Red Hat NETWORK SATELLITE SERVER 3.7 Guide d'installation

John Ha Lana Brindley Daniel MacphersonAthene Chan David O'BrienRed Hat Satellite 5.6Reference GuideA guide for Red Hat Satellite advanced featur

Preface1. AudienceThe target audience for this guide includes system administrators who aim to manage updates forsystems within an internal network.2.

Table A.11. General::SNMP Check settingsField ValueSNMP OID*SNMP Community String* publicSNMP Port* 161SNMP Version* 2Timeout* 15Critical Maximum Valu

Table A.13. General::UDP Check settingsField ValuePort* 1SendExpectTimeout* 10Critical Maximum LatencyWarning Maximum LatencyA.4.6. General::Uptime (S

Table A.15. Linux::CPU Usage settingsField ValueTimeout* 15Critical Maximum CPU Percent UsedWarning Maximum CPU Percent UsedA.5.2. Linux::Disk IO Thro

Table A.17. Linux::Disk Usage settingsField ValueFile system* /dev/hda1Timeout* 15Critical Maximum File System Percent UsedWarning Maximum File System

Table A.19. Linux::Interface Traffic settingsField ValueInterface*Timeout* 30Critical Maximum Input RateWarning Maximum Input RateWarning Minimum Inpu

Table A.21. Linux::Memory Usage settingsField ValueInclude reclaimable memory noTimeout* 15Warning Maximum RAM FreeCritical Maximum RAM FreeA.5.8. Lin

Table A.23. Linux::Process Count Total settingsField ValueTimeout* 15Critical Maximum Process CountWarning Maximum Process CountA.5.10. Linux::Proces

A.5.11. Linux::Process RunningThe Linux::Process Running probe verifies that the specified process is functioning properly. It countseither processes

TIME_WAIT - The socket is waiting after close for remote shutdown transmission so it may handlepackets still in the network.CLOSE_WAIT - T he remote s

Table A.28. Linux::Users set tingsField ValueTimeout* 15Critical Maximum UsersWarning Maximum UsersA.5.15. Linux::Virtual MemoryThe Linux::Virtual Mem

Choose System → Preferences → Mouse from the main menu bar to launch MousePreferences. In the Buttons tab, select the Left-handed mouse check box and

^ beginning of line$ end of line. match one char* match zero or m ore chars[] match one character set, e.g. '[Ff]oo'[^] match not in set &ap

Table A.31. LogAgent::Log Size settingsField ValueLog file* /var/log/messagesTimeout* 20Critical Maximum SizeWarning Maximum SizeWarning Minimum SizeC

The MySQL::Opened T ables probe monitors the MySQL server and collects the following metric:Opened Tables - T he tables that have been opened since th

Table A.35. MySQL::Query Rat e settingsField ValueUsernamePasswordMySQL Port* 3306Timeout 15Critical Maximum Query RateWarning Maximum Query RateWarni

Table A.37. Network Services::DNS Lookup sett ingsField ValueHost or Address to look upTimeout* 10Critical Maximum Query TimeWarning Maximum Query Tim

Table A.39. Network Services::IMAP Mail settingsField ValueIMAP Port* 143Expect* OKTimeout* 5Critical Maximum Remote Service LatencyWarning Maximum Re

Table A.4 1. Network Services::Ping sett ingsField ValueIP Address (defaults to system IP)Packets to send* 20Timeout* 10Critical Maximum Round-Trip Av

Requirements - T he Red Hat Network monitoring daemon (rhnm d) must be running on the monitoredsystem to execute this probe.Table A.4 3. Network Servi

This probe confirms that it can connect to the HTTPS port on the specified host and retrieve thespecified URL. If no URL is specified, the probe fetch

This probe confirms it can connect to the HTTP port on the specified host and retrieve the specifiedURL. If no URL is specified, the probe will fetch

static int kvm _vm_ioctl_deassign_device(struct kvm *kvm, struct kvm_assigned_pci_dev *assigned_dev){ int r = 0; struc

Finally, customers using these Oracle probes against a database using Oracle's Multi-Threaded Server(MT S) must contact Red Hat support to have e

