# Where are mirror credentials now?

**URL:** <https://forums.suse.com/t/where-are-mirror-credentials-now/26435>\
**Category:** SUSE Customer Center\
**Created:** [December 1, 2014, 3:46pm UTC](https://forums.suse.com/t/where-are-mirror-credentials-now/26435 "2014-12-01T15:46:49Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![aborzenkov](https://avatars.discourse-cdn.com/v4/letter/a/cc9497/32.png) [@aborzenkov](https://forums.suse.com/u/aborzenkov)\
**Post date:** [December 1, 2014, 3:46pm UTC](https://forums.suse.com/t/where-are-mirror-credentials-now/26435/1 "2014-12-01T15:46:49Z")

</div>

I’m rather confused with new SCC. In the old NCC I had mirror credentials and could access repositories. Now I have links to repositories listed in Subscriptions tab, but attempting to access any of them returns 403 Forbidden. It does not ask me about user/password either.

---

<div class="post-metadata">

**Author:** ![kwk](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/kwk/32/11997_2.png) [@kwk](https://forums.suse.com/u/kwk)\
**Post date:** [December 1, 2014, 5:14pm UTC](https://forums.suse.com/t/where-are-mirror-credentials-now/26435/2 "2014-12-01T17:14:30Z")

</div>

Mirror credentials are called ‘Organization credentials’ and are available in the respective tab of the [https://scc.suse.com/organization](https://scc.suse.com/organization) page.

Use zypper (if the SLE 12 system is directly registered to [scc.suse.com](http://scc.suse.com)), SMT, or SUSE Manager to download repositories. Manual browsing is discouraged.

Technical details:

tl;dr SLE 12 is served via a different server which does not use mirror credentials

Usage of these credentials depends on the repository server.

For SLE 10 and SLE 11 (and associated products), repositories are served via [nu.novell.com](http://nu.novell.com)  
Access to [nu.novell.com](http://nu.novell.com) is protected by mirror credentials, authorized by [nu.novell.com](http://nu.novell.com). Each authorization required a round trip to NCC.

For SLE 12 (and associated products), repositories are served via [updates.suse.com](http://updates.suse.com)  
Access to [updates.suse.com](http://updates.suse.com) is protected by token, authorized by the content delivery network (CDN). Each authentication is handled by the nearest CDN server. This makes repository access to [update.suse.com](http://update.suse.com) much faster and more reliable than [nu.novell.com](http://nu.novell.com)

---

<div class="post-metadata">

**Author:** ![smflood](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/smflood/32/10576_2.png) [@smflood](https://forums.suse.com/u/smflood)\
**Post date:** [December 1, 2014, 7:21pm UTC](https://forums.suse.com/t/where-are-mirror-credentials-now/26435/3 "2014-12-01T19:21:05Z")

</div>

On 01/12/2014 15:24, kwk wrote:  
[color=blue]

> Mirror credentials are called ‘Organization credentials’ and are  
> available in the respective tab of the [https://scc.suse.com/organization](https://scc.suse.com/organization)  
> page.
> 
> Use zypper (if the SLE 12 system is directly registered to  
> [scc.suse.com](http://scc.suse.com)), SMT, or SUSE Manager to download repositories. Manual  
> browsing is discouraged.
> 
> Technical details:
> 
> tl;dr SLE 12 is served via a different server which does not use mirror  
> credentials
> 
> Usage of these credentials depends on the repository server.
> 
> For SLE 10 and SLE 11 (and associated products), repositories are served  
> via [nu.novell.com](http://nu.novell.com)  
> Access to [nu.novell.com](http://nu.novell.com) is protected by mirror credentials, authorized  
> by [nu.novell.com](http://nu.novell.com). Each authorization required a round trip to NCC.
> 
> For SLE 12 (and associated products), repositories are served via  
> [updates.suse.com](http://updates.suse.com)  
> Access to [updates.suse.com](http://updates.suse.com) is protected by token, authorized by the  
> content delivery network (CDN). Each authentication is handled by the  
> nearest CDN server. This makes repository access to [update.suse.com](http://update.suse.com) much  
> faster and more reliable than [nu.novell.com](http://nu.novell.com)[/color]

So the only way to get access to the repos served via [updates.suse.com](http://updates.suse.com)  
are directly from a SLE12 machine registered to SCC, via SMT11 SP3  
configured to talk to SCC, or (in future) SUSE Manager 2.1?

