Red Hat NETWORK SATELLITE SERVER 4.0 Manuel utilisateur

RHN Satellite Server 4.0

Installation Guide

RHN Satellite Server 4.0: Installation Guide

Red Hat, Inc.

1801 Varsity Drive

Raleigh NC 27606-2072 USA

Phone: +1 919 754 3700

Phone: 888 733 4281

Fax: +1 919 754 3701

PO Box 13588

Research Triangle Park NC 27709 USA

RHNsatellite(EN)-4.0-RHI (2005-04-20T13:40)

forth in the Open Publication License, V1.0 or later (the latest version is presently available at

http://www.opencontent.org/openpub/).

Distribution of substantively modiﬁed versions of this document is prohibited without the explicit permission of

the copyright holder.

Distribution of the work or derivative of the work in any standard (paper) book form for commercial purposes is

prohibited unless prior permission is obtained from the copyright holder.

Red Hat and the Red Hat "Shadow Man" logo are registered trademarks of Red Hat, Inc. in the United States

and other countries.

All other trademarks referenced herein are the property of their respective owners.

The GPG ﬁngerprint of the [email protected] key is:

CA 20 86 86 2B D6 9D FC 65 F6 EC C4 21 91 80 CD DB 42 A6 0E

Table of Contents

1. Introduction....................................................................................................................1

1.1. Red Hat Network ..............................................................................................1

1.2. RHN Satellite Server.........................................................................................2

1.3. Terms to Understand .........................................................................................2

1.4. How it Works ....................................................................................................3

1.5. Summary of Steps .............................................................................................5

2. Requirements..................................................................................................................9

2.1. Software Requirements .....................................................................................9

2.1.1. Red Hat Enterprise Linux AS 4 Packages .........................................9

2.1.2. Red Hat Enterprise Linux AS 3 Update 5 Packages ........................10

2.2. Hardware Requirements..................................................................................11

2.3. Database Requirements...................................................................................13

2.4. Additional Requirements ................................................................................14

3. Example Topologies .....................................................................................................17

3.1. Single Satellite Topology ................................................................................17

3.2. Multiple Satellite Horizontally Tiered Topology ............................................18

3.3. Satellite-Proxy Vertically Tiered Topology ....................................................19

4. Installation ....................................................................................................................21

4.1. Base Install ......................................................................................................21

4.2. RHN Satellite Server Installation Program................................................21

4.3. Sendmail Conﬁguration ..................................................................................37

4.4. MySQL Installation ........................................................................................38

5. Entitlements..................................................................................................................39

5.1. Receiving the Certiﬁcate .................................................................................39

5.2. Uploading the RHN Entitlement Certiﬁcate ...................................................40

5.3. Managing the RHN Certiﬁcate with RHN Satellite Activate .......................40

5.3.1. Command Line Entitlement Options ...............................................41

5.3.2. Activating the Satellite .....................................................................41

6. Importing and Synchronizing .....................................................................................43

6.1. RHN Satellite Synchronization Tool ...........................................................43

6.1.1. Import/Sync Steps ............................................................................43

6.1.2. Import/Sync Options ........................................................................44

6.2. Importing.........................................................................................................46

6.2.1. Prerequisites .....................................................................................46

6.2.2. Preparing for Import ........................................................................46

6.2.3. Running the Import ..........................................................................47

6.3. Synchronizing .................................................................................................48

6.3.1. Synchronizing Errata and Packages Directly via RHN ...................49

6.3.2. Synchronizing Errata and Packages via Local Media......................49

7. Troubleshooting............................................................................................................51

7.1. Log Files .........................................................................................................51

7.2. General Problems............................................................................................52

7.3. Host Not Found/Could Not Determine FQDN ...............................................53

7.4. Connection Errors ...........................................................................................54

7.5. Satellite Debugging by Red Hat .....................................................................55

8. Maintenance .................................................................................................................57

