Can't validate latest 121118 key update patch?!?
I seem to have a bit of a chicken/egg problem...
I'm setting up a shiny new T-2000 with Solaris 10 preinstalled. We have a patch proxy in our environment which we already use for several other Solaris 10 boxes. With the older boxes, we had to apply the 121118-06 key update back in October in order to proceed with any further patching with any further patching. Presumably that patch was sent out with the old key, since I had no problem downloading it and installing it.
Now however, the patch has been revised to 121118-10. When I attempted to install it on the new server, I get "121118-10 cannot be validated." Of the few patches that I can download without validation errors, none of them seem to related to updated keys or other patchserver updates:
root@wasdt # smpatch download
com.sun.patchpro.util.Percentage@14b2f1a
119081-25 cannot be validated.
com.sun.patchpro.util.Percentage@127ff0d
124630-03 cannot be validated.
com.sun.patchpro.util.Percentage@d9cbcb
121430-13 cannot be validated.
com.sun.patchpro.util.Percentage@ec6bb1
124188-02 cannot be validated.
com.sun.patchpro.util.Percentage@192425a
121308-08 cannot be validated.
com.sun.patchpro.util.Percentage@1422384
120900-04 has been validated.
com.sun.patchpro.util.Percentage@1388e5e
121133-02 has been validated.
com.sun.patchpro.util.Percentage@ad483
119254-34 cannot be validated.
com.sun.patchpro.util.Percentage@10613aa
119963-08 cannot be validated.
com.sun.patchpro.util.Percentage@9319d9
120753-03 cannot be validated.
com.sun.patchpro.util.Percentage@1e779a1
118676-03 cannot be validated.
com.sun.patchpro.util.Percentage@1e26e52
119812-02 cannot be validated.
com.sun.patchpro.util.Percentage@b8d09d
119042-10 cannot be validated.
com.sun.patchpro.util.Percentage@515263
119578-30 cannot be validated.
com.sun.patchpro.util.Percentage@f81402
118833-36 cannot be validated.
com.sun.patchpro.util.Percentage@a9a32c
120780-03 cannot be validated.
com.sun.patchpro.util.Percentage@1c2a1ed
121428-03 has been validated.
com.sun.patchpro.util.Percentage@1ca1a68
120812-15 cannot be validated.
com.sun.patchpro.util.Percentage@18bbb61
122911-02 cannot be validated.
com.sun.patchpro.util.Percentage@c3358b
121901-01 has been validated.
com.sun.patchpro.util.Percentage@1f07597
com.sun.patchpro.util.Percentage@87ad67
120543-07 cannot be validated.
com.sun.patchpro.util.Percentage@9af0b1
120887-06 has been validated.
com.sun.patchpro.util.Percentage@300429
124244-01 cannot be validated.
com.sun.patchpro.util.Percentage@6147d9
124997-01 cannot be validated.
com.sun.patchpro.util.Percentage@b41166
121081-06 cannot be validated.
com.sun.patchpro.util.Percentage@1e2481b
121474-01 has been validated.
com.sun.patchpro.util.Percentage@ebf3f0
122525-03 cannot be validated.
com.sun.patchpro.util.Percentage@dc4c81
124614-01 cannot be validated.
com.sun.patchpro.util.Percentage@122dad5
120824-07 cannot be validated.
com.sun.patchpro.util.Percentage@14ce5eb
122517-03 cannot be validated.
com.sun.patchpro.util.Percentage@18abc7b
123334-04 cannot be validated.
com.sun.patchpro.util.Percentage@15c6c8d
119998-02 cannot be validated.
com.sun.patchpro.util.Percentage@dab859
118371-07 has been validated.
com.sun.patchpro.util.Percentage@17cff66
118557-07 cannot be validated.
com.sun.patchpro.util.Percentage@163a320
124922-02 cannot be validated.
com.sun.patchpro.util.Percentage@6ac615
121012-02 has been validated.
com.sun.patchpro.util.Percentage@1f2be27
122032-03 cannot be validated.
com.sun.patchpro.util.Percentage@1a1f370
121004-03 cannot be validated.
com.sun.patchpro.util.Percentage@1757337
121002-03 has been validated.
com.sun.patchpro.util.Percentage@1df3d59
121557-01 has been validated.
com.sun.patchpro.util.Percentage@134c5ff
118918-24 cannot be validated.
com.sun.patchpro.util.Percentage@1b3278a
118815-05 cannot be validated.
com.sun.patchpro.util.Percentage@e8f8c5
123360-01 has been validated.
com.sun.patchpro.util.Percentage@1248979
120222-15 cannot be validated.
com.sun.patchpro.util.Percentage@1bd9de3
119130-33 cannot be validated.
