Activity
From 01/12/2015 to 02/10/2015
02/10/2015
- 07:06 AM Bug #9248: smart-proxy does not create a pid file
- If using RHEL or clones, check SELinux for denials. Is this RHEL7 or RHEL6?
02/09/2015
- 08:01 AM Bug #9089 (Closed): SSL client certification cannot be disabled per plugin
- Applied in changeset commit:0207401d84ddb5e4396157a38ad32a675f0e3e8f.
- 07:53 AM Revision 0207401d: Fixes #9089 - refactored SSL client verification into method
- 07:36 AM Revision ff2afbea: Refs #8710 - moved foreman-debug bits into proxy package
- 03:39 AM Bug #7909 (Resolved): Importing Environments
- Thanks for confirming!
02/06/2015
- 12:37 PM Bug #9248: smart-proxy does not create a pid file
- I wrote a few tests to try and reproduce this issue via code. However, I was unable to reproduce this directly with ...
- 12:33 PM Bug #7909: Importing Environments
- This can be closed. Dominic was right, I realized soon after posting that it was an error in my auth.conf. My apologi...
- 03:40 AM Bug #7909 (Feedback): Importing Environments
- Yeah, the API option is what is supposed to work with environmentpath (directory environments). The error in the pas...
- 03:05 AM Bug #7909: Importing Environments
- Can this be closed?
- 03:37 AM Bug #8782: Missing whitespace in the cmd when using the mco provider for puppetrun
- It might be useful to compare Ruby versions too, as I think there are multiple ways the command can get executed.
- 02:45 AM Bug #8782: Missing whitespace in the cmd when using the mco provider for puppetrun
- I don't see this happening. I have been using this mco feature since 1.6.3 of smart-proxy and now on 1.7.2. The on...
- 03:22 AM Feature #7195: Deeper inspection of puppet classes to parse values from params.pp pattern
- I have actually taken a big stab at this with a unrelated project. This is definitely pretty complex. I have been a...
- 03:01 AM Feature #7911: Support short hostname for MCollective runs
- This could be easy because the -I option for mcollective allows you to provide a regex to match any hostname. So we ...
02/05/2015
- 10:06 PM Bug #9248: smart-proxy does not create a pid file
- Upon further inspection, if I manual set the daemon_pid in the settings file everything works as expected. So it loo...
- 09:52 PM Bug #9248 (Rejected): smart-proxy does not create a pid file
- The smart proxy service when installed via rpm does not create a pid file when started. This is causing restarts to f...
- 03:50 PM Bug #9245 (Ready For Testing): Add override setting to allow mcollective puppet runs to run as a different user
- 03:44 PM Bug #9245 (Closed): Add override setting to allow mcollective puppet runs to run as a different user
- This is similar to #3150 with the exception that since the puppet_user setting is used in other places we may want to...
02/03/2015
- 05:08 PM Bug #6689: "ERROR -- : Invalid MAC address:" using the "Build PXE Default" button
- Please ignore this bug report. After I created a datacenter and gave foreman the vcenter url, this problem went away.
01/30/2015
- 08:21 AM Bug #9175 (Rejected): Proxy SSL configuration handling is buggy
- Couple of issues:
1) When I define SSL certs but set http_port, proxy still starts with HTTPS
2) When I configure...
01/29/2015
01/28/2015
- 07:27 AM Bug #9089: SSL client certification cannot be disabled per plugin
- Because of the amount of changes needed to fix this and the fact that RC2 should be released today,
https will not b... - 04:49 AM Revision e1bc928e: Refs #7849 - Avoid OpenSSL deprecation
- deprecated openssl/x509 use: require "openssl" instead of "openssl/x509"
- 04:01 AM Bug #9102 (Closed): When trusted hosts is enabled, remote hosts cannot access templates
- Applied in changeset commit:722a6b15d9f4aab356ac6b7fe3e7d50599433fbe.
01/27/2015
- 07:41 AM Revision 722a6b15: fixes #9102 - remove trusted_hosts check from templates module
- 07:11 AM Bug #9089: SSL client certification cannot be disabled per plugin
- This one is a bummer to, proxy expects client certificates for all requests coming via https. We need to safely turn ...
01/26/2015
- 03:19 PM Feature #9121 (Closed): Add README to project
- The smart proxy project welcomes people with a nearly empty page on Github. People can find the theforeman.org link b...
