SUSE Manager not working after migration from 3.2 to 4.1
This document (000019777) is provided subject to the disclaimer at the end of this document.
SUSE Manager Server 4.1
- Unable to schedule events for salt-minions. This will show the following error in the logs:
[ajp-nio-0:0:0:0:0:0:0:1-8009-exec-7] INFO org.directwebremoting.log.accessLog - Method execution failed: java.lang.RuntimeException: com.suse.salt.netapi.exception.SaltException: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
- Attempts to patch from the client using zypper fail. The following error will be displayed:
Permission to access 'https://xxxxxxxxxxxx:443/rhn/manager/download/sle-manager-tools12-pool-x86_64-sp4/repodata/repomd.xml?eyJhbGciOiJIUzI1NiJ9.eyJleHAiOjE2Mjk5MTQyNTIsImlhdCI6MTU5ODM3ODI1MiwibmJmIjoxNTk4Mzc4MTMyLCJvcmciOjEsImp0aSI6IjljMHN4UkdCUUMwenFiWkViMFBYd2ciLCJvbmx5Q2hhbm5lbHMiOlsic2xlLW1hbmFnZXItdG9vbHMxMi1wb29sLXg4Nl82NC1zcDQiXX0.CE87UDMcQV9gEGkhBKYZxt-unea8bQSYu8yRNDfkrIY' denied. Abort, retry, ignore? [a/r/i/...? shows all options] (a):
To solve this issue, perform the following steps on the SUSE Manager Server:
ln -s /etc/salt/pki/api/salt-api.crt /etc/pki/trust/anchors/salt-api.crt
If the fix is needed earlier and the suggested work around is not enough.
Please open an incident with SUSE Support, refer this TID and ask for a PTF.
This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.
- Document ID:000019777
- Creation Date: 09-Nov-2020
- Modified Date:10-Nov-2020
- SUSE Manager Server
For questions or concerns with the SUSE Knowledgebase please contact: tidfeedback[at]suse.com