com.sun.patchpro.util.Percentage@1c8b884
120346-06 cannot be validated.
com.sun.patchpro.util.Percentage@c9f997
124943-01 cannot be validated.
com.sun.patchpro.util.Percentage@2153fe
120719-02 cannot be validated.
com.sun.patchpro.util.Percentage@115512
124208-01 cannot be validated.
com.sun.patchpro.util.Percentage@1e82b72
120469-05 has been validated.
com.sun.patchpro.util.Percentage@17c7988
123186-02 cannot be validated.
com.sun.patchpro.util.Percentage@19cd5f5
119470-10 cannot be validated.
com.sun.patchpro.util.Percentage@1a2da17
120061-02 has been validated.
com.sun.patchpro.util.Percentage@bdb375
123256-02 cannot be validated.
com.sun.patchpro.util.Percentage@51064e
119757-04 has been validated.
com.sun.patchpro.util.Percentage@19bd735
125011-01 cannot be validated.
com.sun.patchpro.util.Percentage@4e17f9
120068-02 cannot be validated.
com.sun.patchpro.util.Percentage@107f742
119555-04 cannot be validated.
com.sun.patchpro.util.Percentage@1fa490e
119213-11 cannot be validated.
com.sun.patchpro.util.Percentage@d23e53
118666-11 cannot be validated.
com.sun.patchpro.util.Percentage@f9f91d
118667-11 cannot be validated.
com.sun.patchpro.util.Percentage@151f910
122860-03 cannot be validated.
com.sun.patchpro.util.Percentage@b6a6d6
122761-01 cannot be validated.
com.sun.patchpro.util.Percentage@18346a3
118777-08 cannot be validated.
com.sun.patchpro.util.Percentage@19299f5
121118-10 cannot be validated.
com.sun.patchpro.util.Percentage@1b9d4d8
118712-13 cannot be validated.
com.sun.patchpro.util.Percentage@144b9ff
120099-07 has been validated.
com.sun.patchpro.util.Percentage@10f34cc
119546-07 has been validated.
com.sun.patchpro.util.Percentage@1535a58
122669-01 has been validated.
com.sun.patchpro.util.Percentage@1505258
119117-28 cannot be validated.
com.sun.patchpro.util.Percentage@4e194f
123938-01 cannot be validated.
com.sun.patchpro.util.Percentage@15fd251
122212-17 cannot be validated.
com.sun.patchpro.util.Percentage@1e8e144
119548-07 cannot be validated.
com.sun.patchpro.util.Percentage@1d592a
119115-22 cannot be validated.
com.sun.patchpro.util.Percentage@c8e4de
119903-02 has been validated.
com.sun.patchpro.util.Percentage@129df8a
119059-21 cannot be validated.
com.sun.patchpro.util.Percentage@12e4cd
124457-01 cannot be validated.
Unexpected Failure: java.lang.Throwable: ERROR: Failed to validate the digital signature(s).
root@wasdt #
So how am I supposed to use smpatch to patch this system? Downloading/installing patch clusters or individual patches are not a practical option, because we need a simple and straightforward process for our field SA's to follow.
<rant>
Sadly, smpatch is turning out to be neither simple nor straightforward and this will likely my final attempt to get it to do what it was apparently ill-designed to do. That is, patch my Solaris 10 systems with minimal fuss. I guess I've been "spoiled" by Linux/yum and yes, even Windows Update. This situation is not only supremely frustrating, it's also quite sad. I should have known better I reckon, having been burned by PatchPro when it was introduced a few years ago. I finally had to run screaming back to patch clusters, and now it's starting to look like I'll have to do that again. Way to go, Sun...
Anyway, if there's any help for my current problem, it would do wonders for my opinion of Sun's UC designers right about now.
</rant>
Thanks,
Charlie
[8451 byte] By [
CharlieWa] at [2007-11-26 19:03:02]
# 1
The issue which you are seeing will be due to the current configuration of your new SunUC client and / or SunUC proxy.
Please can you run the following commands on:
SunUC client
# showrev -p | grep 121118
# smpatch get
SunUC proxy
# showrev -p | grep 119788
# patchsvr setup -l
Please can you post the output generated.
