set to the correct time zone. - Due to potential complications, it is strongly advised that the
/home/
partition is locally mounted.
4.2. RHN Satellite Server Installation Program
Important
/home/
partition is locally mounted.
- Log into the machine as root.
- Insert the RHN Satellite Server CD containing the installation files or download the ISO image from the RHN website.
- If you are installing from CD, Red Hat Enterprise Linux may automount the CD. If it does so, it will mount the CD to the
/media/cdrom/
directory.If Red Hat Enterprise Linux does not automount the CD, manually mount it to the/media/cdrom/
directory with the following command:mount /dev/cdrom /media/cdrom
If you are installing from an ISO, mount the file from within the directory containing it using the command:mount -o loop iso_filename /media/cdrom
The remaining instructions assume it is mounted in/media/cdrom/
. - Ensure that the RHN Entitlement Certificate has been copied onto the Satellite's file system. It can be named anything and located in any directory. The installation program will ask you for its location. Also, make sure your account has been granted the necessary entitlements to conduct the installation. For instance, a new Satellite will require both a Management or Provisioning entitlement for Red Hat Enterprise Linux AS and an RHN Satellite Server entitlement.
Warning
Users should note that the RHN Satellite Server Installation Program updates the kernel, as well as all required packages. - From the
/media/cdrom/
directory, enter the following command to start the RHN Satellite Server Installation Program:./install.pl
This script has several options to assist with your installation process. To view these options, enter the following command:./install.pl --help
- The script first runs through a pre-requisite check. These checks make certain that all prerequisites from Chapter 2, Requirements are met before proceeding with the installation.
* Starting the Red Hat Network Satellite installer. * Performing pre-install checks. * Pre-install checks complete. Beginning installation.
- At the prompt, enter the email address to which you would like notifications from the Satellite to be sent. It may be a good idea to choose a general email address rather than the address of an individual, as there can be a large volume of emails.
? Admin email address? sat-admin@example.com
- The Satellite is then registered with your RHN Hosted account, and all required packages are installed and updated.
* RHN Registration * Installing updates. * Installing RHN packages.
- Next, the RHN Satellite Server Installation Program downloads and installs the RHN GPG key, including setting up the
/root/.gnupg/
directory, if required.* Setting up environment and users ** GPG: Initializing GPG and importing RHN key. ** GPG: Creating /root/.gnupg directory
- The next step creates and populates the initial database, if you have opted for the RHN Satellite Server with Embedded Database. If you are installing RHN Satellite Server with Stand-Alone Database, the installer connects with the database. This step can take quite a while. If you would like to monitor the progress of the installation, use
tail
in a separate window to monitor the/var/log/rhn/install_db.log
file.* Setting up database. ** Database: Installing the embedded database (not the schema). ** Database: Shutting down the database first. ** Database: Installing the database: ** Database: This is a long process that is logged in: ** Database: /var/log/rhn/install_db.log *** Progress: ####
- Once database installation is complete, or once the connection to the database is established, the Satellite is configured.
* Setting up environment and users.
- In order to activate the Satellite, you must provide it with the location of your Satellite certificate.
* Activating Satellite. Where is your satellite certificate file? /root/example.cert
- The next step is to create a CA cert for the Satellite. To do so, you must answer a few questions.
- CA cert
- Enter a password for the certificate.
- Organization
- Enter the name of your organization
- Email Address
- Enter an email address to be associated with this certificate, such as the admin email entered in the steps above.
- City
- Enter the city where the Satellite resides.
- Country
- Enter the country where the Satellite resides. The country code must be exactly two letters, or the certificate generation fails.
- Once the CA Cert certificate is generated, the RHN Satellite Server Installation Program performs final configuration and restarts the associated services.
* Final configuration. * Restarting services. Installation complete. Visit https://your-satellite.example.com to create the satellite administrator account.
- Follow the on-screen instructions and visit the FQDN of your Satellite via a web browser. Create the satellite administrator account - also referred to as the Organization Administrator - and click the Create Login button to move to the next screen, the Your RHN screen.
Figure 4.1. Admin Account Creation
- A blue text box appears at the top of the screen indicating that you can now custom-configure the Satellite and its behavior. To do so, click the bold clicking here text at the end.
Figure 4.2. Final Configuration Prompt
- The Satellite Configuration - General Configuration page allows you to alter the most basic Satellite settings, such as the admin email address and whether Monitoring is enabled.
Figure 4.3. General Configuration
- The RHN Satellite Configuration - Monitoring page allows you to configure the monitoring aspects of this Satellite. The local mail exchanger and local main domain are used to mail monitoring notification messages to administration. This is required only if you intend to receive alert notifications from probes. If you do, provide the mail server (exchanger) and domain to be used. Note that sendmail must be configured to handle email redirects of notifications. Refer to Section 4.4, “Sendmail Configuration” for instructions. When finished, click Continue. The RHN Registration page appears.
Figure 4.4. Monitoring
- The RHN Satellite Configuration - Certificate page allows you to upload a new Satellite certificate. To identify the certificate's path, click Browse, navigate to the file, and select it. To input its contents, open your certificate in a text editor, copy all lines, and paste them directly into the large text field at the bottom. Red Hat recommends using the file locator as it is less error prone. Click Validate Certificate to continue. If you receive errors related to DNS, ensure your Satellite is configured correctly. Refer to Section 7.3, “Host Not Found/Could Not Determine FQDN”.
