Additional Requirements - Red Hat NETWORK PROXY SERVER 4.0 Installation Manual

Chapter 2. Requirements
to hold all of the custom packages, which are stored in
required disk space for local packages depends on the number of custom packages served.

2.4. Additional Requirements

The following additional requirements must be met before the RHN Proxy Server installa-
tion can be considered complete:
Full Access
•
Client systems need full network access to the RHN Proxy Server services and ports.
Firewall Rules
•
The RHN Proxy Server solution can be firewalled from the Internet, but it must be able to
issue outbound connections to the Internet on ports 80 and 443. In addition, if the Proxy
will be connected to an RHN Satellite Server that will be configured to push actions to
client systems and the Proxy, you must allow inbound connections on port 5222.
Synchronized System Times
•
There is great time sensitivity when connecting to a Web server running SSL (Secure
Sockets Layer); it is imperative the time settings on the clients and server are reasonably
close together so the SSL certificate does not expire before or during use. It is recom-
mended Network Time Protocol (NTP) be used to synchronize the clocks.
Fully Qualified Domain Name (FQDN)
•
The system upon which the RHN Proxy Server will be installed must resolve its own
FQDN properly.
A Red Hat Network Account
•
Customers who will be connecting to the central Red Hat Network Servers to receive
incremental updates will need an account with Red Hat Network. This account should
be set up at the time of purchase with the sales representative.
Backups of Login Information
•
It is imperative customers keep track of all primary login information. For RHN Proxy
Server, this includes usernames and passwords for the Organization Administrator ac-
count and SSL certificate generation. Red Hat strongly recommends this information be
copied onto two separate floppy disks, printed out on paper, and stored in a fireproof
safe.
Distribution Locations
•
Since the Proxy forwards virtually all local HTTP requests to the central RHN Servers,
you must take care to put files destined for distribution (such as in a kickstart installation
tree) in the non-forwarding location on the Proxy:
/var/spool/rhn-proxy
/var/www/html/pub/
9
. The
. Files placed