Red Hat SATELLITE 5.0.0 RELEASE NOTES Installationsanleitung Seite 1

Red Hat Network SatelliteInstallation Guide 5.1.05.1ISBN: N/APublication date:

• User management tools (Web-based)• Client system and system grouping tools (Web-based)• Red Hat Update Agent on the client systemsThe Red Hat Update

Figure 1.1. Using RHN Satellite Server and RHN Proxy Server Together5. Summary of StepsImplementing a fully functional RHN Satellite Server requires m

4. Log into the RHN website (rhn.redhat.com) and download the distribution ISOs for Red HatEnterprise Linux AS 3 or 4 and RHN Satellite Server 5.0.0.

1http://kbase.redhat.com/faq/website. Refer to the RHN Channel Management Guide for details.6. UpgradesThe process for upgrading a Satellite from one

8

RequirementsThese requirements must be met before installation.1. Software RequirementsTo perform an installation, the following software components m

Satellite Synchronization Tool or obtained from your Red Hat representative ifsynchronization is not possible, such as in a disconnected environment.W

• 2 GB of memorySee Section 3, “Database Requirements” for instructions on estimating the tablespace of thedatabase and setting its environment variab

the following factors:• The number of public Red Hat packages imported (typical: 5000)• The number of private packages to be managed (typical: 500)• T

1https://rhn.redhat.com2http://xmlrpc.rhn.redhat.com3http://satellite.rhn.redhat.com• Auto Segment Space Management• UTF-8 character setNoteEnsure tha

Red Hat Network Satellite

4https://rhn.redhat.com5http://xmlrpc.rhn.redhat.com6http://satellite.rhn.redhat.comPort Direction Reasonxmlrpc.rhn.redhat.com5andsatellite.rhn.redhat

be linked to a working DNS server in the customer environment.•An Entitlement CertificateThe customer will receive, via email from the sales represent

Satellite with the central Red Hat Network Servers. All other RHN Satellite Servers should besynchronized directly over the Internet.• All unnecessary

Example TopologiesThe RHN Satellite Server can be configured in multiple ways. Select one method depending onthe following factors:• The total number

2. Multiple Satellite Horizontally Tiered TopologyFor very large networks, a more distributed method may be needed, such as having multipleRHN Satelli

Figure 3.3. Satellite-Proxy Vertically Tiered TopologySatellite-Proxy Vertically Tiered Topology19

20

InstallationThis chapter describes the initial installation of the RHN Satellite Server. It presumes theprerequisites listed in Chapter 2, Requirement

mount /dev/cdrom /media/cdromIf you are installing from an ISO, mount the file from within the directory containing it usingthe command:mount -o loop

7. At the prompt, enter the email address to which you would like notifications from the Satelliteto be sent. It may be a good idea to choose a genera

Red Hat Network Satellite: Installation Guide 5.1.0Copyright © 2008 Red Hat, Inc.Copyright © 2008 Red Hat, Inc. This material may only be distributed

* Activating Satellite.Where is your satellite certificate file? /root/example.cert13.The next step is to create a CA cert for the Satellite. To do so

Figure 4.1. Admin Account Creation16.A blue text box appears at the top of the screen indicating that you can now custom-configurethe Satellite and it

Figure 4.2. Final Configuration Prompt17.The Satellite Configuration - General Configuration page allows you to alter the mostbasic Satellite settings

Figure 4.3. General Configuration18.The RHN Satellite Configuration - Monitoring page allows you to configure the monitoringaspects of this Satellite.

Figure 4.4. Monitoring19.The RHN Satellite Configuration - Certificate page allows you to upload a new Satellitecertificate. To identify the certifica

Figure 4.5. Certificate20.The RHN Satellite Configuration - Bootstrap page allows you to generate a bootstrapscript for redirecting client systems fro

Figure 4.6. Bootstrap21.The RHN Satellite Configuration - Restart page contains the final step in configuring theSatellite. Click the Restart button t

Figure 4.7. Restart22.Once the Satellite has restarted, the countdown notice disappears. You are now free to beginusing your Satellite.Figure 4.8. Res

Option UsageSatellite is not currently supported on selinux-enabledsystems.--skip-fqdn-test Do not verify that the system has a valid hostname. RHNSat

The RHN Satellite Server Installation Program then looks for answers in the file. For anyoption no filled out in the file, the Installer Program promp

Red Hat Network Satellite

newaliasesFinally, update the sendmail-cf package:up2date sendmail-cfNote, disconnected installs must obtain this package from the ISO.Restart sendmai

EntitlementsThe RHN Satellite Server, like RHN itself, provides all services to customers through the settingof entitlements. For RHN, entitlements ar

-----END PGP SIGNATURE-----</rhn-cert-signature></rhn-cert>NoteDo not try to use this RHN Entitlement Certificate; it is just an example.T

the Satellite installation as part of the rhns-satellite-tools package.3.1. Command Line Entitlement OptionsThe rhn-satellite-activate tool offers a h

To validate an RHN Entitlement Certificate and populate the local database:rhn-satellite-activate --disconnected --rhn-cert=/path/to/demo.certTo valid

Importing and SynchronizingAfter installing the RHN Satellite Server, you must provide it with the packages and channels tobe served to client systems