Figure 4.5. Certificate
- The RHN Satellite Configuration - Bootstrap page allows you to generate a bootstrap script for redirecting client systems from the central RHN Servers to the Satellite. This script, to be placed in the
/var/www/html/pub/bootstrap/
directory of the Satellite, significantly reduces the effort involved in reconfiguring all systems, which by default obtain packages from the central RHN Servers. The required fields are pre-populated with values derived from previous installation steps. Ensure this information is accurate.Checkboxes offer options for including built-in security SSL and GNU Privacy Guard (GPG) features, both of which are advised. In addition, you may enable remote command acceptance and remote configuration management of the systems to be bootstrapped here. Both features are useful for completing client configuration. Finally, if you are using an HTTP proxy server, complete the related fields. When finished, click Generate Bootstrap Script. The Installation Complete page appears.Figure 4.6. Bootstrap
- The RHN Satellite Configuration - Restart page contains the final step in configuring the Satellite. Click the Restart button to restart the Satellite in order to incorporate all of the configuration options added on the previous screens. Note that it will take between four and five minutes for the restart to finish.
Figure 4.7. Restart
- Once the Satellite has restarted, the countdown notice disappears. You are now free to begin using your Satellite.
Figure 4.8. Restart Complete
4.2.1. Options to the Satellite Installation Program
Table 4.1. Installation Options
Option | Usage |
---|---|
--help | Print this help message. |
--answer-file=<filename> | Indicates the location of an answer file to be use for answering questions asked during the installation process. |
--non-interactive | For use only with --answer-file . If the --answer-file does not provide a required response, exit instead of prompting the user. |
--re-register | Register the system with RHN, even if it is already registered. |
--disconnected | Install the satellite in disconnected mode. |
--clear-db | Clear any pre-existing database schema before installing. This will destroy any data in the Satellite database and re-create empty Satellite schema. |
--skip-system-version-test | Do not test the Red Hat Enterprise Linux version before installing. |
--skip-selinux-test | Do not check to make sure SELINUX is disabled. RHN Satellite is not currently supported on selinux-enabled systems. |
--skip-fqdn-test | Do not verify that the system has a valid hostname. RHN Satellite requires that the hostname be properly set during installation. Using this option may result in a Satellite server that is not fully functional. |
--skip-db-install | Do not install the embedded database. This option may be useful if you are reinstalling the satellite, and do not want to clear the database. |
--skip-db-diskspace-check | Do not check to make sure there is enough free disk space to install the embedded database. |
--skip-db-population | Do not populate the database schema. |
--skip-gpg-key-import | Do not import Red Hat's GPG key. |
--skip-ssl-cert-generation | Do not generate the SSL certificates for the Satellite. |
4.3. Automated RHN Satellite Server Installation
install/
directory of the CD or ISO, and is titled answers.txt
.
- Follow steps 1 through 5 from Section 4.2, “RHN Satellite Server Installation Program”.
- Copy the example
answers.txt
file to/tmp/answers.txt
cp answers.txt /tmp/answers.txt
- Edit the file and add your organization's desired options.
- Once the answer file is ready, use the
--answer-file
option when starting the installation process from the command line:./install.pl --answer-file=/tmp/answers.txt
The RHN Satellite Server Installation Program then looks for answers in the file. For any option no filled out in the file, the Installer Program prompts the user for the missing information.
4.4. Sendmail Configuration
Important
rogerthat01@{mail domain}
as a valid email address in your corporate environment. Check with your mail systems administrator.
ln -s /opt/notification/scripts/ack_enqueuer.pl /etc/smrsh/.
/etc/aliases
file on the mail server and add the following line:
rogerthat01: | /etc/smrsh/ack_enqueuer.pl
/etc/mail/sendmail.mc
file and change:
"DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')dnl"
"DAEMON_OPTIONS(`Port=smtp, Name=MTA')dnl"
newaliases
sendmail-cf
package:
up2date sendmail-cf
service sendmail restart
4.5. MySQL Installation
mysql-server
package either through the RHN website or up2date
.
mysql-server
package to be installed and run successfully. Once finished, your Satellite may be used to schedule MySQL probes.
Chapter 5. Entitlements
5.1. Receiving the Certificate
<?xml version="1.0" encoding="UTF-8"?> <rhn-cert version="0.1"> <rhn-cert-field name="product">RHN-SATELLITE-001</rhn-cert-field> <rhn-cert-field name="owner">Clay's Precious Satellite</rhn-cert-field> <rhn-cert-field name="issued">2005-01-11 00:00:00</rhn-cert-field> <rhn-cert-field name="expires">2005-03-11 00:00:00</rhn-cert-field> <rhn-cert-field name="slots">30</rhn-cert-field> <rhn-cert-field name="provisioning-slots">30</rhn-cert-field> <rhn-cert-field name="nonlinux-slots">30</rhn-cert-field> <rhn-cert-field name="channel-families" quantity="10" family="rhel-cluster"/> <rhn-cert-field name="channel-families" quantity="30" family="rhel-ws-extras"/> <rhn-cert-field name="channel-families" quantity="10" family="rhel-gfs"/> <rhn-cert-field name="channel-families" quantity="10" family="rhel-es-extras"/> <rhn-cert-field name="channel-families" quantity="40" family="rhel-as"/> <rhn-cert-field name="channel-families" quantity="30" family="rhn-tools"/> <rhn-cert-field name="satellite-version">3.6</rhn-cert-field> <rhn-cert-field name="generation">2</rhn-cert-field> <rhn-cert-signature> -----BEGIN PGP SIGNATURE----- Version: Crypt::OpenPGP 1.03 iQBGBAARAwAGBQJCAG7yAAoJEJ5yna8GlHkysOkAn07qmlUrkGKs7/5yb8H/nboG mhHkAJ9wdmqOeKfcBa3IUDL53oNMEBP/dg== =0Kv7 -----END PGP SIGNATURE----- </rhn-cert-signature> </rhn-cert>
Note
5.2. Uploading the RHN Entitlement Certificate
- Log into https://rhn.redhat.com with your organization's Satellite-entitled account.
