Foreman / Katello client registered but Status is unknown

sam1 · January 11, 2022, 3:03pm

Problem:
Foreman / Katello client registered but Status is unknown
[root@mail01 ~]# subscription-manager status
±------------------------------------------+
System Status Details
±------------------------------------------+
Overall Status: Unknown

System Purpose Status: Unknown

Expected outcome:
Expected to register

Foreman and Proxy versions:
foreman-3.0.1-1.el7
foreman-proxy-3.0.1-1.el7

Foreman and Proxy plugin versions:

Distribution and version:
Centos 7

Other relevant data:
Please note, the client is registered, but subscription manager status is unknown.
[root@mail01 ~]# subscription-manager repos --list
±---------------------------------------------------------+
Available Repositories in /etc/yum.repos.d/redhat.repo
±---------------------------------------------------------+
Repo ID: Default_Organization_CentOS_7_Linux_x86_64_CentOS_7_OS_x86_64
Repo Name: CentOS 7 OS x86_64
Repo URL: https://foreman.us-dc.lan/pulp/repos/Default_Organization/Production/
CentOS_7/custom/CentOS_7_Linux_x86_64/CentOS_7_OS_x86_64
Enabled: 1

Repo ID: Default_Organization_CentOS_7_Linux_x86_64_Storage_x86_64
Repo Name: Storage x86_64
Repo URL: https://foreman.us-dc.lan/pulp/repos/Default_Organization/Production/
CentOS_7/custom/CentOS_7_Linux_x86_64/Storage_x86_64
Enabled: 1

Repo ID: Default_Organization_CentOS_7_Linux_x86_64_CentOS_7_Extra_x86_64
Repo Name: CentOS 7 Extra x86_64
Repo URL: https://foreman.us-dc.lan/pulp/repos/Default_Organization/Production/
CentOS_7/custom/CentOS_7_Linux_x86_64/CentOS_7_Extra_x86_64
Enabled: 1

Repo ID: Default_Organization_CentOS_7_Linux_x86_64_Ansible_x86_64
Repo Name: Ansible x86_64
Repo URL: https://foreman.us-dc.lan/pulp/repos/Default_Organization/Production/
CentOS_7/custom/CentOS_7_Linux_x86_64/Ansible_x86_64
Enabled: 1

Repo ID: Default_Organization_CentOS_7_Linux_x86_64_CentOS_7_Updates_x86_64
Repo Name: CentOS 7 Updates x86_64
Repo URL: https://foreman.us-dc.lan/pulp/repos/Default_Organization/Production/
CentOS_7/custom/CentOS_7_Linux_x86_64/CentOS_7_Updates_x86_64
Enabled: 1

[root@mail01 ~]# subscription-manager status
±------------------------------------------+
System Status Details
±------------------------------------------+
Overall Status: Unknown

System Purpose Status: Unknown

Why is the system not being recognized?

lfu · January 11, 2022, 3:47pm

Could you try

subscription-manager refresh
subscription-manager status

If still got the same result, then check:

subscription-manager identity

sam1 · January 11, 2022, 9:15pm

Please note in regards to the suggestion:

[root@client ~]# subscription-manager status
±------------------------------------------+
System Status Details
±------------------------------------------+
Overall Status: Unknown

System Purpose Status: Unknown

[root@client ~]# subscription-manager refresh
Network error, unable to connect to server. Please see /var/log/rhsm/rhsm.log for more information.

[root@client ~]# subscription-manager identity
Unable to verify server’s identity: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618)

[root@client ~]#

here is a portscan against the host:

Starting Nmap 6.40 ( http://nmap.org ) at 2022-01-11 16:12 EST
Nmap scan report for foreman (172.17.4.177)
Host is up (0.00019s latency).
Not shown: 996 filtered ports
PORT STATE SERVICE
22/tcp open ssh
53/tcp closed domain
80/tcp open http
443/tcp open https
MAC Address: 00:50:56:B0:2B:4B (VMware)

I don’t believe there is anything blocking access.

More details:

]# tail -50 /var/log/rhsm/rhsm.log
self._send_output(message_body)
File “/usr/lib64/python2.7/httplib.py”, line 890, in _send_output
self.send(msg)
File “/usr/lib64/python2.7/httplib.py”, line 852, in send
self.connect()
File “/usr/lib64/python2.7/httplib.py”, line 1275, in connect
server_hostname=sni_hostname)
File “/usr/lib64/python2.7/ssl.py”, line 348, in wrap_socket
_context=self)
File “/usr/lib64/python2.7/ssl.py”, line 609, in init
self.do_handshake()
File “/usr/lib64/python2.7/ssl.py”, line 831, in do_handshake
self._sslobj.do_handshake()
SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618)
2022-01-11 16:10:04,893 [ERROR] subscription-manager:27689:MainThread @cache.py:224 - Consumer certificate is invalid
2022-01-11 16:10:14,177 [INFO] subscription-manager:27707:MainThread @connection.py:909 - Connection built: host=foreman.us-dc.lan port=443 handler=/rhsm auth=identity_cert ca_dir=/etc/rhsm/ca/ insecure=False
2022-01-11 16:10:14,186 [INFO] subscription-manager:27707:MainThread @connection.py:909 - Connection built: host=foreman.us-dc.lan port=443 handler=/rhsm auth=identity_cert ca_dir=/etc/rhsm/ca/ insecure=False
2022-01-11 16:10:14,186 [INFO] subscription-manager:27707:MainThread @connection.py:909 - Connection built: host=foreman.us-dc.lan port=443 handler=/rhsm auth=none
2022-01-11 16:10:14,195 [ERROR] subscription-manager:27707:MainThread @managercli.py:217 - Error: Unable to generate a new identity for the system
2022-01-11 16:10:14,195 [ERROR] subscription-manager:27707:MainThread @managercli.py:218 - [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618)
Traceback (most recent call last):
File “/usr/lib64/python2.7/site-packages/subscription_manager/managercli.py”, line 928, in _do_command
owner = self.cp.getOwner(consumerid)
File “/usr/lib64/python2.7/site-packages/rhsm/connection.py”, line 1243, in getOwner
return self.conn.request_get(method)
File “/usr/lib64/python2.7/site-packages/rhsm/connection.py”, line 730, in request_get
return self._request(“GET”, method, headers=headers)
File “/usr/lib64/python2.7/site-packages/rhsm/connection.py”, line 756, in _request
info=info, headers=headers)
File “/usr/lib64/python2.7/site-packages/rhsm/connection.py”, line 584, in _request
conn.request(request_type, handler, body=body, headers=final_headers)
File “/usr/lib64/python2.7/httplib.py”, line 1056, in request
self._send_request(method, url, body, headers)
File “/usr/lib64/python2.7/httplib.py”, line 1090, in _send_request
self.endheaders(body)
File “/usr/lib64/python2.7/httplib.py”, line 1052, in endheaders
self._send_output(message_body)
File “/usr/lib64/python2.7/httplib.py”, line 890, in _send_output
self.send(msg)
File “/usr/lib64/python2.7/httplib.py”, line 852, in send
self.connect()
File “/usr/lib64/python2.7/httplib.py”, line 1275, in connect
server_hostname=sni_hostname)
File “/usr/lib64/python2.7/ssl.py”, line 348, in wrap_socket
_context=self)
File “/usr/lib64/python2.7/ssl.py”, line 609, in init
self.do_handshake()
File “/usr/lib64/python2.7/ssl.py”, line 831, in do_handshake
self._sslobj.do_handshake()
SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618)