From 3c0ed0db349327df4f211bdb1e48566236bfd00b Mon Sep 17 00:00:00 2001 From: Mark Gurevich Date: Thu, 29 Mar 2018 11:13:53 -0400 Subject: [PATCH] Updates to REST API documentation --- .../restapi/restapi_setup/restapi_setup.rst | 15 +++++++++++---- 1 file changed, 11 insertions(+), 4 deletions(-) diff --git a/docs/source/advanced/restapi/restapi_setup/restapi_setup.rst b/docs/source/advanced/restapi/restapi_setup/restapi_setup.rst index 8f831211a..3208826bc 100644 --- a/docs/source/advanced/restapi/restapi_setup/restapi_setup.rst +++ b/docs/source/advanced/restapi/restapi_setup/restapi_setup.rst @@ -83,10 +83,10 @@ Extend the Timeout of Web Server Some operations like 'create osimage' (copycds) need a long time (longer than 3 minutes sometimes) to complete. It would fail with a ``timeout error`` (504 Gateway Time-out) if the timeout setting in the web server is not extended: :: For [RHEL] - sed -i 's/^Timeout.*/Timeout 600/' /etc/httpd/conf/httpd.conf + Edit /etc/httpd/conf/httpd.conf and change existing or add new entry: "Timeout 600" service htttd restart For [SLES] - echo "Timeout 600" >> /etc/apache2/httpd.conf + Edit /etc/apache2/httpd.conf and change existing or add new entry: "Timeout 600" service apache2 restart Set Up an Account for Web Service Access @@ -114,13 +114,18 @@ Use non-root Account Create new user and setup the password and policy rules. :: - useradd wsuser + useradd -u wsuser passwd wsuser # set the password - tabch key=xcat,username=wsuser passwd.password=cluster + tabch key=xcat,username=wsuser passwd.password= mkdef -t policy 6 name=wsuser rule=allow ``Note:`` in the tabch command above you can put the salted password (from /etc/shadow) in the xCAT passwd table instead of the clear text password, if you prefer. +Identical user with the same name and userid need to be created on each compute node. :: + + useradd -u wsuser + passwd wsuser # set the password + Create the SSL certificate under that user's home directory so that user can be authenticated to xCAT. This is done by running the following command on the Management node as root: :: /opt/xcat/share/xcat/scripts/setup-local-client.sh @@ -141,3 +146,5 @@ or if you did not set up the certificate: :: You should see some output that includes your list of nodes. +If errors returned, check `/var/log/httpd/ssl_error_log` on xCAT MN. +