• About SUSE Manager Proxy Server
  • Patches
    • October 2016
    • Patch 12705: SUSE Manager Proxy 2.1
    • Patch 12567: SUSE Manager Proxy 2.1
    • Patch 12454: SUSE Manager Proxy 2.1
    • Patch 12331: SUSE Manager Proxy 2.1
    • Patch 12257: SUSE Manager Proxy 2.1
    • Patch 12132: SUSE Manager Proxy 2.1
    • Patch 10808: SUSE Manager Proxy 2.1
    • Patch 10566: SUSE Manager Proxy 2.1
    • Patch 10276: SUSE Manager Proxy 2.1
    • Patch 10251: spacecmd
    • Patch 10077: SUSE Manager Proxy 2.1
    • Patch 10022: apache2-mod_wsgi
    • Patch 9946: SUSE Manager Proxy 2.1
    • Patch 9519: apache2-mod_wsgi
    • Patch 9399: SUSE Manager Proxy 2.1
• System Requirements
• SUSE Manager Proxy Server distribution
• Installation and Setup
• Upgrade from version 1.7
• SUSE Manager Server versions
• Changes since 1.7
• Providing feedback to our products
• Documentation and other information
• Legal Notices
• Colophon

This SUSE product includes materials licensed to SUSE under the GNU General Public License (GPL). The GPL requires that SUSE makes available certain source code that corresponds to the GPL-licensed material. The source code is available for download at http://www.suse.com/download-linux/source-code.html.

Also, for up to three years from SUSE's distribution of the SUSE product, upon request SUSE will mail a copy of the source code. Requests should be sent by e-mail to sle_source_request@suse.com or as otherwise instructed at http://www.suse.com/download-linux/source-code.html. SUSE may charge a fee to recover its reasonable costs of distribution.

About SUSE Manager Proxy Server

SUSE Manager Proxy Server is an add-on to SUSE Manager Server providing mirroring proxy support. This allows for load distribution and improved scalability.

Operation is completely transparent. The SUSE Manager Proxy looks like a managed client to SUSE Manager Server and like a Server to the managed clients. Managed clients only talk to the Proxy Server which in turn communicates to the SUSE Manager Server.

All RPM packages that pass the Proxy Server are cached and subsequent client requests for these packages are resolved from the cache.

Patches

The SUSE Patch Finder is a simple online service to view released patches.

October 2016

This update fixes the following issues:

spacecmd

• Alert if a non-unique package ID is detected
• Prevent crashes when running old-style spacecmd cache
• Avoid errors if multiple packages with same long name enter the cache (bsc#990264)

spacewalk-certs-tools

• Check only if all required packages are installed (bsc#992987)
• Fix paths to trust dir and update-ca-certificates tool

Patch 12705: SUSE Manager Proxy 2.1

https://download.suse.com/Download?buildid=EWzgJLvGpyg~

This update fixes the following issues:

jabberd

• Revert config files to %config(noreplace) (bsc#988378)

spacewalk-backend

• Fix for non-integer IDs for bugzilla bug (bsc#975161)
• Silently ignore non-existing errata severity label on errata import, remove non-used exception (bsc#984452)
• spacewalk-repo-sync: Use dateutil parser (bsc#975161)
• Only trigger virtualization notification on server save when the virtualization data is not falsy (bsc#975120)
• Fix GPG bad signature detection and improve error messages (bsc#979313)

spacewalk-certs-tools

• Fix mgr-ssh-push-init with proxy and sudo (bsc#982562)

spacewalk-client-tools

• Fix syntax error prevent reading HW data correctly (bsc#984622)

spacewalk-web

• Fix perl query for satellite detection

zypp-plugin-spacewalk

• Fix failover for multiple URLs per repo (bsc#964932)

Patch 12567: SUSE Manager Proxy 2.1

https://download.suse.com/Download?buildid=y9Ld39BTrzQ~

This update for SUSE Manager Proxy 2.1 fixes the following issues:

osad

• Fix file permissions (bsc#970550)

rhncfg

• Fix file permissions (bsc#970550)

rhnlib

• Use TLSv1_METHOD in SSL Context (bsc#970989)

spacewalk-backend

• Mgr_ncc_sync: Adapt to bulk scheduling introduced in scheduleSingleSatRepoSync

spacewalk-certs-tools

• Fix file permissions (bsc#970550)

spacewalk-proxy

• Fix file permissions (bsc#970550)

suseRegisterInfo

• Fix file permissions (bsc#970550)

