Foreman » Smart Proxy

02/04/2017

11:59 AM Refactor #18398 (Ready For Testing): Use consistent naming of parameters in the DNS modules

The Foreman Bot

11:58 AM Refactor #18398 (Ready For Testing): Use consistent naming of parameters in the DNS modules

This comes from https://github.com/theforeman/smart-proxy/pull/490. Currently the API uses parameter names like fqdn ... Ewoud Kohl van Wijngaarden

09:53 AM Feature #18397 (Ready For Testing): Verify CNAME targets are valid DNS names

The Foreman Bot

08:57 AM Feature #18397 (Closed): Verify CNAME targets are valid DNS names

Ewoud Kohl van Wijngaarden

08:07 AM Bug #18395: Smart proxy - 1.14.1 - Windows 2008R2 - uninitialized constant error - DHCP

Is this happening when you are trying to get an automatic ip address suggestion? If so, this feature isn't available ... Anonymous

07:58 AM Bug #18395: Smart proxy - 1.14.1 - Windows 2008R2 - uninitialized constant error - DHCP

Could you enable debug-level logging on smart-proxy and post the complete log of the failure please? Anonymous

02/03/2017

07:40 PM Bug #18395 (Closed): Smart proxy - 1.14.1 - Windows 2008R2 - uninitialized constant error - DHCP

Smart Proxy 1.14.1 on Windows, when trying to build a new system, the DHCP smart proxy on Windows fails with this err... Jack Watroba

05:31 PM Feature #2595 (Ready For Testing): Expose more existing rubyipmi features as BMC smart-proxy APIs

The Foreman Bot

05:48 AM Bug #18369: Foreman-proxy timeout - Error: ERF12-4115 [ProxyAPI::ProxyException]

Hi Dominic,
I am a little confused - where should I add this setting?
environment-class-cache-enabled ?? Slagian Momirovici

02/02/2017

09:35 AM Bug #17942: Timeout during Puppet class import, slow re-initialization of Puppet 3

#18290 covers a similar problem (possibly as described in comments above) when using Puppet 4. The two are otherwise ... Dominic Cleal

09:32 AM Bug #18369 (Duplicate): Foreman-proxy timeout - Error: ERF12-4115 [ProxyAPI::ProxyException]

Thanks, since it's Puppet 3 I think it's a duplicate of the issue you've already linked it to so I'm going to close i... Dominic Cleal

09:29 AM Bug #18369: Foreman-proxy timeout - Error: ERF12-4115 [ProxyAPI::ProxyException]

does it affect if the gem used is 3.8.7? Slagian Momirovici

09:29 AM Bug #18369: Foreman-proxy timeout - Error: ERF12-4115 [ProxyAPI::ProxyException]

our puppetmaster server: 3.8.5-5.1
in the foreman-proxy/:
puppet.yaml
# Puppet version used
:puppet_version:... Slagian Momirovici

09:20 AM Bug #18369: Foreman-proxy timeout - Error: ERF12-4115 [ProxyAPI::ProxyException]

I've attached also our environments for info.
thank you in advance Slagian Momirovici

09:17 AM Bug #18369: Foreman-proxy timeout - Error: ERF12-4115 [ProxyAPI::ProxyException]

Which version of Puppet is in use, and which version is specified in the smart proxy's puppet.yml configuration? Dominic Cleal

09:16 AM Bug #18369 (Duplicate): Foreman-proxy timeout - Error: ERF12-4115 [ProxyAPI::ProxyException]

Hi,
We have 4 environments -- with multiple classes inside.
It seems the problem increased since we added more ... Slagian Momirovici

02/01/2017

07:37 AM Bug #18290 (Ready For Testing): "Puppet is taking too long to respond" during class import with Puppet 4.x

The Foreman Bot

02:47 AM Bug #18290: "Puppet is taking too long to respond" during class import with Puppet 4.x

If the data is old by a couple of minutes then it's likely to cause staleness issues for all users automating Foreman... Dominic Cleal

01/31/2017

04:52 AM Bug #18269: DHCP allocates wrong address or no addresses if hosts do not respond to icmp

Could you try opening a tcp connection from smart-proxy to a host in a restricted subnet (to any port)? What error ar... Anonymous