Table A.50. Oracle::Blocking Sessions set tingsField ValueOracle SID*Oracle Username*Oracle Password*Oracle Port* 1521Time Blocking (seconds)* 20Timeo

Table A.52. Oracle::Client Connectivity sett ingsField ValueOracle Hostname or IP address*Oracle SID*Oracle Username*Oracle Password*Oracle Port* 152

Table A.54 . Oracle::Disk Sort Ratio sett ingsField ValueOracle SID*Oracle Username*Oracle Password*Oracle Port* 1521Timeout* 30Critical Maximum Disk

Table A.56. Oracle::Index Extents settingsField ValueOracle SID*Oracle Username*Oracle Password*Oracle Port* 1521Index Owner* %Index Name* %Timeout* 3

Table A.58. Oracle::Locks settingsField ValueOracle SID*Oracle Username*Oracle Password*Oracle Port* 1521Timeout* 30Critical Maximum Active LocksWarni

For example, a table that starts with 10 MB of space and that is configured with an extent size of 1 MBand max extents of 10 can grow to a maximum of

Table A.61. Oracle::T ablespace Usage settingsField ValueOracle SID*Oracle Username*Oracle Password*Oracle Port* 1521Tablespace Name* %Timeout* 30Crit

Table A.63. Red Hat Satellite::Disk Space set tingsField ValueDevice Pathname* /dev/hda1Critical Maximum File System UsedWarning Maximum File System U

Table A.66. Red Hat Satellite::Latency settingsField ValueCritical Maximum Probe Latency AverageWarning Maximum Probe Latency AverageA.10.5. Red Hat S

Portal at http://access.redhat.com. Through the customer portal, you can:search or browse through a knowledgebase of technical support articles about

Table A.69. Red Hat Satellite::Process Counts settingsField ValueCritical Maximum Blocked ProcessesWarning Maximum Blocked ProcessesCritical Maximum C

Table A.71. Red Hat Satellite::Process Health settingsField ValueCommand NameProcess ID (PID) fileTimeout* 15Critical Maximum CPU UsageWarning Maximum

value exceeds the Warning threshold.Table A.74 . Red Hat Satellite::Users set tingsField ValueCritical Maximum UsersWarning Maximum UsersProbes 129

Revision HistoryRevision 4 -33.4 00 2013-10-31 Rüdiger LandmannRebuild with publican 4.0.0Revision 4 -33 Fri Sep 27 2013 Dan MacphersonFinal version o

Revision 4 -18 Thu Jul 12 2013 Dan MacphersonFinal beta updatesRevision 4 -17 Thu Jul 12 2013 Dan MacphersonBeta updateRevision 4 -16 Thu Jul 11 2013

Revision 4 -4 Wed Aug 15 2012 Athene ChanBZ#773647 updated "create new account" screenshotRevision 4 -3 Thu Aug 9 2012 Athene ChanStaging do

BZ#683466 - MonitoringRevision 1-28 T hu March 24 2011 Lana BrindleyBZ#679621 - Fix entities for translationBZ#681788 - NotificationsRevision 1-27 Mo

Chapter 1. Red Hat Satellite InformationThis section covers various topics on Red Hat Satellite advanced configuration.1.1. Command Line Configuration

Table 1.1. rhn-actions-control optionsOption Description--enable-deploy Allow rhncfg-client to deploy files.--enable-diff Allow rhncfg-client to diff

Files in config channel 'config-channel-14' /etc/exam ple-config.txt /etc/rhn/rhn.confYou may then wonder where the second version of /etc/e

[root@testsatellite root]# rhncfg-client diff--- /etc/test+++ /etc/test 2013-08-28 00:14:49.405152824 +1000@@ -1 +1,2 @ @ This is the first line+This

configuration values from the Red Hat Update Agent. When run as a user other than root, you mayhave to make configuration changes within the ~/.rhncfg

The output resembles the following:Pushing to channel example-channelLocal file >/path/to/file -> remote file /new/path/to/file.txtThe following

