patchsvr apparently broken again

I have a T-2000 running Solaris 10 acting as patch proxy. I just successfully patched this system up to latest everything. Some of the other systems have been sucessfully patched to latest as well. Now, after rebooting the patch proxy, I get the same symptoms on all systems. That is, smpatch analyze still works, but when I try to update/download patches, I get "WARNING: The installer cannot find the patch" or "This patch could not be found" depending on what command I run. Real helpful diagnostic that is. Is there a "look harder" option for smpatch?

A check of the latest localhost_log on the patch proxy reveals:

2006-11-14 20:01:14 Tue Nov 14 20:01:14 EST 2006(DEBUG) => com.sun.patchpro.server.PatchProServerServlet@1b446d1 <=UserID from Auth header_01326875135

2006-11-14 20:01:14 Tue Nov 14 20:01:14 EST 2006(INFO) => com.sun.patchpro.server.PatchProServerServlet@1b446d1 <=Protocol version: 2.1

2006-11-14 20:01:14 Tue Nov 14 20:01:14 EST 2006(DEBUG) => com.sun.patchpro.server.ServerPatchServiceProvider@1cb52ae <=cacheFile is: /opt/spool/patchsvr/entitlement/https%3A%2F%2Fgetupdates.sun.com%2Fsolaris%2F%2Fentitlement_lps

2006-11-14 20:01:14 Tue Nov 14 20:01:14 EST 2006(DEBUG) => com.sun.patchpro.server.ServerPatchServiceProvider@1cb52ae <=POST String: action=getEntitlement&name=&version=2.1

2006-11-14 20:01:39 Tue Nov 14 20:01:39 EST 2006(DEBUG) => com.sun.patchpro.server.PatchProServerServlet@1b446d1 <=UserID from Auth header_01326875135

2006-11-14 20:01:39 Tue Nov 14 20:01:39 EST 2006(INFO) => com.sun.patchpro.server.PatchProServerServlet@1b446d1 <=Protocol version: 2.1

2006-11-14 20:01:39 Tue Nov 14 20:01:39 EST 2006(DEBUG) => com.sun.patchpro.server.ServerPatchServiceProvider@1cb52ae <=cacheFile is: /opt/spool/patchsvr/Database/https%3A%2F%2Fgetupdates.sun.com%2Fsolaris%2F%2FDatabase%2Fcurrent.zip

2006-11-14 20:01:39 Tue Nov 14 20:01:39 EST 2006(DEBUG) => com.sun.patchpro.server.ServerPatchServiceProvider@1cb52ae <=POST String: action=getFile&name=Database%2Fcurrent.zip&version=2.1

2006-11-14 20:01:39 Tue Nov 14 20:01:39 EST 2006(DEBUG) => com.sun.patchpro.server.PatchProServerServlet@1b446d1 <=PatchProServerServlet getDocumentation/getFile done. Status: 200

2006-11-14 20:02:49 Tue Nov 14 20:02:49 EST 2006(DEBUG) => com.sun.patchpro.server.PatchProServerServlet@1b446d1 <=UserID from Auth header_01326875135

2006-11-14 20:02:49 Tue Nov 14 20:02:49 EST 2006(INFO) => com.sun.patchpro.server.PatchProServerServlet@1b446d1 <=Protocol version: 2.1

2006-11-14 20:02:49 Tue Nov 14 20:02:49 EST 2006(DEBUG) => com.sun.patchpro.server.ServerPatchServiceProvider@1cb52ae <=cacheFile is: /opt/spool/patchsvr/entitlement/https%3A%2F%2Fgetupdates.sun.com%2Fsolaris%2F%2Fentitlement_lps

2006-11-14 20:02:49 Tue Nov 14 20:02:49 EST 2006(DEBUG) => com.sun.patchpro.server.ServerPatchServiceProvider@1cb52ae <=POST String: action=getEntitlement&name=&version=2.1

2006-11-14 20:02:50 Tue Nov 14 20:02:50 EST 2006(INFO) => com.sun.patchpro.server.PatchProServerServlet@1b446d1 <=Protocol version: 2.0

2006-11-14 20:02:50 Tue Nov 14 20:02:50 EST 2006(DEBUG) => com.sun.patchpro.server.PatchProServerServlet@1b446d1 <=Received a isCertificateRevoked request.

2006-11-14 20:02:50 Tue Nov 14 20:02:50 EST 2006(DEBUG) => com.sun.patchpro.server.ServerPatchServiceProvider@1cb52ae <=CRL checking post string: action=isCertificateRevoked&serialNumber=335544443