Is it no longer possible to mirror the repos some other way?

## Thanks.

Simon  
SUSE Knowledge Partner

* * *

## If you find this post helpful and are logged into the web interface, please show your appreciation and click on the star below. Thanks.

---

<div class="post-metadata">

**Author:** ![bobino](https://avatars.discourse-cdn.com/v4/letter/b/4bbf92/32.png) [@bobino](https://forums.suse.com/u/bobino)\
**Post date:** [December 3, 2014, 2:38pm UTC](https://forums.suse.com/t/where-are-mirror-credentials-now/26435/4 "2014-12-03T14:38:52Z")

</div>

Hi,  
SLES 11 SP3, fresh installation  
I’m using our ‘Organization credentials’ and getting invalid credentials. Did not worked…  
Should I see our SMT server in the list under scc/systems ?  
thank you

---

<div class="post-metadata">

**Author:** ![aborzenkov](https://avatars.discourse-cdn.com/v4/letter/a/cc9497/32.png) [@aborzenkov](https://forums.suse.com/u/aborzenkov)\
**Post date:** [December 3, 2014, 4:41pm UTC](https://forums.suse.com/t/where-are-mirror-credentials-now/26435/5 "2014-12-03T16:41:23Z")

</div>

> [@kwk;25172](#):
>
> Access to [updates.suse.com](http://updates.suse.com) is protected by token

And the only way to generate this token is to register SLES with SCC? What if system does not have internet access? Yes, this happens. I may still want to download selected available updates and install them offline.

---

<div class="post-metadata">

**Author:** ![aborzenkov](https://avatars.discourse-cdn.com/v4/letter/a/cc9497/32.png) [@aborzenkov](https://forums.suse.com/u/aborzenkov)\
**Post date:** [December 3, 2014, 4:44pm UTC](https://forums.suse.com/t/where-are-mirror-credentials-now/26435/6 "2014-12-03T16:44:07Z")

</div>

[QUOTE=kwk;25172]For SLE 10 and SLE 11 (and associated products), repositories are served via [nu.novell.com](http://nu.novell.com)  
For SLE 12 (and associated products), repositories are served via [updates.suse.com](http://updates.suse.com)  
[/QUOTE]

That’s not what I see. If I go to my subscriptions page and list repositories, I get links to [updates.suse.com](http://updates.suse.com) for SLES11 as well.

---

<div class="post-metadata">

**Author:** ![smflood](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/smflood/32/10576_2.png) [@smflood](https://forums.suse.com/u/smflood)\
**Post date:** [December 3, 2014, 5:38pm UTC](https://forums.suse.com/t/where-are-mirror-credentials-now/26435/7 "2014-12-03T17:38:52Z")

</div>

On 03/12/2014 12:44, bobino wrote:  
[color=blue]

> SLES 11 SP3, fresh installation  
> I’m using our ‘Organization credentials’ and getting invalid  
> credentials. Did not worked…  
> Should I see our SMT server in the list under scc/systems ?  
> thank you[/color]

Is your SMT Server fully patched and have you migrated it to access SCC  
rather than NCC? Please see TID 7015836[1].

HTH.

## [1] [https://www.suse.com/support/kb/doc.php?id=7015836](https://www.suse.com/support/kb/doc.php?id=7015836)

Simon  
SUSE Knowledge Partner

* * *

## If you find this post helpful and are logged into the web interface, please show your appreciation and click on the star below. Thanks.

---

<div class="post-metadata">

**Author:** ![smflood](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/smflood/32/10576_2.png) [@smflood](https://forums.suse.com/u/smflood)\
**Post date:** [December 3, 2014, 5:42pm UTC](https://forums.suse.com/t/where-are-mirror-credentials-now/26435/8 "2014-12-03T17:42:49Z")

</div>

On 03/12/2014 14:54, aborzenkov wrote:  
[color=blue]

> That’s not what I see. If I go to my subscriptions page and list  
> repositories, I get links to [updates.suse.com](http://updates.suse.com) for SLES11 as well.[/color]

It’s my understanding that repos for earlier versions of SUSE Linux  
Enterprise (SLE) are available via both NCC and SCC but SLE12 repos are  
only available via SCC. That way SMT servers that have been switched  
from NCC to SCC will be able to offer the earlier SLE repos (but not  
Novell OES ones).