# 2
Thanks for responding. Here's the requested SunUC client info:
root@wasdt # showrev -p | grep 121118
root@wasdt #
root@wasdt # smpatch get
patchpro.backout.directory-""
patchpro.download.directory-/var/sadm/spool
patchpro.install.types -rebootafter:reconfigafter:standard
patchpro.patch.sourcehttp://bwasdev.(redacted):3816/solaris/https://getupdates.sun.com/solaris/
patchpro.patchset-current
patchpro.proxy.host -""
patchpro.proxy.passwd********
patchpro.proxy.port -8080
patchpro.proxy.user -""
root@wasdt #
SunUC proxy data:
root@bwasdev # showrev -p | grep 119788
Patch: 119788-02 Obsoletes: Requires: 119107-02 Incompatibles: Packages: SUNWppror, SUNWpprou
root@bwasdev #
root@bwasdev # patchsvr setup -l
Patch source URL: https://getupdates1.sun.com/
Cache Location: /opt/spool/patchsvr
Web proxy host name: (redacted)
Web proxy port number: 80
Web proxy user: (redacted)
root@bwasdev #
In an attempt to check if a newer rev of 119788 was available for the UC proxy, I ran smpatch and got this:
root@bwasdev # smpatch download -i 119788
Unexpected Failure: java.lang.Throwable: ERROR: Provided patch ID is not readable or is otherwise malformed. Please check the provided patch IDs and retry the command.
So I attempted a more scattershot approach, just to see what happened:
root@bwasdev # smpatch download
Update 124614-01 will not be downloaded since it already exists in the download
directory.
119081-25 has been validated.
124630-03 has been validated.
121430-13 has been validated.
119254-34 has been validated.
118676-03 has been validated.
119042-10 has been validated.
118833-36 has been validated.
120780-03 has been validated.
120812-15 has been validated.
121901-01 has been validated.
120543-07 has been validated.
124244-01 has been validated.
124997-01 has been validated.
120824-07 has been validated.
119998-02 has been validated.
124922-02 has been validated.
122032-03 has been validated.
121002-03 has been validated.
118918-24 has been validated.
118815-05 has been validated.
120222-15 has been validated.
119130-33 has been validated.
120346-06 has been validated.
124943-01 has been validated.
120719-02 has been validated.
124208-01 has been validated.
123186-02 has been validated.
119470-10 has been validated.
125011-01 has been validated.
120068-02 has been validated.
119555-04 has been validated.
119213-11 has been validated.
118666-11 has been validated.
118667-11 has been validated.
122860-03 has been validated.
121118-10 has been validated.
118712-13 has been validated.
119117-28 has been validated.
123938-01 has been validated.
122212-17 has been validated.
119115-22 has been validated.
119059-21 has been validated.
The following patches were not downloaded:
121265-03: 121265-03Unexpected error while accessing the requested patch.
root@bwasdev #
Repeated attempts to download all patches fail on 121265 as shown above. The proxy logs say:
2007-02-21 09:27:46 Wed Feb 21 09:27:46 EST 2007(WARNING) => com.sun.patchpro.server.UnifiedServerPatchServiceProvider@1addb59
<=com.sun.patchpro.server.DownloadPatchException: Status code 403 returned. Authentication information was provided, but auth
entication or authorization failed.
FWIW, here's an smpatch analyze on the UC proxy:
root@bwasdev # smpatch analyze
119081-25 SunOS 5.10: CD-ROM Install Boot Image Patch
124630-03 SunOS 5.10: System Administration Applications, Network and Core Libraries Patch
121430-13 SunOS 5.8 5.9 5.10: Live Upgrade Patch
119254-34 SunOS 5.10: Install and Patch Utilities Patch
118676-03 SunOS 5.10: patch for Solaris make and sccs utilities
119042-10 SunOS 5.10: svccfg & svcprop patch
118833-36 SunOS 5.10: kernel patch
120780-03 SunOS 5.10: ixgb patch
120812-15 OpenGL 1.5: OpenGL Patch for Solaris
121901-01 SunOS 5.10: i.manifest r.manifest class action script patch
120543-07 SunOS 5.10: Apache 2 Patch
124244-01 SunOS 5.10: /usr/bin/rm patch
124997-01 SunOS 5.10: /usr/bin/tip patch
121265-03 SunOS 5.10: libc_psr_hwcap1.so.1 patch
124614-01 SunOS 5.10: sconadm proxy: UnknownHostException
120824-07 SunOS 5.10: SunBlade T6300 & Sun Fire (T1000, T2000) platform patch
119998-02 SunOS 5.10: arp, ip, ipsecah drivers patch
124922-02 SunOS 5.10: ld.so.1 patch
122032-03 SunOS 5.10: Update timezones patch
121002-03 SunOS 5.10: pax patch
118918-24 SunOS 5.10: Solaris Crypto Framework patch
118815-05 SunOS 5.10: awk nawk patch
120222-15 SunOS 5.10: Emulex-Sun LightPulse Fibre Channel Adapter driver
119130-33 SunOS 5.10: Sun Fibre Channel Device Drivers
120346-06 SunOS 5.10: Common Fibre Channel HBA API Library
124943-01 SunOS 5.10: SunFreeware gzip man pages patch
120719-02 SunOS 5.10 : SunFreeware gzip patch
124208-01 SunOS 5.10: Trusted Extensions header files patch
