Red Hat NETWORK - USER 3.0 Guía de instalación Pagina 1

Red Hat NetworkSatellite 5.4Installation GuideRed Hat Network Satellite

Chapter 1. Introduction6• Satellite Upgrade Documentation Package (rhn-upgrade)• New Installation ISO1.6.1. Satellite CertificateTo obtain a Satellite

New Installation ISO71. Log into RHN2. Click on Software Downloads on the left-hand side of the screen3. Navigate to the version of Red Hat Enterprise

8

Chapter 2.9RequirementsThese requirements must be met before installation.2.1. Software RequirementsTo perform an installation, the following software

Chapter 2. Requirements10NoteAdditional packages beyond @Base are required to install Red Hat Network Satellite. TheSatellite installer will prompt yo

s/390 Hardware Requirements11Stand-Alone Database Embedded Database12 GB storage for the database repository, in the/rhnsat partition (local storage o

Chapter 2. Requirements12Stand-Alone Database Embedded DatabaseRecommended - 512 MB swap on VDISK + 1 GBswap on ECKD DASDRecommended - 512 MB swap on

Database Requirements13For instance, an RHN Satellite containing 10 channels serving 10,000 systems would require 1.92 GBfor its clients and 640 MB fo

Chapter 2. Requirements14NoteEnsure that the NLS/charset setting is set to "UTF8"' when using an external database, not'AL32UTF8&a

Additional Requirements15Note that Red Hat does not provide static IP addresses for RHN as the IP is subject to change. If you want to disable locatio

Installation GuideRed Hat Network Satellite 5.4 Installation GuideRed Hat Network SatelliteEdition 1Copyright © 2010 Red Hat, Inc.The text of and illu

Chapter 2. Requirements16If you do not have an Entitlement Certificate at installation time, contact Red Hat Global SupportServices at:https://www.red

Additional Requirements17NoteIf you are running a disconnected Satellite that is not registered to RHN Hosted the installationprogram will note and re

18

Chapter 3.19Example TopologiesThe RHN Satellite can be configured in multiple ways. Select one method depending on the followingfactors:• The total nu

Chapter 3. Example Topologies20Figure 3.2. Multiple Satellite Horizontally Tiered Topology3.3. Satellite-Proxy Vertically Tiered TopologyAn alternativ

Satellite-Proxy Vertically Tiered Topology21Figure 3.3. Satellite-Proxy Vertically Tiered Topology

22

Chapter 4.23InstallationThis chapter describes the initial installation of the RHN Satellite. It presumes the prerequisites listedin Chapter 2, Requir

Chapter 4. Installation244. Ensure that the RHN Entitlement Certificate has been copied onto the Satellite's file system. Itcan be named anything

RHN Satellite Installation Program25** GPG: Initializing GPG and importing RHN key. ** GPG: Creating /root/.gnupg directory10. The next step creates a

iii1. Introduction 11.1

Chapter 4. Installation26Visit https://your-satellite.example.com to create the satellite administrator account.15. Follow the on-screen instructions

RHN Satellite Installation Program27Figure 4.2. Final Configuration Prompt17. The Satellite Configuration - General Configuration page allows you to a

Chapter 4. Installation28Figure 4.3. General Configuration18. The RHN Satellite Configuration - Monitoring page allows you to configure the monitoring

RHN Satellite Installation Program29Figure 4.4. Monitoring19. The RHN Satellite Configuration - Certificate page allows you to upload a new Satellitec

Chapter 4. Installation30Figure 4.5. Certificate20. The RHN Satellite Configuration - Bootstrap page allows you to generate a bootstrap script forredi

RHN Satellite Installation Program31Figure 4.6. Bootstrap21. The RHN Satellite Configuration - Restart page contains the final step in configuring the

Chapter 4. Installation3222. Once the Satellite has restarted, the countdown notice disappears. You are now free to beginusing your Satellite.Figure 4

Automated RHN Satellite Server Installation33Option Usage--skip-gpg-key-import Do not import Red Hat's GPG key.--skip-ssl-cert-generation Do not

Chapter 4. Installation34proxyPassword=<proxy-password>3. Register the system to RHN.4. Begin the installation of RHN Satellite with the disconn

MySQL Installation35rogerthat01: | /etc/smrsh/ack_enqueuer.plNext, edit the /etc/mail/sendmail.mc file and change:"DAEMON_OPTIONS(`Port=smtp,Addr

Installation Guideiv6.4.3. Configuring the Slave RHN Satellite Servers ... 516.5. Using Inter-Satel

36

Chapter 5.37EntitlementsThe RHN Satellite, like RHN itself, provides all services to customers through the setting ofentitlements. For RHN, entitlemen

Chapter 5. Entitlements38The initial RHN Entitlement Certificate is generated by a member of the RHN team and emailed to aconsultant or customer prior

Activating the Satellite39Option Description--no-ssl For testing only - Disable SSL.To use these options, insert the option and the appropriate value,

Chapter 5. Entitlements40When the grace period is over, the Satellite becomes unavailable: users will be unable to login to theweb UI and all client-s

Chapter 6.41Importing and SynchronizingAfter installing the RHN Satellite, you must provide it with the packages and channels to be servedto client sy

Chapter 6. Importing and Synchronizing42Table 6.1. RHN Satellite Exporter OptionsOption Description-d, --dir= Place the exported information into this

Importing with RHN Satellite Synchronization Tool43Although it is not a requirement for the export to succeed, the export will be most useful whenperf

Chapter 6. Importing and Synchronizing44The RHN Satellite Synchronization Tool works incrementally, or in steps. For it to obtain Erratainformation, i