## HTH.

Simon  
SUSE Knowledge Partner

* * *

## If you find this post helpful and are logged into the web interface, please show your appreciation and click on the star below. Thanks.

---

<div class="post-metadata">

**Author:** ![kwk](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/kwk/32/11997_2.png) [@kwk](https://forums.suse.com/u/kwk)\
**Post date:** [December 4, 2014, 9:08am UTC](https://forums.suse.com/t/where-are-mirror-credentials-now/26435/9 "2014-12-04T09:08:48Z")

</div>

> [@smflood;25178](#):
>
> [color=blue]
> 
> > So the only way to get access to the repos served via [updates.suse.com](http://updates.suse.com)  
> > are directly from a SLE12 machine registered to SCC, via SMT11 SP3  
> > configured to talk to SCC, or (in future) SUSE Manager 2.1?

Yes, these are the preferred ways.

> [@smflood;25178](#):
>
> [color=blue]
> 
> > Is it no longer possible to mirror the repos some other way?

Of course it is still possible to mirror the repos in another way.

For [nu.novell.com](http://nu.novell.com), you need to provide the organizational (mirror) credentials as https://\<username\>:\<password\>@nu.novell.cm/… to access [nu.novell.com](http://nu.novell.com) hosted repositories.

For [updates.suse.com](http://updates.suse.com), you need to attach the correct token to the [https://updates.suse.com/](https://updates.suse.com/)… url.

Everything else works as usual.

---

<div class="post-metadata">

**Author:** ![kwk](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/kwk/32/11997_2.png) [@kwk](https://forums.suse.com/u/kwk)\
**Post date:** [December 4, 2014, 9:11am UTC](https://forums.suse.com/t/where-are-mirror-credentials-now/26435/10 "2014-12-04T09:11:35Z")

</div>

> [@aborzenkov;25227](#):
>
> And the only way to generate this token is to register SLES with SCC?

Currently, yes.

We are working to provide tokens via [scc.suse.com](http://scc.suse.com), this will be available shortly.

With the token, you can selectively download updates from [updates.suse.com](http://updates.suse.com)

---

<div class="post-metadata">

**Author:** ![kwk](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/kwk/32/11997_2.png) [@kwk](https://forums.suse.com/u/kwk)\
**Post date:** [December 4, 2014, 9:14am UTC](https://forums.suse.com/t/where-are-mirror-credentials-now/26435/11 "2014-12-04T09:14:14Z")

</div>

> [@smflood;25231](#):
>
> [color=blue]
> 
> > It’s my understanding that repos for earlier versions of SUSE Linux  
> > Enterprise (SLE) are available via both NCC and SCC but SLE12 repos are  
> > only available via SCC. That way SMT servers that have been switched  
> > from NCC to SCC will be able to offer the earlier SLE repos (but not  
> > Novell OES ones).

Exactly.

For syncing repositories into SMT or SUSE Manager, it’s just more convenient to talk to one update server only.

---

<div class="post-metadata">

**Author:** ![aborzenkov](https://avatars.discourse-cdn.com/v4/letter/a/cc9497/32.png) [@aborzenkov](https://forums.suse.com/u/aborzenkov)\
**Post date:** [December 4, 2014, 11:57am UTC](https://forums.suse.com/t/where-are-mirror-credentials-now/26435/12 "2014-12-04T11:57:32Z")

</div>

Thank you. All your answers were very helpful.

