What TCP ports are required to be open on a Red Hat Satellite, Proxy and/or Client system?

Solution Verified - Updated -

Environment

  • Red Hat Satellite 5
  • Red Hat Satellite Proxy 5
  • Red Hat Enterprise Linux

Issue

  • What TCP and/or UDP ports are required to be open on an Red Hat Satellite, Proxy and/or Client system?

Resolution

(note: except otherwise indicated TCP traffic is implied.)

For Red Hat Satellite 5:

Unless the Satellite server is in disconnected mode, it needs to initiate outbound connections on ports 80 and 443 to the Red Hat Network (RHN) Classic service ( rhn.redhat.com, xmlrpc.rhn.redhat.com, and satellite.rhn.redhat.com ). Access to these hosts and ports should not be restricted to ensure correct functioning of the satellite system. If required, an HTTP(S) proxy may be used, by passing the "--http-proxy" option to the "satellite-sync" command.

Similarly, the Satellite server needs to allow inbound connections on ports 80 and 443 from client systems and any Proxy servers connected to the Satellite, as well as any system that needs to access the Satellite Web UI. WebUI and client requests come in via either http or https.

Port 67 needs to allow inbound TCP/UDP connections to configure the Satellite as a DHCP server for systems requesting IP addresses.

Port 69 needs to allow inbound TCP/UDP connections to configure the Satellite as a PXE server and allow installation and re-installation of PXE-boot enabled systems.

If using Satellite version 5.6 or above with External or Managed PostgreSQL Database, the Satellite server needs to allow both inbound and outbound connections on port 5432 to communicate with the Postgres database server.

If using the Monitoring functionality, the Satellite needs outbound connections to individual monitoring-enabled client systems on port 4545. Satellite Monitoring makes connections to rhnmd running on client systems on this port if Monitoring is enabled and probes are configured for registered systems.

If using the Push functionality, the Satellite needs both outbound and inbound connections on port 5269 to and from each registered Proxy server with Push functionality enabled. This is used for two-way communications between "jabberd" service on Satellite and Proxy, respectively. In addition, it needs to allow inbound connections on port 5222 from client systems directly registered to the Satellite. This is used for one-way (client to server) communications between "osad" service on client systems and "jabberd" service on the Satellite.

For Red Hat Satellite Proxy 5:

The Proxy server needs outbound connections on ports 80 and 443 to the upstream parent system, which can be either RHN Classic or an internal Satellite server, and it needs inbound connections on ports 80 and 443 from the Client requests coming in via either http or https.

Similar to Satellite, if using the Monitoring functionality, the Proxy needs outbound connections on port 4545 to Monitoring-enabled client systems.

If using the Push functionality, the Proxy needs both outbound and inbound connections on port 5269 to and from the upstream Satellite. This is used for two-way communications between "jabberd" service on Satellite and Proxy, respectively. In addition, it needs to allow inbound connections on port 5222 from client systems registered to the Proxy. This is used for one-way (client to server) communications between "osad" service on client systems and "jabberd" service on the Proxy.

For Client Systems:

Client systems will initiate outbound connections on ports 80 and 443 to their upstream server, which can be Red Hat Satellite, Proxy or RHN Classic.

If using the Monitoring functionality, Monitoring-enabled client systems needs to allow inbound connections on port 4545 from the upstream server (Satellite or Proxy).

If using the Push functionality, the client system needs outbound connections on port 5222 to the upstream server (Satellite or Proxy). This is used for one-way (client to server) communications between "osad" service on client systems and "jabberd" service on the server.

Comments

Details can be found in the 'Additional Requirements' section under the Red Hat Satellite Installation Guide ; all documentation is available at https://access.redhat.com/site/documentation/

Also see this solution: "How do I access RHN (yum/up2date/satellite-sync) through a firewall?"

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.

8 Comments

It seems the RHN Proxy server also needs to connect to "content-xmlrpc.rhn.redhat.com".

This host should be added to the list of authorized destinations.

Hi,

you will find the list of hosts that neeed to be allowed in https://access.redhat.com/knowledge/solutions/11214

I have mounted the update and tried to yum upgrade getting below error. Any idea...

