[Katello 2.2] updating (foreman) SSL cert appears to break foreman-proxy service

Having used katello-certs-check with success I went on to:

$ katello-installer --certs-server-cert "katello-server.cer"
–certs-server-cert-req "katello-server.csr" --certs-server-key
"katello-server.key" --certs-server-ca-cert "CAchain.cer"
–certs-update-server --certs-update-server-ca
<snip>
Success!
<snip>

But now /etc/init.d/foreman-proxy won't stay up and a product sync returns:

('Connection aborted.', gaierror(-3, 'Temporary failure in name
resolution'))

I've run an strace and see nothing of note (I can attach the output if
needed) and in messages:

Aug 5 11:36:01 katello-server pulp: kombu.transport.qpid:INFO: Connected
to qpid with SASL mechanism PLAIN
Aug 5 11:36:01 katello-server pulp: celery.worker.strategy:INFO: Received
task:
pulp.server.async.tasks._queue_reserved_task[218e021d-4d5e-4154-8065-f6a06d7d9325]
Aug 5 11:36:01 katello-server pulp: kombu.transport.qpid:INFO: Connected
to qpid with SASL mechanism PLAIN
Aug 5 11:36:01 katello-server pulp: celery.worker.strategy:INFO: Received
task:
pulp.server.managers.repo.sync.sync[dd04c1fc-64f6-41f2-ace4-6c88f85f271a]
Aug 5 11:36:01 katello-server pulp: celery.worker.job:INFO: Task
pulp.server.async.tasks._queue_reserved_task[218e021d-4d5e-4154-8065-f6a06d7d9325]
succeeded in 0.0711604759999s: None
Aug 5 11:36:01 katello-server pulp: celery.worker.strategy:INFO: Received
task:
pulp.server.async.tasks._release_resource[21346534-a746-46f0-9023-73c1c504810f]
Aug 5 11:36:01 katello-server pulp:
pulp_rpm.plugins.importers.yum.sync:INFO: Downloading metadata from
http://mirror.centos.org/centos-5/5/os/x86_64/.
Aug 5 11:36:01 katello-server pulp:
requests.packages.urllib3.connectionpool:INFO: Starting new HTTP connection
(1): mirror.centos.org
Aug 5 11:36:02 katello-server pulp: nectar.downloaders.threaded:ERROR:
(10017-21216) ('Connection aborted.', gaierror(-3, 'Temporary failure in
name resolution'))
Aug 5 11:36:02 katello-server pulp: nectar.downloaders.threaded:ERROR:
(10017-21216) Traceback (most recent call last):
Aug 5 11:36:02 katello-server pulp: nectar.downloaders.threaded:ERROR:
(10017-21216) File
"/usr/lib/python2.6/site-packages/nectar/downloaders/threaded.py", line
190, in _fetch
Aug 5 11:36:02 katello-server pulp: nectar.downloaders.threaded:ERROR:
(10017-21216) response = session.get(request.url, headers=headers)
Aug 5 11:36:02 katello-server pulp: nectar.downloaders.threaded:ERROR:
(10017-21216) File
"/usr/lib/python2.6/site-packages/requests/sessions.py", line 469, in get
Aug 5 11:36:02 katello-server pulp: nectar.downloaders.threaded:ERROR:
(10017-21216) return self.request('GET', url, **kwargs)
Aug 5 11:36:02 katello-server pulp: nectar.downloaders.threaded:ERROR:
(10017-21216) File
"/usr/lib/python2.6/site-packages/requests/sessions.py", line 457, in
request
Aug 5 11:36:02 katello-server pulp: nectar.downloaders.threaded:ERROR:
(10017-21216) resp = self.send(prep, **send_kwargs)
