Question

[Errno 14] HTTP Error 403: Forbidden Trying other mirror. Error: Cannot open/read repomd.xml file for repository: updates

Asked by: LinuxDuke

Hi Everyone,

I'm trying to updated my client machines using yum from a local repository server setup on my network.
My clients are running Red hat ES 5 and Centos 5 and my local repository is running Red hat ES 4.
when using yum on my local repository it updates its self fine. I have configured yum to point to my local repository server on /etc/yum.conf and added the following [updates] and baseurl=http://oak/rhel4es-i386/RPMS.updates on the local repository server. When running the yum update command on this local repository it updates fine.

The problem happens when I try updating from my clients. I have also configured yum on my clients machines to point to the local repository but I get errors when updating them with yum update command.

Error from clients:
Centos Client
[root@dragon ~]# yum update
Loading "installonlyn" plugin
Setting up Update Process
Setting up repositories
http://oak.corporatebank.co.za/centos5-i386/RPMS.updates/repodata/repomd.xml: [Errno 14] HTTP Error 403: Forbidden
Trying other mirror.
Error: Cannot open/read repomd.xml file for repository: updates
[root@dragon ~]#

Redhat client
[ajays@silverfir ~]$ su
Password:
[root@silverfir gugu]# clear
[root@silverfir gugu]# yum update
Loading "installonlyn" plugin
Setting up Update Process
Setting up repositories
http://oak.corporatebank.co.za/rhel5es-i386/RPMS.updates/repodata/repomd.xml: [Errno 14] HTTP Error 403: Forbidden
Trying other mirror.
Error: Cannot open/read repomd.xml file for repository: updates

When updating from my local repository it completes fine check exmple below:

 xscreensaver            i386       1:4.18-5.rhel4.14  updates           5.6 M
 xterm                   i386       192-8.el4        updates           168 k
 ypbind                  i386       3:1.17.2-13      updates            33 k
 zsh                     i386       4.2.0-4.EL.4.5   updates           1.6 M
Installing for dependencies:
 audit                   i386       1.0.15-3.el4_6.1  updates           201 k
 keyutils-libs           i386       1.0-2            updates            16 k
 libgssapi               i386       0.8-1            updates            19 k
 libsmi                  i386       0.4.5-2.el4      updates           2.3 M
 nfs-utils-lib           i386       1.0.6-8.z1       updates            49 k
 systemtap-runtime       i386       0.5.14-1         updates            31 k

Transaction Summary
=============================================================================
Install     13 Package(s)        
Update     350 Package(s)        
Remove       0 Package(s)        
Total download size: 487 M
Is this ok [y/N]: n
Exiting on user Command
Complete!
[root@oak ~]#

I suspect this is cause by a proxy server but I don't know what questions to ask to the guys managing the proxy as I'm not 100% sure that it's it. Also when accessing any web site from my two clients I get the following error:

                           ââââââââââââââââââââââErrorââââââââââââââââââââââ                                                                                                                                                                                                                                                      
                               â    Configuration of the proxy server failed.    â                              
                               â   This might be caused by an incorrect proxy    â                              
                               â  setting specified by an environment variable   â                              
                               â     or returned by a scripting proxy hook.      â                              
                               â                                                 â                              
                               â    The correct syntax for proxy settings are    â                              
                               â   a host name optionally followed by a colon    â                              
                               â  and a port number. Example: 'localhost:8080'.  â                              
                               â                                                 â                              
                               â                     [ OK ]                      â                              
                               âââââââââââââââââââââââââââââââââââââââââââââââââââ

Any help is highly appreciated.
 

This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.

Subscribe now for full access to Experts Exchange and get

Instant Access to this Solution

  • Plus...
  • 30 Day FREE access, no risk, no obligation
  • Collaborate with the world's top tech experts
  • Unlimited access to our exclusive solution database
  • Never be left without tech help again

Subscribe Now

Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.

  • "The time we save is the biggest benefit of Experts Exchange to Warner Bros. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange." Mike Kapnisakis, Warner Bros.
  • "Our team likes having a resource that is more secure than just using Google and most experts using this service really know their stuff. It's nice to look here first versus using Google." Dayna Sellner, Lockheed Martin
  • "Anytime that I've been stumped with a problem, 9 out of 10 times Experts Exchange has either the accepted solution or an open discussion of the potential solution to the problem." Kenny Red, eBay Inc.

See what Experts Exchange can do for you.

Got a question?

We've got the answer.

Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.

Screenshot of Experts Exchange Knowledgebase

Need individual assistance?

Our experts are ready to help.

If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.

Screenshot of Experts Exchange Knowledgebase

Want to learn from the best?

Read articles from industry experts.

Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.

