Unable to run an OpenSCAP audit via satellite 6.2, the client is missing the file /etc/foreman_scap_client/config.yaml

Solution Verified - Updated

Environment

  • Red Hat Enterprise Linux (RHEL) 7
  • Satellite 6.2

Issue

  • The Satellite client is assigned to the proper puppet environment
  • The proper puppet environment contains the puppet class foreman_scap_client
  • File /etc/foreman_scap_client/config.yaml is not created by the puppet agent.

Resolution

  • Attach the server to the relevant host group, on satellite execute the below command

       # hammer host update --name www-7.example.com --hostgroup lab

  • Check the relevant host group is connected to the correct puppet environment and is containing the foreman_scap_client puppet class; on satellite execute the below command

    [root@paosat6 ~]# hammer hostgroup info --name lab
Id:                     1
Name:                   lab
Title:                  lab
Operating System:       RedHat 7.3
Environment:            production
Subnet:                 default
Domain:                 example.com
Architecture:           x86_64
Partition Table:        Kickstart default
Medium:                 PDN_Inc/Library/Red_Hat_Server/Red_Hat_Enterprise_Linux_7_Server_Kickstart_x86_64_7_3
Puppet CA Proxy Id:     1
Puppet Master Proxy Id: 1
ComputeProfile:         1-Small
Puppetclasses:          
    foreman_scap_client
Parameters:             
    kt_activation_keys => rhel7-devel
Locations:              
    Dubai
Organizations:          
    PDN Inc
Parent Id:

  • Run below command on the host and check that file /etc/foreman_scap_client/config.yaml is created

      # puppet agent -t 
  # ls -l  /etc/foreman_scap_client/config.yaml
  -rw-r--r-- 1 root root 1986 Jul  4 08:59 /etc/foreman_scap_client/config.yaml

Root Cause

The host was not assigned to a host group

Diagnostic Steps

The file /etc/foreman_scap_client/config.yaml is missing on Satellite client:

# ls -l /etc/foreman_scap_client/config.yaml
ls: cannot access '/etc/foreman_scap_client/config.yaml': No such file or directory
SBR
Product(s)
Category
Tags

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.