User manual REDHAT NETWORK SATELLITE 5.1.1 INSTALLATION GUIDE

[. . . ] Red Hat Network Satellite 5. 1. 1 Installation Guide Red Hat Network Satellite Installation Guide Red Hat Network Satellite 5. 1. 1 Installation Guide Red Hat Network Satellite Edition 5. 1. 1 1. Red Hat Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . RHN Satellite Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Terms to Understand . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] You will receive a message describing the deactivation at the top of the page. You may then browse to the location of your new RHN Entitlement Certificate or paste its contents into the text field provided. Your Satellite now has access to additional channels and client entitlements outlined in the new certificate. You may now synchronize it with the central RHN Servers. Refer to Chapter 6, Importing and Synchronizing. 5. 3. Managing the RHN Certificate with RHN Satellite Activate For disconnected Satellites or customers who prefer to work locally, Red Hat provides a command line tool for managing your RHN Entitlement Certificate and activating the Satellite using that certificate: RHN Satellite Activate (rhn-satellite-activate). This is included with the Satellite installation as part of the rhns-satellite-tools package. 5. 3. 1. Command Line Entitlement Options The rhn-satellite-activate tool offers a handful of command line options for activating a Satellite using its RHN Entitlement Certificate: 34 Activating the Satellite Option -h, --help --sanity-only --disconnected --rhn-cert=/PATH/TO/CERT --systemid=/PATH/TO/SYSTEMID Description Display the help screen with a list of options. Does not activate the Satellite locally or remotely. Activates locally but not on remote RHN Servers. Uploads new certificate and activates the Satellite based upon the other options passed (if any). For testing only - Provides an alternative system ID by path and file. The system default is used if not specified. For testing only - Disable SSL. --no-ssl Table 5. 1. RHN Entitlement Certificate Options To use these options, insert the option and the appropriate value, if needed, after the rhnsatellite-activate command. Refer to Section 5. 3. 2, "Activating the Satellite". 5. 3. 2. Activating the Satellite You should use the options in Table 5. 1, "RHN Entitlement Certificate Options" to accomplish the following tasks in this order: 1. Validate the RHN Entitlement Certificate's sanity (or usefulness). Activate the Satellite locally by inserting the RHN Entitlement Certificate into the local database. Activate the Satellite remotely by inserting the RHN Entitlement Certificate into the central RHN (remote) database. This is typically accomplished during local activation but may require a second step if you chose the --disconnected option. Here are some examples depicting use of the tool and these options. [. . . ] It is positioned below the password and password confirmation fields on the Create User page. As an example, for a Red Hat Enterprise Linux 4 i386 system, to authenticate against Kerberos one could put the following in /etc/pam. d/rhn-satellite: #%PAM-1. 0 auth auth auth account required sufficient required required pam_env. so pam_krb5. so no_user_check pam_deny. so pam_krb5. so no_user_check Please note that changing the password on the RHN website changes only the local password on the RHN Satellite Server, which may not be used at all if PAM is enabled for that user. In the above example, for instance, the Kerberos password will not be changed. 8. 10. Enabling Push to Clients In addition to allowing client systems to regularly poll the Satellite for scheduled actions, you may enable the Satellite to immediately initiate those tasks on Provisioning-entitled systems. [. . . ]