Screenshot of an Article

Working on a long term project?

Store your work and research.

Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.

Screenshot of Experts Exchange Knowledgebase

Access the answers to your technology questions today.

Subscribe Now

30-day free trial. Register in 60 seconds.

What Makes Experts Exchange Unique?

Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Trusted by the world's most respected brands.

image of each brand's logo

Faithfully serving IT professionals since 1996.

Experts Exchange Logo

Try it out and discover for yourself.

Subscribe Now

30-day free trial. Register in 60 seconds.

Related Solutions

  1. Apache and 403 forbidden error
    After installing apache with rh6 i can see the default page... however i can not get to a user's directory... i created a public_html directory with the correct permissions... however if i try to get to it <address>/~username/index.html (or whatever) i get 403 forbidden...
  2. 403 "Forbidden" message
    Hi, I have a Dell Inspiron 1300 laptop with winXP home edition. When I am home I was using a dial-up to get online, now I have Comcast cable via ethernet. Ever since, when I go to my favorite web site I am receicing this "Forbidden" message. It says in addition: &qu...
  3. YUM not working
    I am having a problem getting YUM configured on a fresh install of FC6. I have four other FC6 machines in this same office that are running YUM with a problem, but for some reason I cannot get it working on this system. The error I am receiving is: [root@is097736]# yum update...
  4. Yum
    Hello, I want install amavisd package using yum, with this command # yum install amavisd but I alwayes get this message **************************** Gathering header information file(s) from server(s) Server: Fedora Linux / stable for Red Hat Linux 9 (i386) retrygrab() fail...
  5. Forbidden
    Dear Experts, I get the following message when trying to access webpages with a specific directory folder: Forbidden - You don't have permission to access /wwwold on this server. In /var, I have a folder called /www (/var/www), which has the permissions: drwxr--r-- 3 nar...

Free Tech Articles

  1. WARNING: 5 Reasons why you should NEVER fix a computer for free.
    It is in our nature to love the puzzle. We are obsessed. The lot of us. We love puzzles. We love the challenge. We thrive on finding the answer. We hate disarray. It bothers us deep in our soul. W...
  2. SCCM OSD Basic troubleshooting
    SCCM 2007 OSD is a fantastic way to deploy operating systems, however, like most things SCCM issues can sometimes be difficult to resolve due to the sheer volume of logs to sift through and the dispe...
  3. Migrate Small Business Server 2003 to Exchange 2010 and Windows 2008 R2
    This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Windows 2008 R2 with Exchange 2010. For this migration to work you will need the fo...
  4. Create a Win7 Gadget
    This article shows you how to create a simple "Gadget" -- a sort of mini-application supported by Windows 7 and Vista. Gadgets can be dropped anywhere on the desktop to provide instant information, ...
  5. Outlook continually prompting for username and password
    There have been a lot of questions recently regarding Outlook prompting for a username and password whilst using Exchange 2007. There are a few reasons why this would happen and I will try to cover t...
  6. Backup Exchange 2010 Information Store using Windows Backup
    There seems to be quite a lot of confusion around the ability to backup Exchange 2010 using the built in Windows Backup feature. This stems from the omission of this feature prior to Exchange 2007 s...

Cloud Class Webinars

  1. Avoiding Bugs in Microsoft Access
    Alison Balter takes and in-depth look at avoiding bugs in Access. In this webinar you will learn about using the immediate window to debug your applications, invoking the debugger, using breakpoints to troubleshoot, stepping through code, setting the next statement to execute, ...
  2. Top 10 Best New Features in Visio 2010
    Scott Helmers gives live demonstrations of the top 10 new features in Visio 2010. This webinar will teach you how to create compelling diagrams by adding shapes to the page with a single click, linking the shapes in a diagram to data in Excel (or SQL Server, or SharePoint), ...
  3. IT Consultant Business Secrets Revealed
    Michael Munger, Experts Exchange tech pro and IT consultant, pulls back the curtain on his very successful businesses and answers question on every IT consultant and business owner should know about. He shares secrets on what he did to solve the 5 most common problems in IT, ...
  4. Disaster Recovery and Business Continuity
    Quest CTO, Mike Billon, gives an overview of the steps involved in building a dunamic disaster recovery plan. Through case studies and an examination of software/hardware tooles for monitoring and testing, you'll gain a better understandin of where you are, where you want ...
  5. Organize Your Visio Diagrams with Containers and Lists
    Scott Helmers uses cross functional flowcharts, wireframe diagrams, data graphic legends and seating charts to teach you: how to ustilize all three new structured diagram components in Visio 2010, the best practices for organizeing shapes in previous version of Visio, how to organize ...
  6. How to Us Objects, Properties, Events and Methods in Microsoft Access
    Alison Dalter gives an in-depbth look at objects, properties, events and methods in Microsoft Access. In this webinar you will learn about using the object browser, referring to objects, working with properties and methods, working with object variables, understanding the ...