- Click Systems in the top navigation bar and then the name of the RHN Satellite Server. You may also find the Satellite through the Satellite line item within the Channels category.
- In the System Details page, click the Satellite subtab and examine the existing certificate. Ensure you have a backup of this file by copying and pasting its contents into a text editor.
- Click Deactivate Satellite License at the bottom of the page. Then click Confirm Deactivation. You will receive a message describing the deactivation at the top of the page.
- You may then browse to the location of your new RHN Entitlement Certificate or paste its contents into the text field provided. When done, click Update Certificate.
5.3. Managing the RHN Certificate with RHN Satellite Activate
rhn-satellite-activate
). This is included with the Satellite installation as part of the rhns-satellite-tools
package.
5.3.1. Command Line Entitlement Options
rhn-satellite-activate
tool offers a handful of command line options for activating a Satellite using its RHN Entitlement Certificate:
Table 5.1. RHN Entitlement Certificate Options
Option | Description |
---|---|
-h , --help | Display the help screen with a list of options. |
--sanity-only | Confirm certificate sanity. Does not activate the Satellite locally or remotely. |
--disconnected | Activates locally but not on remote RHN Servers. |
--rhn-cert=/PATH/TO/CERT | Uploads new certificate and activates the Satellite based upon the other options passed (if any). |
--systemid=/PATH/TO/SYSTEMID | For testing only - Provides an alternative system ID by path and file. The system default is used if not specified. |
--no-ssl | For testing only - Disable SSL. |
rhn-satellite-activate
command. Refer to Section 5.3.2, “Activating the Satellite”.
5.3.2. Activating the Satellite
- Validate the RHN Entitlement Certificate's sanity (or usefulness).
- Activate the Satellite locally by inserting the RHN Entitlement Certificate into the local database.
- Activate the Satellite remotely by inserting the RHN Entitlement Certificate into the central RHN (remote) database. This is typically accomplished during local activation but may require a second step if you chose the
--disconnected
option.
rhn-satellite-activate --sanity-only --rhn-cert=/path/to/demo.cert
rhn-satellite-activate --disconnected --rhn-cert=/path/to/demo.cert
rhn-satellite-activate --rhn-cert=/path/to/demo.cert
5.4. Satellite Entitlement Certificate Expiration
- The Satellite remains active.
- Each user that logs into the Satellite sees a banner on their Your RHN page that explains that the Satellite certificate has expired.
- Once a day, for all seven days, the Satellite Administrator's email receives notification that the certificate has expired.
Chapter 6. Importing and Synchronizing
rhns-sat-tools
package.
6.1. Exporting with RHN Satellite Exporter
rhn-satellite-exporter
) tool exports Satellite content in an XML format that can then be imported into another identical Satellite. The content is exported into a directory specified by the user with the -d option. Once that directory has been transported to another Satellite, the RHN Satellite Synchronization Tool may be used to import the contents, synchronizing two Satellites.
6.1.1. rhn-satellite-exporter
- Channel Families
- Architectures
- Channel metadata
- Blacklists
- RPMs
- RPM metadata
- Errata
- Kickstarts
rhn-satellite-exporter
to export data is dependent on the number and size of the channels being exported. Using the --no-packages
, --no-kickstarts
, --no-errata
, and --no-rpms
options reduces the amount of time required for rhn-satellite-exporter
to run, but also prevents potentially useful information from being exported. For that reason, these options should only be used when you are certain that you will not need the content that they exclude. Additionally, you must use the matching options for satellite-sync
when importing the data. For example, if you use --no-kickstarts
with rhn-satellite-exporter
you must specify the --no-kickstarts
option when importing the data.
rhn-satellite-exporter
command.
Table 6.1. RHN Satellite Exporter Options
Option | Description |
---|---|
-d, --dir= | Place the exported information into this directory. |
-cCHANNEL_LABEL , --channel=CHANNEL_LABEL | Process data for this specific channel (specified by label) only. NOTE: the channel's *label* is NOT the same as the channel's *name*. |
--list-channels | List all available channels and exit. |
--list-steps | List all of the steps that rhn-satellite-exporter takes while exporting data. These can be used as values for --step. |
-p --print-configuration | Print the configuration and exit. |
--print-report | Print a report to the terminal when the export is complete. |
--no-rpms | Do not retrieve actual RPMs. |
--no-packages | Do not export RPM metadata. |
--no-errata | Do not process Errata information. |
--no-kickstarts | Do not process kickstart data (provisioning only). |
--debug-level=LEVEL_NUMBER | Override the amount of messaging sent to log files and generated on the screen set in /etc/rhn/rhn.conf , 0-6 (2 is default). |
--email | Email a report of what was exported and what errors may have occurred. |
--traceback-mail | Alternative email address for --email. |
--db=DB | Include alternate database connect string: username/password@SID. |
6.1.2. Exporting
- The RHN Satellite Server installation must have been performed successfully.
- There must be sufficient disk space in the directory specified in the
--dir
option to contain the exported contents.
6.1.2.1. Running the Export
rhn-satellite-exporter
”. Finally, execute the command as root. The following is an example command:
rhn-satellite-exporter --dir=/var/rhn-sat-export --no-errata
rsync
or scp -r
.
