-
Bug
-
Resolution: Done-Errata
-
Normal
-
6.10.0
-
0
-
False
-
-
False
-
CLOSED
-
400
-
-
-
Moderate
-
None
Description of problem:
When a client is denied access by the rhsm-certguard, the log messages describing the reason are lost with log level debug. They should be raised to at least warning, because they tell an administrator, why a client is unable to consume their subscriptions.
Version-Release number of selected component (if applicable):
How reproducible:
Steps to Reproduce:
1. Subscribe a host to RH subscription content
2. Find a reason for the rhsm content guard to reject the client certificate
Either https://bugzilla.redhat.com/show_bug.cgi?id=1977893,
or misconfigure it, see below
3. On the host run `yum update` and observe that repodata.xml returns 403
4. In forman-tail observe that all reasons for ^ are in log level DEBUG
Actual results:
Expected results:
Failed authentication to subscription content should be logged at a higher level, maybe WARNING.
Additional info:
Misconfiguring may be:
`curl -vv -k -X PATCH --data-urlencode 'ca_certificate@fake.crt' --cert /etc/pki/katello/certs/pulp-client.crt --key /etc/pki/katello/private/pulp-client.key "https://localhost/pulp/api/v3/contentguards/certguard/rhsm/<UUID>/"`
- external trackers
- links to
-
RHBA-2024:140284 Important: Satellite 6.16.0 release