04:11 AM Bug #18269: DHCP allocates wrong address or no addresses if hosts do not respond to icmp

TCP echos are still blocked so the firewall would just drop. Martyn Smith

01/30/2017

05:13 PM Bug #18269: DHCP allocates wrong address or no addresses if hosts do not respond to icmp

How does the firewall handle tcp echoes? Specifically opening a tcp connection from the smart-proxy host to a host in... Anonymous

05:04 PM Bug #18269: DHCP allocates wrong address or no addresses if hosts do not respond to icmp

My statement was a little confusing. By no direct communication I was refering to the original DHCPDISCOVER and DHCP... Martyn Smith

12:55 PM Bug #18269: DHCP allocates wrong address or no addresses if hosts do not respond to icmp

> It seems odd in that it never appears to check ips 10.250.130.195 and 196
This is likely due to code persisting ... Anonymous

12:50 PM Bug #18269: DHCP allocates wrong address or no addresses if hosts do not respond to icmp

Could you clarify "no direct communication" please? Is that achieved via firewall (or similar) that sends back tcp RS... Anonymous

12:26 PM Bug #18269: DHCP allocates wrong address or no addresses if hosts do not respond to icmp

The log is the same as the one posted initially.
_D, [2017-01-30T13:20:13.537045 #26591] DEBUG -- : close: 10.25... Martyn Smith

12:18 PM Bug #18269: DHCP allocates wrong address or no addresses if hosts do not respond to icmp

> However, with a start and end ip entered matching the DHCP pool of 10.250.130.195 to 206, this fails to auto-sugges... Anonymous

08:47 AM Bug #18269: DHCP allocates wrong address or no addresses if hosts do not respond to icmp

Update:
This does appear to remain an issue in my environment if you can ping some hosts on the subnet and the sub... Martyn Smith

11:01 AM Refactor #18072 (Closed): Defer to dhcp providers for their intialization.

Applied in changeset commit:0a806f31ec73efd84404eeb8496692d91f7952fa. Anonymous

10:59 AM Revision 0a806f31: Fixes #18072 - removed load_* methods from core dhcp providers

Dmitri Dolguikh

10:54 AM Bug #18290: "Puppet is taking too long to respond" during class import with Puppet 4.x

One approach is to increase the timeout. It's trivial, but there still will be a puppet environment with sufficient n... Anonymous

10:20 AM Bug #18290: "Puppet is taking too long to respond" during class import with Puppet 4.x

The environment classes impl added in #15095 is likely too aggressive with the default 15 second timeout, and it shou... Dominic Cleal

10:12 AM Bug #18290: "Puppet is taking too long to respond" during class import with Puppet 4.x

Dominic Cleal wrote:
> Could you please show the corresponding smart proxy logs behind the 503 error received? Debug... Paul Seymour

03:09 AM Bug #18290: "Puppet is taking too long to respond" during class import with Puppet 4.x

Could you please show the corresponding smart proxy logs behind the 503 error received? Debug logs from the startup o... Dominic Cleal

04:01 AM Refactor #9063 (Closed): Revert pinning of Rack to < 1.6

Applied in changeset commit:39545f9cb8a00c8828832f19de4c18fab3a51af6. Anonymous

03:18 AM Revision 39545f9c: Fixes #9063 - Revert pinning of Rack to < 1.6

Michael Moll

01/28/2017

07:48 PM Refactor #9063 (Ready For Testing): Revert pinning of Rack to < 1.6

The Foreman Bot

01/27/2017

02:29 PM Bug #18290 (Closed): "Puppet is taking too long to respond" during class import with Puppet 4.x

On the proxy status page I get a tick, I can read the PuppetCA information I can see the reports but I cannot read th... Paul Seymour

11:32 AM Refactor #18072 (Ready For Testing): Defer to dhcp providers for their intialization.

