1RHSM.CONF(5) RHSM.CONF(5)
2
3
4
6 rhsm.conf - Configuration file for the subscription-manager tooling
7
9 The rhsm.conf file is the configuration file for various subscription
10 manager tooling. This includes subscription-manager,
11 subscription-manager-gui, rhsmcertd, and virt-who.
12
14 hostname
15 The hostname of the subscription service being used. The default is
16 the Red Hat Customer Portal which is subscription.rhsm.redhat.com.
17 This default should not be retrofitted to previously installed
18 versions. It should be incorporated as the default going forward.
19
20 prefix
21 Server prefix where the subscription service is registered.
22
23 port
24 The port which the subscription service is listening on.
25
26 insecure
27 This flag enables or disables entitlement server certification
28 verification using the certificate authorities which are installed
29 in /etc/rhsm/ca.
30
31 ssl_verify_depth
32 Sets the number of certificates which should be used to verify the
33 servers identity. This is an advanced control which can be used to
34 secure on premise installations.
35
36 server_timeout
37 Set this to a non-blank value to override the HTTP timeout in
38 seconds. The default is 180 seconds (3 minutes).
39
40 proxy_hostname
41 Set this to a non-blank value if subscription-manager should use a
42 reverse proxy to access the subscription service. This sets the
43 host for the reverse proxy. Overrides hostname from HTTP_PROXY and
44 HTTPS_PROXY environment variables.
45
46 proxy_port
47 Set this to a non-blank value if subscription-manager should use a
48 reverse proxy to access the subscription service. This sets the
49 port for the reverse proxy. Overrides port from HTTP_PROXY and
50 HTTPS_PROXY environment variables.
51
52 proxy_username
53 Set this to a non-blank value if subscription-manager should use an
54 authenticated reverse proxy to access the subscription service.
55 This sets the username for the reverse proxy. Overrides username
56 from HTTP_PROXY and HTTPS_PROXY environment variables.
57
58 proxy_password
59 Set this to a non-blank value if subscription-manager should use an
60 authenticated reverse proxy to access the subscription service.
61 This sets the password for the reverse proxy. Overrides password
62 from HTTP_PROXY and HTTPS_PROXY environment variables.
63
64 no_proxy
65 Set this to a non-blank value if subscription-manager should not
66 use a proxy for specific hosts. Format is a comma-separated list of
67 hostname suffixes, optionally with port. '*' is a special value
68 that means do not use a proxy for any host. Overrides the NO_PROXY
69 environment variable.
70
72 baseurl
73 This setting is the prefix for all content which is managed by the
74 subscription service. This should be the hostname for the Red Hat
75 CDN, the local Satellite or Capsule depending on your deployment.
76 Prefix depends on the service type. For the Red Hat CDN, the full
77 baseurl is https://cdn.redhat.com . For Satellite 6, the baseurl
78 is https://HOSTNAME/pulp/repos , so for a hostname of
79 sat6.example.com the full baseurl would be for example:
80 https://sat6.example.com/pulp/repos .
81
82 repomd_gpg_url
83 The URL of the GPG key that was used to sign this repository's
84 metadata. The specified GPG key will be used in addition to any GPG
85 keys defined by the entitlement.
86
87 ca_cert_dir
88 The location for the certificates which are used to communicate
89 with the server and to pull down content.
90
91 repo_ca_cert
92 The certificate to use for server side authentication during
93 content downloads.
94
95 productCertDir
96 The directory where product certificates should be stored.
97
98 entitlementCertDir
99 The directory where entitlement certificates should be stored.
100
101 consumerCertDir
102 The directory where the consumers identity certificate is stored.
103
104 manage_repos
105 Set this to 1 if subscription manager should manage a yum repos
106 file. If set, it will manage the file /etc/yum.repos.d/redhat.repo.
107 If set to 0 then the subscription is only used for tracking
108 purposes, not content. The /etc/yum.repos.d/redhat.repo file will
109 either be purged or deleted.
110
111 full_refresh_on_yum
112 Set to 1 if the /etc/yum.repos.d/redhat.repo should be updated with
113 every server command. This will make yum less efficient, but can
114 ensure that the most recent data is brought down from the
115 subscription service.
116
117 report_package_profile
118 Set to 1 if rhsmcertd should report the system’s current package
119 profile to the subscription service. This report helps the
120 subscription service provide better errata notifications.
121
122 pluginDir
123 The directory to search for subscription manager plug-ins
124
125 pluginConfDir
126 The directory to search for plug-in configuration files
127
128 auto_enable_yum_plugins
129 When this option is enabled, then yum/dnf plugins subscription-
130 manager and product-id are enabled every-time subscription-manager
131 or subscription-manager-gui is executed.
132
133 inotify
134 Inotify is used for monitoring changes in directories with
135 certificates. Currently only the /etc/pki/consumer directory is
136 monitored by the rhsm.service. When this directory is mounted using
137 a network file system without inotify notification support (e.g.
138 NFS), then disabling inotify is strongly recommended. When inotify
139 is disabled, periodical directory polling is used instead.
140
142 certCheckInterval
143 The number of minutes between runs of the rhsmcertd daemon
144
145 autoAttachInterval
146 The number of minutes between attempts to run auto-attach on this
147 consumer.
148
149 splay
150 1 to enable splay. 0 to disable splay. If enabled, this feature
151 delays the initial auto attach and cert check by an amount between
152 0 seconds and the interval given for the action being delayed. For
153 example if the certCheckInterval were set to 3 minutes, the initial
154 cert check would begin somewhere between 2 minutes after start up
155 (minimum delay) and 5 minutes after start up. This is useful to
156 reduce peak load on the Satellite or entitlement service used by a
157 large number of machines.
158
160 default_log_level
161 The default log level for all loggers in subscription-manager,
162 python-rhsm, rhsmd, and rhsmcertd. Note: Other keys in this
163 section will override this value for the specified logger.
164
165 MODULE_NAME[.SUBMODULE ...] = [log_level]
166 Logging can be configured on a module-level basis via entries of
167 the format above where:
168 module_name is subscription_manager, rhsm, or rhsm-app.
169
170 submodule can be optionally specified to further override the
171 logging level down to a specific file.
172
173 log_level is the log level to set the specified logger (one of:
174 DEBUG, INFO, WARNING, ERROR, or CRITICAL).
175
177 Bryan Kearney <bkearney@redhat.com>
178
180 subscription-manager(8), subscription-manager-gui(8), rhsmcertd(8)
181
183 Main web site: http://www.candlepinproject.org/
184
186 Copyright (c) 2010-2012 Red Hat, Inc. This is licensed under the GNU
187 General Public License, version 2 (GPLv2). A copy of this license is
188 available at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
189
190
191
192rhsm.conf - RHSM.CONF(5)