patchsvr not downloading patches for clients.
My intended Patch proxy host is working OK with smpatch. Contract patches etc come down OK.
My patchsvr config;
[root@excalibur] # patchsvr setup -l
Patch source URL: https://getupdates1.sun.com/solaris/
Cache location: /var/sadm/spool/patchsvr
Web proxy host name: threshold
Web proxy port number: 8080
[root@excalibur] #
However when I point other hosts smpatch to this host for their patches, I simply get the message;
[root@threshold] # smpatch update
No patches required.
I was expecting my patchsvr host to download and cache patches on behalf of what ever hosts connected - those hosts not requiring Sun username/password/contract details to be configured with smpatch - just simply pointed at a patchsvr that already has smpatch contract downloads working?
Any ideas?
Bret
# 1
Please can you run the following commands on:SunUC client thresholdshowrev -p | egrep '121118|121119'smpatch getSunUC proxy excaliburshowrev -p | egrep '121118|121119|119788|119789'
# 2
Hello,
Thanks for looking into this;
In order to set this up I followed; http://www.sun.com/bigadmin/features/hub_articles/local_patch_server.jsp
[root@threshold] # showrev -p | egrep '121118|121119'
Patch: 121118-10 Obsoletes: Requires: 121453-02 Incompatibles: Packages: SUNWcsmauth, SUNWppror, SUNWpprou, SUNWupdatemgru, SUNWupdatemgrr, SUNWppro-plugin-sunos-base
Patch: 121118-06 Obsoletes: Requires: 121453-02 Incompatibles: Packages: SUNWppror, SUNWpprou, SUNWupdatemgru, SUNWupdatemgrr, SUNWppro-plugin-sunos-base
Patch: 121118-08 Obsoletes: Requires: 121453-02 Incompatibles: Packages: SUNWppror, SUNWpprou, SUNWupdatemgru, SUNWupdatemgrr, SUNWppro-plugin-sunos-base
Patch: 119788-07 Obsoletes: Requires: 121118-08 Incompatibles: Packages: SUNWppror, SUNWpprou, SUNWpsvrr, SUNWpsvru
[root@threshold] # smpatch get
patchpro.backout.directory"" ""
patchpro.baseline.directory-/var/sadm/spool
patchpro.download.directory/var/sadm/spool /var/sadm/spool
patchpro.install.types interactive:rebootafter:rebootimmediate:reconfigafter:reconfigimmediate:singleu ser:standardrebootafter:reconfigafter:standard
patchpro.patch.sourcehttp://excalibur:3816/solaris/ https://getupdates1.sun.com/
patchpro.patchset-current
patchpro.proxy.host threshold""
patchpro.proxy.passwd********
patchpro.proxy.port 80808080
patchpro.proxy.user "" ""
[root@excalibur] # showrev -p | egrep '121118|121119|119788|119789'
Patch: 121118-10 Obsoletes: Requires: 121453-02 Incompatibles: Packages: SUNWcsmauth, SUNWppror, SUNWpprou, SUNWupdatemgru, SUNWupdatemgrr, SUNWppro-plugin-sunos-base
Patch: 121118-06 Obsoletes: Requires: 121453-02 Incompatibles: Packages: SUNWppror, SUNWpprou, SUNWupdatemgru, SUNWupdatemgrr, SUNWppro-plugin-sunos-base
Patch: 119788-02 Obsoletes: Requires: 119107-02 Incompatibles: Packages: SUNWppror, SUNWpprou
Patch: 121118-08 Obsoletes: Requires: 121453-02 Incompatibles: Packages: SUNWppror, SUNWpprou, SUNWupdatemgru, SUNWupdatemgrr, SUNWppro-plugin-sunos-base
Patch: 119788-07 Obsoletes: Requires: 121118-08 Incompatibles: Packages: SUNWppror, SUNWpprou, SUNWpsvrr, SUNWpsvru
Regards,
Bret
# 3
The client patch "121118-08" contained the new certificates update, which updated the default:
"patchpro.patch.source"
On the SunUC client systems to:
"https://getupdates1.sun.com/"
This must also be the:
"Patch source URL"
On the SunUC proxy.
Also the introduction of the proxy patch "119788-07" required the:
"patchpro.patch.source"
Of the SunUC clients configured to use the SunUC proxy from:
"http://<proxy_name_or_ip>:3816/solaris/"
To:
"http://<proxy_name_or_ip>:3816/"
In effect dropping the trailing "solaris/".
As such please can you run the following commands on:
SunUC proxy "excalibur"
patchsvr stop
patchsvr setup -p https://getupdates1.sun.com/
patchsvr start
patchsvr enable
patchsvr setup -l
SunUC client "threshold"
smptach set patchpro.patch.source=http://excalibur:3816/
smpatch get
smpatch analyze
Please can you forward us the output generated from the above.