- 11:56 AM Bug #6689: "ERROR -- : Invalid MAC address:" using the "Build PXE Default" button
- vmware ESXi-5.5U2
foreman-1.6.0.51-1.el7sat.noarch
foreman-proxy-1.6.0.33-1.el7sat.noarch
/usr/share/foreman-p... - 08:01 AM Feature #8905 (Closed): Add host configure option for binding the TCP port
- Applied in changeset commit:9ea2ac7117076b709ac1a7fd9951e0ac0392a7f0.
- 08:01 AM Feature #7849 (Closed): trusted_hosts should determine hostname from certificate CN on SSL requests
- Applied in changeset commit:30aff66f53045e4c3e3e6a5f13c46f4d8b857551.
- 07:55 AM Revision 9ea2ac71: Fixes #8905 - bind_port config option
- 07:47 AM Revision 30aff66f: Fixes #7849 - re-factor trusted_hosts handling
- On HTTPS we will get the FQDN from the client certificate and check against the
list.
While on HTTP we will perform ... - 05:03 AM Bug #9102: When trusted hosts is enabled, remote hosts cannot access templates
- Yea, I'll disable it in the Katello Capsule, but I'd prefer to leave it on for everything but the templates plugin.
- 04:34 AM Bug #9102: When trusted hosts is enabled, remote hosts cannot access templates
- The trusted_hosts helper is optional, the module is explicitly enabling it.
01/25/2015
- 12:28 AM Bug #9102 (Closed): When trusted hosts is enabled, remote hosts cannot access templates
- The default is now :trusted_hosts setting enabled, but this limits which hosts can access provisioning templates. Pe...
01/23/2015
- 06:58 AM Bug #9089 (Closed): SSL client certification cannot be disabled per plugin
- Was trying to doscover a host via foreman proxy and set following params in defauly pxe file:
proxy.url=https://<...
01/22/2015
- 05:55 PM Support #9081 (Closed): unable to delete host / Unable to delete PuppetCA certificate for host ([RestClient::NotAcceptable]: 406 Not Acceptable)
- thanks
- 02:58 PM Support #9081: unable to delete host / Unable to delete PuppetCA certificate for host ([RestClient::NotAcceptable]: 406 Not Acceptable)
- This can be closed. The issue was sudo permissions for the foreman-proxy user.
- 02:30 PM Support #9081 (Closed): unable to delete host / Unable to delete PuppetCA certificate for host ([RestClient::NotAcceptable]: 406 Not Acceptable)
- Trying to delete a host from Foreman, the logs show this:
App 34082 stderr: Delete PuppetCA certificates for testh...
01/21/2015
- 11:02 AM Bug #9061 (Closed): Tests fail with NoMethodError: undefined method `join' for #<String:0x007f62c3e6fb90>
- Applied in changeset commit:db28993e02cd994ed2f01991bf0eceeed247a7d4.
- 07:42 AM Bug #9061 (Ready For Testing): Tests fail with NoMethodError: undefined method `join' for #<String:0x007f62c3e6fb90>
- 07:40 AM Bug #9061 (Assigned): Tests fail with NoMethodError: undefined method `join' for #<String:0x007f62c3e6fb90>
- 07:39 AM Bug #9061 (Closed): Tests fail with NoMethodError: undefined method `join' for #<String:0x007f62c3e6fb90>
- This is due to changes in Rack 1.6; The current development version of sinatra is ok, but the latest release (1.4.5) ...
- 11:01 AM Refactor #9063 (Closed): Revert pinning of Rack to < 1.6
- #9061 pinned Rack to < 1.6 due to an interaction with Sinatra: https://github.com/sinatra/sinatra/issues/951
Rever... - 10:59 AM Revision db28993e: Fixes #9061: pinned rack version to < 1.6
- To workaround https://github.com/sinatra/sinatra/issues/951 until new version
is available. - 08:10 AM Bug #8793: Smart-proxy does not run as a service on Windows
- Having a service that works would be really appreciated. +1
01/14/2015
- 12:01 PM Bug #8948 (Closed): Problem with implicit test ordering from DHCP API test
- Applied in changeset commit:e3020e686f0653a0bc6565d456f981aeeaf234fd.