Red Hat Satellite 5.6 Reference GuideA guide for Red Hat Satellite advanced featuresEdition 1Jo hn HaRed Hat Engineering Co ntent ServicesLana Brindle

Table 1.5. rhncfg-m anager diff optionsOption Description-c CHANNEL, --channel=CHANNEL Get file(s) from this config channel-r REVISION, --revision=REV

The output resembles the following:Copying /tmp/dest_path/exam ple-config.txt -> \ blah2/tmp/dest_path/example-config.txtThe following table lists

Available config channels: example-channel example-channel2 example-channel3 config-channel-14 config-channel-17Note that this does not list local_ove

rhncfg-manager update \ --channel =channel-label --dest-file=/path/to/file.txt /local/path/to/fileThe output resembles the following:Pushing to channe

Monitoring provides both real time and historical state change information, as well as specific metricdata. It provides notifications of system failur

NoteIt is recommended that you leave the monitoring configuration values as the default values.Sendmail needs to be configured to use notifications.1.

The rhnmd package can be found in the Red Hat Network Tools channel for all Red Hat EnterpriseLinux distributions. To install it:1. Subscribe the sys

the SSH key to. Click the Manage button at the top to finish.4. From the System Set Manager, click Run remote comm ands, then in the Script text box

2. Navigate to Users and select the username. On the User Details page, click on NotificationMethods → create new method.3. Enter an intuitive, desc

acknowledgment email. Enable email reply redirects by opening /etc/aliases and adding thefollowing line:rogerthat01: "| /etc/smrsh/ack_queuer.

Legal Not iceCopyright © 2013 Red Hat, Inc.This document is licensed by Red Hat under the Creative Commons Attribution-ShareAlike 3.0 UnportedLicense

NoteSince both the notification method name and address can be edited, consider updating themethod rather than deleting it. T his redirects notificati

“Establishing T hresholds” for best practices regarding these thresholds.9. When finished, click Create Probe. Remember, you must commit your monitor

ImportantThe Monitoring entitlement is required to view this tab.The Probe Status page is shown by default when you click Monitoring in the top naviga

ImportantThe Monitoring entitlement is required to view this tab.The probes that have crossed their WARNING thresholds.1.2.6.1.3. Probe Status ⇒ Unkno

ImportantThe Monitoring entitlement is required to view this tab.Identifies the selected probe's status and when it last ran, while providing the

5. Organization/Scout/Probe: This option allows you to select the organization, scout(s), or probe(s)to which this filter applies. To select multiple

NoteSendmail must be configured correctly on your Red Hat Satellite and each client system towhich the Probe Suite is applied must have the rhnm d dae

3. Check the box next to the system(s) you wish to remove from the Probe Suite.4. Click the Remove System (s) from Probe Suite button.Finally, as w

NoteMaster and Slave are legacy terms that carry connotations that are not enforced by the ISSprotocol. Please keep their restricted meanings, as desc

NoteChoosing the Sync All Orgs to Slave? option on the Master Setup page willoverride any specifically selected organizations in the Local Organizatio

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Begin the synchronization by running the satellite-sync command:satellite-sync -c your-channelNoteCommand line options that are manually provided with

Procedure 1.5. Configuring the Mast er Satellit e Server1. Enable the inter-satellite synchronization (ISS) feature in the /etc/rhn/rhn.conf file:dis

Slave Satellite--sp=SLAVE_PASSWORD, --slave-password=SLAVE_PASSWORD is the password for theSatellite Administrator login on the Slave Satellite--ct, -

Example 1.1. Import Content from Master to Slave SatelliteThis example imports content from master to slave satellite:satellite-sync --parent-sat=mast

Example 1.5. Synchronized SlavesIn this example, the master satellite provides data directly to the slaves and changes are regularlysynchronized.Examp

Chapter 2. Red Hat Satellite and Solaris-specific InformationThis is a section on using Red Hat Satellite with Solaris systems.2.1. UNIX Support Guide