---

<div class="post-metadata">

**Author:** ![mwiese](https://avatars.discourse-cdn.com/v4/letter/m/c67d28/32.png) [@mwiese](https://forums.suse.com/u/mwiese)\
**Post date:** [February 2, 2015, 12:46pm UTC](https://forums.suse.com/t/where-are-mirror-credentials-now/26435/13 "2015-02-02T12:46:31Z")

</div>

Hi,

I have installed a SLES12 Server and registered with SCC. Now I would like to mirror the update repository from SUSE. But I don’t know, how to do this. What I’ve done yet:

1. Establish connection to SCC and download patches for my SLES12 - works.
2. In the repo section I see URL in format of [https://updates.suse.com/SUSE/Updates/SLE-SERVER/12/x86\_64/update?LONGTOKEN](https://updates.suse.com/SUSE/Updates/SLE-SERVER/12/x86_64/update?LONGTOKEN)
3. I found credentials on the system with username SCC\_xxxxxxxxxx and password
4. I tried [https://username:password@updates.suse.com/SUSE/Updates/SLE-SERVER/12/x86\_64/update?LONGTOKEN](https://username:password@updates.suse.com/SUSE/Updates/SLE-SERVER/12/x86_64/update?LONGTOKEN) but got HTTP 401 Unauthorized.

How can I mirror the update repository?  
Any help would be appreciated!

Thanks and best regards  
Marco

---

<div class="post-metadata">

**Author:** ![smflood](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/smflood/32/10576_2.png) [@smflood](https://forums.suse.com/u/smflood)\
**Post date:** [February 2, 2015, 5:55pm UTC](https://forums.suse.com/t/where-are-mirror-credentials-now/26435/14 "2015-02-02T17:55:03Z")

</div>

On 02/02/2015 10:54, mwiese wrote:  
[color=blue]

> I have installed a SLES12 Server and registered with SCC. Now I would  
> like to mirror the update repository from SUSE. But I don’t know, how to  
> do this. What I’ve done yet:
> 
> 1. Establish connection to SCC and download patches for my SLES12 -  
> works.
> 2. In the repo section I see URL in format of  
> [https://updates.suse.com/SUSE/Updates/SLE-SERVER/12/x86\_64/update?LONGTOKEN](https://updates.suse.com/SUSE/Updates/SLE-SERVER/12/x86_64/update?LONGTOKEN)
> 3. I found credentials on the system with username SCC\_xxxxxxxxxx and  
> password
> 4. I tried  
> [https://username:password@updates.suse.com/SUSE/Updates/SLE-SERVER/12/x86\_64/update?LONGTOKEN](https://username:password@updates.suse.com/SUSE/Updates/SLE-SERVER/12/x86_64/update?LONGTOKEN)  
> but got HTTP 401 Unauthorized.
> 
> How can I mirror the update repository?[/color]

Currently the only way to mirror updates from SCC is via SMT11 SP3 (on  
SLES11 SP3).

## HTH.

Simon  
SUSE Knowledge Partner

* * *

## If you find this post helpful and are logged into the web interface, please show your appreciation and click on the star below. Thanks.

---

<div class="post-metadata">

**Author:** ![kwk](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/kwk/32/11997_2.png) [@kwk](https://forums.suse.com/u/kwk)\
**Post date:** [February 3, 2015, 10:29am UTC](https://forums.suse.com/t/where-are-mirror-credentials-now/26435/15 "2015-02-03T10:29:15Z")

</div>

Marco,

what are you trying to accomplish ?

A simple mirroring application is ‘SMT’, a complete management application is ‘SUSE Manager’. Both can mirror repositories.

If you want to mirror with a 3rd party tool, the [https://updates.suse.com/SUSE/Updates/SLE-SERVER/12/x86\_64/update?LONGTOKEN](https://updates.suse.com/SUSE/Updates/SLE-SERVER/12/x86_64/update?LONGTOKEN) url is all you need.

---

<div class="post-metadata">

**Author:** ![robertw399](https://avatars.discourse-cdn.com/v4/letter/r/e56c9b/32.png) [@robertw399](https://forums.suse.com/u/robertw399)\
**Post date:** [February 3, 2015, 4:05pm UTC](https://forums.suse.com/t/where-are-mirror-credentials-now/26435/16 "2015-02-03T16:05:31Z")

</div>

[QUOTE=kwk;26128]Marco,

what are you trying to accomplish ?

A simple mirroring application is ‘SMT’, a complete management application is ‘SUSE Manager’. Both can mirror repositories.