Aug 5 11:36:02 katello-server pulp: nectar.downloaders.threaded:ERROR:
(10017-21216) File
"/usr/lib/python2.6/site-packages/requests/sessions.py", line 569, in send
Aug 5 11:36:02 katello-server pulp: nectar.downloaders.threaded:ERROR:
(10017-21216) r = adapter.send(request, **kwargs)
Aug 5 11:36:02 katello-server pulp: nectar.downloaders.threaded:ERROR:
(10017-21216) File
"/usr/lib/python2.6/site-packages/requests/adapters.py", line 407, in send
Aug 5 11:36:02 katello-server pulp: nectar.downloaders.threaded:ERROR:
(10017-21216) raise ConnectionError(err, request=request)
Aug 5 11:36:02 katello-server pulp: nectar.downloaders.threaded:ERROR:
(10017-21216) ConnectionError: ('Connection aborted.', gaierror(-3,
'Temporary failure in name resolution'))
Aug 5 11:36:02 katello-server pulp:
pulp_rpm.plugins.importers.yum.sync:ERROR: (10017-89984) sync failed
Aug 5 11:36:02 katello-server pulp:
pulp_rpm.plugins.importers.yum.sync:ERROR: (10017-89984) Traceback (most
recent call last):
Aug 5 11:36:02 katello-server pulp:
pulp_rpm.plugins.importers.yum.sync:ERROR: (10017-89984) File
"/usr/lib/python2.6/site-packages/pulp_rpm/plugins/importers/yum/sync.py",
line 104, in run
Aug 5 11:36:02 katello-server pulp:
pulp_rpm.plugins.importers.yum.sync:ERROR: (10017-89984) metadata_files
= self.get_metadata()
Aug 5 11:36:02 katello-server pulp:
pulp_rpm.plugins.importers.yum.sync:ERROR: (10017-89984) File
"/usr/lib/python2.6/site-packages/pulp_rpm/plugins/importers/yum/sync.py",
line 198, in get_metadata
Aug 5 11:36:02 katello-server pulp:
pulp_rpm.plugins.importers.yum.sync:ERROR: (10017-89984) raise
FailedException(str(e))
Aug 5 11:36:02 katello-server pulp:
pulp_rpm.plugins.importers.yum.sync:ERROR: (10017-89984) FailedException:
('Connection aborted.', gaierror(-3, 'Temporary failure in name
resolution'))
Aug 5 11:36:03 katello-server pulp: pulp.server.event.http:INFO:
(10017-89984) {'call_report': {u'exception': None, u'task_type':
u'pulp.server.managers.repo.sync.sync', u'task_id':
u'dd04c1fc-64f6-41f2-ace4-6c88f85f271a', u'tags':
[u&#39;pulp:repository:Default_Organization-CentOS5-OS&#39;, u&#39;pulp:action:sync&#39;],
u'finish_time': None, u'_ns': u'task_status', u'start_time':
u'2015-08-05T10:36:01Z', u'traceback': None, u'spawned_tasks': [],
u'progress_report': {u'yum_importer': {u'content': {u'size_total': 0,
u'items_left': 0, u'items_total': 0, u'state': u'NOT_STARTED',
u'size_left': 0, u'details': {u'rpm_total': 0, u'rpm_done': 0,
u'drpm_total': 0, u'drpm_done': 0}, u'error_details': []}, u'comps':
{u'state': u'NOT_STARTED'}, u'distribution': {u'items_total': 0, u'state':
u'NOT_STARTED', u'error_details': [], u'items_left': 0}, u'errata':
{u'state': u'NOT_STARTED'}, u'metadata': {u'state': u'FAILED', u'error':
u"('Connection aborted.', gaierror(-3, 'Temporary failure in name
resolution'))"}}}, u'state': u'running', u'worker_name':
u'reserved_resource_worker-1@katello-server.rnet.dstl.gov.uk', u'result':
None, u'error': None, u'_id': ObjectId('55c1e711c328ac60d569042d'), u'id':