123186-02 SunOS 5.10: NIS yp utilities patch
119470-10 SunOS 5.10: Sun Enterprise Network Array firmware and utilities
125011-01 SunOS 5.10: sendmail patch
120068-02 SunOS 5.10: in.telnetd Patch
119555-04 SunOS 5.10: Software to support QLogic Ultra3 SCSI host bus adapters
119213-11 NSS_NSPR_JSS 3.11.4: NSPR 4.6.4 / NSS 3.11.4 / JSS 4.2.4
118666-11 J2SE 5.0: update 11 patch (5.0u11)
118667-11 J2SE 5.0: update 11 patch (5.0u11), 64bit
122860-03 SunOS 5.10: SCN Update Manager localization patch
121118-10 SunOS 5.10: Sun Update Connection System Client 1.0.8
118712-13 SunOS 5.10: Sun XVR-100 Graphics Accelerator Patch
119117-28 Evolution 1.4.6 patch
123938-01 GNOME 2.6.0: GNU Transport Layer Security Library Patch
122212-17 GNOME 2.6.0: GNOME Desktop Patch
119115-22 Mozilla 1.7 patch
119059-21 X11 6.6.2: Xsun patch
# 3
Here's another piece of proxy log relating to the above 403 error:
2007-02-21 09:27:46 Wed Feb 21 09:27:46 EST 2007(CRITICAL) => com.sun.patchpro.server.UnifiedServerPatchServiceProvider@1addb5
9 <=java.io.IOException: You are not entitled to retrieve this content.
Why would I not be "entitled" to one particular patch out of dozens?
# 4
Your patch proxy rev is quite low - you have the -02 version, but we're currently at -07.Could you try manually downloading from SunSolve and applying patch 119788-07on the SunUC proxy?Message was edited by: ForumModerator
# 5
Ok, that was fun.
And the results are...
SunUC proxy bwasdev:
root@bwasdev # patchadd 121118-11
Validating patches...
Loading patches installed on the system...
Done!
Loading patches requested to install.
Done!
Checking patches that you specified for installation.
Done!
Approved patches will be installed in this order:
121118-11
Checking installed patches...
Verifying sufficient filesystem capacity (dry run method)...
Installing patch packages...
Patch 121118-11 has been successfully installed.
See /var/sadm/patch/121118-11/log for details
Patch packages installed:
SUNWcsmauth
SUNWppro-plugin-sunos-base
SUNWppror
SUNWpprou
SUNWupdatemgrr
SUNWupdatemgru
root@bwasdev # patchadd 119788-07
Validating patches...
Loading patches installed on the system...
Done!
Loading patches requested to install.
Done!
Checking patches that you specified for installation.
Done!
Approved patches will be installed in this order:
119788-07
Checking installed patches...
Executing prepatch script...
Verifying sufficient filesystem capacity (dry run method)...
Installing patch packages...
Patch 119788-07 has been successfully installed.
See /var/sadm/patch/119788-07/log for details
Executing postpatch script...
Patch packages installed:
SUNWppror
SUNWpprou
SUNWpsvrr
SUNWpsvru
root@bwasdev # patchsvr stop
Shutting down Local Patch Server
root@bwasdev # patchsvr start
Starting Local Patch Server
root@bwasdev # smpatch download
Error: Unable to download document : "xml/motd.xml"
Cannot connect to retrieve xml/motd.xml: Bad Request
Unable to display any message of the day notices from Sun Microsystems. Refer to the log file for additional information.
Update 119081-25 will not be downloaded since it already exists in the download directory.
Update 124630-03 will not be downloaded since it already exists in the download directory.
Update 121430-13 will not be downloaded since it already exists in the download directory.
Update 119254-34 will not be downloaded since it already exists in the download directory.
Update 118676-03 will not be downloaded since it already exists in the download directory.
Update 119042-10 will not be downloaded since it already exists in the download directory.
Update 118833-36 will not be downloaded since it already exists in the download directory.
Update 120780-03 will not be downloaded since it already exists in the download directory.
Update 120812-15 will not be downloaded since it already exists in the download directory.
Update 121901-01 will not be downloaded since it already exists in the download directory.
Update 120543-07 will not be downloaded since it already exists in the download directory.
Update 124244-01 will not be downloaded since it already exists in the download directory.
Update 124997-01 will not be downloaded since it already exists in the download directory.
Update 124614-01 will not be downloaded since it already exists in the download directory.
Update 120824-07 will not be downloaded since it already exists in the download directory.
Update 119998-02 will not be downloaded since it already exists in the download directory.
Update 124922-02 will not be downloaded since it already exists in the download directory.
Update 122032-03 will not be downloaded since it already exists in the download directory.