Join the Community

Give a Little. Get a Lot.

Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.

Join the Community

Answers

 

by: simply_dhavalPosted on 2008-01-31 at 04:43:46ID: 20785982

have you alredy set up apache or any other webeserver on your local repository? an not really sure if you need that to setup respository but since you have http url it should be required

i will suggest you to check if you can browse the url  from other clients using standard browser. if no then you have to allow access to the directory in apache

 

by: LinuxDukePosted on 2008-01-31 at 05:29:40ID: 20786279

Yes Apache has been setup on the local repository and its running. I can access the repository from any client internet explorer or mozilla browser but not from my two linux clients.

This is what I get when checking apache on my local repository:
 apache   26389  1998  0 Jan27 ?        00:00:00 /usr/sbin/httpd
apache   26390  1998  0 Jan27 ?        00:00:00 /usr/sbin/httpd
apache   26391  1998  0 Jan27 ?        00:00:00 /usr/sbin/httpd
apache   26392  1998  0 Jan27 ?        00:00:00 /usr/sbin/httpd
apache   26393  1998  0 Jan27 ?        00:00:00 /usr/sbin/httpd
apache   26394  1998  0 Jan27 ?        00:00:01 /usr/sbin/httpd
apache   26395  1998  0 Jan27 ?        00:00:00 /usr/sbin/httpd
apache   26396  1998  0 Jan27 ?        00:00:00 /usr/sbin/httpd
root     27894 27849  0 15:14 pts/0    00:00:00 grep httpd
[root@oak etc]# telnet localhost 80
Trying 127.0.0.1...
Connected to localhost.localdomain (127.0.0.1).
Escape character is '^]'.
]
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>501 Method Not Implemented</title>
</head><body>
<h1>Method Not Implemented</h1>
<p>] to / not supported.<br />
</p>
</body></html>
Connection closed by foreign host.
[root@oak etc]#

This is what I get when using telnet from my client to the local repository:
[root@silverfir gugu]# telnet 10.198.1.29 80
Trying 10.198.1.29...
Connected to oak.corporatebank.co.za (10.198.1.29).
Escape character is '^]'.
]
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>501 Method Not Implemented</title>
</head><body>
<h1>Method Not Implemented</h1>
<p>] to / not supported.<br />
</p>
</body></html>
Connection closed by foreign host.
[root@silverfir gugu]#

Regards

 

by: LinuxDukePosted on 2008-01-31 at 09:45:22ID: 20789004

Any idea why yum is not updating to my local repository or what could be stoping access to web sites from my client machines.

 

by: simply_dhavalPosted on 2008-01-31 at 10:24:15ID: 20789394

check your httpd.conf file that might be something you can look for and see if you have really configured host properly

another thing is if you have entry for your oak.corporatebank.co.za in your dns or hosts file

to check that try to ping oak.corporatebank.co.za from your client machine and check if its pininging

am digning off for the days so will check progress in moring hope it works

 

by: LinuxDukePosted on 2008-02-01 at 00:09:33ID: 20794892

Hi dhaval,

I am able to ping oak.corporatebank.co.za from all my clients and I had it already on my /etc/hosts file.
I have checked httpd.conf file and could only pick up the error I'm getting when running yum update from my clients which is : ErrorDocument 403 /error/HTTP_FORBIDDEN.html.var and not to sure where this is used as I'm not to good with apache configuration. I have attached my http.conf file maybe you will pick up something from it.

I have also gone through the mrepo logs and discovered that one of my client silverfir created the following two logs mrepo-wwwaccess_log and mrepo-wwwerro_log :
mrepo-wwwaccess_log |more
10.198.7.20 - - [31/Jan/2008:15:25:29 +0200] "]" 501 203
mrepo-wwwerror_log
[Thu Jan 31 15:25:29 2008] [error] [client 10.198.7.20] Invalid method in request ]

This is a bit funny as the is no logs getting written to the /var/log/yum on my clients.
Hope you might lead me to the right direction.

Thanks

 

by: simply_dhavalPosted on 2008-02-01 at 00:56:44ID: 20795096

ok your conf file looks ok to me... now what i need to know is

 1 did you put your respository under /var/www/http ( which is root for your webserver )
 2 did you used creatrepo command ? to creat respository aleternatly you can use yum-arch i guess ( if you are on redhat/fedore you will have createrepo )


 

by: LinuxDukePosted on 2008-02-01 at 01:14:55ID: 20795174

Know my repository is under /var/www/mrepo for question 2 I'm not to sure if the command creatrepo was used as the repository was already setup by someone else. Please have a look below for question1 answer.