u'55c1e711388e5827a8fec53d'}, 'event_type': 'repo.sync.finish', 'payload':
{'importer_id': u'yum_importer', 'exception': None, 'repo_id':
u'Default_Organization-CentOS5-OS', 'traceback': None, 'started':
'2015-08-05T10:36:01Z', 'ns': u'repo_sync_results', 'completed':
'2015-08-05T10:36:02Z', 'importer_type_id': u'yum_importer',
'error_message': None, 'summary': {'content': {'state': 'NOT_STARTED'},
'comps': {'state': 'NOT_STARTED'}, 'distribution': {'state':
'NOT_STARTED'}, 'errata': {'state': 'NOT_STARTED'}, 'metadata': {'state':
'FAILED'}}, 'added_count': 0, 'result': 'failed', 'updated_count': 0,
'details': {'content': {'size_total': 0, 'items_left': 0, 'items_total': 0,
'state': 'NOT_STARTED', 'size_left': 0, 'details': {'rpm_total': 0,
'rpm_done': 0, 'drpm_total': 0, 'drpm_done': 0}, 'error_details': []},
'comps': {'state': 'NOT_STARTED'}, 'distribution': {'items_to
Aug 5 11:36:03 katello-server pulp: pulp.server.event.http:INFO:
(10017-89984) tal': 0, 'state': 'NOT_STARTED', 'error_details': [],
'items_left': 0}, 'errata': {'state': 'NOT_STARTED'}, 'metadata': {'state':
'FAILED', 'error': "('Connection aborted.', gaierror(-3, 'Temporary failure
in name resolution'))"}}, 'id': '55c1e712388e5827212a3b46',
'removed_count': 0}}
Aug 5 11:36:03 katello-server pulp: celery.worker.job:ERROR: (9888-89984)
Task
pulp.server.managers.repo.sync.sync[dd04c1fc-64f6-41f2-ace4-6c88f85f271a]
raised unexpected: PulpExecutionException('Importer indicated a failed
response',)
Aug 5 11:36:03 katello-server pulp: celery.worker.job:ERROR: (9888-89984)
Traceback (most recent call last):
Aug 5 11:36:03 katello-server pulp: celery.worker.job:ERROR: (9888-89984)
File "/usr/lib/python2.6/site-packages/celery/app/trace.py", line 240, in
trace_task
Aug 5 11:36:03 katello-server pulp: celery.worker.job:ERROR: (9888-89984)
R = retval = fun(*args, **kwargs)
Aug 5 11:36:03 katello-server pulp: celery.worker.job:ERROR: (9888-89984)
File "/usr/lib/python2.6/site-packages/pulp/server/async/tasks.py", line
328, in call
Aug 5 11:36:03 katello-server pulp: celery.worker.job:ERROR: (9888-89984)
return super(Task, self).call(*args, **kwargs)
Aug 5 11:36:03 katello-server pulp: celery.worker.job:ERROR: (9888-89984)
File "/usr/lib/python2.6/site-packages/celery/app/trace.py", line 437, in
protected_call
Aug 5 11:36:03 katello-server pulp: celery.worker.job:ERROR: (9888-89984)
return self.run(*args, **kwargs)
Aug 5 11:36:03 katello-server pulp: celery.worker.job:ERROR: (9888-89984)
File
"/usr/lib/python2.6/site-packages/pulp/server/managers/repo/sync.py", line
114, in sync
Aug 5 11:36:03 katello-server pulp: celery.worker.job:ERROR: (9888-89984)
raise PulpExecutionException(
('Importer indicated a failed response'))
Aug 5 11:36:03 katello-server pulp: celery.worker.job:ERROR: (9888-89984)
PulpExecutionException: Importer indicated a failed response
Aug 5 11:36:03 katello-server pulp: celery.worker.job:INFO: Task
pulp.server.async.tasks._release_resource[21346534-a746-46f0-9023-73c1c504810f]
succeeded in 0.00774277000005s: None