8.1. Managing the Satellite Service .......................................................................57

8.2. Updating the Satellite......................................................................................57

8.3. Backing Up the Satellite .................................................................................58

8.4. Using RHN DB Control ................................................................................59

8.4.1. DB Control Options .........................................................................59

8.4.2. Backing up the Database..................................................................60

8.4.3. Verifying the Backup .......................................................................61

8.4.4. Restoring the Database ....................................................................61

8.5. Cloning the Satellite with Embedded DB .......................................................62

8.6. Establishing Redundant Satellites with Stand-Alone DB ...............................62

8.7. Conducting Satellite-Speciﬁc Tasks ...............................................................64

8.7.1. Using the Tools menu ......................................................................64

8.7.2. Deleting Users..................................................................................66

8.8. Automating Synchronization ..........................................................................67

8.9. Implementing PAM Authentication ................................................................68

8.10. Enabling Push to Clients ...............................................................................69

A. Sample RHN Satellite Server Conﬁguration File.....................................................71

Index..................................................................................................................................73

Chapter 1.

Introduction

RHN Satellite Server provides a solution to organizations requiring absolute control over

and privacy of the maintenance and package deployment of their servers. It allows Red

Hat Network customers the greatest ﬂexibility and power in keeping servers secure and

updated.

Two types of RHN Satellite Server are available: One with a stand-alone database on a

separate machine and one with an embedded database installed on the same machine as

the Satellite. This guide describes the installation of both types of Satellite.

Although the two types of RHN Satellite Server are functionally similar, some differences

do exist. These variations are primarily isolated to hardware requirements, installation

steps, and maintenance activities. They may also appear during troubleshooting. This guide

identiﬁes distinctions between the Satellite types by marking the differing instructions as

either Stand-Alone Database or Embedded Database.

1.1. Red Hat Network

Red Hat Network (RHN) is the environment for system-level support and management of

Red Hat systems and networks of systems. Red Hat Network brings together the tools,

services, and information repositories needed to maximize the reliability, security, and per-

formance of their systems. To use RHN, system administrators register the software and

hardware proﬁles, known as System Proﬁles, of their client systems with Red Hat Network.

When a client system requests package updates, only the applicable packages for the client

are returned (based upon the software proﬁle stored on the RHN Servers).

Advantages of using Red Hat Network include:

•Scalability — with Red Hat Network, a single system administrator can set up and main-

tain hundreds or thousands of Red Hat systems more easily, accurately, and quickly than

they could maintain a single system without Red Hat Network.

•Standard Protocols — standard protocols are used to maintain security and increase

capability. For example, XML-RPC gives Red Hat Network the ability to do much more

than merely download ﬁles.

•Security — all communication between registered systems and Red Hat Network takes

place over secure Internet connections.

•View Errata Alerts — easily view Errata Alerts for all your client systems through one

website.

2 Chapter 1. Introduction

•Scheduled Actions — use the website to schedule actions, including Errata Updates,

package installs, and software proﬁle updates.

•Simpliﬁcation — maintaining Red Hat systems becomes a simple, automated process.

1.2. RHN Satellite Server

RHN Satellite Server allows organizations to utilize the beneﬁts of Red Hat Network with-

out having to provide public Internet access to their servers or other client systems. System

Proﬁles are stored locally on the customer’s RHN Satellite Server. The Red Hat Network

website is served from a local Web server and is not accessible from the Internet. All pack-

age management tasks, including Errata Updates, are performed through the local area

network.

Advantages of using RHN Satellite Server include:

•Security — an end-to-end secure connection is maintained from the client systems to

the RHN Satellite Server without connecting to the public Internet.

•Efﬁciency — packages are delivered signiﬁcantly faster over a local area network.

•Control — clients’ System Proﬁles are stored on the local RHN Satellite Server, not on

the central Red Hat Network Servers.

•Customized updates — create a truly automated package delivery system for custom

software packages required by client systems, as well as Red Hat packages. Custom

channels allow ﬁne-grained control of the delivery of custom packages.

•Access control — system administrators can be restricted to access only those systems

within their maintenance responsibilities.