The Red Hat Network Configuration Client (rhncfg-client), which executes all configurationactions scheduled from the SatelliteThe Red Hat Network Conf

installation process, as pictured:Figure 2.1. Enabling UNIX Support During Satellite Installation2. After the Satellite has been installed:Enable UNI

Figure 2.2. Enabling UNIX Support After Satellite InstallationClick the Update Configuration button to confirm the change.3. Finally, create a base c

sections explain these steps in detail.2.1.3.1. Downloading and Installing Additional PackagesThis section steps you through the process of downloadin

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

NoteSolaris package archive names differ from the name of the installed package. For example, thepackage archive libgcc<version>-sol<solaris-

SMClibgcc and SMCosslg may also be included in the tarball.2.1.3.1.4 . Installing the Red Hat Net work PackagesChange to the uncompressed directory an

To install the certificate, follow these steps for each client:1. Download the SSL certificate from the /var/www/htm l/pub/ directory of the Red Hat

Now that you have installed Red Hat Network-specific packages, implemented SSL, and reconfiguredyour client systems to connect to the Red Hat Satellit

Red Hat Network treats patches similarly to packages; they are listed and installed in the same way andwith the same interface as normal packages. Pat

Table 2.2. solaris2mpm opt ionsOption Description--version Displays the program's version number and exits-h, --help Displays this information an

available options for rhnsd on Solaris:Table 2.3. rhnsd OptionsOption Description-f, --foreground Run in foreground-i, --interval=MINS Connect to Red

through the Satellite's website. This feature allows you to run virtually any (compatible) application orscript on any system in your domain with

Chapter 3. Red Hat Satellite Proxy InformationThis is a section on using Red Hat Satellite Proxy with the Red Hat Network Package Manager.3.1. Using t

Table 3.1. rhn_package_m anager opt ionsOption Description-v, --verbose Increase verbosity.-dDIR, --dir=DIR Process packages from directory DIR.-cCHAN

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

The steps will be further discussed in the next sections.3.1.1. Creating a Private ChannelBefore local packages can be provided through the Red Hat Ne

NoteIf a channel name is not specified, the packages are not added to any channel. T he packagescan then be added to a channel using the Red Hat Netwo

Chapter 4. Custom Package ManagementThis chapter provides an overview of how to build packages for successful delivery via Red HatNetwork. Topics cove

Keeping sources pristine may seem important only to developers, but it results in higher qualitysoftware for end users as well.4.1.2. Red Hat Network

ImportantDo not create an RPM by archiving files and then unarchiving them in the post-install script. Thisdefeats the purpose of RPM.If the files in

6. Press y to confirm your decision.7. Provide a User-ID containing your name, your email address, and an optional comment. Each ofthese is requeste

4.2.2. Signing packagesBefore signing packages, configure the ~/.rpm m acros file to include the following:%_signature gpg%_gpg_nam e B7085C8AReplace

For Red Hat Enterprise Linux 3 or later, use the following command:rpm --impo rt /path/to/YOUR-R PM-GPG-KEYOnce the GPG key has been successfully adde

Q:A:Q:A:Q:A:Chapter 5. TroubleshootingThis chapter provides tips for determining the cause of and resolving the most common errorsassociated with Red

Q:A:Q:A:Q:A:Q:A:Q:A:Q:A:My Satellite is failing. Any idea why?Do not subscribe the Red Hat Satellite to any of the following child channels available

A.5.10. Linux::Process HealthA.5.11. Linux::Process RunningA.5.12. Linux::Swap UsageA.5.13. Linux::TCP Connections by StateA.5.14. Linux::UsersA.5.15.

