Dear All,
One of my fedora client is behind the squid proxy server. That client could not able to update the add and remove program. Can anyone help me what to configure at squid / firewall, so that client could update the softwares. Also tell me how secure it is to allow clients to update, is that going to create hole in the security wall.
thanks
Arun
________________________________________________________________________ You are invited to Get a Free AOL Email ID. - http://webmail.aol.in
arunbkn@aol.in wrote:
One of my fedora client is behind the squid proxy server. That client could not able to update the add and remove program. Can anyone help me what to configure at squid / firewall, so that client could update the softwares. Also tell me how secure it is to allow clients to update, is that going to create hole in the security wall.
Are you saying your proxy requires authentication?
Have a look at "man yum.conf" you will see....
proxy proxy_username proxy_password
directives.
Yes my squid proxy require authentication .......................
Arun
-----Original Message----- From: Ed Greshko Ed.Greshko@greshko.com To: For users of Fedora fedora-list@redhat.com Sent: Fri, 1 Feb 2008 1:26 pm Subject: Re: add and remove program
arunbkn@aol.in wrote:? ?
One of my fedora client is behind the squid proxy server. That client could not able to update the add and remove program. Can anyone help me what to configure at squid / firewall, so that client could update the softwares. Also tell me how secure it is to allow clients to update, is that going to create hole in the security wall.?
?
Are you saying your proxy requires authentication?? ?
Have a look at "man yum.conf" you will see....? ?
proxy?
proxy_username?
proxy_password? ?
directives.? ?
Dear Greshko,
I think i m very much near to it, but still it is not working. My yum.conf is as follows
[main] cachedir=/var/cache/yum keepcache=0 debuglevel=2 logfile=/var/log/yum.log exactarch=1 obsoletes=1 gpgcheck=1 plugins=1 metadata_expire=1800 installonly_limit=2 proxy=172.161.432.234:8080 proxy_username=arun proxy_password=arun258
# PUT YOUR REPOS HERE OR IN separate files named file.repo # in /etc/yum.repos.d
but I am getting following error (we are using ip address of our proxy server to assess Internet)
Component: pirut Summary: TB76714bb2 config.py:80:__set__:ValueError: Error parsing '172.161.432.234:8080': URL must be http, ftp or https not "172.161.432.234"
Traceback (most recent call last): ? File "/usr/sbin/pirut", line 476, in <module> ??? main() ? File "/usr/sbin/pirut", line 469, in main ??? pm = PackageManager(options.config, options.onlyrepo) ? File "/usr/sbin/pirut", line 63, in __init__ ??? GraphicalYumBase.__init__(self, False, config) ? File "/usr/lib/python2.5/site-packages/pirut/__init__.py", line 129, in __init__ ??? plugin_types=(yum.plugins.TYPE_CORE,)) ? File "/usr/lib/python2.5/site-packages/yum/__init__.py", line 113, in doConfigSetup ??? errorlevel=errorlevel) ? File "/usr/lib/python2.5/site-packages/yum/__init__.py", line 159, in _getConfig ??? self._conf = config.readMainConfig(startupconf) ? File "/usr/lib/python2.5/site-packages/yum/config.py", line 617, in readMainConfig ??? yumconf.populate(startupconf._parser, 'main') ? File "/usr/lib/python2.5/site-packages/yum/config.py", line 376, in populate ??? setattr(self, name, value) ? File "/usr/lib/python2.5/site-packages/yum/config.py", line 80, in __set__ ??? raise ValueError('Error parsing %r: %s' % (value, str(e))) ValueError: Error parsing '172.16.251.234:8080': URL must be http, ftp or https not "172.161.432.234"
Local variables in innermost frame: obj: [main] alwaysprompt: True assumeyes: False bandwidth: 0 cachedir: '/var/cache/yum' commands: [] config_file_path: '/etc/yum/yum.conf' debuglevel: 2 diskspacecheck: True distroverpkg: 'redhat-release' enable_group_conditionals: True enabled: True enablegroups: True errorlevel: 2 exactarch: True exactarchlist: ['kernel', 'kernel-smp', 'glibc', 'kernel-hugemem', 'kernel-enterprise', 'kernel-bigmem', 'kernel-devel', 'kernel-PAE', 'kernel-PAE-debug'] exclude: [] failovermethod: 'roundrobin' gpgcheck: True group_package_types: ['mandatory', 'default'] http_caching: 'all' installonly_limit: 2 installonlypkgs: ['kernel', 'kernel-bigmem', 'kernel-enterprise', 'kernel-smp', 'kernel-modules', 'kernel-debug', 'kernel-unsupported', 'kernel-source', 'kernel-devel', 'kernel-PAE', 'kernel-PAE-debug'] installroot: '/' keepalive: True keepcache: False kernelpkgnames: ['kernel', 'kernel-smp', 'kernel-enterprise', 'kernel-bigmem', 'kernel-BOOT', 'kernel-PAE', 'kernel-PAE-debug'] logfile: '/var/log/yum.log' metadata_expire: 1800 mirrorlist_expire: 86400 obsoletes: True overwrite_groups: False persistdir: '/var/lib/yum' pluginconfpath: ['/etc/yum/pluginconf.d'] pluginpath: ['/usr/share/yum-plugins', '/usr/lib/yum-plugins'] plugins: True proxy: None proxy_password: None proxy_username: None recent: 7 reposdir: ['/etc/yum/repos.d', '/etc/yum.repos.d'] retries: 10 rpm_check_debug: True showdupesfromrepos: False syslog_facility: 'LOG_DAEMON' syslog_ident: None throttle: 0 timeout: 30.0 tolerant: True tsflags: [] yumversion: 'unversioned' self: <yum.config.UrlOption object at 0x9b727cc> e: URL must be http, ftp or https not "172.161.432.234" value: 172.161.432.234:8080
-----Original Message----- From: Ed Greshko Ed.Greshko@greshko.com To: For users of Fedora fedora-list@redhat.com Sent: Fri, 1 Feb 2008 2:39 pm Subject: Re: add and remove program
arunbkn@aol.in wrote:?
