Automatic registration using autoRegistrationProfile.xml
Hi - I am building many servers using jumpstart, I want to autoregister using autoRegistrationProfile.xm.
I have created a autoRegistrationProfile.xm by enabling auto registration on another host but my machines never seem to get auto registered until I run /usr/lib/cc-ccr/bin/eraseCCRRepository then reboot
I don't want to have to do this on 60 servers, can someone advise of a solution so that my servers will reboot after jumpstart and auto register?
[474 byte] By [
dc2447] at [2007-11-26 10:11:11]
# 1
Can you give is a little bit more info? What Solaris release/build are you using to jumpstart the hosts with? Are any errors logged when the reg attempts to run? etc....
# 2
I am usuing 10 06/06 release on Sparc
Syslog says:
Sep 15 11:42:14 solgen1001at com.sun.jmx.mbeanserver.StandardMetaDataImpl.invoke(StandardMetaDataImpl.java:4 14)
Sep 15 11:42:14 solgen1001at javax.management.StandardMBean.invoke(StandardMBean.java:323)
Sep 15 11:42:14 solgen1001at com.sun.jmx.mbeanserver.DynamicMetaDataImp
Sep 15 11:42:14 solgen1001 cacao[1014]: [ID 702911 daemon.crit] com.sun.scn.jmx.impl.AbstractComponent.log : com.sun.scn.service.clientreg.
CRSClientException: java.rmi.RemoteException: HTTP Status-Code 400: Bad Request; nested exception is:
Sep 15 11:42:14 solgen1001HTTP Status-Code 400: Bad Request
Sep 15 11:42:14 solgen1001 cacao[1014]: [ID 702911 daemon.warning] com.sun.scn.jmx.impl.AbstractComponent.log : SCNClientConfigImpl.activat
e("Use Sun Update Manager and Sun Update Connection to manage updates") -- module unlocked
Sep 15 11:42:15 solgen1001 cacao[1014]: [ID 702911 daemon.warning] com.sun.scn.jmx.impl.AbstractComponent.log : SCNClientConfigImpl.deactiv
ate("Use Sun Update Manager and Sun Update Connection to manage updates") -- module locked
Sep 15 11:42:15 solgen1001 cacao[1014]: [ID 702911 daemon.warning] com.sun.scn.jmx.impl.AbstractComponent.log : SCNClientConfigImpl.activat
e("Register the Solaris software without choosing an update option") -- module unlocked
Sep 15 11:42:15 solgen1001 cacao[1014]: [ID 702911 daemon.warning] com.sun.scn.jmx.impl.AbstractComponent.log : SCNClientConfigImpl.deactiv
ate("Register the Solaris software without choosing an update option") -- module locked
Sep 15 11:42:15 solgen1001 cacao[1014]: [ID 702911 daemon.warning] com.sun.scn.jmx.impl.AbstractComponent.log : SCNClientConfigImpl.activat
e("Use Sun Update Manager and Sun Update Connection to manage updates") -- module unlocked
Sep 15 11:42:16 solgen1001 cacao[1014]: [ID 702911 daemon.warning] com.sun.scn.offering.prom.ProductRegOfferingInstance.getAuthToken : Did
not get authToken from SCNClientLoginMBean.
Sep 15 11:42:34 solgen1001 CNS Transport[1797]: [ID 191683 daemon.error] unhandled exception: Shared CNS CCR lacks required property: cns.t
ransport.serverurl
Sep 15 12:45:25 solgen1001 su: [ID 810491 auth.crit] 'su root' failed for davidcam on /dev/?
Sep 15 12:46:03 solgen1001 cacao[1014]: [ID 702911 daemon.warning] com.sun.scn.jmx.impl.AbstractComponent.log : SCNClientConfigImpl.activat
e("Register the Solaris software without choosing an update option") -- module unlocked
Sep 15 12:46:05 solgen1001 cacao[1014]: [ID 702911 daemon.warning] com.sun.scn.jmx.impl.AbstractComponent.log : SCNClientConfigImpl.deactiv
ate("Register the Solaris software without choosing an update option") -- module locked
Sep 15 12:49:33 solgen1001 cacao[1014]: [ID 702911 daemon.warning] com.sun.scn.service.BaseServiceClient.dumpThrowable : XYXYXY
Sep 15 12:49:33 solgen1001 java.rmi.RemoteException: HTTP Status-Code 400: Bad Request; nested exception is:
Sep 15 12:49:33 solgen1001HTTP Status-Code 400: Bad Request
Sep 15 12:49:33 solgen1001at com.sun.scn.service.clientreg.ClientRegServiceIF_Stub.handleMessage(ClientRegSe rviceIF_Stub.java:92)
Sep 15 12:49:33 solgen1001at com.sun.scn.service.clientreg.CRSClient.registerMSCToSCOP(CRSClient.java:127)
Sep 15 12:49:33 solgen1001at com.sun.scn.jmx.impl.SCNClientRegistrationImpl.registerClientMSC(SCNClientRegis trationImpl.java:126)
Sep 15 12:49:33 solgen1001at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
Sep 15 12:49:33 solgen1001at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
Sep 15 12:49:33 solgen1001at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.ja va:25)
Sep 15 12:49:33 solgen1001at java.lang.reflect.Method.invoke(Method.java:585)
Sep 15 12:49:33 solgen1001at com.sun.jmx.mbeanserver.StandardMetaDataImpl.invoke(StandardMetaDataImpl.java:4 14)
Sep 15 12:49:33 solgen1001at javax.management.StandardMBean.invoke(StandardMBean.java:323)
Sep 15 12:49:33 solgen1001at com.sun.jmx.mbeanserver.DynamicMetaDataImp
Sep 15 12:49:33 solgen1001 cacao[1014]: [ID 702911 daemon.crit] com.sun.scn.jmx.impl.AbstractComponent.log : com.sun.scn.service.clientreg.
