User manual REDHAT NETWORK SATELLITE 5.0.0 INSTALLATION GUIDE

[. . . ] Red Hat Network Satellite 5. 0. 0 Installation Guide 5. 0. 0 ISBN: N/A Publication date: Red Hat Network Satellite Red Hat Network Satellite: Installation Guide 5. 0. 0 Copyright © 2007 Red Hat, Inc. Copyright © 2007 by Red Hat, Inc. This material may be distributed only subject to the terms and conditions set forth in the Open Publication License, V1. 0 or later (the latest version is presently available at http://www. opencontent. org/openpub/). Distribution of substantively modified versions of this document is prohibited without the explicit permission of the copyright holder. Distribution of the work or derivative of the work in any standard (paper) book form for commercial purposes is prohibited unless prior permission is obtained from the copyright holder. [. . . ] Ensure you have a backup of this file by copying and pasting its contents into a text editor. Click Deactivate Satellite License at the bottom of the page. You will receive a message describing the deactivation at the top of the page. You may then browse to the location of your new RHN Entitlement Certificate or paste its contents into the text field provided. Your Satellite now has access to additional channels and client entitlements outlined in the new certificate. You may now synchronize it with the central RHN Servers. Refer to Chapter 6, Importing and Synchronizing. 3. Managing the RHN Certificate with RHN Satellite Activate For disconnected Satellites or customers who prefer to work locally, Red Hat provides a command line tool for managing your RHN Entitlement Certificate and activating the Satellite using that certificate: RHN Satellite Activate (rhn-satellite-activate). This is included with 38 Command Line Entitlement Options the Satellite installation as part of the rhns-satellite-tools package. 3. 1. Command Line Entitlement Options The rhn-satellite-activate tool offers a handful of command line options for activating a Satellite using its RHN Entitlement Certificate: Option -h, --help --sanity-only Description Display the help screen with a list of options. Does not activate the Satellite locally or remotely. Activates locally but not on remote RHN Servers. Uploads new certificate and activates the Satellite based upon the other options passed (if any). For testing only - Provides an alternative system ID by path and file. The system default is used if not specified. For testing only - Disable SSL. --disconnected --rhn-cert=/PATH/TO/CERT --systemid=/PATH/TO/SYSTEMID --no-ssl Table 5. 1. RHN Entitlement Certificate Options To use these options, insert the option and the appropriate value, if needed, after the rhn-satellite-activate command. Refer to Section 3. 2, "Activating the Satellite". 3. 2. Activating the Satellite You should use the options in Table 5. 1, "RHN Entitlement Certificate Options" to accomplish the following tasks in this order: 1. Validate the RHN Entitlement Certificate's sanity (or usefulness). Activate the Satellite locally by inserting the RHN Entitlement Certificate into the local database. Activate the Satellite remotely by inserting the RHN Entitlement Certificate into the central RHN (remote) database. [. . . ] To enable the Satellite to use PAM and your organization's authentication infrastructure, follow the steps below. Note To ensure that PAM authentication functions properly, install the pam-devel package. 69 Chapter 8. Maintenance Set up a PAM service file (usually /etc/pam. d/rhn-satellite) and have the Satellite use it by adding the following line to /etc/rhn/rhn. conf: pam_auth_service = rhn-satellite This assumes the PAM service file is named rhn-satellite. To enable a user to authenticate against PAM, select the checkbox labeled Pluggable Authentication Modules (PAM). It is positioned below the password and password confirmation fields on the Create User page. [. . . ]