Repository sync on Red Hat Satellite fails with 403, message='Forbidden' error.

Environment

• Red Hat Satellite 6.

Issue

Repository sync on Red Hat Satellite fails with the following message.

403, message='Forbidden', url=URL('https://cdn.redhat.com/content/dist/rhel8/8/x86_64/appstream/os')

Resolution

Forbidden errors can be reported during repository synchronizations for the following reasons:

• Repository is orphaned.

  Repositories become orphaned when the subscription providing the associated products are no longer active on the Satellite. To resolve the issue, necessary subscriptions must be added back to the organization’s manifest. Refer to the article for more information.

• The organization’s manifest is expired.

  When the organization’s manifest expires, all Red Hat repositories on the Satellite will report Forbidden errors during synchronization. To resolve the issue, the manifest archive has to be re-imported. Refer to the article for more information.

• The organization’s manifest is corrupted.

  Refresh the organization's manifest.

  Satellite WebUI: Content → Subscriptions → Manage Manifest → Refresh

• Future-dated subscription attached.

  Verify, no Future-dated subscription is added to the Red Hat Satellite manifest file. Check the start date of added subscription, it should be an active one.

For more KB articles/solutions related to Red Hat Satellite 6 repository sync issue, refer to the Consolidated Troubleshooting Article for Red Hat Satellite 6.x Repository Issues

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.