Patches not found on proxy server

I setup a server running 10 1/06 to act as a proxy server:

# hostname

nsx401l9420

# patchsvr setup -l

Patch source URL: https://getupdates.sun.com/solaris

Cache Location: /var/sadm/spool/patchsvr

Web proxy host name: toaster.bcbsm.com

Web proxy port number: 80

Web proxy user: e119519

I configured another server, nx401l8090, running 10 1/06 to retrieve patches from nsx401l9420. I can run 'smpatch analyze' but can't run 'smpatch update'.

# hostname

nsx401l8090

# smpatch get

patchpro.backout.directory"" ""

patchpro.baseline.directory-/var/sadm/spool

patchpro.download.directory/var/sadm/spool /var/sadm/spool

patchpro.install.types -rebootafter:reconfigafter:standard

patchpro.patch.sourcehttp://nsx401l9420:3816/solaris https://getupdates1.sun.com/

patchpro.patchsetcurrent current

patchpro.proxy.host "" ""

patchpro.proxy.passwd********

patchpro.proxy.port "" 8080

patchpro.proxy.user "" ""

# smpatch analyze

119252-13 SunOS 5.10: System Administration Applications Patch

123494-02 X11 6.6.2: fontconfig patch

118833-24 SunOS 5.10: kernel patch

123252-01 SunOS 5.10: platform/SUNW,Netra-T2000 patch

122027-08 SunOS 5.10: bge Driver Patch

122761-01 SunOS 5.10: Sun Update Connection Bootstrapper

122212-10 GNOME 2.6.0: GNOME Desktop Patch

119280-07 CDE 1.6: Runtime library patch for Solaris 10

119059-18 X11 6.6.2: Xsun patch

# smpatch update

Installing patches from /var/sadm/spool...

WARNING: The installer cannot find the patch.

WARNING: The installer cannot find the patch.

WARNING: The installer cannot find the patch.

WARNING: The installer cannot find the patch.

WARNING: The installer cannot find the patch.

WARNING: The installer cannot find the patch.

WARNING: The installer cannot find the patch.

WARNING: The installer cannot find the patch.

WARNING: The installer cannot find the patch.

Any thoughts why the update can't find the patch?

[2131 byte] By [bperttunen] at [2007-11-26 10:35:54]
# 1
yes, read the thread on this forums "lps stopped working".
robertcohen at 2007-7-7 2:46:50 > top of Java-index,Administration Tools,Sun Update Connection-System...
# 2

There are several threads on this issue already but i'm posting the solution here again -

The problem is that Sun has switched over to use a new signing certificate, but LPS is still looking at the old certificate. We are currently working on a formally released fix for this problem.

In the meantime, there is a simple workaround which you can implement on the LPS server:

1. Make sure that you have installed the SWUP 1.0.8 Client update on the LPS. That would be update 121118-08 (SPARC) or 121119-08 (x86).

2. Edit /var/patchsvr/solaris/WEB-INF/web.xml using your favorite text editor by changing the "patchsvr.security.patch.signingcert" parameter value from "patchsigning" to "patchsigning:patchsigning2". That should end up looking like:

<init-param>

<param-name>patchsvr.security.patch.signingcert</param-name>

<param-value>patchsigning:patchsigning2</param-value>

</init-param>

3. Restart the LPS by running:

# patchsvr stop

# patchsvr start

as root.

Following those steps should remedy your problems. Clients not using LPS will not encounter this problem as it was resolved as part of the 1.0.8 update.

ForumModerator at 2007-7-7 2:46:50 > top of Java-index,Administration Tools,Sun Update Connection-System...
# 3
I performed the above 3 stpes on the LPS. But I am still getting the same "WARNING: The installed cannot find the patch." errors when running 'smpatch update'.
bperttunen at 2007-7-7 2:46:50 > top of Java-index,Administration Tools,Sun Update Connection-System...
# 4
Could you clear the patch server cache:# rm -rf /var/sadm/spool/*then restart the patch server process:# patchsvr stop# patchsvr startand try again. If it still fails, try doing the rm command on the client too.
ncsupport at 2007-7-7 2:46:50 > top of Java-index,Administration Tools,Sun Update Connection-System...
# 5

I am still receiving the following error:

# smpatch update

Installing patches from /var/sadm/spool...

WARNING: The installer cannot find the patch.

WARNING: The installer cannot find the patch.

I have done the following:

- cleared the cache on the LPS and the client

- updated web.xml with "patchsigning2"

- verified 121118-08 is applied to LPS and client

Any other thoughts?

bperttunen at 2007-7-7 2:46:50 > top of Java-index,Administration Tools,Sun Update Connection-System...
# 6
If you wait 15 minutes and try again does it work?People have been experiencing synchronisation problems where the LPS starts downloading in the background, but the client doesnt wait for the download and gets an error immediately.
robertcohen at 2007-7-7 2:46:50 > top of Java-index,Administration Tools,Sun Update Connection-System...
# 7
Waiting all night has no effect.
bperttunen at 2007-7-7 2:46:50 > top of Java-index,Administration Tools,Sun Update Connection-System...
# 8

Post the output from the following commands please (on the SunUC proxy) -

# smpatch get

# patchsvr setup -l

SPARC: # showrev -p | egrep -e '121453|121118|120335|121081|121563|122231|119788'

X86: # showrev -p | egrep -e '121454|121119|120336|121082|121564|122232|119789'

Also look in the log files at /var/patchsvr/logs to see if any errors are logged

Finally please post the "smpatch get" output from the client host as well

ForumModerator at 2007-7-7 2:46:50 > top of Java-index,Administration Tools,Sun Update Connection-System...
# 9

I have a similar issue and have applied relevant patches and cleared spool folders on the client and server.

The log file generated when I ran smaptch update contains the following:

120273-07 Unknown HTTP status code returned.

119214-10 Unknown HTTP status code returned.

The same error is returned for all patches that it was attempting to download.

If I hit http://hostname:3816/solaris in a browser I get a tomcat error:

Apache Tomcat/4.0.5 - HTTP Status 400 - Bad Request

type Status report

message Bad Request

description The request sent by the client was syntactically incorrect (Bad Request).

I have created two servers and these errors were replicated on both.

The other thing I noticed is that smpatch analyze looks for a file called current.zip in /var/sadm/spool/patchsvr/Database however the file that is there is formulated like this? https%3A%2F%2Fgetupdates.sun.com%2Fsolaris%2F%2FDatabase%2Fcurrent.zip

When trying to find current.zip I get a read error, if I copy this file to current.zip and rerun it finds and updates listing.

smpatch update however still fails with the errorrs WARNING: The installer cannot find the patch.

ChrisLang at 2007-7-7 2:46:50 > top of Java-index,Administration Tools,Sun Update Connection-System...
# 10
Have you tried all of the above mentioned steps, including editing /var/patchsvr/solaris/WEB-INF/web.xml ?The output from the reply dated 12-Oct-2006 17:29 would help us diagnose any problems that you may have.
ForumModerator at 2007-7-7 2:46:50 > top of Java-index,Administration Tools,Sun Update Connection-System...