- 09:06 AM Bug #8948 (Closed): Problem with implicit test ordering from DHCP API test
- I had an conflict with test-unit on my system.
test-unit uses alphabetic by default, only minitest supports
"sort... - 11:01 AM Bug #8788 (Closed): DHCP not detecting pingable addresses on Windows
- Applied in changeset commit:a3783af8790623e47e34b9a2bd9e0077fea07308.
- 11:00 AM Revision e3020e68: Fixes #8948: Remove implicit test ordering from DHCP API test
- I had an conflict with test-unit on my system.
test-unit uses alphabetic by default, only minitest supports
"sorted"... - 10:51 AM Revision a3783af8: Fixes #8788 - DHCP not detecting pingable addresses on Windows
- 06:58 AM Bug #8946: Exception thrown when foreman-proxy restarts with SIGTERM
- I can't seem to find 1.7.2 on the official repos.
The installation was like this:
- install abrt, configure it to... - 05:00 AM Bug #8946: Exception thrown when foreman-proxy restarts with SIGTERM
- Can you provide full steps to reproduce? How you enabled ABRT? What was the procedure, step by step?
I assume RHEL... - 04:30 AM Bug #8946 (Closed): Exception thrown when foreman-proxy restarts with SIGTERM
- This is what abrt with rubygem-abrt is sending after restarting foreman-proxy:
backtrace:
:/usr/share/foreman-pro... - 04:51 AM Feature #7849 (Ready For Testing): trusted_hosts should determine hostname from certificate CN on SSL requests
- 04:20 AM Feature #7849: trusted_hosts should determine hostname from certificate CN on SSL requests
- https://github.com/theforeman/smart-proxy/pull/246
- 03:12 AM Feature #7849: trusted_hosts should determine hostname from certificate CN on SSL requests
- Nice, please do open a pull request and we can get it merged then. (Plus Jenkins will run the test suite for us.)
...
01/13/2015
- 03:57 PM Feature #7849: trusted_hosts should determine hostname from certificate CN on SSL requests
- Finally(!!) had the time to work on the thing.
Result is here: https://github.com/lazyfrosch/smart-proxy/tree/feat... - 10:22 AM Bug #8927 (New): Building new host with realm fails if host already exists in IPA
- If you build a new Foreman host that already has a host record in IPA, the host creation will fail. Tested with ipa ...
- 09:47 AM Bug #8926: foreman-prepare-realm on EL6 fails to set correct permissions for ipa-server-4
- Thanks! Looks like I need to figure out the IPA server version based on 'ipa ping' instead of 'ipa --version'.
If... - 09:43 AM Bug #8926: foreman-prepare-realm on EL6 fails to set correct permissions for ipa-server-4
- Actual error in ipa log:
[Tue Jan 13 08:09:36.467641 2015] [:error] [pid 8158] ipa: DEBUG: response: ACIError: Ins... - 09:40 AM Bug #8926 (Resolved): foreman-prepare-realm on EL6 fails to set correct permissions for ipa-server-4
- When running the 'foreman-prepare-realm' script on a EL6 host against a FreeIPA/IdM 4 server, the script will set the...
- 08:03 AM Support #8917 (Resolved): cannot import modules/classes
- (:enabled was false in the config file)
- 08:01 AM Support #8917: cannot import modules/classes
- Restoring my puppet.yml from the puppet.yml.dpkg-old & restarting the foreman-proxy service did the trick. Thanks, &...
- 07:48 AM Support #8917: cannot import modules/classes
- Attached. I'd actually edited this file previously, enabling puppet run via the UI using a custom command, but it se...
- 03:34 AM Support #8917: cannot import modules/classes
- Can you provide /etc/foreman-proxy/settings.d/puppet.yml please?
Directory environments are supported nowadays, by...
01/12/2015
- 03:45 PM Support #8917 (Resolved): cannot import modules/classes
- Foreman 1.7.1/uppet 3.7.3. Very similar, but not identical to #5856.
Error was:
> Warning!
> ERF12-2749 [Prox... - 07:48 AM Feature #8905 (Ready For Testing): Add host configure option for binding the TCP port
- 07:41 AM Feature #8905 (Closed): Add host configure option for binding the TCP port
- With the recent changes to Rack and Sinatra (https://github.com/sinatra/sinatra/commit/0f9a959253bdf0c39422ffb9b60278...
Also available in: Atom