6.2. Importing with RHN Satellite Synchronization Tool
Important
6.2.1. satellite-sync
satellite-sync
channel-families
— Import/synchronize channel family (architecture) data.channels
— Import/synchronize channel data.rpms
— Import/synchronize RPMs.packages
— Import/synchronize full package data for those RPMs retrieved successfully.errata
— Import/synchronize Errata information.
rpms
step will automatically ensure the channels
and channel-families
steps take place first. To initiate an individual step, use the --step
option, like so:
satellite-sync --step=rpms
--step
, the RHN Satellite Synchronization Tool offers many other command line options. To use them, insert the option and the appropriate value after the satellite-sync
command when launching import/synchronization.
Table 6.2. Satellite Import/Sync Options
Option | Description |
---|---|
-h , --help | Display this list of options and exit. |
-d= , --db=DB | Include alternate database connect string: username/password@SID. |
-m= , --mount-point=MOUNT_POINT | Import/sync from local media mounted to the Satellite. To be used in closed environments (such as those created during disconnected installs). |
--list-channels | List all available channels and exit. |
-c= , --channel=CHANNEL_LABEL | Process data for this channel only. Multiple channels can be included by repeating the option. If no channels are specified, all channels on the Satellite will be freshened. |
-p, --print-configuration | Print the current configuration and exit. |
--no-ssl | Not Advisable - Turn off SSL. |
--step=STEP_NAME | Perform the sync process only to the step specified. Typically used in testing. |
--no-rpms | Do not retrieve actual RPMs. |
--no-packages | Do not process full package data. |
--no-errata | Do not process Errata information. |
--no-kickstarts | Do not process kickstart data (provisioning only). |
--force-all-packages | Forcibly process all package data without conducting a diff. |
--debug-level=LEVEL_NUMBER | Override the amount of messaging sent to log files and generated on the screen set in /etc/rhn/rhn.conf , 0-6 (2 is default). |
--email | Email a report of what was imported/synchronized to the designated recipient of traceback email. |
--traceback-mail=TRACEBACK_MAIL | Direct sync output (from --email ) to this email address. |
-s= , --server=SERVER | Include the hostname of an alternative server to connect to for synchronization. |
--http-proxy=HTTP_PROXY | Add an alternative HTTP proxy server in the form hostname:port. |
--http-proxy-username=PROXY_USERNAME | Include the username for the alternative HTTP proxy server. |
--http-proxy-password=PROXY_PASSWORD | Include the password for the alternative HTTP proxy server. |
--ca-cert=CA_CERT | Use an alternative SSL CA certificate by including the full path and filename. |
--systemid=SYSTEM_ID | For debugging only - Include path to alternative digital system ID. |
--systemid=SYSTEM_ID | For debugging only - Include path to alternative digital system ID. |
--batch-size=BATCH_SIZE | For debugging only - Set maximum batch size in percent for XML/database-import processing. Open man satellite-sync for more information. |
satellite-sync
synchronizes all channels that already exist in the Satellite's database. By default, the --step
(all steps) option is enabled.
--channel
option requires the channel label, not its name. For instance, use "rhel-i386-as-3" not "Red Hat Enterprise Linux 3 i386." Use the --list-channels
option to obtain a list of all channels by label. All displayed channels are available for importing and synchronizing.
6.2.2. Preparing for Import from Local Media
- The RHN Satellite Server installation must have been performed successfully.
- The Red Hat Network Channel Content ISOs or RHN Satellite Exporter data must be available, or the Satellite must have access to the Internet and the RHN website.
6.2.2.1. Preparing Channel Content ISOs
- Log into the machine as root.
- Insert the first Channel Content ISO that has been burned to disc.
- Create a directory in
/mnt/
to store the file(s) with the command:mkdir /mnt/import/
- Mount the ISO file from within the directory containing it using the command:
mount iso_filename /mnt/import -o loop
- Create a target directory for the files, such as:
mkdir /var/rhn-sat-import/
- This sample command assumes the administrator wants to copy the contents of the ISO (mounted in
/mnt/import/
) into/var/rhn-sat-import/
:cp -ruv /mnt/import/* /var/rhn-sat-import/
- Then unmount
/mnt/import
in preparation for the next CD or ISO:umount /mnt/import
- Repeat these steps for each Channel Content ISO of every channel to be imported.
6.2.2.2. Preparing RHN Satellite Exporter Data
- Log into the machine as root.
- Create a target directory for the files, such as:
mkdir /var/rhn-sat-import/
- Make the export data available on the local machine in the directory created in the previous step. This can be done by copying the data directly, or by mounting the data from another machine using NFS. It is perhaps easiest to copy the data into the new directory with a command such as the following:
scp -r root@storage.example.com:/var/sat-backup/* /var/rhn-sat-import
6.2.3. Running the Import
rhns-satellite-tools
package provides the satellite-sync
program for managing all package, channel, and errata imports and synchronizations.
/var/rhn-sat-import
.
satellite-sync --list-channels --mount-point /var/rhn-sat-import
satellite-sync -c rhel-i386-as-3 --mount-point /var/rhn-sat-import
Note
-c
flag, like so:
satellite-sync -c channel-label-1 \ -c channel-label-2 \ --mount-point /var/rhn-sat-import
- Populating the tables describing common features for channels (channel families). This can also be accomplished individually by passing the
--step=channel-families
option tosatellite-sync
. - Creating a particular channel in the database and importing the metadata describing the channel. Individually, use the
--step=channels
option. - Moving the RPM packages from the temporary repository into their final location. Individually, use the
--step=rpms
option. - Parsing the header metadata for each package in the channel, uploading the package data, and associating it with the channel. Individually, use the
--step=packages
option. - Identifying Errata associated with the packages and including them in the repository. Individually, use the
--step=errata
option.
cd /var/rhn-sat-import/; ls -alR | grep rpm
. If all RPMs have been installed and moved to their permanent locations, then this count will be zero, and the administrator may safely remove the temporary repository (in this case, /var/rhn-sat-import/
).
