Foreman » Smart Proxy

01/27/2017

02:29 PM Bug #18290 (Closed): "Puppet is taking too long to respond" during class import with Puppet 4.x

On the proxy status page I get a tick, I can read the PuppetCA information I can see the reports but I cannot read th... Paul Seymour

11:32 AM Refactor #18072 (Ready For Testing): Defer to dhcp providers for their intialization.

The Foreman Bot

04:01 AM Bug #18269: DHCP allocates wrong address or no addresses if hosts do not respond to icmp

Perhaps this should be a feature request then. It's behaviour in the circumstances seemed anomalous so I raised it a... Martyn Smith

01/26/2017

12:27 PM Bug #18269: DHCP allocates wrong address or no addresses if hosts do not respond to icmp

Autosuggest relies on icmp or tcp echos for detection of unused addresses. You will need to manually assign ip addres... Anonymous

12:14 PM Bug #18269 (New): DHCP allocates wrong address or no addresses if hosts do not respond to icmp

We are using foreman-proxy and dhcp isc on a server in a secure subnet that is servicing DHCP requests via DHCPRELAY ... Martyn Smith

08:01 AM Feature #18026 (Closed): Add support for smart-proxy to selectively listen on multiple interfaces

Applied in changeset commit:3a83236d887a28d2319387f26d0c0d1e900ca8de. Anonymous

07:35 AM Revision 3a83236d: Fixes #18026 - proxy can listen on multiple arbitrary interfaces

Dmitri Dolguikh

01/25/2017

12:01 PM Bug #18070 (Closed): When adding a new dhcp reservation, ip and mac addresses should be checked not only against existing reservations but leases as well

Applied in changeset commit:72fd04860f96f55c02e8826d12f2959fb8e15eb4. Anonymous

11:41 AM Bug #18210 (Resolved): Libvirt provider fails to set DHCP nametag when record doesn't have name field

Anonymous

11:41 AM Bug #18210: Libvirt provider fails to set DHCP nametag when record doesn't have name field

Closing this issue, as #18070 has been merged. Anonymous

11:38 AM Revision 72fd0486: Fixes #18070 - add_record() checks for conflicts with leases now.

Dmitri Dolguikh

10:02 AM Feature #18026 (Ready For Testing): Add support for smart-proxy to selectively listen on multiple interfaces

The Foreman Bot

05:55 AM Feature #18026 (Assigned): Add support for smart-proxy to selectively listen on multiple interfaces

Anonymous

05:43 AM Refactor #18072 (Assigned): Defer to dhcp providers for their intialization.

Anonymous

01/24/2017

04:58 AM Bug #18210 (Ready For Testing): Libvirt provider fails to set DHCP nametag when record doesn't have name field

The Foreman Bot

04:52 AM Bug #18210 (Resolved): Libvirt provider fails to set DHCP nametag when record doesn't have name field

To set the nametag we call record.name, which might not be available.
In such a case, record.name fails with
] ... Daniel Lobato Garcia

04:57 AM Bug #18209 (Ready For Testing): Cannot destroy host if DHCP record is found but is not a lease

The Foreman Bot

04:45 AM Bug #18209 (Closed): Cannot destroy host if DHCP record is found but is not a lease

When you try to destroy a DHCP record in Libvirt, it's possible that the record is found but it's not in the list of ... Daniel Lobato Garcia

01/23/2017

09:43 AM Bug #18070 (Ready For Testing): When adding a new dhcp reservation, ip and mac addresses should be checked not only against existing reservations but leases as well

The Foreman Bot

04:43 AM Bug #17942: Timeout during Puppet class import, slow re-initialization of Puppet 3

Thanks Dominic, I enabled the caching and everything is working now \o/ Tim Meusel

03:07 AM Bug #17942: Timeout during Puppet class import, slow re-initialization of Puppet 3

Caching must be enabled (via environment-class-cache-enabled in puppetserver.conf) for ETAG and caching support in Pu... Dominic Cleal

01/20/2017

06:39 PM Bug #17942: Timeout during Puppet class import, slow re-initialization of Puppet 3

You should be getting an ETAG with each response. What are the response times if you add "If-None-Match" header with ... Anonymous

06:26 PM Bug #17942: Timeout during Puppet class import, slow re-initialization of Puppet 3

Did 4 calls, all needed 21s for the same env Tim Meusel

06:13 PM Bug #17942: Timeout during Puppet class import, slow re-initialization of Puppet 3

Could you try using curl with GET method to puppet/v3/environment_classes?environment=<environment_name> to retrieve ... Anonymous