Preparing for Import from Local Media45Option Description--force-all-packages Forcibly process all package data withoutconducting a diff.--debug-level

Chapter 1.1IntroductionRHN Satellite provides a solution to organizations requiring absolute control over and privacy of themaintenance and package de

Chapter 6. Importing and Synchronizing466.2.2.1. Preparing Channel Content ISOsChannel Content ISOs are special collections that contain both packages

Running the Import471. Log into the machine as root.2. Create a target directory for the files, such as:mkdir /var/rhn-sat-import/3. Make the export d

Chapter 6. Importing and Synchronizing481.Populating the tables describing common features for channels (channel families). This canalso be accomplish

Synchronizing Errata and Packages Directly via RHN493. After the analysis of the export data, any differences are imported into the RHN Satellite data

Chapter 6. Importing and Synchronizing506.4.1. Recommended Models for Inter-Satellite SyncThe Inter-Satellite Sync feature for Satellite provides faci

Configuring the Master RHN Satellite Server51Figure 6.3. Slave Satellites are maintained exactly as the master SatelliteIn this example, the master Sa

Chapter 6. Importing and Synchronizing52satellite-sync --iss-parent=master.satellite.example.com --ca-cert=/usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT --l

Bi-directional sync53satellite-sync --iss-parent=staging-satellite.example.com -c custom-channel6.5.2. Bi-directional syncAdministrators can configure

Chapter 6. Importing and Synchronizing543. Import content from RHN Hosted (assuming the system is registered and activated. If the sourceorg is not sp

Chapter 7.55TroubleshootingThis chapter provides tips for determining the cause of and resolving the most common errorsassociated with RHN Satellite.

Chapter 1. Introduction2• Security — an end-to-end secure connection is maintained from the client systems to the RHNSatellite without connecting to t

Chapter 7. Troubleshooting56Report Invoked as DescriptionEntitlements entitlements Lists all organizations on the Satellite with theirsystem or channe

General Problems57Component/Task Log File LocationRHN Satellite SynchronizationTool/var/log/rhn/rhn_server_satellite.logMonitoring infrastructure /var

Chapter 7. Troubleshooting58service oracle statusTo determine the version of your database schema, run the command:rhn-schema-versionTo derive the cha

Connection Errors59127.0.0.1 this_machine.example.com this_machine localhost.localdomain \ localhostFirst, in a text editor, remove the offending mach

Chapter 7. Troubleshooting60• Ensure the RHN Satellite is using Network Time Protocol (NTP) and set to the appropriate timezone. This also applies to

Satellite Debugging by Red Hat61[root@miab root]# satellite-debugCollecting and packaging relevant diagnostic information.Warning: this may take some

62

Chapter 8.63MaintenanceBecause of the RHN Satellite's unique environment, its users are provided with abilities not availableto any other Red Hat

Chapter 8. Maintenance64WarningIt is very important to read the Errata Advisory before applying any RHN Satellite Errata Updates.Additional configurat

Using RHN DB Control65Backing up only these files and directories would require reinstalling the RHN Satellite ISO RPMs andreregistering the Satellite

How it Works31.4. How it WorksRHN Satellite consists of the following components:• Database — for the Stand-Alone Database, this may be the organizati

Chapter 8. Maintenance66Option Descriptionextend Increase the RHN Oracle tablespacegather-stats PCT Gather statistics on RHN Oracle database objects.

Backing up the Database678.4.2. Backing up the DatabaseRed Hat recommends performing nightly backups of the Embedded Database and moving theresulting

Chapter 8. Maintenance68Then switch to the oracle user and issue this command, including the directory containing the backup,to begin the restoration:

Changing the Satellite Hostname69If your original SSL certificate does not take your high-availability solution into account, you maycreate a new one

Chapter 8. Maintenance70openssl rsa -in path/RHN-ORG-PRIVATE-SSL-KEYThen enter passphrase when prompted.satellite-hostname-rename requires one mandato

Deleting Users71Figure 8.1. Internal ToolsTo refresh the view of channels that have been updated but do not yet reflect those modifications onthe Sate

Chapter 8. Maintenance72the RHN website. In the resulting User List, click the name of the user to be removed. This takes youto the User Details page.

Configuring Satellite Search73Figure 8.3. User Delete ConfirmationMany other options exist for managing users. You can find instructions for them in t

Chapter 8. Maintenance74• search.errata.advisory_score_threshold : minimum score an errata advisory result needs to bereturned back as a query result

Enabling Push to Clients75Pluggable Authentication Modules (PAM). PAM is a suite of libraries that helps system administratorsintegrate the Satellite

Chapter 1. Introduction4The RHN Satellite management tools are used to synchronize the RHN Satellite database andpackage repository with Red Hat Netwo

Chapter 8. Maintenance76ImportantSSL must be employed between the Satellite and its clients systems for this feature to work. If theSSL certificates a

77Appendix A. Sample RHN SatelliteConfiguration FileThe /etc/rhn/rhn.conf configuration file for the RHN Satellite provides a means for you toestablis

78

79Appendix B. Revision HistoryRevision 1-29 Fri Feb 27 2009

80

81IndexSymbols/etc/nsswitch.conf , 58/etc/rhn/rhn.conf , 58Aadvantages, 1Apache, 63Apache HTTP, 3automating Satellite synchronization, 74Bbacking up t

Index82osa-dispatcher , 76osad , 76PPAM authenticationimplementation, 74port 443, 14port 4545, 14port 5222, 14port 5269, 14port 80, 14RRed Hat Network

Upgrades53. Your Red Hat contact creates a Satellite-entitled account on the RHN website and sends you thelogin information.4. Log into the RHN websit