6.3. Synchronizing
- Connects over SSL to central RHN Servers, authenticates itself as an RHN Satellite Server, and triggers an export of RHN data — unless a local mount point for RHN-exported data is specified, in which case no connection is necessary. Refer to Section 6.3.2, “Synchronizing Errata and Packages via Local Media” for an explanation.
- Examines the export and identifies differences between the RHN Satellite Server data set and the exported RHN data set. For a particular channel, the following information is analyzed:
- Channel metadata
- Metadata of all packages in that channel
- Metadata for all Errata that affect that channel
Note
All analysis is performed on the RHN Satellite Server; the central RHN Servers deliver only an export of its channel information and remain ignorant of any details regarding the RHN Satellite Server. - After the analysis of the export data, any differences are imported into the RHN Satellite Server database. Please note that importing new packages may take variable lengths of time. For a large update, an import can take many hours.
satellite-sync
command can be used in two modes: via RHN and via local media.
6.3.1. Synchronizing Errata and Packages Directly via RHN
satellite-sync -c rhel-i386-as-3
6.3.2. Synchronizing Errata and Packages via Local Media
cp -rv /mnt/cdrom/* /var/rhn-sat-sync/
satellite-sync -c rhel-i386-as-3 --mount-point /var/rhn-sat-sync
/var/rhn-sat-sync
to perform the necessary comparisons and imports. See Section 6.2.3, “Running the Import” for precise steps.
Chapter 7. Troubleshooting
7.1. Log Files
Table 7.1. Log Files
Component/Task | Log File Location |
---|---|
Apache Web server | /var/log/httpd/ directory |
RHN Satellite Server | /var/log/rhn/ directory |
RHN Satellite Server Installation Program | /var/log/rhn_satellite_install.log |
Database installation - Embedded Database | /var/log/rhn/rhn-database-installation.log |
Database population | /var/log/rhn/populate_db.log |
RHN Satellite Synchronization Tool | /var/log/rhn/rhn_server_satellite.log |
Monitoring infrastructure | /home/nocpulse/var/ directory |
Monitoring notifications | /opt/notification/var/ directory |
RHN DB Control - Embedded Database | /var/log/rhn/rhn_database.log |
RHN Task Engine (taskomatic) | /var/log/messages |
Red Hat Update Agent | /var/log/up2date |
XML-RPC transactions | /var/log/rhn/rhn_server_xmlrpc.log |
7.2. General Problems
tail -f
command for all log files and then run up2date --list
. You should then examine all new log entries for potential clues.
df -h
service rhn-satellite status
service httpd status
/etc/hosts
file may be incorrect. Refer to Section 7.3, “Host Not Found/Could Not Determine FQDN” for a description of this problem and possible solutions.
service taskomatic status
service rhn-database status
rhn-schema-version
rhn-charsets
traceback_mail
in /etc/rhn/rhn.conf
.
web.default_mail_from
option and appropriate value in /etc/rhn/rhn.conf
.
rm -rf temporary-directory
/var/rhn-sat-import/
.
up2date
or the push capability of the RHN Satellite Server ceases to function, it is possible that old log files may be at fault. Stop the jabberd daemon before removing these files. To do so, issue the following commands as root:
service jabberd stop cd /var/lib/jabberd rm -f _db* service jabberd start
7.3. Host Not Found/Could Not Determine FQDN
/etc/hosts
file. You may confirm this by examining /etc/nsswitch.conf
, which defines the methods and the order by which domain names are resolved. Usually, the /etc/hosts
file is checked first, followed by Network Information Service (NIS) if used, followed by DNS. One of these has to succeed for the Apache Web server to start and the RHN client applications to work.
/etc/hosts
file. It may look like this:
127.0.0.1 this_machine.example.com this_machine localhost.localdomain \ localhost
127.0.0.1 localhost.localdomain.com localhost
127.0.0.1 localhost.localdomain.com localhost
123.45.67.8 this_machine.example.com this_machine
7.4. Connection Errors
date
openssl x509 -dates -noout -in /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT
openssl x509 -dates -noout -in /etc/httpd/conf/ssl.crt/server.crt
- Attempt to connect to the RHN Satellite Server's database at the command line using the correct connection string as found in
/etc/rhn/rhn.conf
:sqlplus username/password@sid
- Ensure the RHN Satellite Server is using Network Time Protocol (NTP) and set to the appropriate time zone. This also applies to all client systems and the separate database machine in RHN Satellite Server with Stand-Alone Database.
- Confirm the correct package:
7
rhn-org-httpd-ssl-key-pair-MACHINE_NAME-VER-REL.noarch.rpm
is installed on the RHN Satellite Server and the correspondingrhn-org-trusted-ssl-cert-*.noarch.rpm
or raw CA SSL public (client) certificate is installed on all client systems. - Verify the client systems are configured to use the appropriate certificate.
- If also using one or more RHN Proxy Servers, ensure each Proxy's SSL certificates are prepared correctly. The Proxy should have both its own server SSL key-pair and CA SSL public (client) certificate installed, since it will serve in both capacities. Refer to the SSL Certificates chapter of the RHN Client Configuration Guide for specific instructions.
- Make sure client systems are not using firewalls of their own, blocking required ports as identified in Section 2.4, “Additional Requirements”.