/var/satellite/ISO/rhel-server-6.4-x86_64-dvd.iso
3.5G 3.5G 0 100% /cdrom
/var/satellite/ISO/boeing_update_v2.iso
531M 531M 0 100% /sat_iso

# ls -l /sat_iso/
total 58
drwxr-xr-x. 3 root root 51200 Jun 24 2013 rhel
drwxr-xr-x. 3 root root 8192 Jun 24 2013 satellite

yum upgrade
Loaded plugins: product-id, rhnplugin, security, subscription-manager
This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.
There was an error communicating with RHN.
RHN Satellite or RHN Classic support will be disabled.
Error communicating with server. The message was:

Error Message:
Please run rhn_register as root on this client
Error Class Code: 9
Error Class Info: Invalid System Credentials.
Explanation:
An error has occurred while processing your request. If this problem
persists please enter a bug report at bugzilla.redhat.com.
If you choose to submit the bug report, please be sure to include
details of what you were trying to do when this error occurred and
details on how to reproduce this problem.

Setting up Upgrade Process
Resolving Dependencies
--> Running transaction check
---> Package axis.noarch 0:1.2.1-7.2.el6 will be updated
---> Package axis.noarch 0:1.2.1-7.3.el6_3 will be an update
---> Package bind-libs.x86_64 32:9.8.2-0.17.rc1.el6 will be updated
---> Package bind-libs.x86_64 32:9.8.2-0.17.rc1.el6_4.4 will be an update
---> Package bind-utils.x86_64 32:9.8.2-0.17.rc1.el6 will be updated
---> Package bind-utils.x86_64 32:9.8.2-0.17.rc1.el6_4.4 will be an update
---> Package cobbler.noarch 0:2.0.7-21.el6sat will be updated
---> Package cobbler.noarch 0:2.0.7-23.el6sat will be an update
---> Package coreutils.x86_64 0:8.4-19.el6 will be updated
---> Package coreutils.x86_64 0:8.4-19.el6_4.2 will be an update
---> Package coreutils-libs.x86_64 0:8.4-19.el6 will be updated
---> Package coreutils-libs.x86_64 0:8.4-19.el6_4.2 will be an update
---> Package cups-libs.x86_64 1:1.4.2-48.el6_3.3 will be updated
---> Package cups-libs.x86_64 1:1.4.2-50.el6_4.4 will be an update
---> Package curl.x86_64 0:7.19.7-35.el6 will be updated
---> Package curl.x86_64 0:7.19.7-36.el6_4 will be an update
---> Package dbus-glib.x86_64 0:0.86-5.el6 will be updated
---> Package dbus-glib.x86_64 0:0.86-6.el6_4 will be an update
---> Package freetype.x86_64 0:2.3.11-6.el6_2.9 will be updated
---> Package freetype.x86_64 0:2.3.11-14.el6_3.1 will be an update
---> Package gdb.x86_64 0:7.2-60.el6 will be updated
---> Package gdb.x86_64 0:7.2-60.el6_4.1 will be an update
---> Package gnutls.x86_64 0:2.8.5-10.el6 will be updated
---> Package gnutls.x86_64 0:2.8.5-10.el6_4.2 will be an update
---> Package gzip.x86_64 0:1.3.12-18.el6 will be updated
---> Package gzip.x86_64 0:1.3.12-19.el6_4 will be an update
---> Package httpd.x86_64 0:2.2.15-26.el6 will be updated
---> Package httpd.x86_64 0:2.2.15-28.el6_4 will be an update
---> Package httpd-tools.x86_64 0:2.2.15-26.el6 will be updated
---> Package httpd-tools.x86_64 0:2.2.15-28.el6_4 will be an update
---> Package initscripts.x86_64 0:9.03.38-1.el6 will be updated
---> Package initscripts.x86_64 0:9.03.38-1.el6_4.1 will be an update
---> Package iputils.x86_64 0:20071127-16.el6 will be updated
---> Package iputils.x86_64 0:20071127-17.el6_4 will be an update
---> Package jabberd.x86_64 0:2.2.8-19.el6sat will be updated
---> Package jabberd.x86_64 0:2.2.8-20.el6sat will be an update
---> Package jakarta-commons-el.noarch 0:1.0-18.4.el6 will be updated
---> Package jakarta-commons-el.noarch 0:1.0-19.2.1.1.ep5.el6 will be an update