06:08 PM Bug #17942: Timeout during Puppet class import, slow re-initialization of Puppet 3

yeah very strange. I would expect that the puppetserver caches it and further calls are fast and working if one ever ... Tim Meusel

06:03 PM Bug #17942: Timeout during Puppet class import, slow re-initialization of Puppet 3

This is quite odd -- it looks like your puppet server responses are very slow: it should return classes pretty quickl... Anonymous

05:43 PM Bug #17942: Timeout during Puppet class import, slow re-initialization of Puppet 3

The cache is created during startup:... Tim Meusel

01:05 PM Bug #17942: Timeout during Puppet class import, slow re-initialization of Puppet 3

When puppet 4 and puppet environment-classes api are used, smart-proxy will attempt to initialize puppet classes cach... Anonymous

12:50 PM Bug #17942: Timeout during Puppet class import, slow re-initialization of Puppet 3

Hi.
I get the same issues in my Puppet 4 environment. The Webinterface says:... Tim Meusel

12:18 PM Bug #18179: smart proxy refresh throws stackerror

FYI: The issue filed under Katello project is in "Related Issues" above. Anonymous

12:10 PM Bug #18179: smart proxy refresh throws stackerror

Thanks Klaas D

11:35 AM Bug #18179 (Rejected): smart proxy refresh throws stackerror

Looks like a bug in Katello here: https://github.com/Katello/katello/blob/KATELLO-3.2/app/models/katello/concerns/sma... Anonymous

11:21 AM Bug #18179: smart proxy refresh throws stackerror

Hi,
on the puppet smart proxy there are logs like this:... Klaas D

10:32 AM Bug #18179: smart proxy refresh throws stackerror

Could you post smart-proxy log for when this failure happens? It's not clear from Foreman's log where the failure is ... Anonymous

10:27 AM Bug #18179 (Rejected): smart proxy refresh throws stackerror

Hi,
I recently upgraded my main foreman/katello server to 3.2.3. Afterwards I reinstalled my secondary puppet smartp... Klaas D

09:21 AM Bug #18177: The autosign checker does not close its file descriptor

This looks like the culprit: https://github.com/theforeman/smart-proxy/blob/develop/modules/puppetca/puppetca_main.rb... Anonymous

09:18 AM Bug #18177 (Ready For Testing): The autosign checker does not close its file descriptor

The Foreman Bot

09:10 AM Bug #18177 (Closed): The autosign checker does not close its file descriptor

Over a period of time lsof shows that the autosign.conf file is being opened repeatedly but not closed.
I am worki... Paul Kelly

01/19/2017

09:26 AM Feature #17879 (Resolved): Add DNS CNAME entry for nsupdate

I think closing it as resolved makes it clearer this is now supported. The other issue kind of sneaks it in. Ewoud Kohl van Wijngaarden

09:01 AM Refactor #17906 (Closed): Move create_*_record remove_*_record functions into dns_common

Applied in changeset commit:47732b9ef1375e7bc88b7056f497080477ac2e31. Anonymous

08:16 AM Revision 47732b9e: Fixes #17906 - Move {create,remove}_*_record to dns_common

Before most DNS providers had pretty much exact copies of these
functions. This removes duplication and allows for mu... Ewoud Kohl van Wijngaarden

07:01 AM Bug #18149 (Closed): Puppet CA returns invalid certificates if using organizational units in the distinguished name

Applied in changeset commit:5bef03a08c8bd3534c3c65c70ee55c8cc81625c8. Alexander Olofsson

03:58 AM Bug #18149 (Ready For Testing): Puppet CA returns invalid certificates if using organizational units in the distinguished name

The Foreman Bot

03:53 AM Bug #18149 (New): Puppet CA returns invalid certificates if using organizational units in the distinguished name

Oh, apologies, I see now - there's a bug in the smart proxy response too. Please do open a PR for a review. Dominic Cleal

03:52 AM Bug #18149 (Duplicate): Puppet CA returns invalid certificates if using organizational units in the distinguished name

Thanks for the report. This issue is currently being fixed under ticket #18040. Dominic Cleal

03:50 AM Bug #18149 (Closed): Puppet CA returns invalid certificates if using organizational units in the distinguished name

When setting up MCollective for orchestration, and signing client certificates into a separate OU, like the following... Alexander Olofsson

06:01 AM Bug #18115 (Closed): Smart proxy - 1.14 - Windows - uninitialized constant error

Applied in changeset commit:55583fb384a40d6b5126b33a3b44ecc46a44d738. Anonymous

06:01 AM Revision 5bef03a0: Fixes #18149 - Duplicates due to OU in certnames

Adds test case for certs with OU entries in their subjects. Alexander Olofsson

05:49 AM Revision 55583fb3: Fixes #18115 - Logger is initialized when Syslog isn't available.