7.5. Updated Software Components
- Red Hat Developer Suite
- Red Hat Application Server
- Red Hat Extras
up2date
), may install newer, incompatible versions of critical software components, causing the Satellite to fail.
7.6. Satellite Debugging by Red Hat
satellite-debug
. To use this tool, issue the command as root. You will see the pieces of information collected and the single tarball created, like so:
[root@miab root]# satellite-debug Collecting and packaging relevant diagnostic information. Warning: this may take some time... * copying configuration information * copying logs * querying RPM database (versioning of RHN Satellite, etc.) * querying schema version and database character sets * get diskspace available * timestamping * creating tarball (may take some time): /tmp/satellite-debug.tar.bz2 * removing temporary debug tree Debug dump created, stored in /tmp/satellite-debug.tar.bz2 Deliver the generated tarball to your RHN contact or support channel.
/tmp/
directory to your Red Hat representative for immediate diagnosis.
Chapter 8. Maintenance
8.1. Managing the Satellite Service
rhn-satellite
. This helper service accepts all of the typical commands:
service rhn-satellite start service rhn-satellite stop service rhn-satellite restart service rhn-satellite status
rhn-satellite
service to shut down and bring up the entire RHN Satellite Server and retrieve status messages from all of its services at once.
8.2. Updating the Satellite
up2date -u
on the RHN Satellite Server or use the website at https://rhn.redhat.com to apply the updates.
Important
up2date -uf
), Apache may fail. To avoid this, make sure you restart the httpd service after upgrading it.
Warning
8.3. Backing Up the Satellite
/rhnsat/
- Embedded Database only (never to be backed up while the database is running - refer to Section 8.4.2, “Backing up the Database”)/etc/sysconfig/rhn/
/etc/rhn/
/etc/sudoers
/etc/tnsnames.ora
/var/www/html/pub/
/var/satellite/redhat/1
- custom RPMs/etc/pxtdb.conf
- pertains only to RHN Satellite Server 1.1.x./root/.gnupg/
/root/ssl-build/
/var/satellite/
, as well. In case of failure, this will save lengthy download time. Since /var/satellite/
(specifically /var/satellite/redhat/NULL/
) is primarily a duplicate of Red Hat's RPM repository, it can be regenerated with satellite-sync
. Red Hat recommends the entire /var/satellite/
tree be backed up. In the case of disconnected satellites, /var/satellite/
must be backed up.
satellite-sync
tool. Finally, you would have to reinstall the /root/ssl-build/\ rhn-org-httpd-ssl-key-pair-MACHINE_NAME-VER-REL.noarch.rpm
.
8.4. Using RHN DB Control
su - oracle
db-control option
8.4.1. DB Control Options
db-control
command.
Table 8.1. RHN DB Control Options
Option | Description |
---|---|
help | Lists these db-control options with additional details. |
backup DIRNAME | Backs up the database to the directory specified. |
examine DIRNAME | Examines the contents of a backup directory. Returns the timestamp of backup creation and reports on its contents. |
extend | Increase the RHN Oracle tablespace |
report | Reports on current usage of database space. |
restore DIRNAME | Restores the database from backup kept in DIRNAME. Database must be stopped for this command to run successfully. |
start | Starts the database instance. This can also be accomplished by issuing the service rhn-database start command as root. |
status | Shows the current status of the database, either "running" or "offline". |
stop | Stops the database instance. This can also be accomplished by issuing the service rhn-database stop command as root. |
tablesizes | Show space report for each table |
verify DIRNAME | Verifies the contents of the backup kept in DIRNAME. This command checks the md5sums of each of the files kept in the backup. |
8.4.2. Backing up the Database
service rhn-satellite stop
db-control backup DIRNAME
service rhn-satellite start
8.4.3. Verifying the Backup
db-control examine DIRNAME
db-control verify DIRNAME
8.4.4. Restoring the Database
service rhn-satellite stop
db-control restore DIRNAME
service rhn-satellite start
8.5. Cloning the Satellite with Embedded DB
- Install RHN Satellite Server with Embedded Database (and a base install of Red Hat Enterprise Linux AS) on a separate machine, skipping the SSL Certificate generation step.
- Back up the primary Satellite's database daily using the commands described in Section 8.4.2, “Backing up the Database”. If this is done, only changes made the day of the failure will be lost.
- Establish a mechanism to copy the backup to the secondary Satellite and keep these repositories synchronized using a file transfer program such as rsync. If you're using a SAN, copying isn't necessary.
- Use RHN DB Control's
restore
option to import the duplicate data. - If the primary Satellite fails, transfer the SSL certificates from it to the secondary. Refer to the Deploying the CA SSL Public Certificate to Clients section of the RHN Client Configuration Guide for precise instructions.
- Change DNS to point to the new machine or configure your load balancer appropriately.
8.6. Establishing Redundant Satellites with Stand-Alone DB
- Prepare the Stand-Alone Database for failover using Oracle's recommendations for building a fault-tolerant database. Consult your database administrator.
- Install RHN Satellite Server with Stand-Alone Database (and a base install of Red Hat Enterprise Linux AS) on a separate machine, skipping the database configuration, database schema, SSL certificate, and bootstrap script generation steps. Include the same RHN account and database connection information provided during the initial Satellite install and register the new Satellite.If your original SSL certificate does not take your high-availability solution into account, you may create a new one with a more appropriate Common Name value now. In this case, you may also generate a new bootstrap script that captures this new value.