Anyone seen this before? Much appreciated.

> Having used katello-certs-check with success I went on to:
>
> $ katello-installer --certs-server-cert "katello-server.cer"
> --certs-server-cert-req "katello-server.csr" --certs-server-key
> "katello-server.key" --certs-server-ca-cert "CAchain.cer"
> --certs-update-server --certs-update-server-ca
> <snip>
> Success!
> <snip>
>
> But now /etc/init.d/foreman-proxy won't stay up and a product sync returns:
>
> ('Connection aborted.', gaierror(-3, 'Temporary failure in name
> resolution'))

I'm not sure the two are related.

That error is from trying to sync centos, and can't resolve
mirror.centos.org. Maybe they were having intermittent issues or
there's a problem with your resolvers?

If you say foreman-proxy won't stay up, does that mean the service is
dying? I don't think a sync would cause that, any errors in
/var/log/foreman-proxy/proxy.log?

··· On Wed, Aug 05, 2015 at 04:43:54AM -0700, JC wrote:

pulp_rpm.plugins.importers.yum.sync:INFO: Downloading metadata from
http://mirror.centos.org/centos-5/5/os/x86_64/.
Aug 5 11:36:01 katello-server pulp:
requests.packages.urllib3.connectionpool:INFO: Starting new HTTP connection
(1): mirror.centos.org
Aug 5 11:36:02 katello-server pulp: nectar.downloaders.threaded:ERROR:
(10017-21216) (‘Connection aborted.’, gaierror(-3, ‘Temporary failure in
name resolution’))


Best Regards,

Stephen Benjamin
Red Hat Engineering

Thanks for getting back to my Stephen.

Yes, foreman-proxy starts then dies (within a few seconds). I believe it
is because of the cert update. Similarly, the inability to sync appears to
be only since the cert update.

The server is a VM. When I roll back using the snapshot I took
(immediately before running the katello-installer for the certs) the proxy
service is happy again and my syncs are back to normal.

proxy.log just shows one happy (200) 'get' from this morning.

?? Sorry, that's not a lot to go on…

··· On 5 August 2015 at 14:24, Stephen Benjamin wrote:

On Wed, Aug 05, 2015 at 04:43:54AM -0700, JC wrote:

Having used katello-certs-check with success I went on to:

$ katello-installer --certs-server-cert “katello-server.cer”
–certs-server-cert-req “katello-server.csr” --certs-server-key
"katello-server.key" --certs-server-ca-cert “CAchain.cer”
–certs-update-server --certs-update-server-ca

Success!

But now /etc/init.d/foreman-proxy won’t stay up and a product sync
returns:

(‘Connection aborted.’, gaierror(-3, ‘Temporary failure in name
resolution’))

I’m not sure the two are related.

That error is from trying to sync centos, and can’t resolve
mirror.centos.org. Maybe they were having intermittent issues or
there’s a problem with your resolvers?

If you say foreman-proxy won’t stay up, does that mean the service is
dying? I don’t think a sync would cause that, any errors in
/var/log/foreman-proxy/proxy.log?

pulp_rpm.plugins.importers.yum.sync:INFO: Downloading metadata from
http://mirror.centos.org/centos-5/5/os/x86_64/.
Aug 5 11:36:01 katello-server pulp:
requests.packages.urllib3.connectionpool:INFO: Starting new HTTP
connection
(1): mirror.centos.org
Aug 5 11:36:02 katello-server pulp: nectar.downloaders.threaded:ERROR:
(10017-21216) (‘Connection aborted.’, gaierror(-3, ‘Temporary failure in
name resolution’))


Best Regards,

Stephen Benjamin
Red Hat Engineering


You received this message because you are subscribed to a topic in the
Google Groups “Foreman users” group.
To unsubscribe from this topic, visit
https://groups.google.com/d/topic/foreman-users/67X3vO_IMgM/unsubscribe.
To unsubscribe from this group and all its topics, send an email to
foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at http://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.

