What does local source of updates really mean?

HI,

I have a SunUC proxy server that gets its updates directly from Sun updates web site and several SunUC clients configured to have my SunUC proxy server as source of updates.

My understanding from reading the available documentation is that SunUC clients should get their updates from the local SunUC proxy if they were configured so.

However, I am getting the impression that my SunUC clients are just using my SunUC proxy server as internet proxy and getting their updates also directly from Sun updates web site. I know that my SunUC clients are not going directly to Sun updates web site because they are in our intranet behind a firewall server and they don't show up in the firewall log.

Let me explain the situation:

I do a smpatch update on my SunUC proxy server manually once on the first Friday of the month and have the cllients doing a smpatch update weekly on Saturdays via cron. My SunUC is not configured to do the automatic daily updates. This way my SunUC clients would try to do an smpatch update on Saturdays it would fail except on the Saturaday after the Friday when SunUC proxy server was updated.

However, I noticed that my SunUC clients are being patched more than once a month. It looks like that my SunUC proxy is downloading new updates every time ones are available on Sun updates web site and make it available to the SunUC clients. And this should not be possible because I disable the automatic daily updates on my SunUC proxy server.

I wonder if I am missing something in terms of configuring SunUC proxy server or clients in terms of local source of updates or I misread the documentation.

My SunUC proxy server and clients are all running Solaris 10 05/03 and Sun Update Manager 1.0

[1775 byte] By [shen] at [2007-11-26 10:03:07]
# 1
Hi.It sound like your SunUC proxy is working as it should.The SunUC proxy will download any patches which it has not already cached when it is asked for a patch by a client. In this way, it operates much like a caching web proxy does.
ForumModerator at 2007-7-7 1:36:24 > top of Java-index,Administration Tools,Sun Update Connection-System...
# 2

hummm..

then ... if I update my QA servers in one week to verify that the patches will not break my environment and two weeks later I update my production servers, does that mean that the production servers will have installed patches that were not available when I update the QA servers?

If that is case then how one can ensure that all servers will have the same patches and same patch levels installed short of update all the servers at same time?

shen at 2007-7-7 1:36:24 > top of Java-index,Administration Tools,Sun Update Connection-System...
# 3

Your assesment is basically correct.

However, if you were to do 'smpatch download -x idlist=<file containing list of patches>' on all the hosts at the same time, then do 'smpatch add -x idlist=<same list fial as before>' when you are ready to patch on each host, then you would end up with a consistant patch level throughout, which would be the latest patches as of when smpatch download was run.

ForumModerator at 2007-7-7 1:36:24 > top of Java-index,Administration Tools,Sun Update Connection-System...
# 4
Thanks for the hint.Let's see what I can do with it in order to apply patches using SunUC in accordance with my company's software maintenance policy.
shen at 2007-7-7 1:36:24 > top of Java-index,Administration Tools,Sun Update Connection-System...