When exporting an RHN base channel, you must also export the tools channel associated withthat base channel in order to kickstart machines to the dist

Option Description--make-isos=cd or dvd--email Email a report of what was exported and whaterrors may have occurred.--traceback-mail Alternative email

ImportantTo populate custom channels correctly, you must first populate at least one RedHat base channel. The RHN Satellite Synchronization Tool creat

In addition to --step, the RHN Satellite Synchronization Tool offers many other commandline options. To use them, insert the option and the appropriat

1. Introduction ... 11. Red Hat Network ...

Option Description-s=, --server=SERVER Include the hostname of an alternativeserver to connect to forsynchronization.--http-proxy=HTTP_PROXY Add an al

only if Channel Content ISOs are not available. It takes a long time to populate a channel fromscratch over the Internet. For this reason, Red Hat urg

cp -ruv /mnt/import/* /var/rhn-sat-import/7. Then unmount /mnt/import in preparation for the next CD or ISO:umount /mnt/import8. Repeat these steps fo

satellite-sync --list-channels --mount-point /var/rhn-sat-importThe next step is to initiate the import of a specific channel. Do this using a channel

Individually, use the --step=errata option.After running the preceding sample command, the population of the channel should becomplete. All of the pac

The satellite-sync command can be used in two modes: via RHN and via local media.3.1. Synchronizing Errata and Packages Directly via RHNFor customers

50

TroubleshootingThis chapter provides tips for determining the cause of and resolving the most common errorsassociated with RHN Satellite Server. If yo

component exhibiting failures. A useful exercise is to issue the tail -f command for all logfiles and then run up2date --list. You should then examine

To derive the character set types of your Satellite's database, run the command:rhn-charsetsIf the administrator is not getting email from the RH

5. Updated Software Components ...556. Satellite Debugging by Red Hat ...

and the RHN client applications to work.To resolve this problem, identify the contents of the /etc/hosts file. It may look like this:127.0.0.1 this_ma

By default, the server certificate has a one-year life while client certificates are good for 10years. If you find the certificates are incorrect, you

Subscribing to these channels and updating your Satellite (such as by running up2date), mayinstall newer, incompatible versions of critical software c

MaintenanceBecause of the RHN Satellite Server's unique closed environment, its users are provided withabilities not available to any other Red H

can be applied manually by the customer according to instructions in the Errata Advisory.WarningIt is very important to read the Errata Advisory befor

primarily a duplicate of Red Hat's RPM repository, it can be regenerated with satellite-sync.Red Hat recommends the entire /var/satellite/ tree b

Option Descriptionreport Reports on current usage of database space.restore DIRNAME Restores the database from backup kept inDIRNAME. Database must be

service rhn-satellite startYou should then copy that backup to another system using rsync or another file-transfer utility.Red Hat strongly recommends

5. Cloning the Satellite with Embedded DBYou may limit outages caused by hardware or other failures by cloning the Satellite withEmbedded Database in

schema, SSL certificate, and bootstrap script generation steps. Include the same RHNaccount and database connection information provided during the in

IntroductionRHN Satellite Server provides a solution to organizations requiring absolute control over andprivacy of the maintenance and package deploy

Using a RHN Satellite Server is quite similar to using the hosted version of Red Hat Network.For this reason, you should consult the RHN Reference Gui

The default display shows the status of the RHN Task Engine. This tool is a daemon that runson the Satellite server itself and performs routine operat

Figure 8.2. User DeletionA confirmation page appears explaining that this removal is permanent. To continue, clickDelete User at the bottom-right corn

Figure 8.3. User Delete ConfirmationMany other options exist for managing users. You can find instructions for them in the RHNwebsite chapter of the R

synchronization. Remember, hours use military time. Edit the crontab to include randomsynchronization, like so:0 1 * * * perl -le 'sleep rand 900

#%PAM-1.0auth required pam_env.soauth sufficient pam_krb5.so no_user_checkauth required pam_deny.soaccount required pam_krb5.so no_user_checkPlease no

Keep in mind, this feature depends on the client system recognizing the fully qualified domainname (FQDN) of the Satellite. This name and not the IP a

Appendix A. Sample RHN SatelliteServer Configuration FileThe /etc/rhn/rhn.conf configuration file for the RHN Satellite Server provides a means foryou

RHN::Task::RHNProc,RHN::Task::PackageCleanupweb.rhn_gpg_backend_module = RHN::GPG::OpenPGPweb.restrict_mail_domains =Appendix A. Sample RHN Satellite

IndexSymbols/etc/nsswitch.conf, 53/etc/rhn/rhn.conf, 53Aadvantages, 2Apache, 57Apache HTTP, 3automating Satellite synchronization, 67Bbacking up the R

2. RHN Satellite ServerRHN Satellite Server allows organizations to utilize the benefits of Red Hat Network withouthaving to provide public Internet a

Mmaintenance, 57mysql-server, 34NNetwork Time Protocol, 14ntp, 14ntsysv, 16Ooperating systemsupported, 9Oracle 9i R2, 3Organization Administratordefin

Tterms to understand, 2tool use, 63topologies, 17multiple satellites horizontally tiered, 18satellite and proxies vertically tiered, 18single satellit

76

• certificate authority — A Channel Administrator is a user role with full access to channelmanagement capabilities. Users with this role are capable