- After installation, copy the following files from the primary Satellite to the secondary Satellite:
/etc/rhn/rhn.conf
/etc/tnsnames.ora
/var/www/rhns/server/secret/rhnSecret.py
- Copy and install the server-side SSL certificate RPMs from the primary Satellite to the secondary. Refer to the Sharing Certificates section of the RHN Client Configuration Guide for precise instructions. Remember, the Common Name value must represent the combined Satellite solution, not a single machine's hostname.If you generated a new SSL certificate during Satellite installation that included a new Common Name value, copy the SSL certificate RPMs from the secondary to the primary Satellite and redistribute the client-side certificate. If you also created another bootstrap script, you may use this to install the certificate on client systems.
- If you did not create a new bootstrap script, copy the contents of
/var/www/html/pub/bootstrap/
from the primary Satellite to the secondary. If you did generate a new one, copy that directory's contents to the primary Satellite. - Turn off the RHN Task Engine on the secondary Satellite with the following command:
/sbin/service taskomatic stop
You may use custom scripting or other means to establish automatic start-up/failover of the RHN Task Engine on the secondary Satellite. Regardless, it will need to be started upon failover. - Share channel package data (by default located in
/var/satellite
) between the Satellites over some type of networked storage device. This eliminates data replication and ensures a consistent store of data for each Satellite. - Make the various Satellites available on your network via Common Name and a method suiting your infrastructure. Options include round-robin DNS, a network load balancer, and a reverse-proxy setup.
8.7. Conducting Satellite-Specific Tasks
8.7.1. Using the Tools menu
Figure 8.1. Internal Tools
8.7.1.1. Maintaining the RHN Task Engine
taskomatic
. As root, run the command:
/sbin/service taskomatic restart
start
, stop
, and status
.
8.7.2. Deleting Users
Figure 8.2. User Deletion
Note
Figure 8.3. User Delete Confirmation
8.8. Automating Synchronization
crontab -e
EDITOR
variable, like so: export EDITOR=gedit
.
0 1 * * * perl -le 'sleep rand 9000' && satellite-sync --email >/dev/null \ 2>/dev/null
stdout
and stderr
from cron
to prevent duplicating the more easily read message from satellite-sync
. Options other than --email
can also be included. Refer to Table 6.2, “Satellite Import/Sync Options” for the full list of options. Once you exit from the editor, the modified crontab is installed immediately.
8.9. Implementing PAM Authentication
Note
/etc/pam.d/rhn-satellite
) and have the Satellite use it by adding the following line to /etc/rhn/rhn.conf
:
pam_auth_service = rhn-satellite
rhn-satellite
.
/etc/pam.d/rhn-satellite
:
#%PAM-1.0 auth required pam_env.so auth sufficient pam_krb5.so no_user_check auth required pam_deny.so account required pam_krb5.so no_user_check
8.10. Enabling Push to Clients
Important
osa-dispatcher
package, which can be found in the RHN Satellite Server software channel for the Satellite within the central RHN website. Once installed, start the service on the Satellite as root using the command:
service osa-dispatcher start
osad
package on all client systems to receive pushed actions. The package can be found within the RHN Tools child channel for the systems on the RHN Satellite Server. Once installed, start the service on the client systems as root using the command:
service osad start
osa-dispatcher
and osad
accept stop
, restart
, and status
commands, as well.
Appendix A. Sample RHN Satellite Server Configuration File
/etc/rhn/rhn.conf
configuration file for the RHN Satellite Server provides a means for you to establish key settings. Be warned, however, that errors inserted into this file may cause Satellite failures. So make configuration changes with caution.
#/etc/rhn/rhn.conf example for an RHN Satellite #---------------------------------------------- # Destination of all tracebacks, such as crash information, etc. traceback_mail = test@pobox.com, test@redhat.com # Location of RPMs (Red Hat and custom) served by the RHN Satellite mount_point = /var/satellite # Corporate gateway (hostname:PORT): server.satellite.http_proxy = corporate_gateway.example.com:8080 server.satellite.http_proxy_username = server.satellite.http_proxy_password = # Database connection information username/password@SID default_db = test01/test01@test01 ### DON'T TOUCH ANY OF THE FOLLOWING ### web.satellite = 1 web.session_swap_secret_1 = ea6c79f71cfcf307d567fed583c393b9 web.session_swap_secret_2 = 01dee83a7b7f27157f5335744eb02327 web.session_swap_secret_3 = 4e89e7697ce663149ca9e498cbc08b4f web.session_swap_secret_4 = a0fed2d77a950fc9a800b450a45e89d2 web.session_secret_1 = 24bc562e04c9b93f5be94f793738e104 web.session_secret_2 = 7667a7c2db311b1ea04271ecc1b82314 web.session_secret_3 = 442e7dc4f06f63eba9a0408d499c6a8d web.session_secret_4 = 587a0db47856f685d989095629a9bd6f encrypted_passwords = 1 web.param_cleansers = RHN::Cleansers->cleanse web.base_acls = RHN::Access web.default_taskmaster_tasks = RHN::Task::SessionCleanup, RHN::Task::ErrataQueue, RHN::Task::ErrataEngine, RHN::Task::DailySummary, RHN::Task::SummaryPopulation, RHN::Task::RHNProc, RHN::Task::PackageCleanup web.rhn_gpg_backend_module = RHN::GPG::OpenPGP web.restrict_mail_domains =
Index
Symbols
- /etc/nsswitch.conf , Host Not Found/Could Not Determine FQDN
- /etc/rhn/rhn.conf , General Problems
A
- advantages, RHN Satellite Server
- Apache, Updating the Satellite
- Apache HTTP, How it Works
- automating Satellite synchronization, Automating Synchronization
B
- backing up the RHN Satellite Server, Backing Up the Satellite
- block sizes, Database Requirements
C
- channel