# 4
[root@excalibur] # patchsvr stop
Shutting down Local Patch Server
[root@excalibur] # patchsvr setup -p https://getupdates1.sun.com/
[root@excalibur] # patchsvr start
Starting Local Patch Server
[root@excalibur] # patchsvr enable
[root@excalibur] # patchsvr setup -l
Patch source URL: https://getupdates1.sun.com/
Cache location: /var/sadm/spool/patchsvr
Web proxy host name: threshold
Web proxy port number: 8080
[root@excalibur] #
[root@threshold] # smpatch set patchpro.patch.source=http://excalibur:3816/
[root@threshold] # smpatch get
patchpro.backout.directory"" ""
patchpro.baseline.directory-/var/sadm/spool
patchpro.download.directory/var/sadm/spool /var/sadm/spool
patchpro.install.types interactive:rebootafter:rebootimmediate:reconfigafter:reconfigimmediate:singleu ser:standardrebootafter:reconfigafter:standard
patchpro.patch.sourcehttp://excalibur:3816/ https://getupdates1.sun.com/
patchpro.patchset-current
patchpro.proxy.host threshold""
patchpro.proxy.passwd********
patchpro.proxy.port 80808080
patchpro.proxy.user "" ""
[root@threshold] # smpatch analyze
Failure: Cannot connect to retrieve current.zip: Service Unavailable
# 5
Please can you run the following commands:
On your SunUC client "threshold"
# ping excalibur
# ping -s excalibur
# traceroute -p 3816 excalibur
# telnet excalibur 3816
If you are able to sucessfully connect to the SunUC patch proxy "excalibur" please can you run the following command:
# smpatch analyze -C patchpro.log.level=3 -C patchpro.debug=true
Please can you forward us the output generated from the above.
# 6
Hello,
[root@threshold] # ping excalibur
excalibur is alive
[root@threshold] # ping -s excalibur
PING excalibur: 56 data bytes
64 bytes from excalibur.2.168.192.in-addr.arpa (192.168.2.120): icmp_seq=0. time=0.591 ms
^C
-excalibur PING Statistics-
1 packets transmitted, 1 packets received, 0% packet loss
round-trip (ms) min/avg/max/stddev = 0.591/0.591/0.591/NaN
[root@threshold] # traceroute -p 3816 excalibur
traceroute: Warning: Multiple interfaces found; using 192.168.2.130 @ hme0
traceroute to excalibur (192.168.2.120), 30 hops max, 40 byte packets
1 excalibur.2.168.192.in-addr.arpa (192.168.2.120) 0.504 ms 0.241 ms 0.381 ms
[root@threshold] # telnet excalibur 3816
Trying 192.168.2.120...
Connected to excalibur.bret.net.nz.
Escape character is '^]'.
^]
telnet> close
[root@threshold] # smpatch analyze -C patchpro.log.level=3 -C patchpro.debug=true
Effective proxy host : "threshold"
Effective proxy port : "8080"
Effective proxy user : ""
Effective proxy host : "threshold"
Effective proxy port : "8080"
Effective proxy user : ""
... Submitting download request against a GUUS server
... ... Hostname of URL is excalibur
... ... Filename of URL is /detector/detectors.jar
... ... File path portion of URL is /detector/detectors.jar
... Submitting download request against a GUUS server
... ... Hostname of URL is excalibur
... ... Filename of URL is /database/current.zip
... ... File path portion of URL is /database/current.zip
... Caught IO Exception.
... Caught IO Exception.
((HttpURLConnection)connection).getResponseCode() : 503
((HttpURLConnection)connection).getResponseMessage() : Service Unavailable
((HttpURLConnection)connection).getResponseCode() : 503
((HttpURLConnection)connection).getResponseMessage() : Service Unavailable
Failure: Cannot connect to retrieve detectors.jar: Service Unavailable
[root@threshold] #
# 7
On excalibur, could you run the following:# patchsvr stop; sleep 10# ps -fu root | grep java | grep ccand kill any processes found by the ps line.Then run:# patchsvr startand try smpatch from 'threshold' again.
# 8
Hello,
On excalibur I've patchsvc stop'ed killed what java processes remained, restarted patchsvr but still get the following on client threshold;
[root@threshold] # smpatch analyze -C patchpro.log.level=3 -C patchpro.debug=true
Effective proxy host : "threshold"
Effective proxy port : "8080"
Effective proxy host : "threshold"
Effective proxy port : "8080"
Effective proxy user : ""
Effective proxy user : ""
... Submitting download request against a GUUS server
... ... Hostname of URL is excalibur
... ... Filename of URL is /database/current.zip
... ... File path portion of URL is /database/current.zip
... Submitting download request against a GUUS server
... ... Hostname of URL is excalibur
... ... Filename of URL is /detector/detectors.jar
... ... File path portion of URL is /detector/detectors.jar
... Caught IO Exception.
((HttpURLConnection)connection).getResponseCode() : 503
((HttpURLConnection)connection).getResponseMessage() : Service Unavailable
... Caught IO Exception.
((HttpURLConnection)connection).getResponseCode() : 503
((HttpURLConnection)connection).getResponseMessage() : Service Unavailable
Failure: Cannot connect to retrieve current.zip: Service Unavailable
[root@threshold] #
But I can however connection to the proxysvr port on excalibur.
Regards,
Bret
# 9
We'll need to review some more detailed data from the host (such as the proxy logs)thats not appropriate for posting on the forum. As such it's best that you raise a support case with your local solution centre so we can investigate further.