Patch 12454: SUSE Manager Proxy 2.1

https://download.suse.com/Download?buildid=RUrwLvVL3wc~

This update for SUSE Manager Proxy 2.1 fixes the following issues:

spacewalk-backend

• Honor no_proxy variable in InterServerSync. (bsc#965651)
• Cut string after full characters. (bsc#960801)

spacewalk-certs-tools

• Allow for a more restrictive sudo configuration. (bsc#961521)
• Fix script to work with sudo user. (bsc#961521)
• Improve sudo support for simple registrations.
• Disable relevant services via systemd as well.
• Remove client bootstrap repo after installing needed packages.

spacewalk-client-tools

• Fix rhnChannel instance has no attribute 'get'. (bsc#964006)

zypp-plugin-spacewalk

• Adapt for up2date client changes.

Patch 12331: SUSE Manager Proxy 2.1

https://download.suse.com/Download?buildid=HadVBhl-tjo~

This update for SUSE Manager Proxy 2.1 fixes the following issues:

spacecmd

• Mimetype detection to set the binary flag requires 'file' tool.
• Set binary mode on uploaded files based on content. (bsc#948245)

spacewalk-backend

• Fix undefined variable if --sync-kickstart is used. (bsc#958395)
• Avoid referencing unassigned variable. (bsc#956981)
• Fix patch syning if no issued date is given. Use "now" as date. (bsc#953584)
• Fix SUSE patch style detection for RES4. (bsc#953825)
• Additional debug data: listing of /srv/www/htdocs/pub and activation keys.

spacewalk-certs-tools

• Fixed issue with sudo being checked, even if not set.

spacewalk-client-tools

• Fix client registration for network interfaces with labels. (bsc#956981)

spacewalk-proxy-installer

• Make sure ssl-build dir exists. (bsc#949516)

spacewalk-web

• Add custom rule to scroll to the url hash for pages in 'rhn/systems/ssm/misc' path. (bsc#934865)
• Calculate and set correctly height of aside menu. (bsc#934865)
• Add default setting for task timeout.

zypp-plugin-spacewalk

• Convert zypper output to valid UTF-8. (bsc#954602)

Patch 12257: SUSE Manager Proxy 2.1

https://download.suse.com/Download?buildid=nXrEtpeNk2c~

This update includes the following new features:

zypp-plugin-spacewalk

• Support distribution upgrade with --no-allow-vendor-change for sle12 (fate#319128)

Patch 12132: SUSE Manager Proxy 2.1

https://download.suse.com/Download?buildid=BZXsY7s6fPc~

This collective update for SUSE Manager Proxy 2.1 provides the following fixes and enhancements:

jabberd

• Change attribute of config files from %config(noreplace) to %config. (bsc#940923)
• Automatically clean stale locks on startup. (bsc#933738)

osad

• Re-send subscription stanzas after a while. (bsc#933738)

sm-client-tools

• Show progress bar while registering for better user interaction. (bsc#823813)
• Added support for openSUSE clients.

spacecmd

• Revert "1207606 - Do not return one package multiple times". (bsc#945380)
• Check for existence of device description in spacecmd system_listhardware. (bsc#932288)

spacewalk-backend

• Read repository checksum type after setting the certificate for a repository.
• Define db_password to be read as a string. (bsc#946381)

spacewalk-certs-tools

• FULLY_UPDATE_THIS_BOX defaults to 0 now. Add option '--up2date' to mgr-bootstrap to fully update the system after registration.
• Add sudo support to ssh-push.

spacewalk-client-tools

• Add info on how to increase verbosity. (bsc#944263)
• Disable dmidecode on s390 and s390x. (bsc#936545)
• Recognize '.site' as an official TLD. (bsc#923990)
• Check for multiple entries in /etc/hostname. (bsc#929979)

spacewalk-web

• Added sudo user configuration option and comments.

suseRegisterInfo

• Enable zypp readonly switch for product information retrieval. (bsc#940361)

zypp-plugin-spacewalk

• Fix output of client events. (bsc#935377)

