I think this needs a sudo as well. At least on my system, regular user account can't read candlepin.conf.