If you want to mirror with a 3rd party tool, the [https://updates.suse.com/SUSE/Updates/SLE-SERVER/12/x86\_64/update?LONGTOKEN](https://updates.suse.com/SUSE/Updates/SLE-SERVER/12/x86_64/update?LONGTOKEN) url is all you need.[/QUOTE]

I am trying this with Spacewalk 2.2 and am getting errors.

Sync started: Tue Feb 3 07:42:59 2015  
[’/usr/bin/spacewalk-repo-sync’, ‘–channel’, ‘sles12-pool’, ‘–type’, ‘yum’, ‘’]  
Repo URL: [https://updates.suse.com/SUSE/Products/SLE-SERVER/12/s390x/product](https://updates.suse.com/SUSE/Products/SLE-SERVER/12/s390x/product)?  
ERROR: Cannot retrieve repository metadata (repomd.xml) for repository: sles12-pool. Please verify its path and try again  
Sync completed.  
Total time: 0:00:02

Chris

---

<div class="post-metadata">

**Author:** ![kwk](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/kwk/32/11997_2.png) [@kwk](https://forums.suse.com/u/kwk)\
**Post date:** [February 3, 2015, 4:27pm UTC](https://forums.suse.com/t/where-are-mirror-credentials-now/26435/17 "2015-02-03T16:27:44Z")

</div>

[QUOTE=robertw399;26136]

Repo URL: [https://updates.suse.com/SUSE/Products/SLE-SERVER/12/s390x/product](https://updates.suse.com/SUSE/Products/SLE-SERVER/12/s390x/product)?

Chris[/QUOTE]

s390x ?! I guess you’re just synching the wrong architecture here.

the is per-user, per-repository. It’s different from the old ‘mirror credentials’.

---

<div class="post-metadata">

**Author:** ![robertw399](https://avatars.discourse-cdn.com/v4/letter/r/e56c9b/32.png) [@robertw399](https://forums.suse.com/u/robertw399)\
**Post date:** [February 3, 2015, 7:59pm UTC](https://forums.suse.com/t/where-are-mirror-credentials-now/26435/18 "2015-02-03T19:59:26Z")

</div>

[QUOTE=kwk;26137]s390x ?! I guess you’re just synching the wrong architecture here.

the is per-user, per-repository. It’s different from the old ‘mirror credentials’.[/QUOTE]

I obtained the token by doing inquires to  
curl -u SCC\_: [https://scc.suse.com/access/services/1104?credentials=SUSE\_Linux\_Enterprise\_Server\_12\_s390x](https://scc.suse.com/access/services/1104?credentials=SUSE_Linux_Enterprise_Server_12_s390x)

so I don’t think the token is wrong. I could see in the returned repoindex the various tokens for the repositories.

---

<div class="post-metadata">

**Author:** ![kwk](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/kwk/32/11997_2.png) [@kwk](https://forums.suse.com/u/kwk)\
**Post date:** [February 4, 2015, 9:41am UTC](https://forums.suse.com/t/where-are-mirror-credentials-now/26435/19 "2015-02-04T09:41:59Z")

</div>

Hmm, then I’d recommend you to open a support request. Then we can check your subscription status.  
You might also be missing a PTF for SUSE Manager, the support request will give you access to that too.

---

<div class="post-metadata">

**Author:** ![aborzenkov](https://avatars.discourse-cdn.com/v4/letter/a/cc9497/32.png) [@aborzenkov](https://forums.suse.com/u/aborzenkov)\
**Post date:** [May 21, 2015, 9:12am UTC](https://forums.suse.com/t/where-are-mirror-credentials-now/26435/20 "2015-05-21T09:12:53Z")

</div>

[QUOTE=kwk;25249]  
We are working to provide tokens via [scc.suse.com](http://scc.suse.com), this will be available shortly.  
With the token, you can selectively download updates from [updates.suse.com](http://updates.suse.com)[/QUOTE]

Hi again,

as we just got customer question regarding repo access … is it now possible to generate token via SCC? I do not see anything obvious browsing it right now - just organizational credentials.

[Next page](https://forums.suse.com/t/where-are-mirror-credentials-now/26435.md?page=2)
