• Tag Archives Red Hat
  • RHEL Satellite access

    Today I am going to talk about (remote) access with satellite.

    Apparently, there are a few things that you must know in order to get stuff working correctly.

    First of all: Red Hat Identity Manager <-> Satellite coupling for user accounts.
    When you create the coupling as an external LDAP source in satellite, by default users get put in the anonymous group with very little rights within satellite. Luckily you can also provide a “group” DN for Identity servers which can then be used to assign groups in satellite.


     

    So create a user group (for instance : Admins) in the satellite user interface. Then in the third (external group) tab , assign a coupling between a redhat identity manager (IDM) group and the local admin group. The source however, must be set to “External” instead of your identity server, I am not sure if this is a bug or works as designed. Now, when users login who have the correct LDAP group, will automaticly be added to the new Admins group on satellite. Now you can assign rights (or even check the full admin checkbox) to the Admin usergroup and the remote access is done.


    Now a short paragraph about local webinterface access as the default admin account:

    When satellite needs reconfiguring, or reinstalling, Red Hat notes that the admin password gets reset to a default password and you will simply have to change it again. This is not entirely true. You can put the password of the default admin user in /etc/katello-installer/answers.katello-installer.yaml, but doing so is a security risk according to some people. I am noting that if you have root-access , the security risk of this file is negligant, because you can simply run katello-installer without any arguments and it will printout the admin password on the console after a succesful completion.

    – Mark.

     


  • Default LANG and Locale on a Redhat Enterprise Linux (RHEL) host.

    I had a strange configuration on RHEL causing screen/cygwin/dialog/ncurses to interact badly with eachother.

    My situation:

    I have cygwin on my laptop installed. I am using it to connect to a RHEL 5 host , there I start screen and then use an ncurses application like dialog or midnight commander.

    What happens: The system is completely unreadable and unusable.

    The solution is so easy:

    Redhat screwed up.


    $ echo ${LANG}
    LANG=en_US.UTF-8
    $ locale -a|grep en_US
    en_US
    en_US.iso88591
    en_US.iso885915
    en_US.utf8

    woops, my locale is NOT THERE!

    Default $LANG on RHEL-5 = en_US.UTF-8

    However, locale -a displays en_US.utf8

    Luckily, the fix is easy.

    in /etc/sysconfig.d/i18n , you can change the default locale and make it the existing en_US.utf8.

    My terminal now works exactly as predicted and I am happily using mc/dialog and other ncurses apps again.. WHEW!

    If someone can test this on a RHEL-6 host, then I know if i can file a bug report with RedHat! …

    So, if you have “erratic” behaviour on ncurses apps, try checking your locale settings….