Katello - Password Mismatch

[Michael Burbury]

Dear Katello List,

After rebuilding a new Katello server, I am facing an issue as per the below:

[Mon Feb 20 14:49:41 2012] [info] [client XX.XX.XX.XX] mod_wsgi (pid=3029,
process='', application=''): Loading WSGI script
'/srv/pulp/repo_auth.wsgi'.
[Mon Feb 20 14:49:41 2012] [error] [client XX.XX.XX.XX] Client certificate did not match
the global repo auth CA certificate
[Mon Feb 20 14:49:41 2012] [error] [client XX.XX.XX.XX] user /CN=<long number>:
authentication failure for 
"/pulp/repos/MyOrg/DCIS/custom/DCIS/EPEL-X86-64/repodata/repomd.xml": Password
Mismatch
[Mon Feb 20 14:49:41 2012] [info] [client XX.XX.XX.XX] Connection closed to child 4 with
standard shutdown (server katello.cloud.internal:443)

I tried downgrading the mod_wsgi and it worked briefly until after I restarted the
server.

I then tried updating mod_wsgi to this:

[katello ~]# rpm -qa |grep mod_wsgi
mod_wsgi-3.3-3.pulp.fc16.x86_64

But the error persists.

I have tried downgrading again and various iterations, but I have become stuck.

Would anyone be able to offer hints please?


Thank you,

Michael Burbury


#####################################################################################
Confidentiality and Privilege Notice 
This document is intended solely for the named addressee.  The information contained in
the pages is confidential and contains legally privileged information. If you are not the
addressee indicated in this message (or responsible for delivery of the message to such
person), you may not copy or deliver this message to anyone, and you should destroy this
message and kindly notify the sender by reply email. Confidentiality and legal privilege
are not waived or lost by reason of mistaken delivery to you.
#####################################################################################

[Lukas Zapletal]

Michael,

what are you trying to do in this case?

You can also use 

/usr/share/katello/script/katello-debug

script to create a tarball with all the relevant log files, create a
bugzilla

https://bugzilla.redhat.com/enter_bug.cgi?product=Katello

and make a private attachment to it for us.

LZ

On Mon, Feb 20, 2012 at 04:18:08AM +0000, Michael Burbury wrote:
>  Dear Katello List,
>  
>  After rebuilding a new Katello server, I am facing an issue as per the below:
>  
>  [Mon Feb 20 14:49:41 2012] [info] [client XX.XX.XX.XX] mod_wsgi (pid=3029,
> process='', application=''): Loading WSGI script
> '/srv/pulp/repo_auth.wsgi'.
>  [Mon Feb 20 14:49:41 2012] [error] [client XX.XX.XX.XX] Client certificate did not match
> the global repo auth CA certificate
>  [Mon Feb 20 14:49:41 2012] [error] [client XX.XX.XX.XX] user /CN=<long number>:
> authentication failure for 
>  "/pulp/repos/MyOrg/DCIS/custom/DCIS/EPEL-X86-64/repodata/repomd.xml": Password
> Mismatch
>  [Mon Feb 20 14:49:41 2012] [info] [client XX.XX.XX.XX] Connection closed to child 4 with
> standard shutdown (server katello.cloud.internal:443)
>  
>  I tried downgrading the mod_wsgi and it worked briefly until after I restarted the
> server.
>  
>  I then tried updating mod_wsgi to this:
>  
>  [katello ~]# rpm -qa |grep mod_wsgi
>  mod_wsgi-3.3-3.pulp.fc16.x86_64
>  
>  But the error persists.
>  
>  I have tried downgrading again and various iterations, but I have become stuck.
>  
>  Would anyone be able to offer hints please?
>  
>  
>  Thank you,
>  
>  Michael Burbury
>  
>  
>  #####################################################################################
>  Confidentiality and Privilege Notice 
>  This document is intended solely for the named addressee.  The information contained in
> the pages is confidential and contains legally privileged information. If you are not the
> addressee indicated in this message (or responsible for delivery of the message to such
> person), you may not copy or deliver this message to anyone, and you should destroy this
> message and kindly notify the sender by reply email. Confidentiality and legal privilege
> are not waived or lost by reason of mistaken delivery to you.
>  #####################################################################################
>  _______________________________________________
>  katello mailing list
>  katello(a)lists.fedorahosted.org
>  https://fedorahosted.org/mailman/listinfo/katello 
-- 
Later,

 Lukas Zapletal | E32E400A
 RHN Satellite Engineering
 Red Hat Czech s.r.o. Brno

[Jeff Weiss]

On Mon, 2012-02-20 at 04:18 +0000, Michael Burbury wrote:
>  Dear Katello List,
>  
>  After rebuilding a new Katello server, I am facing an issue as per the below:
>  
>  [Mon Feb 20 14:49:41 2012] [info] [client XX.XX.XX.XX] mod_wsgi (pid=3029,
> process='', application=''): Loading WSGI script
> '/srv/pulp/repo_auth.wsgi'.
>  [Mon Feb 20 14:49:41 2012] [error] [client XX.XX.XX.XX] Client certificate did not match
> the global repo auth CA certificate
>  [Mon Feb 20 14:49:41 2012] [error] [client XX.XX.XX.XX] user /CN=<long number>:
> authentication failure for 
>  "/pulp/repos/MyOrg/DCIS/custom/DCIS/EPEL-X86-64/repodata/repomd.xml": Password
> Mismatch
>  [Mon Feb 20 14:49:41 2012] [info] [client XX.XX.XX.XX] Connection closed to child 4 with
> standard shutdown (server katello.cloud.internal:443)
>  
>  I tried downgrading the mod_wsgi and it worked briefly until after I restarted the
> server.
>  
>  I then tried updating mod_wsgi to this:
>  
>  [katello ~]# rpm -qa |grep mod_wsgi
>  mod_wsgi-3.3-3.pulp.fc16.x86_64
>  
>  But the error persists.
>  
>  I have tried downgrading again and various iterations, but I have become stuck.
>  
>  Would anyone be able to offer hints please?
>  
>  
>  Thank you,
>  
>  Michael Burbury
>  
>  
>  #####################################################################################
>  Confidentiality and Privilege Notice 
>  This document is intended solely for the named addressee.  The information contained in
> the pages is confidential and contains legally privileged information. If you are not the
> addressee indicated in this message (or responsible for delivery of the message to such
> person), you may not copy or deliver this message to anyone, and you should destroy this
> message and kindly notify the sender by reply email. Confidentiality and legal privilege
> are not waived or lost by reason of mistaken delivery to you.
>  #####################################################################################
>  _______________________________________________
>  katello mailing list
>  katello(a)lists.fedorahosted.org
>  https://fedorahosted.org/mailman/listinfo/katello 
Sounds to me like an auth issue on the client end.  Make sure you set up
certs as described in 
https://fedorahosted.org/katello/wiki/GuideSystemRegistrationClient