Patch 10808: SUSE Manager Proxy 2.1

https://download.suse.com/Download?buildid=7sLkKqxlRSM~

The following new features have been implemented

• Add support for the SSH push contact method to the API and spacecmd. (fate#314858)
• Sign repository metadata generated on SUSE Manager. (fate#314603)

osad

• Fix duplicate jabber ids. (bsc#869888, bsc#931685)

rhnpush

• Fix --ca-chain option for rhnpush. (bsc#931503, bsc#895869)

spacecmd

• Do not escape spacecmd command arguments.
• Do not return one package multiple times.
• Show contact method with activationkey_details and system_details.
• Clone configuration files without loosing trailing new lines. (bsc#926318)

spacewalk-backend

• Require pyliblzma to enable sync of EPEL repositories. (bsc#934417)
• Detect SUSE Manager Tools channel. (bsc#935433)
• Import RPMs which vendor is an empty string. (bsc#934124)
• Set primary interface during registration. (bsc#929058)
• Do not reset primary network interface at hardware refresh. (bsc#895071)

spacewalk-certs-tools

• Write logfile for mgr-ssh-push-init to correct location. (bsc#918082)
• Add arguments to import custom CA file and server key/certificate files with rhn-ssl-tool.

spacewalk-client-tools

• Fix --ca-chain option for rhnpush. (bsc#931503, bsc#895869)

spacewalk-proxy-html

• Add PGP keys also to SUSE Manager Proxy. (bsc#930227)

spacewalk-proxy-installer

• Use new 'Bring your own certificate' feature and update documentation for configure-proxy.sh.

spacewalk-proxy

• Disable WebUI redirecting. (bsc#922923)

zypp-plugin-spacewalk

• Check for package signatures when metadata is not signed.

Patch 10566: SUSE Manager Proxy 2.1

https://download.suse.com/Download?buildid=o3gg7NCf930~

This collective update for SUSE Manager Proxy 2.1 provides the following fixes and enhancements

osad

• Apply needed SElinux fix for RHEL7 and make use of systemd unit files.

rhncfg

• Avoid addition of None and str, fixes config diff. (bsc#920897)

spacewalk-backend

• Include package inventory and channel report into spacewalk-debug.
• Add functionality on spacewalk-data-fsck to remove RPMs which don't match checksum.
• Don't crash re-registrations if the original owner has been deleted.
• Initialize the second DB connection only when needed.

spacewalk-proxy

• Don't read from wsgi.input more than one time.
• Prevent Squid 3.2 from detecting forwarding loops.

spacewalksd

• Install new service and enable it. (bsc#919433)
• Add service spacewalk-update-status. (bsc#919433)

supportutils-plugin-susemanager-client

• Write current service and repository configuration into supportconfig.

Patch 10276: SUSE Manager Proxy 2.1

https://download.suse.com/Download?buildid=cYzXa8rsAWs~

This collective update for SUSE Manager Proxy 2.1 provides the following fixes and enhancements

rhncfg

• Normalize path sooner.
• Fix directory creation.

spacewalk-backend

• Convert empty string to null for DMI values. (bsc#911272)

spacewalk-certs-tools

• Do not allow registering a SUSE Manager server against itself. (bsc#841731)

spacewalk-proxy-installer

• Add missing cli arguments. (bsc#913941)

spacewalk-remote-utils

• Fix documentation of sw-create-channel option "--name" in the man page.

supportutils-plugin-susemanager

• Write current service and repository configuration into supportconfig.

Patch 10251: spacecmd

https://download.suse.com/Download?buildid=BG0jyLyTfDA~

This release also includes the following fixes

• Fix configchannel export: do not create 'contents' key for directories. (bsc#908849)
• Added feature to get installed packageversion of a system or systems managed by ssm to spacecmd.
• Fix patch summary printing.

Patch 10077: SUSE Manager Proxy 2.1

https://download.suse.com/Download?buildid=UazsB6VPTto~

This collective update for SUSE Manager Proxy 2.1 provides the following fixes and enhancements

osad

• Removed PyXML dependency for RHEL systems.
• Fix osad through unauthenticated proxy case.

rhncfg

• Fix compare config files by checking permissions on the correct file. (bsc#900498)

spacewalk-backend

• Insert update tag at the correct place for SLE12. (bsc#907677)
• Different registration paths should lock tables in the same order.
• Use configuration file variable instead of hardcoded path part in spacewalk-data-fsck.
• Drop unused column product_list in suseProducts table.
• Trigger generation of metadata if the repo contains no packages. (bsc#870159)

spacewalk-certs-tools

• Modify output in case a file is not found.
• Remove duplicates from authorized_keys2 as well. (bsc#885889)

spacewalk-proxy-installer

• Read systemid path from configuration.
• Proxy installer should use http proxy to get version number.

spacewalk-proxy

• Read systemid path from configuration.
• Configure proxy max memory file size separately from buffer_size.