---> Package jakarta-commons-httpclient.x86_64 1:3.1-0.6.el6 will be updated
---> Package jakarta-commons-httpclient.x86_64 1:3.1-0.7.el6_3 will be an update
---> Package kernel.x86_64 0:2.6.32-358.11.1.el6 will be installed
---> Package kernel-firmware.noarch 0:2.6.32-358.el6 will be updated
---> Package kernel-firmware.noarch 0:2.6.32-358.11.1.el6 will be an update
---> Package kexec-tools.x86_64 0:2.0.0-258.el6 will be updated
---> Package kexec-tools.x86_64 0:2.0.0-258.el6_4.2 will be an update
---> Package krb5-libs.x86_64 0:1.10.3-10.el6 will be updated
---> Package krb5-libs.x86_64 0:1.10.3-10.el6_4.3 will be an update
---> Package krb5-workstation.x86_64 0:1.10.3-10.el6 will be updated
---> Package krb5-workstation.x86_64 0:1.10.3-10.el6_4.3 will be an update
---> Package libblkid.x86_64 0:2.17.2-12.9.el6 will be updated
---> Package libblkid.x86_64 0:2.17.2-12.9.el6_4.3 will be an update
---> Package libcgroup.x86_64 0:0.37-7.el6 will be updated
---> Package libcgroup.x86_64 0:0.37-7.1.el6_4 will be an update
---> Package libcurl.x86_64 0:7.19.7-35.el6 will be updated
---> Package libcurl.x86_64 0:7.19.7-36.el6_4 will be an update
---> Package libproxy.x86_64 0:0.3.0-3.el6_3 will be updated
---> Package libproxy.x86_64 0:0.3.0-4.el6_3 will be an update
---> Package libproxy-bin.x86_64 0:0.3.0-3.el6_3 will be updated
---> Package libproxy-bin.x86_64 0:0.3.0-4.el6_3 will be an update
---> Package libproxy-python.x86_64 0:0.3.0-3.el6_3 will be updated
---> Package libproxy-python.x86_64 0:0.3.0-4.el6_3 will be an update
---> Package libselinux.x86_64 0:2.0.94-5.3.el6 will be updated
---> Package libselinux.x86_64 0:2.0.94-5.3.el6_4.1 will be an update
---> Package libselinux-python.x86_64 0:2.0.94-5.3.el6 will be updated
---> Package libselinux-python.x86_64 0:2.0.94-5.3.el6_4.1 will be an update
---> Package libselinux-utils.x86_64 0:2.0.94-5.3.el6 will be updated
---> Package libselinux-utils.x86_64 0:2.0.94-5.3.el6_4.1 will be an update
---> Package libtirpc.x86_64 0:0.2.1-5.el6 will be updated
---> Package libtirpc.x86_64 0:0.2.1-6.el6_4 will be an update
---> Package libuuid.x86_64 0:2.17.2-12.9.el6 will be updated
---> Package libuuid.x86_64 0:2.17.2-12.9.el6_4.3 will be an update
---> Package libxml2.x86_64 0:2.7.6-8.el6_3.4 will be updated
---> Package libxml2.x86_64 0:2.7.6-12.el6_4.1 will be an update
---> Package libxml2-python.x86_64 0:2.7.6-8.el6_3.4 will be updated
---> Package libxml2-python.x86_64 0:2.7.6-12.el6_4.1 will be an update
---> Package mdadm.x86_64 0:3.2.5-4.el6 will be updated
---> Package mdadm.x86_64 0:3.2.5-4.el6_4.1 will be an update
---> Package mod_ssl.x86_64 1:2.2.15-26.el6 will be updated
---> Package mod_ssl.x86_64 1:2.2.15-28.el6_4 will be an update
---> Package module-init-tools.x86_64 0:3.9-21.el6 will be updated
---> Package module-init-tools.x86_64 0:3.9-21.el6_4 will be an update
---> Package mysql-libs.x86_64 0:5.1.66-2.el6_3 will be updated
---> Package mysql-libs.x86_64 0:5.1.69-1.el6_4 will be an update
---> Package openldap.x86_64 0:2.4.23-31.el6 will be updated
---> Package openldap.x86_64 0:2.4.23-32.el6_4.1 will be an update
---> Package openssl.x86_64 0:1.0.0-27.el6 will be updated
---> Package openssl.x86_64 0:1.0.0-27.el6_4.2 will be an update
---> Package oracle-rhnsat-selinux.noarch 0:10.2.0.20-3.el6sat will be updated
---> Package oracle-rhnsat-selinux.noarch 0:10.2.0.20-4.el6sat will be an update
---> Package perl.x86_64 4:5.10.1-129.el6 will be updated
