User manual REDHAT NETWORK PROXY SERVER 3.6 INSTALLATION GUIDE

[. . . ] RHN Proxy Server 3. 6 Installation Guide RHN Proxy Server 3. 6: Installation Guide Copyright © 2001 - 2004 by Red Hat, Inc. RHNproxy(EN)-3. 6-RHI (2004-12-07T20:09) Copyright © 2001 - 2004 by Red Hat, Inc. Red Hat, Red Hat Network, the Red Hat "Shadow Man" logo, RPM, Maximum RPM, the RPM logo, Linux Library, PowerTools, Linux Undercover, RHmember, RHmember More, Rough Cuts, Rawhide and all Red Hat-based trademarks and logos are trademarks or registered trademarks of Red Hat, Inc. in the United States and other countries. Linux is a registered trademark of Linus Torvalds. [. . . ] Do not install Proxy on Red Hat Enterprise Linux AS 2. 1. · · · Enable Network Time Protocol (NTP) on the Proxy and select the appropriate time zone. All client systems should already be running the ntpd daemon and be set to the correct time zone. Disable the ipchains and iptables services after installation. 4. 2. RHN Proxy Server Installation Process The following instructions describe how to run the RHN Proxy Server Installation Process: 1. Register the newly installed Red Hat Enterprise Linux AS system with Red Hat Network (either the central RHN Servers or your RHN Satellite Server) using the organizational account containing the RHN Proxy Server entitlement with either of these commands: rhn_register for Red Hat Enterprise Linux AS 2. 1 Update 5 or up2date --register for Red Hat Enterprise Linux AS 3 Update 3. Open the RHN Website (or the fully qualified domain name of the Satellite serving the Proxy), log in as the Organization Administrator, navigate to the Systems System Entitlements page, and grant the system a Provisioning entitlement. Click the name of the system and navigate to the System Details Channels Software subtab. Ensure the system is subscribed to the Red Hat Network Tools channel for its base operating system. Navigate to the System Details Packages Install subtab and search for rhncfg. In the resulting list, select all packages and install them. 14 Chapter 4. If you will be enabling secure sockets layer (SSL) encryption on the Proxy and connecting to the central RHN Servers, install the rhns-certs-tools package from the same Red Hat Network Tools channel and use the RHN SSL Maintenance Tool to generate the tar file required later. Refer to the SSL Certificates chapter of the RHN Client Configuration Guide for instructions. If you will be enabling SSL encryption on the Proxy and connecting to an RHN Satellite Server or another RHN Proxy Server with SSL, make sure you have the CA certificate password used for the parent system. Log into the system through a terminal as root and run the rhn_check command to immediately initiate the scheduled package installation. Once the packages have been installed, as confirmed through the System Details Events tab, prepare the system to accept remote commands and configuration management with the following commands: mkdir mkdir touch mkdir touch -p /etc/sysconfig/rhn/allowed-actions -p /etc/sysconfig/rhn/allowed-actions/script /etc/sysconfig/rhn/allowed-actions/script/run -p /etc/sysconfig/rhn/allowed-actions/configfiles /etc/sysconfig/rhn/allowed-actions/configfiles/deploy ¡ Warning Please note the RHN Proxy Server installation may replace the squid. conf and httpd. conf configuration files on the system to ease upgrades later. If you have edited these files and want to preserve them, they are rotated in place and can be retrieved after installation. 9. In the System Details Proxy subtab, the pulldown menu should indicate your ability to activate the system as an RHN Proxy Server. Ensure the version is properly selected and click Activate Proxy. The Welcome page of the installation appears. ¡ ¡ Figure 4-1. System Details Proxy ¡ 8. Within the RHN website, navigate to the System Details Proxy subtab. Chapter 4. In the Welcome page, you will find notification of any requirements not met by the system. [. . . ] Issue these commands in this order: service httpd stop service squid stop rm -fv /var/spool/squid/* service squid start service httpd start You may accomplish the same task more quickly by just clearing the directory and restarting squid, but you will likely receive a number of RHN traceback messages. The internal caching mechanism used for authentication by the Proxy may also need its cache cleared. To do this, issue the following command: rm -fv /var/cache/rhn/* Although the RHN Authentication Daemon was deprecated with the release of RHN Proxy Server 3. 2. 2 and replaced with the aforementioned internal authentication caching mechanism, the daemon may still be running on your Proxy. To turn it off, issue the following individual commands in this order: chkconfig --level 2345 rhn_auth_cache off service rhn_auth_cache stop To clear its cache, issue: rm /var/up2date/rhn_auth_cache If you must retain the RHN Authentication Daemon, which Red Hat recommends against and does not support, note that its performance can suffer from verbose logging. [. . . ]