IC96206: RED HAT OS UPDATE SERVICE FAILS TO CONNECT WHEN PROXY SERVER USER NAME AND PASSWORD REQUIRED

IBM PureApplication System Version 1.1.0.2

APAR status

• Closed as program error.

Error description

• When deploying the Red Hat OS Update Service on the IBM
  PureApplication System, the proxy server user ID and password
  are not properly used.  The service deployment will fail when
  it tries to connect to the Red Hat network during replication
  of the repositories.
  On the RHUA VM, in the /root/.rhui/rhui.log file (also viewable
  from the workload console log viewer), you will see a
  "Proxy connection failed: 407"
  error as shown below:
  bash-4.1# more rhui.log
  Private key creation output
  Exit Code: 0
  writing RSA key
  Command [openssl x509 -req -days 3650 -in
  /tmp/rhui-id-uBhORw/identity.csr -CA
  /etc/pki/rhui/entitlement-ca.crt -CAkey
  /etc/pki/rhui/entitlement-ca-key.pem -CAserial
  /etc/pki/rhui/entitleme
  nt-ca.srl -out /tmp/rhui-id-uBhORw/identity.crt -extfile
  /tmp/rhui-id-xXxXxX/identity-extensions.txt -extensions rhui]
  Certificate creation output
  Signature ok
  subject=/CN=Red Hat Update Infrastructure
  Getting CA Private Key
  unable to write 'random state'
  Connecting to RHUA [xxxxxxx.xxxxxxx.com]...
  Successfully connected to [xxxxxxx.xxxxxxx.com]
  Connecting to RHUA [xxxxxxx.xxxxxxx.com]...
  Successfully connected to [xxxxxxx.xxxxxxx.com]
  Connecting to RHUA [xxxxxxx.xxxxxxx.com]...
  Successfully connected to [xxxxxxx.xxxxxxx.com]
  Configuring package listings to use proxy
  [xxproxy.xxxxxxx.com:3128]
  Unexpected error caught at the shell level
  Traceback (most recent call last):
    File "/usr/lib/python2.6/site-packages/rhui/tools/shell.py",
  line 86, in safe_listen
      self.listen(clear=first_run)
    File "/usr/lib/python2.6/site-packages/rhui/tools/shell.py",
  line 112, in listen
      Shell.listen(self)
    File "/usr/lib/python2.6/site-packages/rhui/common/shell.py",
  line 186, in listen
      item.func(*args, **item.kwargs)
    File
  "/usr/lib/python2.6/site-packages/rhui/tools/screens/repo.py",
  line 123, in add
      self.candidate_repo_manager.translate_entitlements()
    File
  "/usr/lib/python2.6/site-packages/rhui/tools/repo_candidates.py"
  , line 64, in translate_entitlements
      mappings = self.cdn_api.expand_variables(e.download_url,
  cert.cert_filename)
    File
  "/usr/lib/python2.6/site-packages/rhui/tools/cdn_api.py", line
  71, in expand_variables
      mappings = self._translate_next_variable({'' : url},
  cert_filename)
    File
  "/usr/lib/python2.6/site-packages/rhui/tools/cdn_api.py", line
  104, in _translate_next_variable
      substitutions = self._request_get(listing_url,
  cert_filename).split('\n')
    File
  "/usr/lib/python2.6/site-packages/rhui/tools/cdn_api.py", line
  153, in _request_get
      server = self._server(cert_filename)
    File
  "/usr/lib/python2.6/site-packages/rhui/tools/cdn_api.py", line
  211, in _server
      server.connect()
    File
  "/usr/lib64/python2.6/site-packages/M2Crypto/httpslib.py", line
  183, in connect
      raise socket.error, "Proxy connection failed: %d" % code
  error: Proxy connection failed: 407
  

Local fix

Problem summary

• The Red Hat OS update service plugin was not processing the
  proxy server user and password correctly.
  

Problem conclusion

• The plugin code has been updated to correct the issue.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  PUREAPP SYS W15

• Fixed component ID

  5725G3200

Applicable component levels

• R110 PSY

     UP

• R100 PSN

     UP

• RESP PSN

     UP