[root@oak www]# ls
cgi-bin  error  html  icons  manual  mrepo  usage
[root@oak www]# cd mrepo/
[root@oak mrepo]# ls
centos4-i386  HEADER.shtml  README.shtml  rhel5es-i386
centos5-i386  livna-8-i386  rhel4es-i386
[root@oak mrepo]# pwd
/var/www/mrepo
[root@oak mrepo]#
thanks

 

by: LinuxDukePosted on 2008-02-01 at 01:39:05ID: 20795289

Hi dhaval,

The is a proxy account that has been locked, it has been unlocked and the clients started updating.
I have attached a text file to show you the out put of the two clients yum updates Centos Dragon and Redhat Silverfir. It looks like the updates are going through but I'm not to sure is they are getting installed as I only see package updated then at the end exit after running transaction check because of missing dependency in the packages.

Another thing I have hashed out the entry in the  /etc/hosts for oak the local repository and it's still going.So I think the proxy account that was locked out was the problem but not to sure these updates are working fine. If you can clearify that for me please. I also need to find out why nothing is getting logged on yum.log for clients and local repository. In the local repository nothing is getting loged on the mrepo.log file what can be making logs not to work.
Check below my cat statement:
 [root@oak log]# ls
acpid            boot.log.2  cron.3  lastlog    maillog.4   mrepo.log         Pegasus      rpmpkgs.3         secure.2   spooler.3   xianserver.bak
anaconda.log     boot.log.3  cron.4  mail       messages    mrepo.log.1       ppp          rpmpkgs.4         secure.3   spooler.4   Xorg.0.log
anaconda.syslog  boot.log.4  cups    maillog    messages.1  mrepo.log.2       prelink.log  samba             secure.4   squid       yum.log
anaconda.xlog    cron        dmesg   maillog.1  messages.2  mrepo.log.3       rpmpkgs      scrollkeeper.log  spooler    wtmp
boot.log         cron.1      gdm     maillog.2  messages.3  mrepo.log.4       rpmpkgs.1    secure            spooler.1  wtmp.1
boot.log.1       cron.2      httpd   maillog.3  messages.4  mrepo_update.log  rpmpkgs.2    secure.1          spooler.2  xianserver
[root@oak log]# cat mrepo.log
[root@oak log]#


 

by: simply_dhavalPosted on 2008-02-01 at 01:54:39ID: 20795347

oh okie :) great seems is working fine

and for logs i would just ask you to double check location of log file in yum.conf on your clients its should be assigned to "logfile"  

 

by: simply_dhavalPosted on 2008-02-01 at 01:55:48ID: 20795354

btw m this errors means those packages are not available in repository so you  should download them and keep it in repository else some dependency may fail

Error: Unable to satisfy dependencies
Error: Package yelp needs libgtkembedmoz.so()(64bit), this is not available.
Error: Package yelp needs libxpcom_core.so()(64bit), this is not available.
Error: Package yelp needs libxpcom.so()(64bit), this is not available.
Error: Package glibc-devel needs glibc-headers = 2.5-12, this is not available.
Error: Package nss conflicts with prelink <= 0.3.9-2.
Error: Package sabayon needs sabayon-apply = 2.12.4-3.el5, this is not available.
Error: Package yelp needs gecko-libs = 1.8.0.9, this is not available.

 

by: LinuxDukePosted on 2008-02-01 at 03:22:10ID: 31426683

I will look at the logging problem then put a new post for it if the is still a problem.

20120131-EE-VQP-002

3 Ways to Join

30-Day Free Trial

The Experts

98% positive feedback on 31,087 answers since March 2000. angeliii is a Microsoft Most Valuable Professional for his work with MS SQL Server & Develoment.

He has also proven his knowledge of Visual Basic Programming, PHP Scripting and Oracle Databases.

The Experts

97% positive feedback on 10,752 answers since July 2000. lrmoore has more than 18 years experience in the networking industry.

The six-time Mircosoft MVPs specialties include firewalls, virtual private networking, and network management.

Testimonials

"...and excellent source for support... Kind of like having your very own IT dept." Electriciansnet

Testimonials

"I was apprehensive at signing up at first. However... it has already made my life as an IT administrator much easier." JaCrews

Testimonials

"WOW! You guys have great, active, and knowledgeable people on here." moore50

Business Clients

Business Clients

In the Press

"If you’ve got a question... Experts Exchange can supply an answer.”

In the Press

"...an invaluable aid for both IT professionals and those who require tech support."

In the Press

"where IT professionals provide quick answers on just about any topic"

Business Account Plans

Loading Advertisement...