Open Grieves

Open Grieves

Assimilate quickly!

You must comply!

Red Hat Satellite 6.0 to 6.1 upgrade: SE-Linux relabling, errata sync, LDAPS integratiom and other stuff

Out of troublePosted by Magnus Glantz 2015-09-07 12:34:57
Hi,

So, if you are wondering what's happening with your Satellite 6.0 to 6.1 upgrade, when being stuck in yum cleanup, it's SE-Linux relabling of /var/lib/pulp.

For me, having synced RHEL 5, 6 and 7 and having 6-7 content views, it took 1 1/2 hours. So, be patient.

Also, when you run the actuall katello-upgrade there will be a stage where it does errata, repo metadata and gpg resync, this will also take about 1 to 1 1/2 hours, if you are looking at a similar setup as mine.

For the complete upgrade to 6.1, it's not over the top to schedule 1-2 days for this as there are plenty of tasks that takes time.

A heads up if you are using LDAP integration with LDAPS, you have to add your own certificates as follows:

# cat /my-bundle.crt/pem >>/etc/pki/tls/certs/ca-bundle.crt

Or you will not be able to login with your LDAP user(s).

An error message as follows will appear:

SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed

Or detailed:

OpenSSL::SSL::SSLError
SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed
app/models/auth_sources/auth_source_ldap.rb:50:in `authenticate'
app/models/user.rb:190:in `try_to_login'
app/controllers/users_controller.rb:71:in `login'
app/models/concerns/foreman/thread_session.rb:33:in `clear_thread'
lib/middleware/catch_json_parse_errors.rb:9:in `call'







  • Comments(0)//blog.hacka.net/#post100