Red Hat NETWORK 4.0 -, Справочное руководство

Страница: 193 / 290

Chapter 8. UNIX Support Guide 177
This will install the packages in the RHN-specific path for your UNIX variant. In the case
of Solaris, this is
/opt/redhat/rhn/solaris/
.
8.3.2. Deploying Client SSL Certificates
To ensure secure data transfer, Red Hat strongly recommends the use of SSL. The RHN
Satellite Server eases implementation of SSL by generating the necessary certificates dur-
ing its installation. The server-side certificate is automatically installed on the Satellite
itself, while the client certificate is placed in the
/pub/
directory of the Satellite’s Web
server.
To install the certificate, follow these steps for each client:
1. Download the SSL certificate from the
/var/www/html/pub/
directory of the RHN Satellite Server onto the client
system. The certificate will be named something similar to
RHN-ORG-TRUSTED-SSL-CERT
. It is accessible via the web at the following URL:
https://your-satellite.example.com/pub/RHN-ORG-TRUSTED-SSL-CERT
.
2. Move the client SSL certificate to the RHN-specific directory for your UNIX variant.
For Solaris, this can be accomplished with a command similar to:
mv /path/to/RHN-ORG-TRUSTED-SSL-CERT /opt/redhat/rhn/solaris/usr/share/rhn/
When finished, the new client certificate will be installed in the appropriate directory for
your UNIX system. If you have a large number of systems to prepare for RHN manage-
ment, you may script this entire process.
Now you must reconfigure RHN client applications to refer to the newly installed SSL
certificate. Refer to Section 8.3.3 Configuring the clients for instructions.
8.3.3. Configuring the clients
The final step in preparing your client systems for Red Hat Network is to reconfigure their
RHN applications to use the new SSL certificate and obtain updates from the RHN Satellite
Server. Both of these changes can be made by editing the configuration file of the Red Hat
Update Agent , which provides registration and update functionality.
Follow these steps on each client system:
1. As root, change to the rhn configuration directory for the system. For Solaris, the full
path is
/opt/redhat/rhn/solaris/etc/sysconfig/rhn/
.
2. Open the
up2date
configuration file in a text editor.
3. Find the
serverURL
entry and set its value to the fully qualified domain name
(FQDN) of your RHN Satellite Server:
serverURL[comment]=Remote server URL