Update 121002-03 will not be downloaded since it already exists in the download directory.
Update 118918-24 will not be downloaded since it already exists in the download directory.
Update 118815-05 will not be downloaded since it already exists in the download directory.
Update 120222-15 will not be downloaded since it already exists in the download directory.
Update 119130-33 will not be downloaded since it already exists in the download directory.
Update 120346-06 will not be downloaded since it already exists in the download directory.
Update 124943-01 will not be downloaded since it already exists in the download directory.
Update 120719-02 will not be downloaded since it already exists in the download directory.
Update 124208-01 will not be downloaded since it already exists in the download directory.
Update 123186-02 will not be downloaded since it already exists in the download directory.
Update 119470-10 will not be downloaded since it already exists in the download directory.
Update 125011-01 will not be downloaded since it already exists in the download directory.
Update 120068-02 will not be downloaded since it already exists in the download directory.
Update 119555-04 will not be downloaded since it already exists in the download directory.
Update 119213-11 will not be downloaded since it already exists in the download directory.
Update 118666-11 will not be downloaded since it already exists in the download directory.
Update 118667-11 will not be downloaded since it already exists in the download directory.
Update 122860-03 will not be downloaded since it already exists in the download directory.
Update 118712-13 will not be downloaded since it already exists in the download directory.
Update 119117-28 will not be downloaded since it already exists in the download directory.
Update 123938-01 will not be downloaded since it already exists in the download directory.
Update 122212-17 will not be downloaded since it already exists in the download directory.
Update 119115-22 will not be downloaded since it already exists in the download directory.
Update 119059-21 will not be downloaded since it already exists in the download directory.
The following patches were not downloaded:
121265-03: 121265-03Unexpected error while accessing the requested patch.
Proxy logs indicate same 403 error as before ("not entitled"), but I also noticed this:
...
2007-02-21 14:28:47 Wed Feb 21 14:28:47 EST 2007(WARNING) => com.sun.patchpro.ut
il.LocalizedMessages@111ded2 <=Corrupt message catalog: locale="en" messageID="p
rogress.message.downloadingarg" default english="Downloading update"
...
Is that meaningful?
Anther run on the new SunUC client "wasdt":
root@wasdt # smpatch download
com.sun.patchpro.util.Percentage@9d5793
119081-25 cannot be validated.
com.sun.patchpro.util.Percentage@d2b64e
124630-03 cannot be validated.
com.sun.patchpro.util.Percentage@1bef1ac
121430-13 cannot be validated.
com.sun.patchpro.util.Percentage@129c445
124188-02 cannot be validated.
com.sun.patchpro.util.Percentage@114a947
121308-08 cannot be validated.
com.sun.patchpro.util.Percentage@17599cc
119254-34 cannot be validated.
com.sun.patchpro.util.Percentage@1c45731
119963-08 cannot be validated.
com.sun.patchpro.util.Percentage@1f52460
120753-03 cannot be validated.
com.sun.patchpro.util.Percentage@1275a34
118676-03 cannot be validated.
com.sun.patchpro.util.Percentage@9319d9
119812-02 cannot be validated.
com.sun.patchpro.util.Percentage@a6e0a9
119042-10 cannot be validated.
com.sun.patchpro.util.Percentage@7fc8b2
119578-30 cannot be validated.
com.sun.patchpro.util.Percentage@15151aa
118833-36 cannot be validated.
com.sun.patchpro.util.Percentage@15ad1da
120780-03 cannot be validated.
com.sun.patchpro.util.Percentage@1875da7
120812-15 cannot be validated.
com.sun.patchpro.util.Percentage@15a3a1
122911-02 cannot be validated.
com.sun.patchpro.util.Percentage@1c2a1ed
com.sun.patchpro.util.Percentage@1f07597
120543-07 cannot be validated.
com.sun.patchpro.util.Percentage@18b9a72
124244-01 cannot be validated.
com.sun.patchpro.util.Percentage@15d4273
124997-01 cannot be validated.
com.sun.patchpro.util.Percentage@1b595f3
121081-06 cannot be validated.
com.sun.patchpro.util.Percentage@87ad67
122525-03 cannot be validated.
com.sun.patchpro.util.Percentage@18952cc
124614-01 cannot be validated.
com.sun.patchpro.util.Percentage@9af0b1
120824-07 cannot be validated.
com.sun.patchpro.util.Percentage@300429
122517-03 cannot be validated.
com.sun.patchpro.util.Percentage@6147d9
123334-04 cannot be validated.
com.sun.patchpro.util.Percentage@b41166
119998-02 cannot be validated.
com.sun.patchpro.util.Percentage@1e2481b
118557-07 cannot be validated.
com.sun.patchpro.util.Percentage@ebf3f0
124922-02 cannot be validated.
