Subscription-manager register fails after Foreman/Katello upgrade

Problem:
After upgrading to Foreman to 3.6.2-1 and Katello to 4.8.4-1 registering clients with the command below fails:
subscription-manager register --org=“MyOrg” --activationkey=“MyKey-key”

Any help is appreciated.
Expected outcome:
No errors :slight_smile:
Foreman and Proxy versions:
foreman-3.6.2-1.el8.noarch
foreman-proxy-3.6.2-1.el8.noarch
Foreman and Proxy plugin versions:

Distribution and version:
Rocky Linux 8
Other relevant data:
Output from subscription-manager register command:
[‘Problem creating unit class ConsumerDTO {\n’, ’ created: null\n’, ’ updated: null\n’, ’ id: null\n’, ’ uuid: 95608686-9df9-45a0-9d10-6249e17f573a\n’, ’ name: in3r8in232\n’, ’ username: foreman_admin\n’, ’ entitlementStatus: null\n’, ’ serviceLevel: \n’, ’ role: \n’, ’ usage: \n’, ’ addOns: \n’, ’ systemPurposeStatus: null\n’, ’ releaseVer: null\n’, ’ owner: null\n’, ’ environment: null\n’, ’ entitlementCount: null\n’, ’ facts: {dmi.memory.set=None, dmi.memory.bank_locator=NVD #63, net.interface.lo.ipv4_netmask=8, uname.release=4.18.0-513.24.1.el8_9.x86_64, last_boot=2024-07-22 15:20:49, dmi.chassis.manufacturer=No Enclosure, kpatch.loaded=, proc_cpuinfo.common.wp=yes, dmi.bios.bios_revision=4.6, proc_cpuinfo.common.cpu_mhz=2194.843, dmi.connector.external_reference_designator=PS/2 Mouse, dmi.baseboard.product_name=440BX Desktop Reference Platform, system.default_locale=en_US.UTF-8, net.interface.ens224.ipv4_netmask=20, uname.machine=x86_64, lscpu.vendor_id=GenuineIntel, dmi.processor.core_count=4, dmi.chassis.asset_tag=No Asset Tag, dmi.memory.array_handle=0x0025, distribution.version=8.9, lscpu.l1i_cache=32K, lscpu.on-line_cpu(s)_list=0-3, net.interface.ens192.ipv4_address=10.162.26.197, distribution.id=Green Obsidian, distribution.version.modifier=ga, net.interface.ens224.ipv4_address=10.163.162.71, dmi.slot.id=4, net.interface.ens224.ipv4_broadcast_list=10.163.175.255, dmi.baseboard.features=None, dmi.processor.voltage=3.3 V, dmi.chassis.power_supply_state=Safe, net.interface.lo.ipv4_netmask_list=8, dmi.memory.number_of_devices=64, dmi.bios.version=6.00, network.ipv6_address=::1, dmi.chassis.contained_elements=0, memory.memtotal=24384748, dmi.baseboard.manufacturer=Intel Corporation, proc_cpuinfo.common.cpu_family=6, memory.swaptotal=10199032, dmi.slot.current_usage=Available, dmi.system.product_name=VMware Virtual Platform, lscpu.thread(s)_per_core=1, network.fqdn=in3r8in232.gale.web, dmi.memory.size=16 GB, dmi.connector.internal_reference_designator=J12, dmi.baseboard.chassis_handle=0x0000, dmi.slot.length=Long, network.hostname=in3r8in232, dmi.connector.external_connector_type=Circular DIN-8 male, lscpu.numa_node0_cpu(s)=0-3, dmi.chassis.boot-up_state=Safe, lscpu.architecture=x86_64, dmi.memory.location=System Board Or Motherboard, uname.sysname=Linux, lscpu.l2_cache=1024K, dmi.memory.use=System Memory, lscpu.virtualization_type=full, cpu.topology_source=kernel /sys cpu sibling lists, dmi.baseboard.contained_object_handles=0, dmi.system.manufacturer=VMware, Inc., dmi.memory.total_width=32 bits, net.interface.lo.ipv4_address=127.0.0.1, kpatch.installed=, virt.is_guest=true, net.interface.ens224.ipv4_broadcast=10.163.175.255, cpu.thread(s)_per_core=1, net.interface.lo.ipv4_broadcast=Unknown, cpu.cpu(s)=4, net.interface.ens192.ipv4_broadcast=10.162.27.255, dmi.bios.runtime_size=88960 bytes, dmi.processor.upgrade=ZIF Socket, proc_cpuinfo.common.fpu=yes, net.interface.ens192.ipv4_netmask=23, dmi.memory.locator=NVD #63, dmi.system.wake-up_type=Power Switch, proc_stat.btime=1721661649, dmi.processor.manufacturer=GenuineIntel, lscpu.hypervisor_vendor=VMware, network.ipv4_address=10.162.26.197, dmi.chassis.lock=Not Present, lscpu.bogomips=4389.68, distribution.name=Rocky Linux, dmi.chassis.oem_information=0x00001234, proc_cpuinfo.common.address_sizes=45 bits physical, 48 bits virtual, proc_cpuinfo.common.siblings=4, dmi.processor.l2_cache_handle=0x001e, dmi.connector.internal_connector_type=None, dmi.processor.status=Populated, Enabled, dmi.bios.rom_size=64 kB, dmi.chassis.type=Other, lscpu.byte_order=Little