Support #28034
closed
The subscription-manager doesn't register a node to Katello master through smart proxy
Description
I've created the Forema/Katello installation on my local env to testing this solution. Foreman version - 1.23, Katello 3.13.
When I try to connect my test host to Katello master with an activation key I get the error: Unauthorized: Invalid credentials for request.
2019-10-10 12:45:59,648 [DEBUG] subscription-manager:28889:MainThread @https.py:56 - Using standard libs to provide httplib and ssl
2019-10-10 12:45:59,749 [DEBUG] subscription-manager:28889:MainThread @dbus_interface.py:39 - self.has_main_loop=False
2019-10-10 12:45:59,759 [DEBUG] subscription-manager:28889:MainThread @ga_loader.py:91 - ga_loader GaImporterGtk3
2019-10-10 12:45:59,760 [DEBUG] subscription-manager:28889:MainThread @plugins.py:571 - loaded plugin modules: []
2019-10-10 12:45:59,760 [DEBUG] subscription-manager:28889:MainThread @plugins.py:572 - loaded plugins: {}
2019-10-10 12:45:59,760 [DEBUG] subscription-manager:28889:MainThread @identity.py:138 - Loading consumer info from identity certificates.
2019-10-10 12:45:59,760 [DEBUG] subscription-manager:28889:MainThread @identity.py:149 - Reload of consumer identity cert /etc/pki/consumer/cert.pem raised an exception with msg: [Errno 2] No such file or directory: '/etc/pki/consumer/key.pem'
2019-10-10 12:45:59,761 [DEBUG] subscription-manager:28889:MainThread @connection.py:808 - Environment variable NO_PROXY= will be used
2019-10-10 12:45:59,761 [INFO] subscription-manager:28889:MainThread @connection.py:905 - Connection built: host=puppet-proxy-1.nhl.net port=8443 handler=/rhsm auth=identity_cert ca_dir=/etc/rhsm/ca/ insecure=False
2019-10-10 12:45:59,768 [INFO] subscription-manager:28889:MainThread @managercli.py:462 - X-Correlation-ID: dda4b6b3228b4b79b349152f24cfa84d
2019-10-10 12:45:59,768 [INFO] subscription-manager:28889:MainThread @managercli.py:351 - Client Versions: {'subscription-manager': '1.24.13-3.el7.centos'}
2019-10-10 12:45:59,769 [DEBUG] subscription-manager:28889:MainThread @connection.py:808 - Environment variable NO_PROXY= will be used
2019-10-10 12:45:59,769 [INFO] subscription-manager:28889:MainThread @connection.py:905 - Connection built: host=puppet-proxy-1.nhl.net port=8443 handler=/rhsm auth=identity_cert ca_dir=/etc/rhsm/ca/ insecure=False
2019-10-10 12:45:59,769 [DEBUG] subscription-manager:28889:MainThread @connection.py:808 - Environment variable NO_PROXY= will be used
2019-10-10 12:45:59,769 [INFO] subscription-manager:28889:MainThread @connection.py:905 - Connection built: host=puppet-proxy-1.nhl.net port=8443 handler=/rhsm auth=none
2019-10-10 12:45:59,769 [INFO] subscription-manager:28889:MainThread @managercli.py:351 - Client Versions: {'subscription-manager': '1.24.13-3.el7.centos'}
2019-10-10 12:45:59,769 [INFO] subscription-manager:28889:MainThread @managercli.py:327 - Consumer Identity name=None uuid=None
2019-10-10 12:45:59,770 [INFO] subscription-manager:28889:MainThread @managercli.py:327 - Consumer Identity name=None uuid=None
2019-10-10 12:45:59,770 [DEBUG] subscription-manager:28889:MainThread @connection.py:808 - Environment variable NO_PROXY= will be used
2019-10-10 12:45:59,770 [INFO] subscription-manager:28889:MainThread @connection.py:905 - Connection built: host=puppet-proxy-1.nhl.net port=8443 handler=/rhsm auth=none
2019-10-10 12:45:59,781 [INFO] subscription-manager:28889:MainThread @dmiinfo.py:76 - Using dmidecode dump file: /dev/mem
2019-10-10 12:46:00,330 [DEBUG] subscription-manager:28889:MainThread @connection.py:523 - Loaded CA certificates from /etc/rhsm/ca/: katello-server-ca.pem, katello-default-ca.pem
2019-10-10 12:46:00,331 [DEBUG] subscription-manager:28889:MainThread @connection.py:571 - Making request: POST /rhsm/consumers?owner=Test&activation_keys=mike
2019-10-10 12:46:01,976 [INFO] subscription-manager:28889:MainThread @connection.py:618 - Response: status=200, request="POST /rhsm/consumers?owner=Test&activation_keys=mike"
2019-10-10 12:46:01,977 [DEBUG] subscription-manager:28889:MainThread @cache.py:114 - Wrote cache: /var/lib/rhsm/cache/installed_products.json
2019-10-10 12:46:01,978 [INFO] subscription-manager:28889:MainThread @managerlib.py:72 - Consumer created: node-1.nhl.net (0cb1f61b-d648-4d7f-847a-56e102b781eb)
2019-10-10 12:46:01,978 [DEBUG] subscription-manager:28889:MainThread @identity.py:138 - Loading consumer info from identity certificates.