CRSClientException: java.rmi.RemoteException: HTTP Status-Code 400: Bad Request; nested exception is:
Sep 15 12:49:33 solgen1001HTTP Status-Code 400: Bad Request
Sep 15 12:49:33 solgen1001 cacao[1014]: [ID 702911 daemon.warning] com.sun.scn.jmx.impl.AbstractComponent.log : SCNClientConfigImpl.activat
e("Use Sun Update Manager and Sun Update Connection to manage updates") -- module unlocked
Sep 15 12:49:51 solgen1001 CNS Transport[10928]: [ID 191683 daemon.error] unhandled exception: Shared CNS CCR lacks required property: cns.
transport.serverurl
# 3
Could you post the autoRegistrationProfile.xml file (without any passwords)?I also note that you referred to the file as autoRegistrationProfile.xm twice. Could you make sure the file is actually called autoRegistrationProfile.xml
# 4
The file is indeed autoRegistrationProfile.xml
<?xml version="1.0" encoding="UTF-8"?>
<!--this profile should be treated as sensitive data and should not be posted on public web sites, broadcast on email aliases-->
<!DOCTYPE registrationprofile SYSTEM "dtd/registrationprofile.dtd">
<registrationprofile>
<token><![CDATA[***************************:T]]></token>
<offering type="swup">
<portalenabled><![CDATA[true]]></portalenabled>
<lps />
</offering>
<proxy auth="no">
<hostname><![CDATA[proxy.**********]]></hostname>
<port><![CDATA[3128]]></port>
<username />
<password />
</proxy>
<subscriptionkey><![CDATA[*****]]></subscriptionkey>
</registrationprofile>
# 5
A couple of questions:Is the jumpstart configuration a full End User package cluser configuration? (not a minimal install)Does the jumpstart add any files which might interfere with sconadm?
# 6
The Jumpstart install is SUNWCprog - Developer Solaris Software Group The only thing that gets installed that I think is relevant is:/usr/lib/breg/data/autoRegistrationProfile.xml
# 7
It looks like your hitting bug # 6474304 caused by the transport url for the portal feature not being set correctly. Running the commands below before the auto reg should fix the issue.
/usr/lib/cc-cfw/framework/lib/cc-client-adm stop
/usr/lib/cc-cfw/framework/lib/cc-client-adm disable
/usr/lib/cc-ccr/bin/ccr -p cns.transport.serverurl -v https://cns-transport.sun.com
/usr/lib/cc-cfw/framework/lib/cc-client-adm enable
/usr/lib/cc-cfw/framework/lib/cc-client-adm start
# 8
Thanks that is helpful.One system now shows up ion updates.sun.com but another doesn't.The one that show up doesn't show as needing any updates which is wrong.
# 9
Make sure the invagent has completed a succesful run following the completed registration - /usr/lib/cc-cfw/platform/invagent/bin/cc-invagentIt should also be scheduled in crontab but running it manually should update the status on the portal to show the available patches.
# 10
Hi - apologies for bumping my old thread
I haven't changed how I am building my serverss - Jumpstart / developer software group but I'm still not having any luck getting the automatic registration to work even when I run the commands specified above - I'm also getting this error:
/usr/lib/cc-cfw/framework/lib/cc-client-adm stop
Starting the components of the service platform.
Looking up the stop entries in /usr/lib/cc-cfw/platform
Invoking the script /usr/lib/cc-cfw/platform/ccragent/stop
Stopping cccragent
Invoking the script /usr/lib/cc-cfw/platform/fwagent/stop
Stopping ccfwagent
Invoking the script /usr/lib/cc-cfw/platform/transport/stop
ERROR : CNS Transport is not properly enabled. Cannot find /etc/init.d/cc-transport
Starting the components of the service swupPortalMgmt.