Endian, dmi.chassis.thermal_state=Safe, proc_cpuinfo.common.vendor_id=GenuineIntel, dmi.processor.core_enabled=4, dmi.system.serial_number=VMware-42 0f d8 77 30 2a b3 de-94 c8 f8 02 ff 51 64 2d, proc_cpuinfo.common.flags=fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc arch_perfmon nopl xtopology tsc_reliable nonstop_tsc cpuid pni pclmulqdq ssse3 fma cx16 pcid sse4_1 sse4_2…, uname.nodename=in3r8in232, dmi.bios.release_date=11/12/2020, dmi.processor.type=Central Processor, proc_cpuinfo.common.power_management=, lscpu.numa_node(s)=1, dmi.bios.firmware_revision=0.0, dmi.chassis.serial_number=None, dmi.slot.type=32-bit PCI, proc_cpuinfo.common.bugs=cpu_meltdown spectre_v1 spectre_v2 spec_store_bypass l1tf mds swapgs itlb_multihit mmio_stale_data retbleed gds, proc_cpuinfo.common.cpuid_level=22, lscpu.l3_cache=39424K, dmi.memory.type=Other, dmi.system.uuid=ef73b7f9-1678-491d-ae23-0292f2979e7a, net.interface.ens192.mac_address=00:50:56:8f:a8:7e, lscpu.bios_model_name=Intel(R) Xeon(R) Gold 6238R CPU @ 2.20GHz, dmi.processor.max_speed=30000 MHz, dmi.memory.error_information_handle=Not Provided, proc_cpuinfo.common.stepping=0, dmi.processor.id=50 06 00 00 FF FB 8B 1F, net.interface.lo.ipv4_address_list=127.0.0.1, net.interface.ens192.ipv4_broadcast_list=10.162.27.255, proc_cpuinfo.common.fpu_exception=yes, dmi.memory.error_correction_type=None, net.interface.ens224.ipv4_address_list=10.163.162.71, dmi.bios.address=0xea480, dmi.processor.l3_cache_handle=Not Provided, dmi.processor.current_speed=2200 MHz, dmi.memory.form_factor=DIMM, proc_cpuinfo.common.cpu_cores=4, virt.uuid=77D80F42-2A30-DEB3-94C8-F802FF51642D, proc_cpuinfo.common.cache_alignment=64, dmi.processor.socket_designation=CPU #003, dmi.slot.designation=PCI Slot J14, dmi.memory.data_width=32 bits, dmi.processor.l1_cache_handle=0x001a, dmi.system.version=None, lscpu.core(s)_per_socket=4, lscpu.cpu_mhz=2194.843, dmi.memory.maximum_capacity=385 GB, net.interface.ens224.ipv4_netmask_list=20, proc_cpuinfo.common.model=85, cpu.core(s)_per_socket=4, dmi.chassis.version=N/A, dmi.connector.port_type=Keyboard Port, lscpu.cpu_op-mode(s)=32-bit, 64-bit, cpu.cpu_socket(s)=1, dmi.slot.bus_address=0000:00:12.0, proc_cpuinfo.common.physical_id=0, lscpu.model_name=Intel(R) Xeon(R) Gold 6238R CPU @ 2.20GHz, net.interface.ens192.ipv4_address_list=10.162.26.197, virt.host_type=vmware, dmi.baseboard.version=None, lscpu.flags=fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc arch_perfmon nopl xtopology tsc_reliable nonstop_tsc cpuid pni pclmulqdq ssse3 fma cx16 pcid sse4_1 sse4_2…, net.interface.ens192.ipv4_netmask_list=23, lscpu.model=85, uname.version=#1 SMP Thu Apr 4 18:13:02 UTC 2024, lscpu.l1d_cache=32K, dmi.processor.version=Intel(R) Xeon(R) Gold 6238R CPU @ 2.20GHz, proc_cpuinfo.common.model_name=Intel(R) Xeon(R) Gold 6238R CPU @ 2.20GHz, lscpu.socket(s)=1, lscpu.cpu_family=6, proc_cpuinfo.common.microcode=0x5003605, dmi.baseboard.serial_number=None, dmi.chassis.security_status=None, proc_cpuinfo.common.cache_size=39424 KB, proc_cpuinfo.common.bogomips=4389.68, lscpu.stepping=0, dmi.bios.vendor=Phoenix Technologies LTD, system.certificate_version=3.2, lscpu.bios_vendor_id=GenuineIntel, net.interface.ens224.mac_address=00:50:56:8f:7e:29, proc_cpuinfo.common.clflush_size=64, net.interface.lo.ipv4_broadcast_list=Unknown, dmi.meta.cpu_socket_count=4, lscpu.cpu(s)=4}\n’, ’ lastCheckin: null\n’, ’ installedProducts: \n’, ’ canActivate: null\n’, ’ capabilities: null\n’, ’ hypervisorId: null\n’, ’ contentTags: null\n’, ’ autoheal: true\n’, ’ annotations: null\n’, ’ contentAccessMode: null\n’, ’ type: class ConsumerTypeDTO {\n’, ’ created: null\n’, ’ updated: null\n’, ’ id: null\n’, ’ label: system\n’, ’ manifest: null\n’, ’ }\n’, ’ idCert: null\n’, ’ guestIds: null\n’, ’ href: null\n’, ’ activationKeys: null\n’, ’ serviceType: null\n’, ’ environments: [class EnvironmentDTO {\n’, ’ created: null\n’, ’ updated: null\n’, ’ id: ec7207622f59554a9dcca73e7f4df984\n’, ’ name: null\n’, ’ description: null\n’, ’ owner: null\n’, ’ environmentContent: null\n’, ’ }]\n’, ‘} (HTTP error code 400: Bad Request)\n’]