com.sun.patchpro.util.Percentage@dc4c81
122032-03 cannot be validated.
com.sun.patchpro.util.Percentage@122dad5
121004-03 cannot be validated.
com.sun.patchpro.util.Percentage@14ce5eb
118918-24 cannot be validated.
com.sun.patchpro.util.Percentage@18abc7b
118815-05 cannot be validated.
com.sun.patchpro.util.Percentage@15c6c8d
120222-15 cannot be validated.
com.sun.patchpro.util.Percentage@dab859
119130-33 cannot be validated.
com.sun.patchpro.util.Percentage@17cff66
120346-06 cannot be validated.
com.sun.patchpro.util.Percentage@163a320
124943-01 cannot be validated.
com.sun.patchpro.util.Percentage@6ac615
120719-02 cannot be validated.
com.sun.patchpro.util.Percentage@1f2be27
124208-01 cannot be validated.
com.sun.patchpro.util.Percentage@1757337
123186-02 cannot be validated.
com.sun.patchpro.util.Percentage@1df3d59
119470-10 cannot be validated.
com.sun.patchpro.util.Percentage@134c5ff
123256-02 cannot be validated.
com.sun.patchpro.util.Percentage@1b3278a
125011-01 cannot be validated.
com.sun.patchpro.util.Percentage@e8f8c5
120068-02 cannot be validated.
com.sun.patchpro.util.Percentage@1248979
119555-04 cannot be validated.
com.sun.patchpro.util.Percentage@1bd9de3
119213-11 cannot be validated.
com.sun.patchpro.util.Percentage@2153fe
118666-11 cannot be validated.
com.sun.patchpro.util.Percentage@1e82b72
118667-11 cannot be validated.
com.sun.patchpro.util.Percentage@17c7988
122860-03 cannot be validated.
com.sun.patchpro.util.Percentage@10eeb26
122761-01 cannot be validated.
com.sun.patchpro.util.Percentage@704cf5
118777-08 cannot be validated.
com.sun.patchpro.util.Percentage@cc7f9e
121118-10 cannot be validated.
com.sun.patchpro.util.Percentage@9c22ff
118712-13 cannot be validated.
com.sun.patchpro.util.Percentage@bdb375
119117-28 cannot be validated.
com.sun.patchpro.util.Percentage@51064e
123938-01 cannot be validated.
com.sun.patchpro.util.Percentage@174f02c
122212-17 cannot be validated.
com.sun.patchpro.util.Percentage@44006e
119548-07 cannot be validated.
com.sun.patchpro.util.Percentage@78529d
119115-22 cannot be validated.
com.sun.patchpro.util.Percentage@d78df0
119059-21 cannot be validated.
com.sun.patchpro.util.Percentage@1a7c484
124457-01 cannot be validated.
Unexpected Failure: java.lang.Throwable: ERROR: Failed to validate the digital signature(s).
# 6
The 403 error when running smpatch is one which we have seen recently, and is currently being investigated by our engineering team.
With regards to the your current setup please can you install the latest SunUC client patch on the client system "wasdt".
This can be downloaded from the following URL:
http://sunsolve.sun.com/pub-cgi/pdownload.pl?target=121119-11&method=h
Once this has been done please can you run the following commands:
On your SunUC proxy "wasdev"
smpatch get
rm /var/sadm/spool/patchsvr/*current.zip
smpatch analyze
On your SunUC proxy "wasdt"
smpatch set patchpro.patch.source=http://bwasdev.(redacted):3816/
smpatch get
smpatch analyze
# 7
You'll be happy to know I've been "upgraded" from the 403 error to a 500 error. Apparently that's also all-too common and under investigation.
Backing up a bit, I manually downloaded and patched both the UC client and proxy with 121118-11 (for the new keys) and 121265-03 (I was getting the 403 error on that patch via smpatch). I was then able to run smpatch to completion on both systems. Well, mostly...
There was this:
Failed to install patch 124614-01.
Utility used to install the update failed with exit code 8.
Checking installed patches...Patchadd is terminating.
Transition old-style patching.
Failed to install patch 124614-01.
ALERT: Failed to install patch 124614-01.
This problem was apparently first documented back in November 2006 and is still broken!! (See: http://forum.java.sun.com/thread.jspa?threadID=5112008[/a])
There were also some single-user mode patches that failed to install during shutdown. Is there a log for that somewhere? "Failed" doesn't tell me much:
root@wasdt # shutdown -g0 -y -i6
Shutdown started.Thu Feb 22 15:02:36 EST 2007
Changing to init state 6 - please wait
Broadcast Message from root (console) on wasdt Thu Feb 22 15:02:36...
THE SYSTEM wasdt IS BEING SHUT DOWN NOW ! ! !