Q:A:Q:A:Make sure that Red Hat Satellite is using Network T ime Protocol (NTP) and set to theappropriate time zone. T his also applies to all client s

Q:A:Q:A:# openssl x509 -dates -noout -in /etc/httpd/conf/ssl.crt/server.crtBy default, the server certificate has a one-year life while client certifi

users and organizations. Rather than gathering such information manually from the Satelliteinterface, Red Hat Satellite includes the spacewalk-report

Table 5.2. spacewalk-report ReportsReport Invoked as DescriptionSystem Inventory inventory List of systems registered to the server, togetherwith hard

Q:A:Q:A:Q:A:Q:A:Q:A:invocations and their options.How do I work out what version of the database schema I have?To determine the version of your datab

ERROR: unhandled exception occurred:Traceback (most recent call last): File "/usr/bin/rhn-satellite-activate", line 45, in ? sys.exit(ab

Q:A:Q:A:Q:A:file=answer file option. Ensure the answer file has the HT TP proxy information specified asfollows:rhn-http-proxy = <hostname>:<

Q:A:I'm getting an "Internal Server Error" complaining about ASCII when I try to edit thekickstart profile. What's going on?If y

Q:A:# rhn-satellite restartShutting down rhn-satellite...Stopping RHN Taskomatic...Stopped RHN Taskom atic.Stopping cobbler daem on:

Q:A:Q:A:Q:A:127.0.0.1 localhost.localdomain.com localhostThen, save the file and attempt to re-run the Red Hat Network client applications or the Apac

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Q:A:# cobbler checkThe following potential problems were detected:#0: reposync is not installed, need for cobbler reposync, install/upgrade yum-utils?

Q:A:# grep chkconfig /var/log/httpd/access_log10.10.77.131 - - [19/Aug/2011:15:12:36 -0400] "GET /rhn/comm on/DownloadFile.do?url=/ks/dist/ks-rhe

Q:A:Subject: WEB TRACEBACK from satellite.example.comDate: Wed, 19 Aug 2011 20:28:01 -0400From :Red Hat Satellite <[email protected]>To: admin

Q:A:Q:A:# begin Red Hat management server registrationmkdir -p /usr/share/rhn/wget http://satellite.example.com /pub/RHN-ORG-TRUSTED-SSL-CERT -O /usr/

Q:A:Q:A:ImportantRed Hat Satellite RPMs expect the Cobbler kickstart and snippet directories to be in theirdefault locations, do not change them.5.12.

Q:A:runprobe to examine the complete output of the probe. Note that by default, rhn-runprobeworks in test mode, meaning no results are entered in the

Q:A:Q:A:Q:A:Q:A:Q:4. A number of systems in the organization should now be in an unentitled state. Thenumber of systems unentitled in the organizatio

A:Q:A:Q:A:Make sure /etc/sysconfig/rhn/systemid is owned by root.apache with the permissions0640.Read the log files. A list is available on the Log Fi

Q:A:Q:A:In a text editor, remove the machine host information from the file, it should look like so:127.0.0.1 localhost.localdomain.com localhostSave

3. Delete the contents of that directory: rm -fv /var/cache/rhn/*4. Restart both services:service squid startservice httpd startThe same task can

Red Hat Satellite 5.6 Reference Guide6

NoteIf you have exhausted these troubleshooting steps or want to defer them to Red Hat Networkprofessionals, Red Hat recommends you take advantage of

Red Hat Satellite 5.6 Reference Guide88

ProbesMonitoring-entitled systems can have probes applied to them that constantly confirm their health and fulloperability. T his section lists the av

otherwise indicated. Exceptions to these rules are noted within the individual probe references.ImportantSome probes have thresholds based on time. In

A.2.2. Apache::TrafficThe Apache::Traffic probe monitors the requests on an Apache web server and collects the followingmetrics:Current Requests - The

The probes in this section (with the exception of JDBC Connection Pool) can be configured to monitorthe properties of any BEA WebLogic 6.x and higher

A.3.2. BEA WebLogic::Heap FreeThe BEA WebLogic::Heap Free probe collects the following metric:Heap Free - The percentage of free heap space.This probe

Table A.6. BEA WebLogic::JDBC Connect ion Pool settingsField ValueSNMP Community String* publicSNMP Port* 161SNMP Version* 1BEA Domain Admin ServerBEA

Table A.8. BEA WebLogic::Servlet settingsField ValueSNMP Community String* publicSNMP Port* 161SNMP Version* 1BEA Domain Admin ServerBEA Server Name*

The remote program will need to output some iteration of the following code to STDOUT :<perldata> <hash> <itemkey="data">1