2019-10-10 12:46:01,979 [DEBUG] subscription-manager:28889:MainThread @connection.py:808 - Environment variable NO_PROXY= will be used
2019-10-10 12:46:01,979 [INFO] subscription-manager:28889:MainThread @connection.py:905 - Connection built: host=puppet-proxy-1.nhl.net port=8443 handler=/rhsm auth=identity_cert ca_dir=/etc/rhsm/ca/ insecure=False
2019-10-10 12:46:01,980 [DEBUG] subscription-manager:28889:MainThread @connection.py:523 - Loaded CA certificates from /etc/rhsm/ca/: katello-server-ca.pem, katello-default-ca.pem
2019-10-10 12:46:01,980 [DEBUG] subscription-manager:28889:MainThread @connection.py:571 - Making request: GET /rhsm/status
2019-10-10 12:46:02,224 [INFO] subscription-manager:28889:MainThread @connection.py:618 - Response: status=200, request="GET /rhsm/status"
2019-10-10 12:46:02,224 [DEBUG] subscription-manager:28889:MainThread @connection.py:950 - Server has the following capabilities: [u'instance_multiplier', u'derived_product', u'vcpu', u'cert_v3', u'hypervisors_heartbeat', u'remove_by_pool_id', u'syspurpose', u'storage_band', u'cores', u'hypervisors_async', u'org_level_content_access', u'guest_limit', u'ram', u'batch_bind', u'combined_reporting']
2019-10-10 12:46:02,225 [DEBUG] subscription-manager:28889:MainThread @connection.py:523 - Loaded CA certificates from /etc/rhsm/ca/: katello-server-ca.pem, katello-default-ca.pem
2019-10-10 12:46:02,225 [DEBUG] subscription-manager:28889:MainThread @connection.py:571 - Making request: GET /rhsm/consumers/0cb1f61b-d648-4d7f-847a-56e102b781eb
2019-10-10 12:46:02,455 [INFO] subscription-manager:28889:MainThread @connection.py:618 - Response: status=401, request="GET /rhsm/consumers/0cb1f61b-d648-4d7f-847a-56e102b781eb"
2019-10-10 12:46:02,455 [ERROR] subscription-manager:28889:MainThread @connection.py:643 - Response: 401
2019-10-10 12:46:02,455 [ERROR] subscription-manager:28889:MainThread @connection.py:644 - JSON parsing error: Expecting ':' delimiter: line 1 column 9 (char 8)
2019-10-10 12:46:02,456 [ERROR] subscription-manager:28889:MainThread @managercli.py:189 - Error during registration: Server error attempting a GET to /rhsm/consumers/0cb1f61b-d648-4d7f-847a-56e102b781eb returned status 401
Unauthorized: Invalid credentials for request.
2019-10-10 12:46:02,456 [ERROR] subscription-manager:28889:MainThread @managercli.py:190 - Server error attempting a GET to /rhsm/consumers/0cb1f61b-d648-4d7f-847a-56e102b781eb returned status 401
Unauthorized: Invalid credentials for request.
Traceback (most recent call last):
File "/usr/lib64/python2.7/site-packages/subscription_manager/managercli.py", line 1332, in _do_command
type=self.options.consumertype
File "/usr/lib64/python2.7/site-packages/rhsmlib/services/register.py", line 104, in register
store.sync()
File "/usr/lib/python2.7/site-packages/syspurpose/files.py", line 282, in sync
remote_contents = self.get_remote_contents()
File "/usr/lib/python2.7/site-packages/syspurpose/files.py", line 341, in get_remote_contents
consumer = self.uep.getConsumer(self.consumer_uuid)
File "/usr/lib64/python2.7/site-packages/rhsm/connection.py", line 1167, in getConsumer
return self.conn.request_get(method)
File "/usr/lib64/python2.7/site-packages/rhsm/connection.py", line 726, in request_get
return self._request("GET", method, headers=headers)
File "/usr/lib64/python2.7/site-packages/rhsm/connection.py", line 752, in _request
info=info, headers=headers)
File "/usr/lib64/python2.7/site-packages/rhsm/connection.py", line 627, in _request
self.validateResponse(result, request_type, handler)
File "/usr/lib64/python2.7/site-packages/rhsm/connection.py", line 699, in validateResponse
handler=handler)
UnauthorizedException: Server error attempting a GET to /rhsm/consumers/0cb1f61b-d648-4d7f-847a-56e102b781eb returned status 401
Unauthorized: Invalid credentials for request.
Updated by 
Updated by 
Updated by 
Updated by