spacewalk-remote-utils

• Add channel definitions for RHEL 6.6.
• Compose format has slightly changed for RHEL6.6.

spacewalk-web

• Add User Guide to online help pages.
• Fix links to monitoring documentation. (bsc#906887)
• Improve the layout in case the exception message is large.
• Stop the spinner for the success task.
• Link the error message with the tomcat log viewer.
• Make the SCC migration/refresh dialog show steps.
• Add a refresh button to the SUSE products page

Patch 10022: apache2-mod_wsgi

https://download.suse.com/Download?buildid=DAmvjHYcCKg~

apache2-mod_wsgi was updated to fix one security issue

• Failure to handle errors when attempting to drop group privileges. (CVE-2014-8583)

Security Issues

• CVE-2014-8583

Patch 9946: SUSE Manager Proxy 2.1

https://download.suse.com/Download?buildid=vFCY9d9kBK8~

This collective update for SUSE Manager Proxy 2.1 provides the following fixes and enhancements

osad

• Enable and install osad during first installation. (bsc#901958)
• Fix traceback if http proxy is not configured.
• Support communication over proxy.

rhncfg

• Fix error in rhncfg if SELinux is disabled.
• Balidate the content of configuration files before deploying.
• Avoid traceback with a configuration file upload action with no SELinux context.
• Ensure WebUI configuration file diff looks at owner and permissions.

spacewalk-backend

• Use the old style ISS method with NCC backend.
• Make spacewalk-debug SCC migration compatible.
• ISS: Export/import subscriptions and entitlements.
• ISS: Remove old import code for NCC products and subscriptions.
• ISS: Export/import suseProductChannels and suseUpgradePaths via ISS.
• ISS: Export/import SUSE Products via ISS.
• Fix cleanup when database init goes wrong.
• Update channel checksum type for vendor channels.
• Read mirror credentials from database depending on the Customer Center backend.
• Speed up satellite-sync by avoiding commonly-called dblink_exec.
• Backend should correctly checksum configuration files with macros.
• Fix spacewalk-debug to be fully PostgreSQL aware.
• Correct UTF8 configuration files from being marked as binary.
• Preserve the query parameters in the URL.
• Allow missing packages in patches if they are not part of this repository.
• Handle SLE 12 update tag correctly in reposync.
• Fix traceback when pushing RPMs with archive size greater than 4GB.
• Queue server for errata cache update when package list changes.
• Recognize oVirt node as virtual system.

spacewalk-certs-tools

• bootstrap.sh: When installing certificate via rpm, support both curl and wget.
• bootstrap.sh: Fail if both curl and wget are missing.
• bootstrap.sh: Install certificate in the right location on SLE 12.
• Fix removal of existing host key entries. (bsc#886391)

spacewalk-client-tools

• Allow unicode characters in proxy username / password.
• Send correct hostname. (bsc#887538)

spacewalk-proxy-installer

• Don't hardcode systemid path in rhn-proxy-activate.
• Remove duplicate Summary and Group entries.

spacewalk-remote-utils

• Add channel definitions for RHEL 5.11 and RHEL 7.0.

spacewalk-web

• Integrate the refresh dialog with the setup wizard products page.
• Add aarch64 and ppc64le to parent-child channel compatibility list.
• WebUI cloning should use the same SQL query as API.

suseRegisterInfo

• Re-add legacy suse_register_info to successfully perform the update. (bsc#898428)

zypp-plugin-spacewalk

• Check for retrieveOnly option in up2date configuration and set download_only. (bsc#896254)
• Changed the spec file to force usage of the official python VM. (bsc#889363)

Patch 9519: apache2-mod_wsgi

https://download.suse.com/Download?buildid=QNvf8aHFkXQ~

Security Issues

• CVE-2014-0240
• CVE-2014-0242

Patch 9399: SUSE Manager Proxy 2.1

https://download.suse.com/Download?buildid=QCPbSvHNsCY~

This collective update for SUSE Manager Proxy 2.1 provides the following fixes and enhancements

osad

• Call python using the -s option.

rhncfg

• list/elist: Allow user to specify list of files.

rhnlib

• Ensure bytes strings are sent to pyOpenSSL. (bnc#880388)

rhnpush

• Add default path structure to proxy lookaside that avoids collisions.
• Make rhnpush backwards-compatible with old spacewalk-proxy.

spacewalk-backend

• Additional spacewalk backend methods and capability needed.
• Spacewalk changes needed to support collisionless proxy lookaside.

spacewalk-proxy

• Add default path structure to proxy lookaside that avoids collisions.
• rhn_package_manager should not force md5, use package headers.

spacewalk-web

• Add development_environment to rhn_web.conf.

