Red Hat NETWORK SATELLITE SERVER 4.0, Руководство по установке

Страница: 72 / 80

68 Chapter 8. Maintenance
8.8. Automating Synchronization
Manually synchronizing the RHN Satellite Server repository with Red Hat Network can be
a time-intensive task. United States business hours tend to be the peak usage time for Red
Hat Network, so synchronization at that time may be slow. For these reasons, Red Hat en-
courages you to automate synchronization at other times to better balance load and ensure
quick synchronization. Continental United States business hours are roughly 8:00 AM to
9:00 PM EST (UTC -5), due to four time zones, Monday through Friday. These hours may
vary seasonally by one hour. Further, Red Hat strongly recommends that synchronization
occur randomly for best performance.
This automation can be set easily by the addition of a simple cron job. To do this, edit the
crontab as root:
crontab -e
This opens the crontab in a text editor, by default Vi. Another editor can be used by first
changing the
EDITOR
variable, like so:
export EDITOR=gedit
.
Once opened, use the first five fields (minute, hour, day, month, and weekday) to sched-
ule the synchronization. Remember, hours use military time. Edit the crontab to include
random synchronization, like so:
0 1 * * * perl -le ’sleep rand 9000’ && satellite-sync --email >/dev/null \
2>/dev/null
This particular job will run randomly between 1:00 a.m. and 3:30 a.m. system time each
night and redirect
stdout
and
stderr
from
cron
to prevent duplicating the more easily
read message from
satellite-sync
. Options other than
--email
can also be included.
Refer to Section 6.1.2 Import/Sync Options for the full list of options. Once you exit from
the editor, the modified crontab is installed immediately.
8.9. Implementing PAM Authentication
As security measures become increasingly complex, administrators must be given tools
that simplify their management. For this reason, RHN Satellite Server supports network-
based authentication systems via Pluggable Authentication Modules (PAM). PAM is a suite
of libraries that helps system administrators integrate the Satellite with a centralized au-
thentication mechanism, thus eliminating the need for remembering multiple passwords.
RHN Satellite Server supports LDAP, Kerberos, and other network-based authentication
systems via PAM. To enable the Satellite to use PAM and your organization’s authentica-
tion infrastructure, complete the following tasks.
Set up a PAM service file (usually
/etc/pam.d/rhn-satellite
) and have the Satellite
use it by adding the following line to
/etc/rhn/rhn.conf
:
pam_auth_service = rhn-satellite