---> Package perl.x86_64 4:5.10.1-131.el6_4 will be an update
---> Package perl-Archive-Extract.x86_64 1:0.38-129.el6 will be updated
---> Package perl-Archive-Extract.x86_64 1:0.38-131.el6_4 will be an update
---> Package perl-Archive-Tar.x86_64 0:1.58-129.el6 will be updated
---> Package perl-Archive-Tar.x86_64 0:1.58-131.el6_4 will be an update
---> Package perl-CGI.x86_64 0:3.51-129.el6 will be updated
---> Package perl-CGI.x86_64 0:3.51-131.el6_4 will be an update
---> Package perl-CPAN.x86_64 0:1.9402-129.el6 will be updated
---> Package perl-CPAN.x86_64 0:1.9402-131.el6_4 will be an update
---> Package perl-CPANPLUS.x86_64 0:0.88-129.el6 will be updated
---> Package perl-CPANPLUS.x86_64 0:0.88-131.el6_4 will be an update
---> Package perl-Compress-Raw-Bzip2.x86_64 0:2.020-129.el6 will be updated
---> Package perl-Compress-Raw-Bzip2.x86_64 0:2.020-131.el6_4 will be an update
---> Package perl-Compress-Raw-Zlib.x86_64 1:2.020-129.el6 will be updated
---> Package perl-Compress-Raw-Zlib.x86_64 1:2.020-131.el6_4 will be an update
---> Package perl-Compress-Zlib.x86_64 0:2.020-129.el6 will be updated
---> Package perl-Compress-Zlib.x86_64 0:2.020-131.el6_4 will be an update
---> Package perl-Digest-SHA.x86_64 1:5.47-129.el6 will be updated
---> Package perl-Digest-SHA.x86_64 1:5.47-131.el6_4 will be an update
---> Package perl-ExtUtils-CBuilder.x86_64 1:0.27-129.el6 will be updated
---> Package perl-ExtUtils-CBuilder.x86_64 1:0.27-131.el6_4 will be an update
---> Package perl-ExtUtils-Embed.x86_64 0:1.28-129.el6 will be updated
---> Package perl-ExtUtils-Embed.x86_64 0:1.28-131.el6_4 will be an update
---> Package perl-ExtUtils-MakeMaker.x86_64 0:6.55-129.el6 will be updated
---> Package perl-ExtUtils-MakeMaker.x86_64 0:6.55-131.el6_4 will be an update
---> Package perl-ExtUtils-ParseXS.x86_64 1:2.2003.0-129.el6 will be updated
---> Package perl-ExtUtils-ParseXS.x86_64 1:2.2003.0-131.el6_4 will be an update
---> Package perl-File-Fetch.x86_64 0:0.26-129.el6 will be updated
---> Package perl-File-Fetch.x86_64 0:0.26-131.el6_4 will be an update
---> Package perl-IO-Compress-Base.x86_64 0:2.020-129.el6 will be updated
---> Package perl-IO-Compress-Base.x86_64 0:2.020-131.el6_4 will be an update
---> Package perl-IO-Compress-Bzip2.x86_64 0:2.020-129.el6 will be updated
---> Package perl-IO-Compress-Bzip2.x86_64 0:2.020-131.el6_4 will be an update
---> Package perl-IO-Compress-Zlib.x86_64 0:2.020-129.el6 will be updated
---> Package perl-IO-Compress-Zlib.x86_64 0:2.020-131.el6_4 will be an update
---> Package perl-IO-Zlib.x86_64 1:1.09-129.el6 will be updated
---> Package perl-IO-Zlib.x86_64 1:1.09-131.el6_4 will be an update
---> Package perl-IPC-Cmd.x86_64 1:0.56-129.el6 will be updated
---> Package perl-IPC-Cmd.x86_64 1:0.56-131.el6_4 will be an update
---> Package perl-Locale-Maketext-Simple.x86_64 1:0.18-129.el6 will be updated
---> Package perl-Locale-Maketext-Simple.x86_64 1:0.18-131.el6_4 will be an update
---> Package perl-Log-Message.x86_64 1:0.02-129.el6 will be updated
---> Package perl-Log-Message.x86_64 1:0.02-131.el6_4 will be an update
---> Package perl-Log-Message-Simple.x86_64 0:0.04-129.el6 will be updated
---> Package perl-Log-Message-Simple.x86_64 0:0.04-131.el6_4 will be an update
---> Package perl-Module-Build.x86_64 1:0.3500-129.el6 will be updated
---> Package perl-Module-Build.x86_64 1:0.3500-131.el6_4 will be an update
---> Package perl-Module-CoreList.x86_64 0:2.18-129.el6 will be updated
---> Package perl-Module-CoreList.x86_64 0:2.18-131.el6_4 will be an update
