User manual REDHAT NETWORK PROXY SERVER 3.7 INSTALLATION GUIDE

[. . . ] RHN Proxy Server 3. 7 Installation Guide RHN Proxy Server 3. 7: Installation Guide Copyright © 2001 - 2005 by Red Hat, Inc. Red Hat, Inc. 1801 Varsity Drive Raleigh NC 27606-2072 USA Phone: +1 919 754 3700 Phone: 888 733 4281 Fax: +1 919 754 3701 PO Box 13588 Research Triangle Park NC 27709 USA RHNproxy(EN)-3. 7-RHI (2005-03-16T12:14) Copyright © 2005 by Red Hat, Inc. This material may be distributed only subject to the terms and conditions set forth in the Open Publication License, V1. 0 or later (the latest version is presently available at http://www. opencontent. org/openpub/). Distribution of substantively modified versions of this document is prohibited without the explicit permission of the copyright holder. [. . . ] You must install only the base packages as others will cause the RHN Proxy Server installation to fail Refer to Section 2. 1 Software Requirements for the method to obtain the correct package group needed for each version of Red Hat Enterprise Linux AS. Important If you plan to obtain Monitoring-level service, you must install your RHN Proxy Server on Red Hat Enterprise Linux AS 3 Update 3 or Red Hat Enterprise Linux AS 4. These are the only supported base operating systems for Proxies serving Monitoring-entitled systems. Do not install Proxy on Red Hat Enterprise Linux AS 2. 1. · · · Enable Network Time Protocol (NTP) on the Proxy and select the appropriate time zone. All client systems should already be running the ntpd daemon and be set to the correct time zone. Disable the ipchains and iptables services after installation. 4. 2. RHN Proxy Server Installation Process The following instructions describe how to run the RHN Proxy Server Installation Process: 1. Register the newly installed Red Hat Enterprise Linux AS system with Red Hat Network (either the central RHN Servers or your RHN Satellite Server) using the organizational account containing the RHN Proxy Server entitlement with either of these commands: rhn_register for Red Hat Enterprise Linux AS 2. 1 Update 5 or up2date --register for Red Hat Enterprise Linux AS 3 Update 3. Open the RHN Website (or the fully qualified domain name of the Satellite serving the Proxy), log in as the Organization Administrator, navigate to the Systems System Entitlements page, and grant the system a Provisioning entitlement. Click the name of the system and navigate to the System Details Channels Software subtab. Ensure the system is subscribed to the Red Hat Network Tools channel for its base operating system. 14 Chapter 4. Navigate to the System Details Packages Install subtab and search for rhncfg. In the resulting list, select all packages and install them. If you will be enabling secure sockets layer (SSL) encryption on the Proxy and connecting to the central RHN Servers, install the rhns-certs-tools package from the same Red Hat Network Tools channel and use the RHN SSL Maintenance Tool to generate the tar file required later. Refer to the SSL Certificates chapter of the RHN Client Configuration Guide for instructions. If you will be enabling SSL encryption on the Proxy and connecting to an RHN Satellite Server or another RHN Proxy Server with SSL, make sure you have the CA certificate password used for the parent system. Log into the system through a terminal as root and run the rhn_check command to immediately initiate the scheduled package installation. Once the packages have been installed, as confirmed through the System Details tab, prepare the system to accept remote commands and configuration management with the following commands: mkdir touch mkdir touch -m 0770 -p /etc/sysconfig/rhn/allowed-actions/configfiles/ /etc/sysconfig/rhn/allowed-actions/configfiles/all -m 0770 -p /etc/sysconfig/rhn/allowed-actions/script/ /etc/sysconfig/rhn/allowed-actions/script/run ¡ ¡ ¡ Warning Please note the RHN Proxy Server installation may replace the squid. conf and httpd. conf configuration files on the system to ease upgrades later. If you have edited these files and want to preserve them, they are rotated in place and can be retrieved after installation. 9. In the System Details Proxy subtab, the pulldown menu should indicate your ability to activate the system as an RHN Proxy Server. Ensure the version is properly selected and click Activate Proxy. The Welcome page of the installation appears. ¡ ¡ Figure 4-1. System Details Proxy ¡ 8. [. . . ] Issue these commands in this order: service httpd stop service squid stop rm -fv /var/spool/squid/* service squid start service httpd start You may accomplish the same task more quickly by just clearing the directory and restarting squid, but you will likely receive a number of RHN traceback messages. The internal caching mechanism used for authentication by the Proxy may also need its cache cleared. To do this, issue the following command: rm -fv /var/cache/rhn/* Although the RHN Authentication Daemon was deprecated with the release of RHN Proxy Server 3. 2. 2 and replaced with the aforementioned internal authentication caching mechanism, the daemon may still be running on your Proxy. To turn it off, issue the following individual commands in this order: chkconfig --level 2345 rhn_auth_cache off service rhn_auth_cache stop To clear its cache, issue: rm /var/up2date/rhn_auth_cache If you must retain the RHN Authentication Daemon, which Red Hat recommends against and does not support, note that its performance can suffer from verbose logging. [. . . ]