Yes my squid proxy require authentication .......................?
?
Then those are the directives you need....? ?
proxy proxy_username proxy_password ?
arunbkn@aol.in wrote:
Dear Greshko,
I think i m very much near to it, but still it is not working. My yum.conf is as follows
[main] cachedir=/var/cache/yum keepcache=0 debuglevel=2 logfile=/var/log/yum.log exactarch=1 obsoletes=1 gpgcheck=1 plugins=1 metadata_expire=1800 installonly_limit=2 proxy=172.161.432.234:8080 proxy_username=arun proxy_password=arun258
# PUT YOUR REPOS HERE OR IN separate files named file.repo # in /etc/yum.repos.d
but I am getting following error (we are using ip address of our proxy server to assess Internet)
Component: pirut Summary: TB76714bb2 config.py:80:__set__:ValueError: Error parsing '172.161.432.234:8080': URL must be http, ftp or https not "172.161.432.234"
try:
proxy=http://172.161.432.234:8080
regards
Stuart
with the change, I have the following error
Cannot retrieve repository metadata (repomd.xml) for repository: fedora. Please verify its path and try again
-----Original Message----- From: Stuart Sears stuart@sjsears.com To: For users of Fedora fedora-list@redhat.com Sent: Fri, 1 Feb 2008 4:30 pm Subject: Re: add and remove software
arunbkn@aol.in wrote:?
Dear Greshko,?
I think i m very much near to it, but still it is not working. My yum.conf is as follows?
[main]?
cachedir=/var/cache/yum?
keepcache=0?
debuglevel=2?
logfile=/var/log/yum.log?
exactarch=1?
obsoletes=1?
gpgcheck=1?
plugins=1?
metadata_expire=1800?
installonly_limit=2?
proxy=172.161.432.234:8080?
proxy_username=arun?
proxy_password=arun258?
# PUT YOUR REPOS HERE OR IN separate files named file.repo?
# in /etc/yum.repos.d?
but I am getting following error (we are using ip address of our proxy server to assess Internet)?
Component: pirut?
Summary: TB76714bb2 config.py:80:__set__:ValueError: Error parsing '172.161.432.234:8080': URL must be http, ftp or https not "172.161.432.234"?
?
try:? ?
proxy=http://172.161.432.234:8080? ?
regards? ?
Stuart?
try:
proxy=http://172.161.432.234:8080/
with the extra backslash (/) at the end.
Hope it helps, Olivier
2008/2/1, arunbkn@aol.in arunbkn@aol.in:
with the change, I have the following error
Cannot retrieve repository metadata (repomd.xml) for repository: fedora. Please verify its path and try again
-----Original Message----- From: Stuart Sears stuart@sjsears.com To: For users of Fedora fedora-list@redhat.com Sent: Fri, 1 Feb 2008 4:30 pm Subject: Re: add and remove software
arunbkn@aol.in wrote:
Dear Greshko,
I think i m very much near to it, but still it is not working. My
yum.conf is as follows
[main]
cachedir=/var/cache/yum keepcache=0 debuglevel=2 logfile=/var/log/yum.log exactarch=1 obsoletes=1 gpgcheck=1 plugins=1 metadata_expire=1800 installonly_limit=2 proxy=172.161.432.234:8080 proxy_username=arun proxy_password=arun258
# PUT YOUR REPOS HERE OR IN separate files named file.repo
# in /etc/yum.repos.d
but I am getting following error (we are using ip address of our
proxy server to assess Internet)
Component: pirut
Summary: TB76714bb2 config.py:80:__set__:ValueError: Error parsing '
172.161.432.234:8080': URL must be http, ftp or https not "172.161.432.234 "
try:
proxy=http://172.161.432.234:8080
regards
Stuart -- Stuart Sears RHCA etc.
-- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
You are invited to Get a Free AOL Email ID. Click here.http://webmail.aol.in
-- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Sorry, extra backslash (/) is also not working, same error
Cannot retrieve repository metadata (repomd.xml) for repository: fedora. Please verify its path and try again
Arun
-----Original Message----- From: Olivier Robert robby57@gmail.com To: For users of Fedora fedora-list@redhat.com Sent: Fri, 1 Feb 2008 4:51 pm Subject: Re: add and remove software
try:
proxy=http://172.161.432.234:8080/
with the extra backslash (/) at the end.