- definition, Terms to Understand
- channel content
- import process, Preparing Channel Content ISOs
- channel content ISOs
- preparing, Preparing Channel Content ISOs
- channel package
- default location
- /var/satellite/ , Base Install
- chkconfig , Additional Requirements
- cloning satellite, Cloning the Satellite with Embedded DB
- Configuration Administrator
- definition, Terms to Understand
- connection errors, Connection Errors
D
- database requirements
- character set, Database Requirements
- Oracle access level, Database Requirements
- database RPMs
- default location
- /opt/ , Base Install
- db-control
- options, DB Control Options
- db-control use, Using RHN DB Control
- disable services
- ntsysv
- chkconfig , Additional Requirements
E
- embedded database
- default location
- /rhnsat/ , Base Install
- enabling push to clients, Enabling Push to Clients
- entitlement certificate, Additional Requirements, RHN Satellite Server Installation Program
- uploading, Uploading the RHN Entitlement Certificate
F
- firewall rules
- requirements, Additional Requirements
G
- general problems, General Problems
- GPG keys, RHN Satellite Server Installation Program
H
- host not found error
- could not determine FQDN, Host Not Found/Could Not Determine FQDN
- how it works, How it Works
- httpd , Additional Requirements
I
- import
- channel content
- process, Preparing Channel Content ISOs
- importing
- satellite data, Importing and Synchronizing
- importing data
- placing Errata in repository, Running the Import
- populating the channel, Running the Import
- running the import, Running the Import
- installation
- base, Base Install
- MySQL, MySQL Installation
- of RHN Satellite Server, RHN Satellite Server Installation Program
- sendmail, Sendmail Configuration
- Installation
- automated, Automated RHN Satellite Server Installation
- installation task list, Summary of Steps
M
- maintenance, Maintenance
- mysql-server , MySQL Installation
N
- Network Time Protocol, Additional Requirements
- ntp, Additional Requirements
- ntsysv , Additional Requirements
O
- operating system
- supported, Software Requirements
- Oracle 9i R2, How it Works
- Organization Administrator
- definition, Terms to Understand
- osa-dispatcher , Enabling Push to Clients
- osad , Enabling Push to Clients
P
- PAM authentication
- implementation, Implementing PAM Authentication
- port 443, Additional Requirements
- port 4545, Additional Requirements
- port 5222, Additional Requirements
- port 5269, Additional Requirements
- port 80, Additional Requirements
R
- Red Hat Network
- introduction, Red Hat Network
- Red Hat Update Agent
- definition, Terms to Understand
- redundant satellite, Establishing Redundant Satellites with Stand-Alone DB
- requirements, Requirements
- additional, Additional Requirements
- database, Database Requirements
- DNS, Additional Requirements
- entitlement certificate, Additional Requirements
- firewall rules, Additional Requirements
- FQDN, Additional Requirements
- hardware, Hardware Requirements
- jabberd, Additional Requirements
- ntp, Additional Requirements
- software, Software Requirements
- TCP Ports, Additional Requirements
- RHN
- components, How it Works
- RHN DB Control
- backup, Backing up the Database
- options, DB Control Options
- restore, Restoring the Database
- verify, Verifying the Backup
- RHN Entitlement Certificate
- options, Command Line Entitlement Options
- RHN Entitlement Certificates, Entitlements
- receiving, Receiving the Certificate
- RHN Satellite Activate , Managing the RHN Certificate with RHN Satellite Activate
- RHN Satellite Exporter, Exporting with RHN Satellite Exporter
- RHN Satellite Server entitlement, RHN Satellite Server Installation Program
- RHN Satellite Synchronization Tool , Importing with RHN Satellite Synchronization Tool
- options, satellite-sync
- RHN Task Engine, Maintaining the RHN Task Engine, Accessing the String Manager
- rhn-satellite
- service, Managing the Satellite Service
- rhn-satellite-activate , Managing the RHN Certificate with RHN Satellite Activate
- activating, Activating the Satellite
- options, Command Line Entitlement Options
- rhn-satellite-exporter, rhn-satellite-exporter
- export, Exporting
- options, rhn-satellite-exporter
- rhn.conf
- sample file, Sample RHN Satellite Server Configuration File
- rhns-satellite-tools , Managing the RHN Certificate with RHN Satellite Activate, Running the Import
- rogerthat01@{mail domain} , Sendmail Configuration
S
- Satellite Installation Program
- Satellite Ports, Additional Requirements
- satellite redundancy, Establishing Redundant Satellites with Stand-Alone DB
- satellite-debug , Satellite Debugging by Red Hat
- satellite-sync , Running the Import, Synchronizing Errata and Packages Directly via RHN
- --step=channel-families , Running the Import
- --step=channels , Running the Import
- --step=rpms , Running the Import
- cron job, Automating Synchronization
- sendmail , Additional Requirements
- summary of steps, Summary of Steps
- synchronizing
- keeping channel data in sync, Synchronizing
- satellite data, Importing and Synchronizing
T
- terms to understand, Terms to Understand
- tool use, Conducting Satellite-Specific Tasks
- topologies, Example Topologies
- multiple satellites horizontally tiered, Multiple Satellite Horizontally Tiered Topology
- satellite and proxies vertically tiered, Satellite-Proxy Vertically Tiered Topology
- single satellite, Single Satellite Topology
- traceback, Terms to Understand
- definition, Terms to Understand
- troubleshooting, Troubleshooting
- /etc/hosts , General Problems
- Embedded Database, General Problems
- full disk space, General Problems
- SSL_CONNECT errors, Connection Errors
- traceback email address, General Problems
U
- updating the RHN Satellite Server, Updating the Satellite