Looking up the stop entries in /usr/lib/cc-cfw/swupPortalMgmt
which is strange because cc-transport is part of SUNWcctpx and is installed
adweb06# pkginfo | grep SUNWcctpx
systemSUNWcctpxConnected Customer Platform Transport
adweb06# pkgchk -v SUNWcctpx | grep cc-transport
/usr/lib/cc-cfw
/usr/lib/cc-cfw/platform
/usr/lib/cc-cfw/platform/transport
/usr/lib/cc-cfw/platform/transport/bin
/usr/lib/cc-cfw/platform/transport/bin/cctransport
/usr/lib/cc-cfw/platform/transport/bin/cctrunner
/usr/lib/cc-cfw/platform/transport/bin/cctsend
/usr/lib/cc-cfw/platform/transport/bin/cctstat
/usr/lib/cc-cfw/platform/transport/bin/ccttrace
/usr/lib/cc-cfw/platform/transport/cc-transport
/usr/lib/cc-cfw/platform/transport/disable
/usr/lib/cc-cfw/platform/transport/enable
/usr/lib/cc-cfw/platform/transport/etc
/usr/lib/cc-cfw/platform/transport/etc/CACert.pem
/usr/lib/cc-cfw/platform/transport/etc/transport.cfg
/usr/lib/cc-cfw/platform/transport/lib
/usr/lib/cc-cfw/platform/transport/lib/cctagent.jar
/usr/lib/cc-cfw/platform/transport/runlevel
/usr/lib/cc-cfw/platform/transport/start
/usr/lib/cc-cfw/platform/transport/stop
/usr/lib/libcctagent.so
/usr/lib/libcctagent.so.1
# 11
Hi dc.
Going back to your first post - the transport.serverurl error - do you still get this error in syslog? If so, could you run the following and see if it remedies the situation on the host:
# /usr/lib/cc-cfw/framework/lib/cc-client-adm stop
# /usr/lib/cc-ccr/bin/ccr -p cns.transport.serverurl -v https://cns-transport.sun.com
# /usr/lib/cc-cfw/framework/lib/cc-client-adm start
If so, there is a bug open on this behaviour - 6474304
Mod.
# 12
Something isn't right
tstguweb03# /usr/lib/cc-cfw/framework/lib/cc-client-adm stop
Starting the components of the service platform.
Looking up the stop entries in /usr/lib/cc-cfw/platform
Invoking the script /usr/lib/cc-cfw/platform/ccragent/stop
Stopping cccragent
Invoking the script /usr/lib/cc-cfw/platform/fwagent/stop
Stopping ccfwagent
Invoking the script /usr/lib/cc-cfw/platform/transport/stop
ERROR : CNS Transport is not properly enabled. Cannot find /etc/init.d/cc-transport
Starting the components of the service swupPortalMgmt.
Looking up the stop entries in /usr/lib/cc-cfw/swupPortalMgmt
# 13
Resolved this:
There were several problems:
1. The bug you mentioned earlier in the thread
2. We had an incorrectly configured solaris10 package that had changed the perms on /
3. The fix you suggested above didn't work until I did added this script on boot
#!/usr/bin/bash
if [ ! -f /etc/init.d/cc-transport ]
then ln -s /usr/lib/cc-cfw/platform/transport/cc-transport /etc/init.d/cc-transport
fi
/usr/lib/cc-cfw/framework/lib/cc-client-adm stop
/usr/lib/cc-cfw/framework/lib/cc-client-adm disable
/usr/lib/cc-ccr/bin/ccr -p cns.transport.serverurl -v https://cns-transport.sun.com
/usr/lib/cc-cfw/framework/lib/cc-client-adm enable
/usr/lib/cc-cfw/framework/lib/cc-client-adm start
/usr/lib/cc-cfw/platform/invagent/bin/cc-invagent
###
Actually it only works for some of our servers - for some reason I get this in one colo
Nov 14 15:03:59 foo CNS Transport[18923]: [ID 693847 daemon.error] unhandled exception: Shared CNS CCR lacks required property: cns.ass
etid/cns.clientid
Nov 14 15:04:21 adweb01 CNS Transport[19118]: [ID 693847 daemon.error] unhandled exception: Shared CNS CCR lacks required property: cns.ass
etid/cns.clientid
Message was edited by:
dc2447
# 14
Just for your information, the /etc/init.d/cc-transport init script is normally automatically created when a system is registered for use with the portal by the following command;
$ /usr/lib/cc-cfw/platform/transport/enable
The error for the remaining server simply indicates the system is not registered. An asset ID is assigned when a system is registered.
$ /usr/lib/cc-ccr/bin/ccr -g cns.assetid
# 15
Actually - it wa smore fundamental in that the server couldn't see the sun update servers.
