Where are mirror credentials now?

SUSE Product Topics SUSE Customer Center
1

I’m rather confused with new SCC. In the old NCC I had mirror credentials and could access repositories. Now I have links to repositories listed in Subscriptions tab, but attempting to access any of them returns 403 Forbidden. It does not ask me about user/password either.

2

Mirror credentials are called ‘Organization credentials’ and are available in the respective tab of the https://scc.suse.com/organization page.

Use zypper (if the SLE 12 system is directly registered to scc.suse.com), SMT, or SUSE Manager to download repositories. Manual browsing is discouraged.

Technical details:

tl;dr SLE 12 is served via a different server which does not use mirror credentials

Usage of these credentials depends on the repository server.

For SLE 10 and SLE 11 (and associated products), repositories are served via nu.novell.com
Access to nu.novell.com is protected by mirror credentials, authorized by nu.novell.com. Each authorization required a round trip to NCC.

For SLE 12 (and associated products), repositories are served via updates.suse.com
Access to updates.suse.com is protected by token, authorized by the content delivery network (CDN). Each authentication is handled by the nearest CDN server. This makes repository access to update.suse.com much faster and more reliable than nu.novell.com

3

On 01/12/2014 15:24, kwk wrote:
[color=blue]

Mirror credentials are called ‘Organization credentials’ and are
available in the respective tab of the https://scc.suse.com/organization
page.

Use zypper (if the SLE 12 system is directly registered to
scc.suse.com), SMT, or SUSE Manager to download repositories. Manual
browsing is discouraged.

Technical details:

tl;dr SLE 12 is served via a different server which does not use mirror
credentials

Usage of these credentials depends on the repository server.

For SLE 10 and SLE 11 (and associated products), repositories are served
via nu.novell.com
Access to nu.novell.com is protected by mirror credentials, authorized
by nu.novell.com. Each authorization required a round trip to NCC.

For SLE 12 (and associated products), repositories are served via
updates.suse.com
Access to updates.suse.com is protected by token, authorized by the
content delivery network (CDN). Each authentication is handled by the
nearest CDN server. This makes repository access to update.suse.com much
faster and more reliable than nu.novell.com[/color]

So the only way to get access to the repos served via updates.suse.com
are directly from a SLE12 machine registered to SCC, via SMT11 SP3
configured to talk to SCC, or (in future) SUSE Manager 2.1?

Is it no longer possible to mirror the repos some other way?

Thanks.

Simon
SUSE Knowledge Partner

If you find this post helpful and are logged into the web interface,
please show your appreciation and click on the star below. Thanks.

4

Hi,
SLES 11 SP3, fresh installation
I’m using our ‘Organization credentials’ and getting invalid credentials. Did not worked…
Should I see our SMT server in the list under scc/systems ?
thank you

5

And the only way to generate this token is to register SLES with SCC? What if system does not have internet access? Yes, this happens. I may still want to download selected available updates and install them offline.

6

[QUOTE=kwk;25172]For SLE 10 and SLE 11 (and associated products), repositories are served via nu.novell.com
For SLE 12 (and associated products), repositories are served via updates.suse.com
[/QUOTE]

That’s not what I see. If I go to my subscriptions page and list repositories, I get links to updates.suse.com for SLES11 as well.

7

On 03/12/2014 12:44, bobino wrote:
[color=blue]

SLES 11 SP3, fresh installation
I’m using our ‘Organization credentials’ and getting invalid
credentials. Did not worked…
Should I see our SMT server in the list under scc/systems ?
thank you[/color]

Is your SMT Server fully patched and have you migrated it to access SCC
rather than NCC? Please see TID 7015836[1].

HTH.

[1] https://www.suse.com/support/kb/doc.php?id=7015836

Simon
SUSE Knowledge Partner

If you find this post helpful and are logged into the web interface,
please show your appreciation and click on the star below. Thanks.

8

On 03/12/2014 14:54, aborzenkov wrote:
[color=blue]

That’s not what I see. If I go to my subscriptions page and list
repositories, I get links to updates.suse.com for SLES11 as well.[/color]

It’s my understanding that repos for earlier versions of SUSE Linux
Enterprise (SLE) are available via both NCC and SCC but SLE12 repos are
only available via SCC. That way SMT servers that have been switched
from NCC to SCC will be able to offer the earlier SLE repos (but not
Novell OES ones).

HTH.

Simon
SUSE Knowledge Partner

If you find this post helpful and are logged into the web interface,
please show your appreciation and click on the star below. Thanks.

9

Yes, these are the preferred ways.

Of course it is still possible to mirror the repos in another way.

For nu.novell.com, you need to provide the organizational (mirror) credentials as https://<username>:<password>@nu.novell.cm/… to access nu.novell.com hosted repositories.