It seems Candlepin is unable to create the consumer for some reason.

Are there any errors in /var/log/candlepin/error.log?

Can you find the request in /var/log/foreman/production.log that caused the 400? I’m curious what parameters were sent.

Also, please upgrade to a supported version if possible. The current versions of Foreman and Katello are 3.11 / 4.13.

Hi Jeremy,
Thanks for the quick response.

The candlepin error.log has this recurring:
2024-07-30 13:51:29,685 [thread=https-jsse-nio-127.0.0.1-23443-exec-5] [req=4bc04b17-18f6-44c4-8811-66d0897e66d6, org=, csid=8991a564-f03f-464d-8daa-d96dc071dbe1] ERROR org.candlepin.resource.ConsumerResource - Problem creating unit:
org.candlepin.pki.impl.JSSLoaderException: Candlepin does not support JSS versions less than 4.4!

Here’s a snippet of the foreman/production.log where I tried to register a new host (in3r8in231.gale.web)

Thanks

Dean Peirce
Senior DevOps Linux Systems Engineer
Cengage Learning
dean.peirce@cengage.com
https://www.gale.com/

(Attachment foreman.prod.snip.txt is missing)

Hi Jeremy,
Thanks for the quick response.

The candlepin error.log has this recurring:
2024-07-30 13:51:29,685 [thread=https-jsse-nio-127.0.0.1-23443-exec-5] [req=4bc04b17-18f6-44c4-8811-66d0897e66d6, org=, csid=8991a564-f03f-464d-8daa-d96dc071dbe1] ERROR org.candlepin.resource.ConsumerResource - Problem creating unit:
org.candlepin.pki.impl.JSSLoaderException: Candlepin does not support JSS versions less than 4.4!

Here’s a snippet of the foreman/production.log where I tried to register a new host (in3r8in231.gale.web)

Thanks

Dean Peirce
Senior DevOps Linux Systems Engineer
Cengage Learning
dean.peirce@cengage.com
https://www.gale.com/

foreman.log (16.4 KB)

This appears to be the problem. Perhaps this will help: Candlepin does not support JSS versions less than 4.4? - #3 by ehelms

Is there any way to upgrade directly from 3.6 to 3.11?
I’m worried about doing so many incremental updates.

Thanks,

Dean Peirce
Senior DevOps Linux Systems Engineer
Cengage Learning
dean.peirce@cengage.com

When there are this many versions to go thru, many find it easier to stand up a new Foreman/Katello server at the current version, and then migrate the hosts. But that comes with its own set of tradeoffs-- you would have to set everything up again, sync all your content again, etc. (There is no way to move the database to a new Foreman instance.)

OK, that’s what I thought .

Thanks for your help

Dean Peirce
Senior DevOps Linux Systems Engineer
Cengage Learning
dean.peirce@cengage.com