The Foreman Bot

04:01 AM Bug #18269: DHCP allocates wrong address or no addresses if hosts do not respond to icmp

Perhaps this should be a feature request then. It's behaviour in the circumstances seemed anomalous so I raised it a... Martyn Smith

01/26/2017

12:27 PM Bug #18269: DHCP allocates wrong address or no addresses if hosts do not respond to icmp

Autosuggest relies on icmp or tcp echos for detection of unused addresses. You will need to manually assign ip addres... Anonymous

12:14 PM Bug #18269 (New): DHCP allocates wrong address or no addresses if hosts do not respond to icmp

We are using foreman-proxy and dhcp isc on a server in a secure subnet that is servicing DHCP requests via DHCPRELAY ... Martyn Smith

08:01 AM Feature #18026 (Closed): Add support for smart-proxy to selectively listen on multiple interfaces

Applied in changeset commit:3a83236d887a28d2319387f26d0c0d1e900ca8de. Anonymous

07:35 AM Revision 3a83236d: Fixes #18026 - proxy can listen on multiple arbitrary interfaces

Dmitri Dolguikh

01/25/2017

12:01 PM Bug #18070 (Closed): When adding a new dhcp reservation, ip and mac addresses should be checked not only against existing reservations but leases as well

Applied in changeset commit:72fd04860f96f55c02e8826d12f2959fb8e15eb4. Anonymous

11:41 AM Bug #18210 (Resolved): Libvirt provider fails to set DHCP nametag when record doesn't have name field

Anonymous

11:41 AM Bug #18210: Libvirt provider fails to set DHCP nametag when record doesn't have name field

Closing this issue, as #18070 has been merged. Anonymous

11:38 AM Revision 72fd0486: Fixes #18070 - add_record() checks for conflicts with leases now.

Dmitri Dolguikh

10:02 AM Feature #18026 (Ready For Testing): Add support for smart-proxy to selectively listen on multiple interfaces

The Foreman Bot

05:55 AM Feature #18026 (Assigned): Add support for smart-proxy to selectively listen on multiple interfaces

Anonymous

05:43 AM Refactor #18072 (Assigned): Defer to dhcp providers for their intialization.

Anonymous

01/24/2017

04:58 AM Bug #18210 (Ready For Testing): Libvirt provider fails to set DHCP nametag when record doesn't have name field

The Foreman Bot

04:52 AM Bug #18210 (Resolved): Libvirt provider fails to set DHCP nametag when record doesn't have name field

To set the nametag we call record.name, which might not be available.
In such a case, record.name fails with
] ... Daniel Lobato Garcia

04:57 AM Bug #18209 (Ready For Testing): Cannot destroy host if DHCP record is found but is not a lease

The Foreman Bot

04:45 AM Bug #18209 (Closed): Cannot destroy host if DHCP record is found but is not a lease

When you try to destroy a DHCP record in Libvirt, it's possible that the record is found but it's not in the list of ... Daniel Lobato Garcia

01/23/2017

09:43 AM Bug #18070 (Ready For Testing): When adding a new dhcp reservation, ip and mac addresses should be checked not only against existing reservations but leases as well

The Foreman Bot

04:43 AM Bug #17942: Timeout during Puppet class import, slow re-initialization of Puppet 3

Thanks Dominic, I enabled the caching and everything is working now \o/ Tim Meusel

03:07 AM Bug #17942: Timeout during Puppet class import, slow re-initialization of Puppet 3

Caching must be enabled (via environment-class-cache-enabled in puppetserver.conf) for ETAG and caching support in Pu... Dominic Cleal

01/20/2017

06:39 PM Bug #17942: Timeout during Puppet class import, slow re-initialization of Puppet 3

You should be getting an ETAG with each response. What are the response times if you add "If-None-Match" header with ... Anonymous

06:26 PM Bug #17942: Timeout during Puppet class import, slow re-initialization of Puppet 3

Did 4 calls, all needed 21s for the same env Tim Meusel

06:13 PM Bug #17942: Timeout during Puppet class import, slow re-initialization of Puppet 3

Could you try using curl with GET method to puppet/v3/environment_classes?environment=<environment_name> to retrieve ... Anonymous

06:08 PM Bug #17942: Timeout during Puppet class import, slow re-initialization of Puppet 3

yeah very strange. I would expect that the puppetserver caches it and further calls are fast and working if one ever ... Tim Meusel

06:03 PM Bug #17942: Timeout during Puppet class import, slow re-initialization of Puppet 3

This is quite odd -- it looks like your puppet server responses are very slow: it should return classes pretty quickl... Anonymous

05:43 PM Bug #17942: Timeout during Puppet class import, slow re-initialization of Puppet 3