Log off now or risk your files being damaged
showmount: wasdt: RPC: Program not registered
root@wasdt # svc.startd: The system is coming down. Please wait.
svc.startd: 64 system services are now being stopped.
Feb 22 15:02:45 wasdt rpcbind: rpcbind terminating on signal.
Feb 22 15:02:46 wasdt syslogd: going down on signal 15
Installing update 120900-04 Succeeded
Installing update 121133-02 Succeeded
Installing update 119254-34 Succeeded
Installing update 119578-30 Succeeded
Installing update 118833-36 Succeeded
Installing update 120780-03 Failed
Installing update 121474-01 Failed
Installing update 122525-03 Failed
Installing update 120824-07 Failed
Installing update 122517-03 Failed
Installing update 123334-04 Failed
Installing update 119998-02 Failed
Installing update 118371-07 Failed
Installing update 118557-07 Failed
Installing update 124922-02 Failed
Installing update 122032-03 Failed
Installing update 121004-03 Failed
Installing update 118918-24 Failed
Installing update 119130-33 Failed
Installing update 124208-01 Failed
Installing update 120469-05 Failed
Installing update 123186-02 Failed
Installing update 120061-02 Failed
Installing update 125011-01 Failed
Installing update 119546-07 Failed
svc.startd: The system is down.
syncing file systems... done
rebooting...
Anyway, moving right along... I rebooted the patched UC proxy, ran smpatch download again and promptly got:
root@bwasdev # smpatch download
Error: Unable to download document : "xml/motd.xml"
Cannot connect to retrieve xml/motd.xml: getupdates1.sun.com
Unable to display any message of the day notices from Sun Microsystems. Refer to the log file for additional information.
The following patches were not downloaded:
118833-36: This update could not be found
124614-01: This update could not be found
119998-02: This update could not be found
124922-02: This update could not be found
119130-33: This update could not be found
125011-01: This update could not be found
That's when I looked at the proxy logs and found the 500 errors.
So then I pounded my head on my desk for a few minutes and went home.
Regarding the requested info...
SunUC proxy bwasdev:
root@bwasdev # smpatch get
patchpro.backout.directory"" ""
patchpro.baseline.directory-/var/sadm/spool
patchpro.download.directory/var/sadm/spool /var/sadm/spool
patchpro.install.types -rebootafter:reconfigafter:standard
patchpro.patch.sourcehttp://bwasdev.(redacted):3816/solaris/https://getupdates1.sun.com/
patchpro.patchsetcurrent current
patchpro.proxy.host -""
patchpro.proxy.passwd********
patchpro.proxy.port 80 8080
patchpro.proxy.user "" ""
root@bwasdev # rm /var/sadm/spool/patchsvr/*current.zip
/var/sadm/spool/patchsvr/*current.zip: No such file or directory
root@bwasdev # smpatch analyze
Error: Unable to download document : "xml/motd.xml"
Cannot connect to retrieve xml/motd.xml: getupdates1.sun.com
Unable to display any message of the day notices from Sun Microsystems. Refer to the log file for additional information.
118833-36 SunOS 5.10: kernel patch
124614-01 SunOS 5.10: sconadm proxy: UnknownHostException
119998-02 SunOS 5.10: arp, ip, ipsecah drivers patch
124922-02 SunOS 5.10: ld.so.1 patch
119130-33 SunOS 5.10: Sun Fibre Channel Device Drivers
125011-01 SunOS 5.10: sendmail patch
SunUC client wasdt:
root@wasdt # smpatch set patchpro.patch.source=http://bwasdev.(redacted):3816/
root@wasdt # smpatch get
patchpro.backout.directory-""
patchpro.baseline.directory-/var/sadm/spool
patchpro.download.directory-/var/sadm/spool
patchpro.install.types -rebootafter:reconfigafter:standard
patchpro.patch.sourcehttp://bwasdev.(redacted):3816/https://getupdates1.sun.com/
patchpro.patchset-current
patchpro.proxy.host -""
patchpro.proxy.passwd********
patchpro.proxy.port -8080
patchpro.proxy.user -""
root@wasdt # smpatch analyze
Error: Unable to download document : "xml/motd.xml"
Cannot connect to retrieve motd.xml: getupdates1.sun.com
Unable to display any message of the day notices from Sun Microsystems. Refer to the log file for additional information.
Failure: Cannot connect to retrieve current.zip: getupdates1.sun.com
Doesn't work without the /solaris/ in the URL. I put it back:
root@wasdt # smpatch download
Error: Unable to download document : "xml/motd.xml"
Cannot connect to retrieve xml/motd.xml: getupdates1.sun.com
Unable to display any message of the day notices from Sun Microsystems. Refer to the log file for additional information.
