Chapter 1. Accessing Red Hat Satellite

Procedure

1. Identify the fully qualified domain name of your Satellite Server:

   # hostname -f

2. Access the pub directory on your Satellite Server using a web browser pointed to the fully qualified domain name:

   https://satellite.example.com/pub

3. When you access Satellite for the first time, an untrusted connection warning displays in your web browser. Accept the self-signed certificate and add the Satellite URL as a security exception to override the settings. This procedure might differ depending on the browser being used. Ensure that the Satellite URL is valid before you accept the security exception.
4. Select katello-server-ca.crt.
5. Import the certificate into your browser as a certificate authority and trust it to identify websites.

CLI procedure

1. From the Satellite CLI, copy the katello-server-ca.crt file to the machine you use to access the Satellite web UI:

   # scp /var/www/html/pub/katello-server-ca.crt username@hostname:remotefile

2. In the browser, import the katello-server-ca.crt certificate as a certificate authority and trust it to identify websites.

Procedure

1. Access Satellite Server using a web browser pointed to the fully qualified domain name:

   https://satellite.example.com/

2. Enter the user name and password created during the configuration process. If a user was not created during the configuration process, the default user name is admin. If you have problems logging in, you can reset the password. For more information, see Section 1.8, “Resetting the administrative user password”.

Procedure

1. Obtain a Kerberos ticket-granting ticket (TGT) on behalf of a Satellite user:

   $ kinit idm_user

   Warning

   If, when you were setting Red Hat Identity Management to be the authentication provider, you enabled access to both the Satellite API and the Satellite web UI, an attacker can now obtain an API session after the user receives the Kerberos TGT. The attack is possible even if the user did not previously enter the Satellite login credentials anywhere, for example in the browser.

2. If automatic negotiate authentication is not enabled, use the TGT to authenticate to Hammer manually:

   $ hammer auth login negotiate

3. Optional: Destroy all cached Kerberos tickets in the collection:

   $ kdestroy -A

Procedure

1. Obtain the Kerberos ticket granting ticket (TGT) for yourself using your Red Hat Identity Management credentials:

   $ kinit idm_user
   Password for idm_user@EXAMPLE.COM:

2. In your browser address bar, enter the URL of your Satellite Server.

   You are logged in automatically.

Procedure

1. Enable the Chrome browser to use Kerberos authentication:

   $ google-chrome --auth-server-whitelist="*.example.com" --auth-negotiate-delegate-whitelist=”*.example.com"

   Note

   Instead of allowlisting the whole domain, you can also allowlist a specific Satellite Server.

2. Obtain the Kerberos ticket-granting ticket (TGT) for yourself using your Red Hat Identity Management credentials:

   $ kinit idm_user
   Password for idm_user@_EXAMPLE.COM:

3. In your browser address bar, enter the URL of your Satellite Server.

   You are logged in automatically.

Procedure

1. In the Satellite web UI, click your user name at the top right corner.
2. Select My Account from the menu.
3. In the Current Password field, enter the current password.
4. In the Password field, enter a new password.
5. In the Verify field, enter the new password again.
6. Click Submit to save your new password.

To reset the administrative user password

1. Log in to the base operating system where Satellite Server is installed.

2. Enter the following command to reset the password:

   # foreman-rake permissions:reset
   Reset to user: admin, password: qwJxBptxb7Gfcjj5

3. Use this password to reset the password in the Satellite web UI.

4. Edit the ~/.hammer/cli.modules.d/foreman.yml file on Satellite Server to add the new password:

   # vi ~/.hammer/cli.modules.d/foreman.yml

To set a new administrative user password

1. Log in to the base operating system where Satellite Server is installed.

2. To set the password, enter the following command:

   # foreman-rake permissions:reset password=new_password

3. Edit the ~/.hammer/cli.modules.d/foreman.yml file on Satellite Server to add the new password:

   # vi ~/.hammer/cli.modules.d/foreman.yml

Procedure

1. In the Satellite web UI, navigate to Administer > Settings, and click the General tab.
2. Click the edit button next to Login page footer text, and enter the desired text to be displayed on the login page. For example, this text may be a warning message required by your company.
3. Click Save.
4. Log out of the Satellite web UI and verify that the custom text is now displayed on the login page below the Satellite version number.