The cache is created during startup:... Tim Meusel

01:05 PM Bug #17942: Timeout during Puppet class import, slow re-initialization of Puppet 3

When puppet 4 and puppet environment-classes api are used, smart-proxy will attempt to initialize puppet classes cach... Anonymous

12:50 PM Bug #17942: Timeout during Puppet class import, slow re-initialization of Puppet 3

Hi.
I get the same issues in my Puppet 4 environment. The Webinterface says:... Tim Meusel

12:18 PM Bug #18179: smart proxy refresh throws stackerror

FYI: The issue filed under Katello project is in "Related Issues" above. Anonymous

12:10 PM Bug #18179: smart proxy refresh throws stackerror

Thanks Klaas D

11:35 AM Bug #18179 (Rejected): smart proxy refresh throws stackerror

Looks like a bug in Katello here: https://github.com/Katello/katello/blob/KATELLO-3.2/app/models/katello/concerns/sma... Anonymous

11:21 AM Bug #18179: smart proxy refresh throws stackerror

Hi,
on the puppet smart proxy there are logs like this:... Klaas D

10:32 AM Bug #18179: smart proxy refresh throws stackerror

Could you post smart-proxy log for when this failure happens? It's not clear from Foreman's log where the failure is ... Anonymous

10:27 AM Bug #18179 (Rejected): smart proxy refresh throws stackerror

Hi,
I recently upgraded my main foreman/katello server to 3.2.3. Afterwards I reinstalled my secondary puppet smartp... Klaas D

09:21 AM Bug #18177: The autosign checker does not close its file descriptor

This looks like the culprit: https://github.com/theforeman/smart-proxy/blob/develop/modules/puppetca/puppetca_main.rb... Anonymous

09:18 AM Bug #18177 (Ready For Testing): The autosign checker does not close its file descriptor

The Foreman Bot

09:10 AM Bug #18177 (Closed): The autosign checker does not close its file descriptor

Over a period of time lsof shows that the autosign.conf file is being opened repeatedly but not closed.
I am worki... Paul Kelly

01/19/2017

09:26 AM Feature #17879 (Resolved): Add DNS CNAME entry for nsupdate

I think closing it as resolved makes it clearer this is now supported. The other issue kind of sneaks it in. Ewoud Kohl van Wijngaarden

09:01 AM Refactor #17906 (Closed): Move create_*_record remove_*_record functions into dns_common

Applied in changeset commit:47732b9ef1375e7bc88b7056f497080477ac2e31. Anonymous

08:16 AM Revision 47732b9e: Fixes #17906 - Move {create,remove}_*_record to dns_common

Before most DNS providers had pretty much exact copies of these
functions. This removes duplication and allows for mu... Ewoud Kohl van Wijngaarden

07:01 AM Bug #18149 (Closed): Puppet CA returns invalid certificates if using organizational units in the distinguished name

Applied in changeset commit:5bef03a08c8bd3534c3c65c70ee55c8cc81625c8. Alexander Olofsson

03:58 AM Bug #18149 (Ready For Testing): Puppet CA returns invalid certificates if using organizational units in the distinguished name

The Foreman Bot

03:53 AM Bug #18149 (New): Puppet CA returns invalid certificates if using organizational units in the distinguished name

Oh, apologies, I see now - there's a bug in the smart proxy response too. Please do open a PR for a review. Dominic Cleal

03:52 AM Bug #18149 (Duplicate): Puppet CA returns invalid certificates if using organizational units in the distinguished name

Thanks for the report. This issue is currently being fixed under ticket #18040. Dominic Cleal

03:50 AM Bug #18149 (Closed): Puppet CA returns invalid certificates if using organizational units in the distinguished name

When setting up MCollective for orchestration, and signing client certificates into a separate OU, like the following... Alexander Olofsson

06:01 AM Bug #18115 (Closed): Smart proxy - 1.14 - Windows - uninitialized constant error

Applied in changeset commit:55583fb384a40d6b5126b33a3b44ecc46a44d738. Anonymous

06:01 AM Revision 5bef03a0: Fixes #18149 - Duplicates due to OU in certnames

Adds test case for certs with OU entries in their subjects. Alexander Olofsson

05:49 AM Revision 55583fb3: Fixes #18115 - Logger is initialized when Syslog isn't available.

