User manual REDHAT NETWORK SATELLITE SERVER 3.7 INSTALLATION GUIDE

[. . . ] RHN Satellite Server 3. 7 Installation Guide RHN Satellite Server 3. 7: Installation Guide Copyright © 2001 - 2005 by Red Hat, Inc. Red Hat, Inc. 1801 Varsity Drive Raleigh NC 27606-2072 USA Phone: +1 919 754 3700 Phone: 888 733 4281 Fax: +1 919 754 3701 PO Box 13588 Research Triangle Park NC 27709 USA RHNsatellite(EN)-3. 7-RHI (2005-03-16T12:14) Copyright © 2005 by Red Hat, Inc. This material may be distributed only subject to the terms and conditions set forth in the Open Publication License, V1. 0 or later (the latest version is presently available at http://www. opencontent. org/openpub/). Distribution of substantively modified versions of this document is prohibited without the explicit permission of the copyright holder. [. . . ] All public channels are automatically available; The private channels that should also be made available through the Satellite are determined by the RHN Entitlement Certificate. The RHN Entitlement Certificate, which contains the precise set of entitlements attributed to your organization, is provided by your Red Hat representative. Red Hat reserves the right to compare the contents of that RHN Entitlement Certificate with the database's entitlement settings at any time to ensure compliance with the terms of the customer's contract with Red Hat. The steps referenced in this section are typically carried out by the RHN Satellite Server Installation Program itself and do not need to be repeated during initial installation. Instead, they are listed here for use by customers who have received a new RHN Entitlement Certificate, such as one reflecting an increase in the number of entitlements. 5. 1. Receiving the Certificate The RHN Entitlement Certificate is an XML document that looks something like this: ?xml version="1. 0" encoding="UTF-8"?rhn-cert version="0. 1" rhn-cert-field name="product" RHN-SATELLITE-001 /rhn-cert-field rhn-cert-field name="owner" Clay's Precious Satelliten /rhn-cert-field rhn-cert-field name="issued" 2005-01-11 00:00:00 /rhn-cert-field rhn-cert-field name="expires" 2005-03-11 00:00:00 /rhn-cert-field rhn-cert-field name="slots" 30 /rhn-cert-field rhn-cert-field name="provisioning-slots" 30 /rhn-cert-field rhn-cert-field name="nonlinux-slots" 30 /rhn-cert-field rhn-cert-field name="channel-families" quantity="10" family="rhel-cluster"/ rhn-cert-field name="channel-families" quantity="30" family="rhel-ws-extras"/ rhn-cert-field name="channel-families" quantity="10" family="rhel-gfs"/ rhn-cert-field name="channel-families" quantity="10" family="rhel-es-extras"/ rhn-cert-field name="channel-families" quantity="40" family="rhel-as"/ rhn-cert-field name="channel-families" quantity="30" family="rhn-tools"/ rhn-cert-field name="satellite-version" 3. 6 /rhn-cert-field rhn-cert-field name="generation" 2 /rhn-cert-field rhn-cert-signature -----BEGIN PGP SIGNATURE----Version: Crypt::OpenPGP 1. 03 iQBGBAARAwAGBQJCAG7yAAoJEJ5yna8GlHkysOkAn07qmlUrkGKs7/5yb8H/nboG mhHkAJ9wdmqOeKfcBa3IUDL53oNMEBP/dg== =0Kv7 -----END PGP SIGNATURE----/rhn-cert-signature /rhn-cert /computeroutput /screen ¡ ¡ ¡ ¡ ¡ ¡ ¡ ¡ ¡ ¡ ¡ ¡ ¡ ¡ ¡ ¡ ¡ ¡ ¡ ¡ ¡ ¡ ¡ ¡ ¡ ¡ ¡ ¡ ¡ ¡ ¡ 32 Chapter 5. Entitlements Note Do not try to use this RHN Entitlement Certificate; it is just an example. The initial RHN Entitlement Certificate is generated by a member of the RHN team and emailed to a consultant or customer prior to an install. This process helps guarantee that we do not inadvertently install any RHN Satellite Servers that the RHN team does not know about. Save the XML file to the Satellite machine in preparation for activation. 5. 2. Uploading the RHN Entitlement Certificate If your RHN Satellite Server is connected to the Internet, you have the option of uploading your new RHN Entitlement Certificate through the RHN website. Log into https://rhn. redhat. com with your organization's Satellite-entitled account. Click Systems in the top navigation bar and then the name of the RHN Satellite Server. You may also find the Satellite through the Satellite line item within the Channels category. In the System Details page, click the Satellite subtab and examine the existing certificate. Ensure you have a backup of this file by copying and pasting its contents into a text editor. Click Deactivate Satellite License at the bottom of the page. You will receive a message describing the deactivation at the top of the page. You may then browse to the location of your new RHN Entitlement Certificate or paste its contents into the text field provided. Your Satellite now has access to additional channels and client entitlements outlined in the new certificate. You may now synchronize it with the central RHN Servers. Refer to Chapter 6 Importing and Synchronizing. 5. 3. [. . . ] Set up a PAM service file (usually /etc/pam. d/rhn-satellite) and have the Satellite use it by adding the following line to /etc/rhn/rhn. conf: pam_auth_service = rhn-satellite This assumes the PAM service file is named rhn-satellite. Enable a certain user to authenticate against PAM. Do this by clicking the Use PAM Authentication button on the User Details page. As an example, #%PAM-1. 0 auth auth auth account to authenticate against Kerberos one could put the following in /etc/pam. d/rhn-satellite: required sufficient required required /lib/security/pam_env. so /lib/security/pam_krb5. so no_user_check /lib/security/pam_deny. so /lib/security/pam_krb5. so no_user_check 58 Chapter 8. [. . . ]