PDA

View Full Version : Please confirm my thoughts re: Updates



clarknova77
27-Feb-2014, 13:43
I've been asked by a customer to determine the address used by SLES when updating, so that they may allow it through their firewall. Currently these systems are very locked down and have no method of updating.

I've been examining /var/log/zypper.log and can see multiple references to https://nu.novell.com so I believe that this is the address required. Is this the only address that I need to ask the customer to allow through their corporate firewall in order to successfully update these systems? I suspect that this resolves to one of many mirrors depending on load or similar.

Thanks.

malcolmlewis
27-Feb-2014, 14:06
On Thu 27 Feb 2014 12:44:01 PM CST, clarknova77 wrote:


I've been asked by a customer to determine the address used by SLES when
updating, so that they may allow it through their firewall. Currently
these systems are very locked down and have no method of updating.

I've been examining /var/log/zypper.log and can see multiple references
to https://nu.novell.com so I believe that this is the address required.
Is this the only address that I need to ask the customer to allow
through their corporate firewall in order to successfully update these
systems? I suspect that this resolves to one of many mirrors depending
on load or similar.

Thanks.




Hi
Yes this is correct, if a proxy is involved it should accept Novell
domain (or at least selected sites used like nu.novell.com and
secure.novell.com) without authentication.

You need to populate proxy setting in YAST and to add two lines
with your proxy information to /etc/profile, for example:

export http_proxy="http://10.10.1.1:8081/"
export https_proxy="https://10.10.1.1:8081/"

As well as the /root/.curlrc

This also covers system registration via a proxy.

--
Cheers Malcolm °¿° SUSE Knowledge Partner (Linux Counter #276890)
openSUSE 13.1 (Bottle) (x86_64) GNOME 3.10.2 Kernel 3.11.10-7-desktop
If you find this post helpful and are logged into the web interface,
please show your appreciation and click on the star below... Thanks!