---> Package perl-Module-Load.x86_64 1:0.16-129.el6 will be updated
---> Package perl-Module-Load.x86_64 1:0.16-131.el6_4 will be an update
---> Package perl-Module-Load-Conditional.x86_64 0:0.30-129.el6 will be updated
---> Package perl-Module-Load-Conditional.x86_64 0:0.30-131.el6_4 will be an update
---> Package perl-Module-Loaded.x86_64 1:0.02-129.el6 will be updated
---> Package perl-Module-Loaded.x86_64 1:0.02-131.el6_4 will be an update
---> Package perl-Module-Pluggable.x86_64 1:3.90-129.el6 will be updated
---> Package perl-Module-Pluggable.x86_64 1:3.90-131.el6_4 will be an update
---> Package perl-Object-Accessor.x86_64 1:0.34-129.el6 will be updated
---> Package perl-Object-Accessor.x86_64 1:0.34-131.el6_4 will be an update
---> Package perl-Package-Constants.x86_64 1:0.02-129.el6 will be updated
---> Package perl-Package-Constants.x86_64 1:0.02-131.el6_4 will be an update
---> Package perl-Params-Check.x86_64 1:0.26-129.el6 will be updated
---> Package perl-Params-Check.x86_64 1:0.26-131.el6_4 will be an update
---> Package perl-Parse-CPAN-Meta.x86_64 1:1.40-129.el6 will be updated
---> Package perl-Parse-CPAN-Meta.x86_64 1:1.40-131.el6_4 will be an update
---> Package perl-Pod-Escapes.x86_64 1:1.04-129.el6 will be updated
---> Package perl-Pod-Escapes.x86_64 1:1.04-131.el6_4 will be an update
---> Package perl-Pod-Simple.x86_64 1:3.13-129.el6 will be updated
---> Package perl-Pod-Simple.x86_64 1:3.13-131.el6_4 will be an update
---> Package perl-Term-UI.x86_64 0:0.20-129.el6 will be updated
---> Package perl-Term-UI.x86_64 0:0.20-131.el6_4 will be an update
---> Package perl-Test-Harness.x86_64 0:3.17-129.el6 will be updated
---> Package perl-Test-Harness.x86_64 0:3.17-131.el6_4 will be an update
---> Package perl-Test-Simple.x86_64 0:0.92-129.el6 will be updated
---> Package perl-Test-Simple.x86_64 0:0.92-131.el6_4 will be an update
---> Package perl-Time-HiRes.x86_64 4:1.9721-129.el6 will be updated
---> Package perl-Time-HiRes.x86_64 4:1.9721-131.el6_4 will be an update
---> Package perl-Time-Piece.x86_64 0:1.15-129.el6 will be updated
---> Package perl-Time-Piece.x86_64 0:1.15-131.el6_4 will be an update
---> Package perl-core.x86_64 0:5.10.1-129.el6 will be updated
---> Package perl-core.x86_64 0:5.10.1-131.el6_4 will be an update
---> Package perl-devel.x86_64 4:5.10.1-129.el6 will be updated
---> Package perl-devel.x86_64 4:5.10.1-131.el6_4 will be an update
---> Package perl-libs.x86_64 4:5.10.1-129.el6 will be updated
---> Package perl-libs.x86_64 4:5.10.1-131.el6_4 will be an update
---> Package perl-parent.x86_64 1:0.221-129.el6 will be updated
---> Package perl-parent.x86_64 1:0.221-131.el6_4 will be an update
---> Package perl-version.x86_64 3:0.77-129.el6 will be updated
---> Package perl-version.x86_64 3:0.77-131.el6_4 will be an update
---> Package pixman.x86_64 0:0.26.2-4.el6 will be updated
---> Package pixman.x86_64 0:0.26.2-5.el6_4 will be an update
---> Package rhn-i18n-guides.noarch 0:5.4.0.8-1.el6sat will be updated
---> Package rhn-i18n-guides.noarch 0:5.5.0.3-2.el6sat will be an update
---> Package rhn-i18n-release-notes.noarch 0:5.4.0.8-1.el6sat will be updated
---> Package rhn-i18n-release-notes.noarch 0:5.5.0.2-1.el6sat will be an update
---> Package satellite-branding.noarch 0:5.5.0.3-1.el6sat will be updated
---> Package satellite-branding.noarch 0:5.5.0.7-1.el6sat will be an update
---> Package satellite-doc-indexes.noarch 0:5.4.4-1.el6sat will be updated