Dmitri Dolguikh

01/18/2017

09:59 AM Bug #18115 (Ready For Testing): Smart proxy - 1.14 - Windows - uninitialized constant error

The Foreman Bot

07:16 AM Bug #18115 (Assigned): Smart proxy - 1.14 - Windows - uninitialized constant error

Anonymous

05:11 AM Bug #18115: Smart proxy - 1.14 - Windows - uninitialized constant error

The constant is referenced without checking if it's defined, or if the syslog library loaded successfully. This was a... Dominic Cleal

09:01 AM Bug #13318 (Closed): Puppet CA proxy doesn't display revoked certificates as revoked

Applied in changeset commit:bcf80519068e34cde038667ec4857ea2a197360b. Anonymous

08:29 AM Revision bcf80519: Fixes #13318 - Revoked certs always have state 'revoked'

Serial numbers from the CRL are now compared correctly to the inventory
as integers. Dmitri Dolguikh

01/17/2017

03:16 PM Bug #18115 (Closed): Smart proxy - 1.14 - Windows - uninitialized constant error

When trying to upgrade from 1.13 to 1.14 smart proxy on Windows 2008R2, I receive the following error when trying to ... Jack Watroba

11:05 AM Bug #18070 (Assigned): When adding a new dhcp reservation, ip and mac addresses should be checked not only against existing reservations but leases as well

Anonymous

08:39 AM Bug #18092: foreman-proxy throws an undefined method 'join'

Ok, I will rebuild the image on 1.14.1 perhaps to avoid error hiding. Thanks. Lukas Zapletal

07:12 AM Bug #18092 (Closed): foreman-proxy throws an undefined method 'join'

Lukas Zapletal wrote:
> Can't we just upgrade Sinatra/Rack in our nightly repos and backport the fix into 1.14? From... Dominic Cleal

07:07 AM Bug #18092: foreman-proxy throws an undefined method 'join'

Ok, I think that I overlooked an error message on foreman-proxy startup, related to the remote execution plugin:
<... Davide Ferrari

07:02 AM Bug #18092: foreman-proxy throws an undefined method 'join'

It's easy to reproduce in FDI, but the environment is read-only and very unfriendly to any debugging sessions.
One... Lukas Zapletal

06:29 AM Bug #18092: foreman-proxy throws an undefined method 'join'

In addition to what Dominic said: All foreman repositories (at this time) contain a package with an old version of si... Anonymous

06:22 AM Bug #18092: foreman-proxy throws an undefined method 'join'

An updated version of Sinatra is available from the link in comment 3, please use that instead of mixing packages and... Dominic Cleal

06:13 AM Bug #18092: foreman-proxy throws an undefined method 'join'

For the record, we are just using Smart Proxy core in discovery, this is not REX issue. Let's keep it in core for now. Lukas Zapletal

06:11 AM Bug #18092: foreman-proxy throws an undefined method 'join'

Looks like Foreman Discovery Image 3.3 is suffering from this as well, when error occurs, this is the only message in... Lukas Zapletal

01/16/2017

12:26 PM Bug #18092: foreman-proxy throws an undefined method 'join'

Well, I tried to update sinatra via @gem update sinatra@ to 1.4.7 but it turns out that the sinatra gem installed is ... Davide Ferrari

12:04 PM Bug #18092: foreman-proxy throws an undefined method 'join'

As I said any type of request is failing, even searching the catalog. I can try to update Sinatra though Davide Ferrari

09:13 AM Bug #18092: foreman-proxy throws an undefined method 'join'

Moving in case it's related to that plugin then, but without either logs showing what requests it's failing on or log... Dominic Cleal

09:10 AM Bug #18092: foreman-proxy throws an undefined method 'join'

And yes, I'm using EL7 (specifically CentOS 7.3). Debug was already enabled but didn't give any useful log
Davide Ferrari

09:09 AM Bug #18092: foreman-proxy throws an undefined method 'join'

Dominic Cleal wrote:
> Can you provide the context of the error in the log, the request being made? Enabling debug l... Davide Ferrari

08:27 AM Bug #18092: foreman-proxy throws an undefined method 'join'

Guessing you're using EL7 from the stacktrace. If so, an updated version of rubygem-sintra is available at http://koj... Dominic Cleal