•Bandwidth management — the bandwidth used for transactions between the clients and

the RHN Satellite Server is controlled by the organization on the local area network;

RHN Satellite Server clients do not have to compete with other clients accessing the

central Red Hat Network ﬁle servers.

•Scalability — RHN Satellite Server may oversee an entire organization’s servers in com-

bination with RHN Proxy Server.

1.3. Terms to Understand

Before understanding RHN Satellite Server, it is important to become familiar with the

following Red Hat Network terms:

•Channel — A channel is a list of software packages. There are two types of channels:

base channels and child channels. A base channel consists of a list of packages based on

Chapter 1. Introduction 3

a speciﬁc architecture and Red Hat release. A child channel is a channel associated with

a base channel that contains extra packages.

•Organization Administrator — An Organization Administrator is a user role with the

highest level of control over an organization’s Red Hat Network account. Members of

this role can add other users, systems, and system groups to the organization as well

as remove them. A Red Hat Network organization must have at least one Organization

Administrator.

•Software Channel Administrator — A Channel Administrator is a user role with full

access to channel management capabilities. Users with this role are capable of creating

channels, assigning packages to channels, cloning channels, and deleting channels. This

role can be assigned by an Organization Administrator through the Users tab of the RHN

website.

•Red Hat Update Agent — The Red Hat Update Agent is the Red Hat Network client

application (up2date) that allows users to retrieve and install new or updated packages

for the client system on which the application is run.

•Traceback — A traceback is a detailed description of "what went wrong" that is useful

for troubleshooting the RHN Satellite Server. Tracebacks are automatically generated

when a critical error occurs and are mailed to the individual(s) designated in the RHN

Satellite Server’s conﬁguration ﬁle.

For more detailed explanations of these terms and others, refer to the Red Hat Network

Reference Guide.

1.4. How it Works

RHN Satellite Server consists of the following components:

•Database — for the Stand-Alone Database, this may be the organization’s existing

database or, preferably, a separate machine. RHN Satellite Server 4.0 supports Oracle

9i R2. For the Embedded Database, the database comes bundled with RHN Satellite

Server and is installed on the same machine as the Satellite during the installation

process.

•RHN Satellite Server — core "business logic" and entry point for Red Hat Update

Agent running on client systems. The RHN Satellite Server also includes an Apache

HTTP Server (serving XML-RPC requests).

•RHN Satellite Server Web interface — advanced system, system group, user, and chan-

nel management interface.

•RPM Repository — package repository for Red Hat RPM packages and custom RPM

packages identiﬁed by the organization.

•Management Tools:

•Database and ﬁle system synchronization tools

4 Chapter 1. Introduction

•RPM importing tools

•Channel maintenance tools (Web-based)

•Errata management tools (Web-based)

•User management tools (Web-based)

•Client system and system grouping tools (Web-based)

•Red Hat Update Agent on the client systems

The Red Hat Update Agent on the client systems must be reconﬁgured to retrieve up-

dates from the organization’s internal RHN Satellite Server instead of the central Red Hat

Network Servers. After this one-time reconﬁguration, client systems may retrieve updates

locally using the Red Hat Update Agent, or system administrators may schedule actions

through the RHN Satellite Server website.

Red Hat strongly recommends that clients connected to RHN Satellite Server be running

the latest update of Red Hat Enterprise Linux to ensure proper connectivity.

When a client requests updates, the organization’s internal RHN Satellite Server queries its

database, authenticates the client system, identiﬁes the updated packages available for the

client system, and sends the requested RPMs back to the client system. Depending upon

the client’s preferences, the package may also be installed. If the packages are installed,

the client system sends an updated package proﬁle to the database on the RHN Satellite

Server; those packages are removed from the list of outdated packages for the client.

The organization can conﬁgure the website for the RHN Satellite Server to be accessible

from the local area network only or from both the local area network and the Internet.

The Satellite’s version of the RHN website allows full control over client systems, system

groups, and users.