Dmitri Dolguikh

01/18/2017

09:59 AM Bug #18115 (Ready For Testing): Smart proxy - 1.14 - Windows - uninitialized constant error

The Foreman Bot

07:16 AM Bug #18115 (Assigned): Smart proxy - 1.14 - Windows - uninitialized constant error

Anonymous

05:11 AM Bug #18115: Smart proxy - 1.14 - Windows - uninitialized constant error

The constant is referenced without checking if it's defined, or if the syslog library loaded successfully. This was a... Dominic Cleal

09:01 AM Bug #13318 (Closed): Puppet CA proxy doesn't display revoked certificates as revoked

Applied in changeset commit:bcf80519068e34cde038667ec4857ea2a197360b. Anonymous

08:29 AM Revision bcf80519: Fixes #13318 - Revoked certs always have state 'revoked'

Serial numbers from the CRL are now compared correctly to the inventory
as integers. Dmitri Dolguikh

01/17/2017

03:16 PM Bug #18115 (Closed): Smart proxy - 1.14 - Windows - uninitialized constant error

When trying to upgrade from 1.13 to 1.14 smart proxy on Windows 2008R2, I receive the following error when trying to ... Jack Watroba

11:05 AM Bug #18070 (Assigned): When adding a new dhcp reservation, ip and mac addresses should be checked not only against existing reservations but leases as well

Anonymous

08:39 AM Bug #18092: foreman-proxy throws an undefined method 'join'

Ok, I will rebuild the image on 1.14.1 perhaps to avoid error hiding. Thanks. Lukas Zapletal

07:12 AM Bug #18092 (Closed): foreman-proxy throws an undefined method 'join'

Lukas Zapletal wrote:
> Can't we just upgrade Sinatra/Rack in our nightly repos and backport the fix into 1.14? From... Dominic Cleal

07:07 AM Bug #18092: foreman-proxy throws an undefined method 'join'

Ok, I think that I overlooked an error message on foreman-proxy startup, related to the remote execution plugin:
<... Davide Ferrari

07:02 AM Bug #18092: foreman-proxy throws an undefined method 'join'

It's easy to reproduce in FDI, but the environment is read-only and very unfriendly to any debugging sessions.
One... Lukas Zapletal

06:29 AM Bug #18092: foreman-proxy throws an undefined method 'join'

In addition to what Dominic said: All foreman repositories (at this time) contain a package with an old version of si... Anonymous

06:22 AM Bug #18092: foreman-proxy throws an undefined method 'join'

An updated version of Sinatra is available from the link in comment 3, please use that instead of mixing packages and... Dominic Cleal

06:13 AM Bug #18092: foreman-proxy throws an undefined method 'join'

For the record, we are just using Smart Proxy core in discovery, this is not REX issue. Let's keep it in core for now. Lukas Zapletal

06:11 AM Bug #18092: foreman-proxy throws an undefined method 'join'

Looks like Foreman Discovery Image 3.3 is suffering from this as well, when error occurs, this is the only message in... Lukas Zapletal

01/16/2017

12:26 PM Bug #18092: foreman-proxy throws an undefined method 'join'

Well, I tried to update sinatra via @gem update sinatra@ to 1.4.7 but it turns out that the sinatra gem installed is ... Davide Ferrari

12:04 PM Bug #18092: foreman-proxy throws an undefined method 'join'

As I said any type of request is failing, even searching the catalog. I can try to update Sinatra though Davide Ferrari

09:13 AM Bug #18092: foreman-proxy throws an undefined method 'join'

Moving in case it's related to that plugin then, but without either logs showing what requests it's failing on or log... Dominic Cleal

09:10 AM Bug #18092: foreman-proxy throws an undefined method 'join'

And yes, I'm using EL7 (specifically CentOS 7.3). Debug was already enabled but didn't give any useful log
Davide Ferrari

09:09 AM Bug #18092: foreman-proxy throws an undefined method 'join'

Dominic Cleal wrote:
> Can you provide the context of the error in the log, the request being made? Enabling debug l... Davide Ferrari

08:27 AM Bug #18092: foreman-proxy throws an undefined method 'join'

Guessing you're using EL7 from the stacktrace. If so, an updated version of rubygem-sintra is available at http://koj... Dominic Cleal

07:42 AM Bug #18092: foreman-proxy throws an undefined method 'join'

