[Katello]

Hello,

I have been using the Katello package replete with Foreman for some time now and I as I go to add a smart-proxy - not a capsule I get SSL errors. Does the Katello installed version require the proxy to listen on 9090 or can this be overridden in proxy URL parameters?

Thanks

Per the documentation I need my capsule host registered for content with the KT master. Is there a work around for this as the proxy is registered with a 3rd party Redhat Satellite system and I am not at liberty to change this.

··· > On Mar 15, 2015, at 3:59 AM, Stephen Benjamin wrote: > > On Sat, Mar 14, 2015 at 08:44:39AM +0900, Luke Kearney wrote: >> Hello, >> >> I have been using the Katello package replete with Foreman for some time now and I as I go to add a smart-proxy - not a capsule I get SSL errors. Does the Katello installed version require the proxy to listen on 9090 or can this be overridden in proxy URL parameters? > > Port doesn't matter... if you want SSL you have to use a certificate > signed by the Katello CA. > > You can use the capsule-certs-generate tool and unpack the tarball to > get them, and configure the plain foreman proxy to use those. >

>
> >
> >> Hello,
> >>
> >> I have been using the Katello package replete with Foreman for some time now and I as I go to add a smart-proxy - not a capsule I get SSL errors. Does the Katello installed version require the proxy to listen on 9090 or can this be overridden in proxy URL parameters?
> >
> > Port doesn't matter… if you want SSL you have to use a certificate
> > signed by the Katello CA.
> >
> > You can use the capsule-certs-generate tool and unpack the tarball to
> > get them, and configure the plain foreman proxy to use those.
> >
>
> Per the documentation I need my capsule host registered for content with the KT master. Is there a work around for this as the proxy is registered with a 3rd party Redhat Satellite system and I am not at liberty to change this.

If you're not using content features you don't. The only problem you're
having that I can see is certificates.

Foreman uses client SSL authentication to talk to a Smart Proxy.

··· On Sun, Mar 15, 2015 at 11:19:50AM +0900, Luke Kearney wrote: > > On Mar 15, 2015, at 3:59 AM, Stephen Benjamin wrote: > > On Sat, Mar 14, 2015 at 08:44:39AM +0900, Luke Kearney wrote:


You received this message because you are subscribed to the Google Groups “Foreman users” group.
To unsubscribe from this group and stop receiving emails from it, send an email to foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at http://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.


Best Regards,

Stephen Benjamin
Red Hat Engineering

Thank you - that was exactly enough info to get me moving in the correct direction.

··· > On Mar 15, 2015, at 4:59 PM, Stephen Benjamin wrote: > > On Sun, Mar 15, 2015 at 11:19:50AM +0900, Luke Kearney wrote: >> >>> On Mar 15, 2015, at 3:59 AM, Stephen Benjamin wrote: >>> >>> On Sat, Mar 14, 2015 at 08:44:39AM +0900, Luke Kearney wrote: >>>> Hello, >>>> >>>> I have been using the Katello package replete with Foreman for some time now and I as I go to add a smart-proxy - not a capsule I get SSL errors. Does the Katello installed version require the proxy to listen on 9090 or can this be overridden in proxy URL parameters? >>> >>> Port doesn't matter... if you want SSL you have to use a certificate >>> signed by the Katello CA. >>> >>> You can use the capsule-certs-generate tool and unpack the tarball to >>> get them, and configure the plain foreman proxy to use those. >>> >> >> Per the documentation I need my capsule host registered for content with the KT master. Is there a work around for this as the proxy is registered with a 3rd party Redhat Satellite system and I am not at liberty to change this. > > If you're not using content features you don't. The only problem you're > having that I can see is certificates. > > Foreman uses client SSL authentication to talk to a Smart Proxy. >