---> Package satellite-doc-indexes.noarch 0:5.5.1-7.el6sat will be an update
---> Package satellite-schema.noarch 0:5.5.0.13-1.el6sat will be updated
---> Package satellite-schema.noarch 0:5.5.0.20-1.el6sat will be an update
---> Package selinux-policy.noarch 0:3.7.19-195.el6 will be updated
---> Package selinux-policy.noarch 0:3.7.19-195.el6_4.10 will be an update
---> Package selinux-policy-targeted.noarch 0:3.7.19-195.el6 will be updated
---> Package selinux-policy-targeted.noarch 0:3.7.19-195.el6_4.10 will be an update
---> Package spacewalk-backend.noarch 0:1.7.38-32.el6sat will be updated
---> Package spacewalk-backend.noarch 0:1.7.38-47.el6sat will be an update
---> Package spacewalk-backend-app.noarch 0:1.7.38-32.el6sat will be updated
---> Package spacewalk-backend-app.noarch 0:1.7.38-47.el6sat will be an update
---> Package spacewalk-backend-applet.noarch 0:1.7.38-32.el6sat will be updated
---> Package spacewalk-backend-applet.noarch 0:1.7.38-47.el6sat will be an update
---> Package spacewalk-backend-config-files.noarch 0:1.7.38-32.el6sat will be updated
---> Package spacewalk-backend-config-files.noarch 0:1.7.38-47.el6sat will be an update
---> Package spacewalk-backend-config-files-common.noarch 0:1.7.38-32.el6sat will be updated
---> Package spacewalk-backend-config-files-common.noarch 0:1.7.38-47.el6sat will be an update
---> Package spacewalk-backend-config-files-tool.noarch 0:1.7.38-32.el6sat will be updated
---> Package spacewalk-backend-config-files-tool.noarch 0:1.7.38-47.el6sat will be an update
---> Package spacewalk-backend-iss.noarch 0:1.7.38-32.el6sat will be updated
---> Package spacewalk-backend-iss.noarch 0:1.7.38-47.el6sat will be an update
---> Package spacewalk-backend-iss-export.noarch 0:1.7.38-32.el6sat will be updated
---> Package spacewalk-backend-iss-export.noarch 0:1.7.38-47.el6sat will be an update
---> Package spacewalk-backend-libs.noarch 0:1.7.38-32.el6sat will be updated
---> Package spacewalk-backend-libs.noarch 0:1.7.38-47.el6sat will be an update
---> Package spacewalk-backend-package-push-server.noarch 0:1.7.38-32.el6sat will be updated
---> Package spacewalk-backend-package-push-server.noarch 0:1.7.38-47.el6sat will be an update
---> Package spacewalk-backend-server.noarch 0:1.7.38-32.el6sat will be updated
---> Package spacewalk-backend-server.noarch 0:1.7.38-47.el6sat will be an update
---> Package spacewalk-backend-sql.noarch 0:1.7.38-32.el6sat will be updated
---> Package spacewalk-backend-sql.noarch 0:1.7.38-47.el6sat will be an update
---> Package spacewalk-backend-sql-oracle.noarch 0:1.7.38-32.el6sat will be updated
---> Package spacewalk-backend-sql-oracle.noarch 0:1.7.38-47.el6sat will be an update
---> Package spacewalk-backend-tools.noarch 0:1.7.38-32.el6sat will be updated
---> Package spacewalk-backend-tools.noarch 0:1.7.38-47.el6sat will be an update
---> Package spacewalk-backend-xml-export-libs.noarch 0:1.7.38-32.el6sat will be updated
---> Package spacewalk-backend-xml-export-libs.noarch 0:1.7.38-47.el6sat will be an update
---> Package spacewalk-backend-xmlrpc.noarch 0:1.7.38-32.el6sat will be updated
---> Package spacewalk-backend-xmlrpc.noarch 0:1.7.38-47.el6sat will be an update
---> Package spacewalk-backend-xp.noarch 0:1.7.38-32.el6sat will be updated
---> Package spacewalk-backend-xp.noarch 0:1.7.38-47.el6sat will be an update
---> Package spacewalk-base.noarch 0:1.7.28-30.el6sat will be updated
---> Package spacewalk-base.noarch 0:1.7.28-33.el6sat will be an update