Sinatra v. 1.3.5 is fairly old and is going to have issues with rack versions below 1.6.0. Specifically, your issue i... Anonymous

07:18 AM Bug #18092 (Need more information): foreman-proxy throws an undefined method 'join'

Can you provide the context of the error in the log, the request being made? Enabling debug logging (log_level, /etc/... Dominic Cleal

07:14 AM Bug #18092 (Closed): foreman-proxy throws an undefined method 'join'

I get this with every request, making the proxy unusable... Davide Ferrari

12:01 PM Feature #18071 (Closed): Handling of removal of non-existing record by dhcp provider should be the same across all providers

Applied in changeset commit:a218b0349d5ad79b4bc05cc52c893c09fd511e26. Anonymous

10:40 AM Feature #18071 (Ready For Testing): Handling of removal of non-existing record by dhcp provider should be the same across all providers

The Foreman Bot

09:44 AM Feature #18071 (Assigned): Handling of removal of non-existing record by dhcp provider should be the same across all providers

Anonymous

11:14 AM Revision a218b034: Fixes #18071 - Deleting missing records doesn't generate errors

Dmitri Dolguikh

01/13/2017

12:02 PM Feature #17856 (Closed): SmartProxy should support multiple dhcp reservations for the same ip address

Applied in changeset commit:c7aa35f0b18090e7e7d1b06493449972b6de37bc. Anonymous

11:23 AM Refactor #18072 (Closed): Defer to dhcp providers for their intialization.

Currently dhcp api controller makes explicit calls "load_subnet" and "load_subnet_data" to initialize dhcp provider s... Anonymous

11:19 AM Feature #18071 (Closed): Handling of removal of non-existing record by dhcp provider should be the same across all providers

Some return errors (isc, libvirt?), some treat this as a non-error (ms). Anonymous

11:15 AM Bug #18070 (Closed): When adding a new dhcp reservation, ip and mac addresses should be checked not only against existing reservations but leases as well

Anonymous

11:13 AM Feature #18069 (Closed): Add ip and mac address validations to api endpoints in dhcp api controller

Reporting an invalid mac or ip address might help with troubleshooting of of problems when dhcp record could not be f... Anonymous

11:06 AM Revision c7aa35f0: fixes #17856 - support multiple dhcp records for same ip

Timo Goebel

06:16 AM Bug #13318 (Ready For Testing): Puppet CA proxy doesn't display revoked certificates as revoked

The Foreman Bot

01/11/2017

10:04 AM Bug #13080 (Resolved): nsupdate module allows to specify mutually exclusive -k and -g options at the same time, which leads to a cryptic "Broken pipe" error

Anonymous

10:04 AM Bug #13080: nsupdate module allows to specify mutually exclusive -k and -g options at the same time, which leads to a cryptic "Broken pipe" error

This has been fixed in commit 42b958156808eb2a16bd895863b196fca8f2977d. Anonymous

09:57 AM Feature #17319 (Rejected): Handle kerberos ticket expiration in Gss nsupdate module

Smart proxy renews kerberos tickets on every request via Kerberos::Krb5#get_init_creds_keytab. The original report wa... Anonymous

08:27 AM Feature #18026 (Closed): Add support for smart-proxy to selectively listen on multiple interfaces

It might be possible to use wildcard certs or alternative hostnames extension for ssl certificates. Anonymous

01/10/2017

09:14 AM Bug #17566: TFTP provisioning fails when grub2 directory does not exist

I will add to that that the installer should take care of the directories:
https://github.com/theforeman/foreman-i... Lukas Zapletal

07:59 AM Bug #17566: TFTP provisioning fails when grub2 directory does not exist

This is due to permissions on /var/lib/tftpboot (or w/e directory is used as tftp root). By default it's owned by roo... Anonymous

07:28 AM Bug #17862 (Rejected): Silence Sinatra/rack startup warning "TCPServer Error: Address already in use - bind(2)"

Additional clarification Anonymous

01/09/2017

10:43 AM Bug #17862: Silence Sinatra/rack startup warning "TCPServer Error: Address already in use - bind(2)"

Such an error message will not appear on rubies version 2.1 and higher. Socket.tcp_server_sockets method used by webr... Anonymous

01/05/2017

10:57 AM Bug #17942: Timeout during Puppet class import, slow re-initialization of Puppet 3

proxy.log shows very slow iteration over manifests across multiple environments, measured in minutes per manifest. It... Dominic Cleal

10:50 AM Bug #17942: Timeout during Puppet class import, slow re-initialization of Puppet 3

Error: ERF12-4115 [ProxyAPI::ProxyException]: Unable to get classes from Puppet for admybr ([RestClient::RequestTimeo... Yvan Broccard

