This is an old revision of the document!
installation spacewalk own default organization
yum install spacewalk-setup-embedded-postgresql yum install spacewalk-postgresql yum install perl-TermReadKey
# vi /etc/sysconfig/iptables
-A INPUT -m state –state NEW -m tcp -p tcp –dport 69 -j ACCEPT -A INPUT -m state –state NEW -m udp -p udp –dport 69 -j ACCEPT -A INPUT -m state –state NEW -m tcp -p tcp –dport 80 -j ACCEPT -A INPUT -m state –state NEW -m tcp -p tcp –dport 443 -j ACCEPT -A INPUT -m state –state NEW -m tcp -p tcp –dport 5222 -j ACCEPT -A INPUT -m state –state NEW -m tcp -p tcp –dport 5432 -j ACCEPT -A INPUT -m state –state NEW -m tcp -p tcp –dport 25150 -j ACCEPT -A INPUT -m state –state NEW -m udp -p udp –dport 25150 -j ACCEPT -A INPUT -m state –state NEW -m tcp -p tcp –dport 25151 -j ACCEPT
# service iptables restart
# gpg –gen-key # gpg –list-keys /root/.gnupg/pubring.gpg
pub 2048R/B06EB1AF 2013-04-22 uid Helux info@helux.nl sub 2048R/B8F3F932 2013-04-22
# gpg –list-secret-keys /root/.gnupg/secring.gpg
sec 2048R/B06EB1AF 2013-04-22 uid Helux info@helux.nl ssb 2048R/B8F3F932 2013-04-22
# gpg –export -a B06EB1AF > /var/tmp/heluxkey.gpg # gpg –export-secret-keys -a B06EB1AF > /var/tmp/heluxsecretkey.gpg
# only when the keys are not on the system anymore
# gpg –import /var/tmp/heluxkey.gpg # gpg –allow-secret-key-import –import /var/tmp/heluxsecretkey.gpg
# vi /usr/share/spacewalk/setup/spacewalk-public.cert change organization name
# spacewalk-setup –disconnected . . There was a problem activating the satellite: Could not parse certificate file. #
# gpg –list-keys /root/.gnupg/pubring.gpg
pub 2048R/B06EB1AF 2013-04-22 uid Helux info@helux.nl sub 2048R/B8F3F932 2013-04-22
pub 1024D/F24F1B08 2002-04-23 [expired: 2004-04-22] uid Red Hat, Inc (Red Hat Network) rhn-feedback@redhat.com
#
# ./gen-oss-sat-cert.pl –signer B06EB1AF –resign /usr/share/spacewalk/setup/spacewalk-public.cert
# spacewalk-setup –disconnected –skip-db-install
# vi /etc/pam.d/rhn-satellite #%PAM-1.0 auth required /lib64/security/pam_env.so auth sufficient /lib64/security/pam_ldap.so no_user_check auth required /lib64/security/pam_deny.so account required /lib64/security/pam_ldap.so no_user_check
# vi /etc/rhn/rhn.conf pam_auth_service = rhn-satellite
cobbler get-loaders cd /var/lib/cobbler/loaders cp * /var/lib/tftpboot/
done!