---> Package spacewalk-base-minimal.noarch 0:1.7.28-30.el6sat will be updated
---> Package spacewalk-base-minimal.noarch 0:1.7.28-33.el6sat will be an update
---> Package spacewalk-certs-tools.noarch 0:1.7.3-3.el6sat will be updated
---> Package spacewalk-certs-tools.noarch 0:1.7.3-4.el6sat will be an update
---> Package spacewalk-dobby.noarch 0:1.7.28-30.el6sat will be updated
---> Package spacewalk-dobby.noarch 0:1.7.28-33.el6sat will be an update
---> Package spacewalk-grail.noarch 0:1.7.28-30.el6sat will be updated
---> Package spacewalk-grail.noarch 0:1.7.28-33.el6sat will be an update
---> Package spacewalk-html.noarch 0:1.7.28-30.el6sat will be updated
---> Package spacewalk-html.noarch 0:1.7.28-33.el6sat will be an update
---> Package spacewalk-java.noarch 0:1.7.54-100.el6sat will be updated
---> Package spacewalk-java.noarch 0:1.7.54-119.el6sat will be an update
---> Package spacewalk-java-config.noarch 0:1.7.54-100.el6sat will be updated
---> Package spacewalk-java-config.noarch 0:1.7.54-119.el6sat will be an update
---> Package spacewalk-java-lib.noarch 0:1.7.54-100.el6sat will be updated
---> Package spacewalk-java-lib.noarch 0:1.7.54-119.el6sat will be an update
---> Package spacewalk-java-oracle.noarch 0:1.7.54-100.el6sat will be updated
---> Package spacewalk-java-oracle.noarch 0:1.7.54-119.el6sat will be an update
---> Package spacewalk-pxt.noarch 0:1.7.28-30.el6sat will be updated
---> Package spacewalk-pxt.noarch 0:1.7.28-33.el6sat will be an update
---> Package spacewalk-schema.noarch 0:1.7.55-32.el6sat will be updated
---> Package spacewalk-schema.noarch 0:1.7.55-38.el6sat will be an update
---> Package spacewalk-sniglets.noarch 0:1.7.28-30.el6sat will be updated
---> Package spacewalk-sniglets.noarch 0:1.7.28-33.el6sat will be an update
---> Package spacewalk-taskomatic.noarch 0:1.7.54-100.el6sat will be updated
---> Package spacewalk-taskomatic.noarch 0:1.7.54-119.el6sat will be an update
---> Package spacewalk-utils.noarch 0:1.7.15-37.el6sat will be updated
---> Package spacewalk-utils.noarch 0:1.7.15-44.el6sat will be an update
---> Package subscription-manager.x86_64 0:1.1.23-1.el6 will be updated
---> Package subscription-manager.x86_64 0:1.1.23.1-1.el6_4 will be an update
---> Package tomcat6.noarch 0:6.0.24-49.el6 will be updated
---> Package tomcat6.noarch 0:6.0.24-57.el6_4 will be an update
---> Package tomcat6-el-2.1-api.noarch 0:6.0.24-49.el6 will be updated
---> Package tomcat6-el-2.1-api.noarch 0:6.0.24-57.el6_4 will be an update
---> Package tomcat6-jsp-2.1-api.noarch 0:6.0.24-49.el6 will be updated
---> Package tomcat6-jsp-2.1-api.noarch 0:6.0.24-57.el6_4 will be an update
---> Package tomcat6-lib.noarch 0:6.0.24-49.el6 will be updated
---> Package tomcat6-lib.noarch 0:6.0.24-57.el6_4 will be an update
---> Package tomcat6-servlet-2.5-api.noarch 0:6.0.24-49.el6 will be updated
---> Package tomcat6-servlet-2.5-api.noarch 0:6.0.24-57.el6_4 will be an update
---> Package tzdata.noarch 0:2012j-1.el6 will be updated
---> Package tzdata.noarch 0:2013c-1.el6 will be an update
---> Package util-linux-ng.x86_64 0:2.17.2-12.9.el6 will be updated
---> Package util-linux-ng.x86_64 0:2.17.2-12.9.el6_4.3 will be an update
--> Finished Dependency Resolution
--> Running transaction check
---> Package kernel.x86_64 0:2.6.32-279.el6 will be erased
--> Finished Dependency Resolution
Error: Multilib version problems found. This often means that the root
cause is something else and multilib version checking is just
pointing out that there is a problem. Eg.:

     1. You have an upgrade for libuuid which is missing some
        dependency that another package requires. Yum is trying to
        solve this by installing an older version of libuuid of the
        different architecture. If you exclude the bad architecture
        yum will tell you what the root cause is (which package
        requires what). You can try redoing the upgrade with
        --exclude libuuid.otherarch ... this should give you an error
        message showing the root cause of the problem.

     2. You have multiple architectures of libuuid installed, but
        yum can only see an upgrade for one of those arcitectures.
        If you don't want/need both architectures anymore then you
        can remove the one with the missing update and everything
        will work.

     3. You have duplicate versions of libuuid installed already.
        You can use "yum check" to get yum show these errors.

   ...you can also use --setopt=protected_multilib=false to remove
   this checking, however this is almost never the correct thing to
   do as something else is very likely to go wrong (often causing
   much more problems).

   Protected multilib versions: libuuid-2.17.2-12.9.el6_4.3.x86_64 != libuuid-2.17.2-12.9.el6.i686

You could try using --skip-broken to work around the problem
You could try running: rpm -Va --nofiles --nodigest
[root@app-cpvl713 ~]#

Any update..

Knowledge doc comments are not a support tool mechanism. I'd recommend opening a support case.

Just to confirm, if the osad (push functionality) service is not being utilized on a client system, port 5222 does not need to be opened? Or is this needed for the system to still check in with the upstream server?

one of the problem with this is the dns entry for the clients.

vi /etc/sysconfig/rhn/up2date

serverURL[comment]=Remote server URL (use FQDN)

replace serverURL=https://10.x.x.x/XMLRPC

with serverURL=https://spacewalkfulname.domain.com/XMLRPC

then edit
vi /etc/hosts

add 10.x.x.x vi /etc/sysconfig/rhn/up2date

vi /etc/hosts

add

10.x.x.x. spacewalk.sandbox.local

service osad restart

Shutting down osad: [ OK ]
Starting osad: [ OK ]

no errors at all...

run a configuration command as shown below:

2015-03-20 11:54:36 osad_client._message_callback: About to execute: ['/usr/sbin/rhn_check']
2015-03-20 11:54:36 osad_client._message_callback: run_rhn_check: 1
2015-03-20 11:54:47 jabber_lib.process: 180

Run a configuration command or schedule a job task from spacewalk GUI
You can monitor the calls from command line in clients terminal

osad -N -v -v -v -v

2015-03-20 11:54:36 osad_client._message_callback: About to execute: ['/usr/sbin/rhn_check']
2015-03-20 11:54:36 osad_client._message_callback: run_rhn_check: 1
2015-03-20 11:54:47 jabber_lib.process: 180