The RHN Satellite Server management tools are used to synchronize the RHN Satellite

Server database and package repository with Red Hat Network. The RHN Satellite Server

import tool allows the system administrator to include custom RPM packages in the pack-

age repository.

RHN Satellite Server can be used in conjunction with RHN Proxy Server to deliver a dis-

tributed, self-contained Red Hat Network deployment for the organization. For example,

an organization can maintain one RHN Satellite Server in a secure location. Red Hat sys-

tems with local network access to the RHN Satellite Server can connect to it. Other remote

ofﬁces can maintain RHN Proxy Server installations that connect to the RHN Satellite

Server. The different locations inside the organization must be networked, but this can be a

private network; an Internet connection is not required for any of the systems. Refer to the

RHN Proxy Server Installation Guide for more information.

Chapter 1. Introduction 5

Figure 1-1. Using RHN Satellite Server and RHN Proxy Server Together

1.5. Summary of Steps

Implementing a fully functional RHN Satellite Server requires more than installing soft-

ware and a database. Client systems must be conﬁgured to use the Satellite. Custom pack-

ages and channels should be created for optimal use. Since these tasks extend beyond the

basic installation, they are covered in detail in other guides, as well as this RHN Satellite

Server Installation Guide. For a full list of the necessary technical documents, refer to

Chapter 2 Requirements.

For this reason, this section seeks to provide a deﬁnitive list of all required and recom-

mended steps, from evaluation through custom package deployment. They should take

place in roughly this order:

1. After an evaluation, you contact your Red Hat sales representative to purchase RHN

Satellite Server.

2. Your Red Hat contact sends you an RHN Entitlement Certiﬁcate via email.

6 Chapter 1. Introduction

3. Your Red Hat contact creates a Satellite-entitled account on the RHN website and

sends you the login information.

4. Log into the RHN website (rhn.redhat.com) and download the distribution ISOs for

Red Hat Enterprise Linux AS 3 or 4 and RHN Satellite Server 4.0. These can be

found within the Downloads tab of the respective Channel Details pages. Refer to

the RHN Reference Guide for instructions.

5. While still logged into the RHN website, download the Channel Content ISOs to

be served by your Satellite, also available through the Downloads tab of your Satel-

lite’s Channel Details page. These Channel Content ISOs differ from the distribution

ISOs previously mentioned in that they contain metadata necessary for parsing and

serving packages by Satellite.

6. If installing a Stand-Alone Database, prepare your database instance using the for-

mula provided in Chapter 2 Requirements.

7. Install Red Hat Enterprise Linux AS and then RHN Satellite Server 4.0 on the Satel-

lite machine.

8. Create the ﬁrst user account on the Satellite by opening the Satellite’s hostname in a

Web browser and clicking Create Account. This will be the Satellite Administrator’s

(also referred to as the Organization Administrator) account.

9. Use the RHN Satellite Synchronization Tool to import the channels and associated

packages into the Satellite.

10. Register a representative machine for each distribution type, or channel (Red Hat

Enterprise Linux AS 2.1, 3, 4), to the Satellite.

11. Copy (using SCP) the rhn_register and up2date conﬁguration ﬁles from the

/etc/sysconfig/rhn/ directory of each machine individually to the /pub/ di-

rectory on the Satellite. The rhn-org-trusted-ssl-cert-*.noarch.rpm will

already be there.

12. Download and install from the Satellite the conﬁguration ﬁles and

rhn-org-trusted-ssl-cert-*.noarch.rpm on the remaining client systems

of the same distribution type. Repeat this and the previous step until all distribution

types are complete.

13. Through the Satellite’s website, create an Activation Key for each distribution

aligned to the appropriate base channel. At this point, system groups and child

channels may also be predeﬁned.

14. Run the Activation Key from the command line (rhnreg_ks) of each client system.

Note that this step can be scripted to batch register and reconﬁgure all remaining

client systems in a distribution.

15. Record all relevant usernames, passwords and other login information and store in

multiple secure places.