2006-11-14 20:02:51 Tue Nov 14 20:02:51 EST 2006(ERROR) => com.sun.patchpro.server.PatchProServerServlet@1b446d1 <=java.lang.NullPointerException

at sun.net.www.protocol.http.NTLMAuthentication.init(NTLMAuthentication.java:138)

at sun.net.www.protocol.http.NTLMAuthentication.<init>(NTLMAuthentication.java:157)

at sun.net.www.protocol.http.HttpURLConnection.getHttpProxyAuthentication(HttpURLConnection.java:1461)

at sun.net.www.protocol.http.HttpURLConnection.resetProxyAuthentication(HttpURLConnection.java:1250)

at sun.net.www.protocol.http.HttpURLConnection.doTunneling(HttpURLConnection.java:1293)

at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:168)

at sun.net.www.protocol.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:840)

at sun.net.www.protocol.https.HttpsURLConnectionImpl.getOutputStream(HttpsURLConnectionImpl.java:230)

at com.sun.patchpro.server.ServerPatchServiceProvider.isCertificateRevoked(ServerPatchServiceProvider.java:1171)

at com.sun.patchpro.server.PatchServerProxy.isCertificateRevoked(PatchServerProxy.java:307)

at com.sun.patchpro.server.PatchProServerServlet.doPost(PatchProServerServlet.java:570)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)

at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:247)

at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:193)

at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:243)

at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)

at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)

at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)

at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:190)

at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)

at org.apache.catalina.valves.CertificatesValve.invoke(CertificatesValve.java:246)

at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:564)

at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)

at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)

at org.apache.catalina.core.StandardContext.invoke(StandardContext.java:2347)

at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:180)

at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)

at org.apache.catalina.valves.ErrorDispatcherValve.invoke(ErrorDispatcherValve.java:170)

at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:564)

at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:170)

at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:564)

at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:468)

at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:564)

at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)

at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)

at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:174)

at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)

at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)

at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)

at org.apache.catalina.connector.http.HttpProcessor.process(HttpProcessor.java:1027)

at org.apache.catalina.connector.http.HttpProcessor.run(HttpProcessor.java:1125)

at java.lang.Thread.run(Thread.java:595)

2006-11-14 20:02:51 StandardWrapperValve[PatchServer]: Servlet.service()for servlet PatchServer threw exception

javax.servlet.ServletException: java.lang.NullPointerException

at com.sun.patchpro.server.PatchProServerServlet.doPost(PatchProServerServlet.java:1478)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)

at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:247)

at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:193)

at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:243)

at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)

at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)

at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)

at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:190)

at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)

at org.apache.catalina.valves.CertificatesValve.invoke(CertificatesValve.java:246)

at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:564)

at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)

at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)

at org.apache.catalina.core.StandardContext.invoke(StandardContext.java:2347)

at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:180)

at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)

at org.apache.catalina.valves.ErrorDispatcherValve.invoke(ErrorDispatcherValve.java:170)

at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:564)

at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:170)

at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:564)

at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:468)

at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:564)

at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)

at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)

at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:174)

at org.apache.catalina.core.StandardPipeline.invokeNext(StandardPipeline.java:566)

at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:472)

at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:943)

at org.apache.catalina.connector.http.HttpProcessor.process(HttpProcessor.java:1027)

at org.apache.catalina.connector.http.HttpProcessor.run(HttpProcessor.java:1125)

at java.lang.Thread.run(Thread.java:595)

Clue anyone?

Thanks,

Charlie

[10761 byte] By [CharlieW] at [2007-11-26 11:29:59]
# 1

Post the following output from both the client connection to the lps and the lps itself -

# smpatch get

Additionally post the following output from the lps only -

# patchsvr setup -l

I suspect that the source URL is incorrect somewhere. For reference, if you have patched up to the latest release of the patch tools then that patchssource for both the Sol10 clients which connect directly and the lps itself should be https://getupdates1.sun.com/

ForumModerator at 2007-7-7 3:45:39 > top of Java-index,Administration Tools,Sun Update Connection-System...
# 2

Thanks for your help. It's working now, but this is beyond strange. I pointed LPS at https://getupdates1.sun.com/ like you suggested. After that, LPS was throwing exceptions all over the place. On a lark, I checked the smpatch get output on the LPS box and found that patchpro.proxy.host was pointed at our firewall. I unset that value and now smpatch is behaving on all the systems.

That leaves me more than a little puzzled however, considering...

- smpatch had been working fine on all systems prior to the latest patches/reboot

- after the patches/reboot, smpatch downloads were broken on all systems and showing the same symptoms (nullpointerexception in the LPS logs)

I had assumed that the patchpro.proxy.host setting is only effective for smpatch, not LPS. So all I can figure is that my assumption was wrong, or that something else changed to fix LPS.

-cw-

CharlieW at 2007-7-7 3:45:39 > top of Java-index,Administration Tools,Sun Update Connection-System...
# 3
HiThe proxyhost setting refers to a web proxy that a machine may need to use in order to access the 'net and not the Update Connection Proxy if you are using one.Does this help?Mod.
ForumModerator at 2007-7-7 3:45:39 > top of Java-index,Administration Tools,Sun Update Connection-System...
# 4

That's what I said. The patchpro.proxy.host should be for smpatch or updatemanager only, not for patchsvr. None the less, when I unset the patchpro.proxy.host setting, that's when patchsvr started working again. And that's what I'm puzzled about.

But, as long as it's working now, I'm not going to beat my brain against it further.

Thanks again for the help!

-cw-

CharlieW at 2007-7-7 3:45:39 > top of Java-index,Administration Tools,Sun Update Connection-System...