System Requirements

SUSE Manager Proxy Server is a 64bit application. Recommended main memory is 2GB and approx 50 GB of disk space per distribution or channel.

See the Proxy Quick Start guide for more details on the system requirements.

SUSE Manager Proxy Server distribution

SUSE Manager Proxy Server is distributed as an appliance which bundles an operating system (SLES 11 SP3 x86_64) with the SUSE Manager Proxy Server application. The installable ISO of the SUSE Manager Proxy appliance can be deployed on physical hardware or fully virtualized (e.g. KVM, VMware) hosts.

Installation and Setup

Installation is done in two major steps. The first installs the appliance and configures the underlying SLES 11 operating system. The second configures SUSE Manager Proxy Server. See the QuickStart manual for step-by-step instructions for installing and configuring SUSE Manager Proxy Server.

Upgrade from version 1.7

Before upgrading the SUSE Manager Proxy to 2.1, upgrade the SUSE Manager Server to version 2.1 first. Then you can use the Server’s “Service Pack Migration” function to upgrade the Proxy from 1.7 to 2.1 An upgrade from SUSE Manager Proxy 1.2 to version 2.1 is not supported. In this case upgrade to version 1.7 first and then to 2.1

If you don’t upgrade the SUSE Manager Server first, then SUSE Manager Proxy 2.1 configure script will ask "which version to activate". Choose “2.1” here. Proxy functionality should not be affected but upgrading the Server first is the recommended approach.

SUSE Manager Server versions

SUSE Manager Proxy 2.1 can only work with SUSE Manager Server 2.1

SUSE Manager Server 2.1 can work with SUSE Manager Proxy 1.7 or 2.1

Changes since 1.7

• Base system upgrade to SLES 11 SP3
• Upgrade to upstream Spacewalk 2.1
• Many bugfixes and speed improvements

Providing feedback to our products

In case of encountering a bug please report it through your support contact.

Documentation and other information

http://www.suse.com/products/suse-manager/technical-information/ contains additional or updated documentation for SUSE Manager Server 2.1

These Release Notes are available online at http://www.suse.com/documentation/releasenotes Further information about SUSE Manager is available at http://wiki.novell.com/index.php/SUSE_Manager

Visit http://www.suse.com for the latest Linux product news from SUSE and http://www.suse.com/download-linux/source-code.html for additional information on the source code of SUSE Linux Enterprise products.

Legal Notices

  SUSE Linux GmbH
  Maxfeldstr. 5
  D-90409 Nürnberg
  Tel: +49 (0)911 740 53 - 0
  Email: feedback@suse.com
  Registrierung/Registration Number: HRB 21284 AG Nürnberg
  Geschäftsführer/Managing Director: Jeff Hawn, Jennifer Guild, Felix Imendörffer
  Steuernummer/Sales Tax ID: DE 192 167 791
  Erfüllungsort/Legal Venue: Nürnberg

SUSE makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, SUSE reserves the right to revise this publication and to make changes to its content, at any time, without the obligation to notify any person or entity of such revisions or changes.

Further, SUSE makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, SUSE reserves the right to make changes to any and all parts of SUSE software, at any time, without any obligation to notify any person or entity of such changes.

Any products or technical information provided under this Agreement may be subject to U.S. export controls and the trade laws of other countries. You agree to comply with all export control regulations and to obtain any required licenses or classifications to export, re-export, or import deliverables. You agree not to export or re-export to entities on the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in U.S. export laws. You agree to not use deliverables for prohibited nuclear, missile, or chemical/biological weaponry end uses. Please refer to www.novell.com/company/policies/trade_services/ for more information on exporting SUSE software. SUSE assumes no responsibility for your failure to obtain any necessary export approvals.

Copyright © 2012 SUSE. All rights reserved. No part of this publication may be reproduced, photocopied, stored on a retrieval system, or transmitted without the express written consent of the publisher.

SUSE has intellectual property rights relating to technology embodied in the product that is described in this document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S. patents listed at http://www.novell.com/company/legal/patents/ and one or more additional patents or pending patent applications in the U.S. and other countries.

For SUSE trademarks, see SUSE Trademark and Service Mark list (http://www.novell.com/company/legal/trademarks). All third-party trademarks are the property of their respective owners.

Colophon

Thank you for using SUSE Manager Proxy Server in your business.

Your SUSE Manager Team.