> Thanks for getting back to my Stephen.
>
> Yes, foreman-proxy starts then dies (within a few seconds). I believe it
> is because of the cert update. Similarly, the inability to sync appears to
> be only since the cert update.
>
> The server is a VM. When I roll back using the snapshot I took
> (immediately before running the katello-installer for the certs) the proxy
> service is happy again and my syncs are back to normal.
>
> proxy.log just shows one happy (200) 'get' from this morning.
>
> ?? Sorry, that's not a lot to go on…

We really need additional logs to look at to tell you what's going on.
You can increase the proxy logging in /etc/foreman-proxy/settings.yml

I can't see why certs would prevent resolution of mirrors.centos.org,
maybe someone else might have an idea why. Although, you may want to
check /etc/resolv.conf in the snapshot and after anyway.

··· On Wed, Aug 05, 2015 at 02:46:43PM +0100, Jamie Caldwell wrote:

On 5 August 2015 at 14:24, Stephen Benjamin stephen@redhat.com wrote:

On Wed, Aug 05, 2015 at 04:43:54AM -0700, JC wrote:

Having used katello-certs-check with success I went on to:

$ katello-installer --certs-server-cert “katello-server.cer”
–certs-server-cert-req “katello-server.csr” --certs-server-key
"katello-server.key" --certs-server-ca-cert “CAchain.cer”
–certs-update-server --certs-update-server-ca

Success!

But now /etc/init.d/foreman-proxy won’t stay up and a product sync
returns:

(‘Connection aborted.’, gaierror(-3, ‘Temporary failure in name
resolution’))

I’m not sure the two are related.

That error is from trying to sync centos, and can’t resolve
mirror.centos.org. Maybe they were having intermittent issues or
there’s a problem with your resolvers?

If you say foreman-proxy won’t stay up, does that mean the service is
dying? I don’t think a sync would cause that, any errors in
/var/log/foreman-proxy/proxy.log?

pulp_rpm.plugins.importers.yum.sync:INFO: Downloading metadata from
http://mirror.centos.org/centos-5/5/os/x86_64/.
Aug 5 11:36:01 katello-server pulp:
requests.packages.urllib3.connectionpool:INFO: Starting new HTTP
connection
(1): mirror.centos.org
Aug 5 11:36:02 katello-server pulp: nectar.downloaders.threaded:ERROR:
(10017-21216) (‘Connection aborted.’, gaierror(-3, ‘Temporary failure in
name resolution’))


Best Regards,

Stephen Benjamin
Red Hat Engineering


You received this message because you are subscribed to a topic in the
Google Groups “Foreman users” group.
To unsubscribe from this topic, visit
https://groups.google.com/d/topic/foreman-users/67X3vO_IMgM/unsubscribe.
To unsubscribe from this group and all its topics, send an email to
foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at http://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.


You received this message because you are subscribed to the Google Groups “Foreman users” group.
To unsubscribe from this group and stop receiving emails from it, send an email to foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at http://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.


Best Regards,

Stephen Benjamin
Red Hat Engineering

Thanks Stephen. I'm just doing a rather large sync, but once that
finishes, I will do the certs again (tomorrow now), increase the logging,
and try restarting the proxy. I'll let you know.

All http(s) requests are just passed to the proxy, which does the DNS work,
so I don't think resolv.conf is an issue.

··· On 5 August 2015 at 15:21, Stephen Benjamin wrote:

On Wed, Aug 05, 2015 at 02:46:43PM +0100, Jamie Caldwell wrote:

Thanks for getting back to my Stephen.

Yes, foreman-proxy starts then dies (within a few seconds). I believe it
is because of the cert update. Similarly, the inability to sync appears
to
be only since the cert update.

The server is a VM. When I roll back using the snapshot I took
(immediately before running the katello-installer for the certs) the
proxy
service is happy again and my syncs are back to normal.

proxy.log just shows one happy (200) ‘get’ from this morning.

?? Sorry, that’s not a lot to go on…

We really need additional logs to look at to tell you what’s going on.
You can increase the proxy logging in /etc/foreman-proxy/settings.yml

I can’t see why certs would prevent resolution of mirrors.centos.org,
maybe someone else might have an idea why. Although, you may want to
check /etc/resolv.conf in the snapshot and after anyway.