10:46 AM Bug #17942 (Rejected): Timeout during Puppet class import, slow re-initialization of Puppet 3

I'm not able to import Puppet classes or environments from foreman-proxy. The foreman-proxy is running on the puppetm... Yvan Broccard

01/04/2017

06:25 AM Feature #17879 (Rejected): Add DNS CNAME entry for nsupdate

Closing this in favour of http://projects.theforeman.org/issues/17906 which provides default implementations for all ... Anonymous

03:38 AM Bug #17823 (Closed): Non-JSON response from MS DNS record deletion

Fixed in https://github.com/theforeman/smart-proxy/commit/8ccd3491146bfd7ece57478eb6da77c84ae6ad18. Dominic Cleal

01/03/2017

11:01 AM Bug #17868 (Closed): dhcp option next-server ip not converted correctly

Applied in changeset commit:dfc8ecb92ae19495560fb8734e8e39a88ac5b06c. Anonymous

10:19 AM Revision dfc8ecb9: fixes #17868 - dhcp: convert next-server ip correctly

Timo Goebel

10:10 AM Revision a0e36b3b: Refs #17037 - Fix deprecation warning in dnscmd

522231bf3e4c918ee821a73acb3f70459ca57791 deprecated the use of
ptr_record_conflicts with IPs, but didn't update this ... Ewoud Kohl van Wijngaarden

08:55 AM Refactor #17906 (Ready For Testing): Move create_*_record remove_*_record functions into dns_common

The Foreman Bot

08:21 AM Refactor #17906 (Assigned): Move create_*_record remove_*_record functions into dns_common

Ewoud Kohl van Wijngaarden

08:20 AM Refactor #17906 (Closed): Move create_*_record remove_*_record functions into dns_common

Currently most of the DNS providers implement the exact same create_*_record and remove_*_record functions, but with ... Ewoud Kohl van Wijngaarden

08:16 AM Bug #17890 (Resolved): PowerDNS smartproxy fails because of AAAA/IPV6 record failure

Confirmed (on IRC) that the logging patch works and also that the last error was a legitimate error since the zone di... Ewoud Kohl van Wijngaarden

07:25 AM Bug #17890: PowerDNS smartproxy fails because of AAAA/IPV6 record failure

I created https://github.com/theforeman/smart_proxy_dns_powerdns/pull/30 which you can apply locally:... Ewoud Kohl van Wijngaarden

07:10 AM Bug #17890: PowerDNS smartproxy fails because of AAAA/IPV6 record failure

I already noticed that the logging was fairly minimal and I really need to improve on that. My guess is that it's try... Ewoud Kohl van Wijngaarden

06:17 AM Bug #17890: PowerDNS smartproxy fails because of AAAA/IPV6 record failure

Rolf Larsen wrote:
> 0.3.0 fixed AAAA records. Now i have some issues with PTR:
>
> [...]
>
> Im not sure whic... El Joppa

05:58 AM Bug #17890: PowerDNS smartproxy fails because of AAAA/IPV6 record failure

My bad, the node is not in the specified subnet. El Joppa

05:04 AM Bug #17890: PowerDNS smartproxy fails because of AAAA/IPV6 record failure

0.3.0 fixed AAAA records. Now i have some issues with PTR:... El Joppa

01/02/2017

08:29 PM Bug #17890 (Feedback): PowerDNS smartproxy fails because of AAAA/IPV6 record failure

I released version 0.3.0 which should have fixed this issue, but it was only added to the 1.14 repo a few hours ago. ... Ewoud Kohl van Wijngaarden

09:06 AM Bug #17890 (Resolved): PowerDNS smartproxy fails because of AAAA/IPV6 record failure

ii foreman-proxy 1.14.0~rc2-1 all RESTful proxies for DNS, DHCP, ... El Joppa

12/29/2016

04:36 PM Refactor #17880 (Ready For Testing): DNS CNAME parameters methods are swapped

The Foreman Bot

04:08 PM Refactor #17880 (Rejected): DNS CNAME parameters methods are swapped

All DNS methods uses *fqdn* parameters as the target of the action and the second argument as the attribute that will... Guilherme Maluf Balzana

03:44 PM Feature #17879 (Ready For Testing): Add DNS CNAME entry for nsupdate

The Foreman Bot

03:36 PM Feature #17879 (Resolved): Add DNS CNAME entry for nsupdate

DNS managed by Foreman should be able to assign aliases for hosts.
Smart-proxy API currently support DNS CNAME ent... Guilherme Maluf Balzana