Candlepin_events FAIL, not running and wont restart after upgrading Red Hat Satellite 6.

Environment

• Red Hat Satellite 6.9
• Red Hat Satellite 6.10

Issue

• After upgrading Red Hat Satellite 6, the hammer ping command shows candlepin_events FAIL.

Resolution

• The user foreman should be able to read the below-mentioned file.

• Setting the permission as 0440 will fix the issue.

    # chmod 0440 /etc/pki/katello/private/java-client.key
    
    # chown root.foreman  <above_file>                 =======> Only if the user is not set correctly.
  

• The output should be similar to this.

    # ll /etc/pki/katello/private/java-client.key
    -r--r----- 1 root foreman 3243 Oct 29 20:13 /etc/pki/katello/private/java-client.key
  

• For more KB articles/solutions related to Red Hat Satellite 6.x Candlepin Issues, please refer to the Consolidated Troubleshooting Article for Red Hat Satellite 6.x Candlepin Issues

Root Cause

• The file permission was incorrect.

    # ll /etc/pki/katello/private/java-client.key
    -r-------- 1 root foreman 3243 Oct 29 20:13 /etc/pki/katello/private/java-client.key
  

Diagnostic Steps

• The following errors observed as per /var/log/foreman/production.log

    2020-12-18T11:54:31 [E|app|0fba09e8] Error occurred while starting Katello::CandlepinEventListener
    2020-12-18T11:54:31 [E|app|0fba09e8] client key file can not be read
    2020-12-18T11:54:31 [E|app|0fba09e8] /opt/theforeman/tfm/root/usr/share/gems/gems/stomp-1.4.9/lib/connection/netio.rb:407:in `open_ssl_socket'
    /opt/theforeman/tfm/root/usr/share/gems/gems/stomp-1.4.9/lib/connection/netio.rb:520:in `open_socket'
  

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.