On 5 August 2015 at 14:24, Stephen Benjamin stephen@redhat.com wrote:

On Wed, Aug 05, 2015 at 04:43:54AM -0700, JC wrote:

Having used katello-certs-check with success I went on to:

$ katello-installer --certs-server-cert “katello-server.cer”
–certs-server-cert-req “katello-server.csr” --certs-server-key
"katello-server.key" --certs-server-ca-cert “CAchain.cer”
–certs-update-server --certs-update-server-ca

Success!

But now /etc/init.d/foreman-proxy won’t stay up and a product sync
returns:

(‘Connection aborted.’, gaierror(-3, ‘Temporary failure in name
resolution’))

I’m not sure the two are related.

That error is from trying to sync centos, and can’t resolve
mirror.centos.org. Maybe they were having intermittent issues or
there’s a problem with your resolvers?

If you say foreman-proxy won’t stay up, does that mean the service is
dying? I don’t think a sync would cause that, any errors in
/var/log/foreman-proxy/proxy.log?

pulp_rpm.plugins.importers.yum.sync:INFO: Downloading metadata from
http://mirror.centos.org/centos-5/5/os/x86_64/.
Aug 5 11:36:01 katello-server pulp:
requests.packages.urllib3.connectionpool:INFO: Starting new HTTP
connection
(1): mirror.centos.org
Aug 5 11:36:02 katello-server pulp:
nectar.downloaders.threaded:ERROR:

(10017-21216) (‘Connection aborted.’, gaierror(-3, 'Temporary
failure in

name resolution’))


Best Regards,

Stephen Benjamin
Red Hat Engineering


You received this message because you are subscribed to a topic in the
Google Groups “Foreman users” group.
To unsubscribe from this topic, visit

https://groups.google.com/d/topic/foreman-users/67X3vO_IMgM/unsubscribe.

To unsubscribe from this group and all its topics, send an email to
foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at http://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.


You received this message because you are subscribed to the Google
Groups “Foreman users” group.
To unsubscribe from this group and stop receiving emails from it, send
an email to foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at http://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.


Best Regards,

Stephen Benjamin
Red Hat Engineering


You received this message because you are subscribed to a topic in the
Google Groups “Foreman users” group.
To unsubscribe from this topic, visit
https://groups.google.com/d/topic/foreman-users/67X3vO_IMgM/unsubscribe.
To unsubscribe from this group and all its topics, send an email to
foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at http://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.

Frustratingly (but ultimately good), the foreman-proxy, now stays up (after
a cert update). Also, I've realised the broader (connection) problem is of
my own making. Having run tcpdump, I confirmed that katello wasn't passing
requests to the proxy. Which led to me realising that my json yum importer
was back to the (empty) default. Once updated (and with my katello answers
file also updated), we are back in business. Sorry!