Hope it helps,
Olivier
2008/2/1, arunbkn@aol.in arunbkn@aol.in:
with the change, I have the following error
Cannot retrieve repository metadata (repomd.xml) for repository: fedora. Please verify its path and try again
-----Original Message-----
From: Stuart Sears stuart@sjsears.com
To: For users of Fedora fedora-list@redhat.com
Sent: Fri, 1 Feb 2008 4:30 pm
Subject: Re: add and remove software
arunbkn@aol.in wrote:?
Dear Greshko,?
I think i m very much near to it, but still it is not working. My yum.conf is as follows?
[main]?
cachedir=/var/cache/yum?
keepcache=0?
debuglevel=2?
logfile=/var/log/yum.log?
exactarch=1?
obsoletes=1?
gpgcheck=1?
plugins=1?
metadata_expire=1800?
installonly_limit=2?
proxy=172.161.432.234:8080?
proxy_username=arun?
proxy_password=arun258?
# PUT YOUR REPOS HERE OR IN separate files named file.repo?
# in /etc/yum.repos.d?
but I am getting following error (we are using ip address of our proxy server to assess Internet)?
Component: pirut?
Summary: TB76714bb2 config.py:80:__set__:ValueError: Error parsing '172.161.432.234:8080': URL must be http, ftp or https not "172.161.432.234"?
?
try:?
?
proxy=http://172.161.432.234:8080?
?
regards?
?
Stuart?
arunbkn@aol.in wrote:
Sorry, extra backslash (/) is also not working, same error
Cannot retrieve repository metadata (repomd.xml) for repository: fedora. Please verify its path and try again
OMG can we please trim these posts a little. :)
Are you using a mirrorlist? does your proxy allow ftp traffic as well as http traffic through? does your proxyserver restrict which outgoing hosts you can connect to?
As a test, try changing the repo definition to use the baseurl rather than the mirrorlist.
* If that doesn't work:
can you manually download the repomd.xml file that seems unreachable? These lines will wrap!
curl -x http://172.161.432.234:8080 -U arun:arun258 -O \ http://download.fedora.redhat.com/pub/fedora/linux/releases/8/Everything/i38...
Regards
Stuart
On Fri, 2008-02-01 at 06:27 -0500, arunbkn@aol.in wrote:
Sorry, extra backslash (/) is also not working, same error
Cannot retrieve repository metadata (repomd.xml) for repository: fedora. Please verify its path and try again
Arun
-----Original Message----- From: Olivier Robert robby57@gmail.com To: For users of Fedora fedora-list@redhat.com Sent: Fri, 1 Feb 2008 4:51 pm Subject: Re: add and remove software
try:
proxy=http://172.161.432.234:8080/
with the extra backslash (/) at the end.
Hope it helps, Olivier
2008/2/1, arunbkn@aol.in arunbkn@aol.in: with the change, I have the following error
Cannot retrieve repository metadata (repomd.xml) for repository: fedora. Please verify its path and try again -----Original Message----- From: Stuart Sears <stuart@sjsears.com> To: For users of Fedora <fedora-list@redhat.com> Sent: Fri, 1 Feb 2008 4:30 pm Subject: Re: add and remove software arunbkn@aol.in wrote: > Dear Greshko, > > I think i m very much near to it, but still it is not working. My yum.conf is as follows > > [main] > cachedir=/var/cache/yum > keepcache=0 > debuglevel=2 > logfile=/var/log/yum.log > exactarch=1 > obsoletes=1 > gpgcheck=1 > plugins=1 > metadata_expire=1800 > installonly_limit=2 > proxy=172.161.432.234:8080 > proxy_username=arun > proxy_password=arun258 > > # PUT YOUR REPOS HERE OR IN separate files named file.repo > # in /etc/yum.repos.d > > > > but I am getting following error (we are using ip address of our proxy server to assess Internet) > > Component: pirut > Summary: TB76714bb2 config.py:80:__set__:ValueError: Error parsing '172.161.432.234:8080': URL must be http, ftp or https not "172.161.432.234" try: proxy=http://172.161.432.234:8080 regards Stuart -- Stuart Sears RHCA etc. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list ______________________________________________________________ You are invited to Get a Free AOL Email ID. Click here. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
I would like to follow this thread, but all the top posting makes it impossible. Please cease. Please. Pretty please. Get a clue. Ric
Thanks its working now
-----Original Message----- From: Ed Greshko Ed.Greshko@greshko.com To: For users of Fedora fedora-list@redhat.com Sent: Fri, 1 Feb 2008 2:39 pm Subject: Re: add and remove program
arunbkn@aol.in wrote:?
Yes my squid proxy require authentication .......................?
?
Then those are the directives you need....? ?
proxy proxy_username proxy_password ?
-
arunbkn＠aol.in -
Ed Greshko -
Olivier Robert -
Ric Moore -
Stuart Sears