Skip to content

Changing the Registration Server

Ladislav Slezák edited this page Nov 24, 2017 · 16 revisions

Registration Server URL

There is Local Registration Server button displayed in interactive mode which allows to change the server from UI. Additionally it possible to specify the URL also by other means.

Note: only one registration server is supported, it is not possible to register different products (extensions, modules or add-ons) to different registration servers!

The registration module evaluates the registration server URL in the following order (the first found will be used):

Installation

  • Boot option (use reg_url=<URL> to configure the registration URL)
  • AutoYast profile (obviously in AutoYast mode only)
  • Old suseRegister configuration (only in upgrade mode), NCC URL (secure-www.novell.com host) is automatically replaced by default SCC URL.
  • SLP discovery (if network configured, in AutoYast mode an error is reported when more than one registration server is found), see FATE#316384
  • Fallback to the default URL (https://scc.suse.com/connect)

Installed system

  • SLP discovery if the system is not registered yet, see FATE#316384
  • URL from /etc/SUSEConnect configuration file (running system should use the same server which was used during installation, the URL needs to be saved to a file for later use)
  • Fallback to the default URL (https://scc.suse.com/connect)

SLP Discovery

The SLP discovery searches for the registration.suse service type. You can manually list the SLP services by running command slptool findsrvs registration.suse.

Make sure the SLP communication is not blocked by firewall. Open UDP source port 427 if the firewall is running.

⚠️ Security Note ⚠️

The SLP protocol by design allows any machine on the local network to announce any service. The service may be running on another machine or even over the internet. For security reasons you should always check that the service used from the SLP discovery is legit.

That means for the AutoYaST installations this option should be used only in a trusted network.