··· On Wednesday, 5 August 2015 15:37:28 UTC+1, JC wrote: > > Thanks Stephen. I'm just doing a rather large sync, but once that > finishes, I will do the certs again (tomorrow now), increase the logging, > and try restarting the proxy. I'll let you know. > > All http(s) requests are just passed to the proxy, which does the DNS > work, so I don't think resolv.conf is an issue. > > On 5 August 2015 at 15:21, Stephen Benjamin wrote: > >> On Wed, Aug 05, 2015 at 02:46:43PM +0100, Jamie Caldwell wrote: >> > Thanks for getting back to my Stephen. >> > >> > Yes, foreman-proxy starts then dies (within a few seconds). I believe >> it >> > is because of the cert update. Similarly, the inability to sync >> appears to >> > be only since the cert update. >> > >> > The server is a VM. When I roll back using the snapshot I took >> > (immediately before running the katello-installer for the certs) the >> proxy >> > service is happy again and my syncs are back to normal. >> > >> > proxy.log just shows one happy (200) 'get' from this morning. >> > >> > ?? Sorry, that's not a lot to go on... >> >> We really need additional logs to look at to tell you what's going on. >> You can increase the proxy logging in /etc/foreman-proxy/settings.yml >> >> I can't see why certs would prevent resolution of mirrors.centos.org, >> maybe someone else might have an idea why. Although, you may want to >> check /etc/resolv.conf in the snapshot and after anyway. >> >> > >> > >> > On 5 August 2015 at 14:24, Stephen Benjamin wrote: >> > >> > > On Wed, Aug 05, 2015 at 04:43:54AM -0700, JC wrote: >> > > > Having used katello-certs-check with success I went on to: >> > > > >> > > > $ katello-installer --certs-server-cert "katello-server.cer" >> > > > --certs-server-cert-req "katello-server.csr" --certs-server-key >> > > > "katello-server.key" --certs-server-ca-cert "CAchain.cer" >> > > > --certs-update-server --certs-update-server-ca >> > > > >> > > > Success! >> > > > >> > > > >> > > > But now /etc/init.d/foreman-proxy won't stay up and a product sync >> > > returns: >> > > > >> > > > ('Connection aborted.', gaierror(-3, 'Temporary failure in name >> > > > resolution')) >> > > >> > > I'm not sure the two are related. >> > > >> > > That error is from trying to sync centos, and can't resolve >> > > mirror.centos.org. Maybe they were having intermittent issues or >> > > there's a problem with your resolvers? >> > > >> > > If you say foreman-proxy won't stay up, does that mean the service is >> > > dying? I don't think a sync would cause that, any errors in >> > > /var/log/foreman-proxy/proxy.log? >> > > >> > > >> > > > pulp_rpm.plugins.importers.yum.sync:INFO: Downloading metadata from >> > > > http://mirror.centos.org/centos-5/5/os/x86_64/. >> > > > Aug 5 11:36:01 katello-server pulp: >> > > > requests.packages.urllib3.connectionpool:INFO: Starting new HTTP >> > > connection >> > > > (1): mirror.centos.org >> > > > Aug 5 11:36:02 katello-server pulp: >> nectar.downloaders.threaded:ERROR: >> > > > (10017-21216) ('Connection aborted.', gaierror(-3, 'Temporary >> failure in >> > > > name resolution')) >> > > >> > > >> > > -- >> > > Best Regards, >> > > >> > > Stephen Benjamin >> > > Red Hat Engineering >> > > >> > > -- >> > > You received this message because you are subscribed to a topic in the >> > > Google Groups "Foreman users" group. >> > > To unsubscribe from this topic, visit >> > > >> https://groups.google.com/d/topic/foreman-users/67X3vO_IMgM/unsubscribe. >> > > To unsubscribe from this group and all its topics, send an email to >> > > foreman-users+unsubscribe@googlegroups.com. >> > > To post to this group, send email to foreman-users@googlegroups.com. >> > > Visit this group at http://groups.google.com/group/foreman-users. >> > > For more options, visit https://groups.google.com/d/optout. >> > > >> > >> > -- >> > You received this message because you are subscribed to the Google >> Groups "Foreman users" group. >> > To unsubscribe from this group and stop receiving emails from it, send >> an email to foreman-users+unsubscribe@googlegroups.com. >> > To post to this group, send email to foreman-users@googlegroups.com. >> > Visit this group at http://groups.google.com/group/foreman-users. >> > For more options, visit https://groups.google.com/d/optout. >> >> -- >> Best Regards, >> >> Stephen Benjamin >> Red Hat Engineering >> >> -- >> You received this message because you are subscribed to a topic in the >> Google Groups "Foreman users" group. >> To unsubscribe from this topic, visit >> https://groups.google.com/d/topic/foreman-users/67X3vO_IMgM/unsubscribe. >> To unsubscribe from this group and all its topics, send an email to >> foreman-users+unsubscribe@googlegroups.com. >> To post to this group, send email to foreman-users@googlegroups.com. >> Visit this group at http://groups.google.com/group/foreman-users. >> For more options, visit https://groups.google.com/d/optout. >> > >