16. Now that the Satellite is populated with standard Red Hat channels and packages and

all clients are connected to it, you may begin creating and serving custom channels

Ce manuel convient aux modèles suivants

Table des matières

Autres manuels Red Hat Logiciel

Red Hat

Red Hat ENTERPRISE LINUX 5 - VIRTUAL SERVER... Manuel utilisateur

Red Hat

Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION Mode d’emploi

Red Hat

Red Hat NETWORK BASIC - USER REFERENCE GUIDE 3.2 Fiche d'information produit

Red Hat

Red Hat NETWORK BASIC - USER REFERENCE GUIDE 4.0 Fiche d'information produit

Red Hat

Red Hat NETWORK SATELLITE 5.2 - CHANNEL MANAGEMENT Manuel de programmation

Red Hat

Red Hat ENTERPRISE LINUX 4 - DEVELOPER TOOLS GUIDE Manuel utilisateur

Red Hat

Red Hat NETWORK SATELLITE SERVER 4.1.0 Manuel utilisateur

Red Hat

Red Hat APPLICATION STACK 1.2 RELEASE Mode d’emploi

Red Hat

Red Hat APPLICATION STACK 1.1 RELEASE Mode d’emploi

Red Hat

Red Hat NETWORK 4.0.5 - Manuel utilisateur

Red Hat

Red Hat CERTIFICATE SYSTEM 7.2 - MIGRATION GUIDE Mode d’emploi

Red Hat

Red Hat ENTERPRISE LINUX 5 - VIRTUAL SERVER... Guide d'installation

Red Hat

Red Hat CLUSTER SUITE FOR ENTERPRISE LINUX 5.1 Manuel utilisateur

Red Hat

Red Hat ENTERPRISE LINUX 3 - SECURITY GUIDE Mode d’emploi

Red Hat

Red Hat ENTERPRISE 5.4 RELEASE NOTES Manuel utilisateur

Red Hat

Red Hat ENTERPRISE LINUX 5 - DM MULTIPATH Mode d’emploi

Red Hat

Red Hat NETWORK 4.0.5 - Manuel utilisateur

Red Hat

Red Hat GFS 6.0 - Manuel de service

Red Hat

Red Hat ENTERPRISE LINUX 5.1 - LVM ADMINISTRATION Manuel utilisateur

Red Hat

Red Hat NETWORK - USER REFERENCE GUIDE 2.1 Fiche d'information produit

Red Hat

Red Hat NETWORK PROXY 5.3.0 - Manuel utilisateur

Red Hat

Red Hat NETWORK 3.5 - PROVISIONING Manuel utilisateur

Red Hat

Red Hat DIRECTORY SERVER 8.0 Manuel d'utilisation

Red Hat

Red Hat NETWORK SATELLITE 5.1.0 - CHANNEL MANAGEMENT Manuel utilisateur

Manuels Logiciel populaires d'autres marques

COMPRO

COMPRO COMPROFM Manuel utilisateur

Muratec

Muratec OFFICEBRIDGE ONLINE Manuel utilisateur

Oracle

Oracle Contact Center Anywhere 8.1 Manuel utilisateur

Adobe

Adobe 65007312 - Photoshop Lightroom Manuel

Avaya

Avaya NULL One-X for RIM Blackberry Manuel utilisateur

HP ProLiant BL420c Manuel utilisateur

PS Audio

PS Audio PowerPlay Manuel du propriétaire

Brady

Brady LOCKOUT PRO 3.0 Manuel de service

Avaya

Avaya Interaction Center Manuel utilisateur

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Manuel

Novell

Novell GROUPWISE 8 - INTERNET AGENT Manuel utilisateur

Oracle

Oracle Application 9i Manuel utilisateur

Acer

Acer RDM Manuel utilisateur

Canon

Canon Vixia HF21 Manuel utilisateur

Canon

Canon ZR950 Manuel utilisateur

Samsung

Samsung Auto Backup Manuel utilisateur

Polycom

Polycom Vortex EF2201 Instructions d'installation et d'utilisation

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Manuel utilisateur