For updates.suse.com, you need to attach the correct token to the https://updates.suse.com/… url.

Everything else works as usual.

10

Currently, yes.

We are working to provide tokens via scc.suse.com, this will be available shortly.

With the token, you can selectively download updates from updates.suse.com

11

Exactly.

For syncing repositories into SMT or SUSE Manager, it’s just more convenient to talk to one update server only.

12

Thank you. All your answers were very helpful.

13

Hi,

I have installed a SLES12 Server and registered with SCC. Now I would like to mirror the update repository from SUSE. But I don’t know, how to do this. What I’ve done yet:

  1. Establish connection to SCC and download patches for my SLES12 - works.
  2. In the repo section I see URL in format of https://updates.suse.com/SUSE/Updates/SLE-SERVER/12/x86_64/update?LONGTOKEN
  3. I found credentials on the system with username SCC_xxxxxxxxxx and password
  4. I tried https://username:password@updates.suse.com/SUSE/Updates/SLE-SERVER/12/x86_64/update?LONGTOKEN but got HTTP 401 Unauthorized.

How can I mirror the update repository?
Any help would be appreciated!

Thanks and best regards
Marco

14

On 02/02/2015 10:54, mwiese wrote:
[color=blue]

I have installed a SLES12 Server and registered with SCC. Now I would
like to mirror the update repository from SUSE. But I don’t know, how to
do this. What I’ve done yet:

  1. Establish connection to SCC and download patches for my SLES12 -
    works.
  2. In the repo section I see URL in format of
    https://updates.suse.com/SUSE/Updates/SLE-SERVER/12/x86_64/update?LONGTOKEN
  3. I found credentials on the system with username SCC_xxxxxxxxxx and
    password
  4. I tried
    https://username:password@updates.suse.com/SUSE/Updates/SLE-SERVER/12/x86_64/update?LONGTOKEN
    but got HTTP 401 Unauthorized.

How can I mirror the update repository?[/color]

Currently the only way to mirror updates from SCC is via SMT11 SP3 (on
SLES11 SP3).

HTH.

Simon
SUSE Knowledge Partner

If you find this post helpful and are logged into the web interface,
please show your appreciation and click on the star below. Thanks.

15

Marco,

what are you trying to accomplish ?

A simple mirroring application is ‘SMT’, a complete management application is ‘SUSE Manager’. Both can mirror repositories.

If you want to mirror with a 3rd party tool, the https://updates.suse.com/SUSE/Updates/SLE-SERVER/12/x86_64/update?LONGTOKEN url is all you need.

16

[QUOTE=kwk;26128]Marco,

what are you trying to accomplish ?

A simple mirroring application is ‘SMT’, a complete management application is ‘SUSE Manager’. Both can mirror repositories.

If you want to mirror with a 3rd party tool, the https://updates.suse.com/SUSE/Updates/SLE-SERVER/12/x86_64/update?LONGTOKEN url is all you need.[/QUOTE]

I am trying this with Spacewalk 2.2 and am getting errors.

Sync started: Tue Feb 3 07:42:59 2015
[’/usr/bin/spacewalk-repo-sync’, ‘–channel’, ‘sles12-pool’, ‘–type’, ‘yum’, ‘’]
Repo URL: https://updates.suse.com/SUSE/Products/SLE-SERVER/12/s390x/product?
ERROR: Cannot retrieve repository metadata (repomd.xml) for repository: sles12-pool. Please verify its path and try again
Sync completed.
Total time: 0:00:02

Chris

17

[QUOTE=robertw399;26136]

Repo URL: https://updates.suse.com/SUSE/Products/SLE-SERVER/12/s390x/product?

Chris[/QUOTE]

s390x ?! I guess you’re just synching the wrong architecture here.

the is per-user, per-repository. It’s different from the old ‘mirror credentials’.

18

[QUOTE=kwk;26137]s390x ?! I guess you’re just synching the wrong architecture here.

the is per-user, per-repository. It’s different from the old ‘mirror credentials’.[/QUOTE]

I obtained the token by doing inquires to
curl -u SCC_: https://scc.suse.com/access/services/1104?credentials=SUSE_Linux_Enterprise_Server_12_s390x

so I don’t think the token is wrong. I could see in the returned repoindex the various tokens for the repositories.

19

Hmm, then I’d recommend you to open a support request. Then we can check your subscription status.
You might also be missing a PTF for SUSE Manager, the support request will give you access to that too.

20

[QUOTE=kwk;25249]
We are working to provide tokens via scc.suse.com, this will be available shortly.
With the token, you can selectively download updates from updates.suse.com[/QUOTE]

Hi again,

as we just got customer question regarding repo access … is it now possible to generate token via SCC? I do not see anything obvious browsing it right now - just organizational credentials.