The following patches were not downloaded:
120780-03: This update could not be found
121474-01: This update could not be found
122525-03: This update could not be found
124614-01: This update could not be found
120824-07: This update could not be found
122517-03: This update could not be found
123334-04: This update could not be found
119998-02: This update could not be found
118371-07: This update could not be found
118557-07: This update could not be found
124922-02: This update could not be found
122032-03: This update could not be found
121004-03: This update could not be found
118918-24: This update could not be found
119130-33: This update could not be found
124208-01: This update could not be found
120469-05: This update could not be found
123186-02: This update could not be found
120061-02: This update could not be found
125011-01: This update could not be found
119546-07: This update could not be found
From the proxy log:
Feb 22 16:15:03 bwasdev root: => com.sun.patchpro.server.ServerPatchServiceProvider@2264da <=Status code 500 returned. An unexpected error occurred inside the server that prevented it from fulfilling the request.
Feb 22 16:15:03 bwasdev root: => com.sun.patchpro.server.ServerPatchServiceProvider@2264da <=Signing certificate has been revoked.: 335544443
Feb 22 16:15:04 bwasdev root: => com.sun.patchpro.server.GroupPatchDownloader@b34b1 <=com.sun.patchpro.server.DownloadPatchException:
So... Any ideas?
# 8
HiPlease have a look for this patch on the Proxy and on the Client :#showrev -p | grep 119254Mod
# 9
Both up to rev 34, which appears to be the latest...
SunUC proxy:
root@bwasdev # showrev -p | grep 'Patch: 119254'
Patch: 119254-14 Obsoletes: 119015-03 Requires: 120900-03 Incompatibles: Packages: SUNWswmt, SUNWpkgcmdsu
Patch: 119254-19 Obsoletes: 119015-03 Requires: 121333-02 Incompatibles: Packages: SUNWswmt, SUNWpkgcmdsu
Patch: 119254-27 Obsoletes: 119015-03 Requires: 121333-02 Incompatibles: Packages: SUNWswmt, SUNWpkgcmdsu
Patch: 119254-28 Obsoletes: 119015-03 Requires: 121133-02 Incompatibles: Packages: SUNWswmt, SUNWpkgcmdsu
Patch: 119254-31 Obsoletes: 119015-03 Requires: 121133-02 Incompatibles: Packages: SUNWswmt, SUNWpkgcmdsu
Patch: 119254-34 Obsoletes: 119015-03 Requires: 121133-02 Incompatibles: Packages: SUNWswmt, SUNWpkgcmdsu
SunUC client:
root@wasdt # showrev -p | grep 'Patch: 119254'
Patch: 119254-14 Obsoletes: 119015-03 Requires: 120900-03 Incompatibles: Packages: SUNWswmt, SUNWpkgcmdsu
Patch: 119254-19 Obsoletes: 119015-03 Requires: 121333-02 Incompatibles: Packages: SUNWswmt, SUNWpkgcmdsu
Patch: 119254-34 Obsoletes: 119015-03 Requires: 121133-02 Incompatibles: Packages: SUNWswmt, SUNWpkgcmdsu
# 10
I have been looking through our existing telephone support cases and it would appear that you have an open support case for this issue.
As such we would recommend that you use this case to track this issue, as we will be able to request additional infromation and logs and analysis of those logs,
Please can you respond to the email sent to you on the 23/02/2007, and reference this foum thread:
http://forum.java.sun.com/thread.jspa?forumID=871&threadID=5138982
# 11
I called telephone support after a couple of days of negative results here. I need this working pretty soon. I did reply back to the 23/02/2007 email with the requested data and haven't heard back since. The reason for continuing this forum thread is so others with the same problem will (hopefully) have an easier time.
As far any possible insinuations of my "being greedy" by having more than one person working on "my problem", my expecation is that there should be at least a small army working on the quagmire we lovingly call SunUC. It's about the poorest excuse for a piece of software I've seen in a long time and yes, that's even counting Microsoft products. This is a "critical" tool and it is not possible to have too many people working to tame it into something useful. (Not that I feel strongly about it or anything...)
-cw-
# 12
Sorry if that was a bit strong. I'm trying to supress vast and ever-growing frustration with SunUC, with limited success. Let me just aplogize now for what I've already said, whatever I say in the future, and for the squadron of flying ninja monkeys I just unleashed on the SunUC developers....
Seriously, please understand it's difficult to maintain a civil and professional dialogue after I've burned countless hours fighting with a tool that was heavily marketed as something that would make my job easier. (Hint: It hasn't.) It only makes matters worse that no end to this madness is apparent at this time. Luckily I'm a big fan of irony, which is helping to keep me mildly sane under very trying circumstances.
-cw-
# 13
Dear CharlieI am expecting one of the engineers to phone you today.Mod.
