getupdates1.sun.com - http 500 errors,Sun Update Connection-System,Administration Tools / Sun Update Connection-System

# 1

Have the exact the same problem with all my Solaris 10 servers today.It took about 4-5 smpatch updates to get all the patches installed. Every time, except the last one, the error is http 500 errors.

shena at 2007-7-9 5:31:34 >

top of Java-index,Administration Tools,Sun Update Connection-System...

# 3

We have had a few support queries where this apparent authentication problem was occurring in the last few days and I have put a query to the infrastructure team regarding it.We'd hope to have it corrected soon.

ForumModeratora at 2007-7-9 5:31:34 >

# 5

last few days, try last couple weeks!and they still haven't fixed the batch download via LPS for Solaris 8/9 clients (smpatch download). That's been broke since third week in December!

jwbledsoea at 2007-7-9 5:31:34 >

# 7

This problem should now be fixed. Please verify.

ForumModeratora at 2007-7-9 5:31:34 >

# 9

Still seeing these errors, although not as bad as before. It's like the client smpatch download times out before the LPS can cache and forward the file.

...

125012-01 has been validated.

125023-01 has been validated.

121011-04 has been validated.

124257-01 has been validated.

125002-01 has been validated.

119091-23 has been validated.

The following patches were not downloaded:

118855-36: Request to download update failed. Status code 500 returned. An unexpected error occurred inside the server that prevented it from fulfilling the request.

jwbledsoea at 2007-7-9 5:31:34 >

# 11

Hello,

There was some maintenance of the delivery servers on Thursday and Friday of

last week, which resulted in the limited download of patches, with "500" errors.

This issue has since been fixed and should not affect any subsequent download

of patches.

Please can you run the following command on the patchsvr:

rm -rf /var/sadm/spool/patchsvr/*

Then run the following command on the SunUC client system configured to use the patchsvr:

smpatch analyze

Regards,

ForumModeratora at 2007-7-9 5:31:34 >

# 13

Certainly looks better for me. The updatemanager is able to download patches where it couldn't before. However, it's a real problem that it uses 'a248.e.akamai.net' for getting patches, as the IP addresses have changed from 193.38.108.198 and 193.38.108.206 on Tuesday, to 82.71.193.200 and 82.71.193.198 yesterday, to 193.38.108.214 and 193.38.108.198 today, and no firewall should be using DNS to determine where a server can connect to (what happens if you poison DNS?). I strongly feel these IP addresses should remain static, otherwise you're asking people to configure their firewall to allow their proxy patch server/their Sun servers to access all servers on the Internet on port 443 (I know you can use web proxy servers to access the Internet, but I've never successfully got that working because of bugs - especially the bug that means to register properly you have to connect directly to the remote server, and not forgetting the bug that means you can't register if your SunSolve ID contains uppercase letters).

I am getting these errors though:

Feb 14 16:08:05 seashell root: => com.sun.patchpro.server.UnifiedServerPatchServiceProvider@64160e <=java.io.IOException: You are not entitled to retrieve this content.

...

Feb 14 16:08:05 seashell root: => com.sun.patchpro.server.UnifiedServerPatchServiceProvider@64160e <=Caused by:

Feb 14 16:08:05 seashell root: => com.sun.patchpro.server.UnifiedServerPatchServiceProvider@64160e <=java.io.IOException: Server returned HTTP response code: 403 for URL: https://getupdates1.sun.com/all_signed/122525-03.jar

After completing two scan-and-patch cycles (clean Sol 10 03/05 install), the following patches still need to be installed (ie. there was a problem downloading them as described above):

120235-01

121428-03

120887-06

122525-03

122517-03

123334-04

118557-07

120346-06

119470-10

120068-02

122860-03

118777-08

Is there anything special about these patches? I have a Platinum support contract, yet I'm "not entitled to retrieve this content" according to the error message above. I can, however, download the patches above individually from SunSolve, so it suggests there is a problem with Updatemanager getting the patches.

Iain

iainfirkinsa at 2007-7-9 5:31:34 >

# 15

I guess I'm not sure what you are referring to, the entitlement works fine on my systems, but I still get the 500 errors on clients accessing via the LPS. Now that it's partially fixed, I only have to re-run the smpatch download 2-4 times to get all the patches downloaded. (as opposed to many times when it was badly broke)

jwbledsoea at 2007-7-21 17:13:42 >

# 17

The issue which you are seeing does not relate to the mainteance of the delivery servers over a week ago, although the symptoms are the same, i.e. http 500 errors.

This issue has been escalted to our engineering team, and is still under investigation.

We will update this thread as soon as we have received any useful information.

ForumModeratora at 2007-7-21 17:13:42 >

# 19

These are all symptoms of the same issue, and is being investigated by our engineering team.However you may wish to download these patches individually, i.e.# smpatch download -i 120754-03Or from Sunsolve.

ForumModeratora at 2007-7-21 17:13:42 >

# 21

> Actually many of us are not newbies to this and we

> try things like cleaning out the dirs, cache's, restart

> LPS, etc. before we post.

I have delt with a few of your Radiance cases and know where you are coming from on this angle via your sales contact. Wisdom held here was that this course of action was one of the steps forward on the issue.

>

> If we're expected to use these tools, then I think

> it's reasonable to expect Sun to provide working

> tools. Those that contract for support feel

> especially maligned when these patch tools are broke

> so often and at times for weeks or months straight.

Absolutely correct. No argument whatsoever.

It is rather exasperating as this team has repeatedly requested the infrastructure and tools teams to make improvements to solve these on going issues. Please be aware that we have been continuously pursing them for resolution for quite some time.

We would hope that the problem is fixed soon as Solaris 8 and 9 are moving to the same method of getting patches that requrie a valid support contract, as with Solaris 10. i.e; there will nolonger be ftp access to patches for Solaris 8 and 9. All patching will be done via authenticating against these servers.

--

Modski

ForumModeratora at 2007-7-21 17:13:42 >

# 23

When will sun provide a tool that just WORKS !!This is a toy !!! A bad toy !!

forum_deva at 2007-7-21 17:13:42 >

# 25

For any user that are still affected (and who have not already done so), please raise a support call with your local solutions center, or if you do not have a valid support contract, please send an email to rsc-forum-inbound@sun.com.

If you have already raised a case with us, or sent an email to that address and have not yet provided us with the output of the commands below, then please do so now.

We will require the output from the following commands;

If you have a Sun UC Proxy setup:

# showrev -p | grep 125730-01

# ifconfig -a

# patchsvr setup -l

On a SunUC client which is showing 500 errors when running "smpatch download":

# ifconfig -a

# smpatch get

# date; timex smpatch download

Please ensure that you reference this forum thread in any email communication, or when raising a support call.

ForumModeratora at 2007-7-21 17:13:42 >

Java programming resources: FAQs, tutorials, compiler and browser download sites, documentation, books lists, IDEs, etc.

getupdates1.sun.com - http 500 errors

Administration Tools New Topic

Administration Tools Hot Topic

Administration Tools

All Classified