Bug #15931
closedkatello installer doesn't fully support cname alternate cname for satellite server
Description
Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=1160344
Description of problem:
hostname: xyz123-us.acme.com
cname: satellite.acme.com
katello-installer --foreman-db-password foreman --foreman-db-username foreman --katello-proxy-url http://applicationwebproxy.acme.com --katello-proxy-port 8080 --certs-ca-common-name "satellite.acme.com" --certs-node-fqdn "satellite.acme.com" --capsule-parent-fqdn "satellite.acme.com" --foreman-foreman-url="https://satellite.acme.com" --foreman-admin-password changeme
it does not update /etc/pulp/server.conf [messaging] and [tasks] sections with CNAME and i get
Nov 4 00:41:59 totlx90101 pulp: celery.worker.consumer:ERROR: consumer: Cannot connect to qpid://guest@xyz123-us.acme.com:5671//: Connection hostname 'xyz123-us.acme.com' does not match names from peer certificate: ['satellite.acme.com', u'satellite.acme.com'].
Nov 4 00:41:59 xyz123-us pulp: celery.worker.consumer:ERROR: Trying again in 12.00 seconds...
Nov 4 00:41:59 xyz123-us pulp: celery.worker.consumer:ERROR:
I have manually modified /etc/pulp/server.conf and everything seems to be working now.
Version-Release number of selected component (if applicable):
Current Satellite 6
How reproducible:
See above
Actual results:
Expected results:
pulp should correctly set /etc/pulp/server.conf
Additional info:
Customer can use a cname as a way to have a hotbackup of the Satellite server for DR purposes. This removes requirements to change certs.
The alternative approach requires cert changes.
Updating the hostname of a Red Hat Satellite 6 Server and updating associated SSL certificates.
https://access.redhat.com/solutions/1232133
Reference to other BZs for cname support
[RFE] CNAME and SRV record support in foreman
https://bugzilla.redhat.com/show_bug.cgi?id=1045613
Updated by Justin Sherrill over 8 years ago
- Translation missing: en.field_release set to 114
Updated by Eric Helms almost 8 years ago
- Translation missing: en.field_release deleted (
114) - Pull request https://github.com/Katello/puppet-certs/pull/120 added
Updated by Justin Sherrill almost 8 years ago
- Translation missing: en.field_release set to 114
Updated by Chris Roberts over 6 years ago
- Status changed from New to Resolved
- Assignee set to Stephen Benjamin
- Difficulty set to medium
- Fixed in Releases Katello 3.5.3 added