07:42 AM Bug #18092: foreman-proxy throws an undefined method 'join'

Sinatra v. 1.3.5 is fairly old and is going to have issues with rack versions below 1.6.0. Specifically, your issue i... Anonymous

07:18 AM Bug #18092 (Need more information): foreman-proxy throws an undefined method 'join'

Can you provide the context of the error in the log, the request being made? Enabling debug logging (log_level, /etc/... Dominic Cleal

07:14 AM Bug #18092 (Closed): foreman-proxy throws an undefined method 'join'

I get this with every request, making the proxy unusable... Davide Ferrari

12:01 PM Feature #18071 (Closed): Handling of removal of non-existing record by dhcp provider should be the same across all providers

Applied in changeset commit:a218b0349d5ad79b4bc05cc52c893c09fd511e26. Anonymous

10:40 AM Feature #18071 (Ready For Testing): Handling of removal of non-existing record by dhcp provider should be the same across all providers

The Foreman Bot

09:44 AM Feature #18071 (Assigned): Handling of removal of non-existing record by dhcp provider should be the same across all providers

Anonymous

11:14 AM Revision a218b034: Fixes #18071 - Deleting missing records doesn't generate errors

Dmitri Dolguikh

01/13/2017

12:02 PM Feature #17856 (Closed): SmartProxy should support multiple dhcp reservations for the same ip address

Applied in changeset commit:c7aa35f0b18090e7e7d1b06493449972b6de37bc. Anonymous

11:23 AM Refactor #18072 (Closed): Defer to dhcp providers for their intialization.

Currently dhcp api controller makes explicit calls "load_subnet" and "load_subnet_data" to initialize dhcp provider s... Anonymous

11:19 AM Feature #18071 (Closed): Handling of removal of non-existing record by dhcp provider should be the same across all providers

Some return errors (isc, libvirt?), some treat this as a non-error (ms). Anonymous

11:15 AM Bug #18070 (Closed): When adding a new dhcp reservation, ip and mac addresses should be checked not only against existing reservations but leases as well

Anonymous

11:13 AM Feature #18069 (Closed): Add ip and mac address validations to api endpoints in dhcp api controller

Reporting an invalid mac or ip address might help with troubleshooting of of problems when dhcp record could not be f... Anonymous

11:06 AM Revision c7aa35f0: fixes #17856 - support multiple dhcp records for same ip

Timo Goebel

06:16 AM Bug #13318 (Ready For Testing): Puppet CA proxy doesn't display revoked certificates as revoked

The Foreman Bot

01/11/2017

10:04 AM Bug #13080 (Resolved): nsupdate module allows to specify mutually exclusive -k and -g options at the same time, which leads to a cryptic "Broken pipe" error

Anonymous

10:04 AM Bug #13080: nsupdate module allows to specify mutually exclusive -k and -g options at the same time, which leads to a cryptic "Broken pipe" error

This has been fixed in commit 42b958156808eb2a16bd895863b196fca8f2977d. Anonymous

09:57 AM Feature #17319 (Rejected): Handle kerberos ticket expiration in Gss nsupdate module

Smart proxy renews kerberos tickets on every request via Kerberos::Krb5#get_init_creds_keytab. The original report wa... Anonymous

08:27 AM Feature #18026 (Closed): Add support for smart-proxy to selectively listen on multiple interfaces

It might be possible to use wildcard certs or alternative hostnames extension for ssl certificates. Anonymous

01/10/2017

09:14 AM Bug #17566: TFTP provisioning fails when grub2 directory does not exist

I will add to that that the installer should take care of the directories:
https://github.com/theforeman/foreman-i... Lukas Zapletal

07:59 AM Bug #17566: TFTP provisioning fails when grub2 directory does not exist

This is due to permissions on /var/lib/tftpboot (or w/e directory is used as tftp root). By default it's owned by roo... Anonymous

07:28 AM Bug #17862 (Rejected): Silence Sinatra/rack startup warning "TCPServer Error: Address already in use - bind(2)"

Additional clarification Anonymous

01/09/2017

10:43 AM Bug #17862: Silence Sinatra/rack startup warning "TCPServer Error: Address already in use - bind(2)"

Such an error message will not appear on rubies version 2.1 and higher. Socket.tcp_server_sockets method used by webr... Anonymous