How to sconadm register behind "firewall"?

Hi,

We are using Sun Web Hosted Update Connection services.

The registration feature of sconadm works fine when the systems can see Port 443

outbound and I can register all these hosts with no problem.

The systems that are "behind" the "firewall" (quotes intended for clarity as it is not

a real firewall), do not have any way to get to the updateconnection server

because Ports 80 & 443 are administratively blocked for these Ports and furthermore,

our proxy server does not carry SSL, which is instead done via Direct connections.

So, my question is:

How do I register these important systems when the Ports required are not

available?

Can I run sconadm on another host and using the registration.properties file,

can I just input the "Host=" field and it will do the same thing?Sconadm

is very optimistic as it will often report "success" when nothing is done.

How do I know it's working?!

Is there a web page I can go to, that will accept the same info as sconadm

that I can use to register these systems so they can obtain their full entitlements?

(If there is not one, there should be, please Sun!).

Once the systems are registered, I have no problems patching them as

they can get to my patchsvr proxy no worries.

rachel

[1371 byte] By [virag064a] at [2007-11-26 19:37:16]
# 1

You only need to register one host: your patch server. All other hosts pull from this host. It is common to place a patchsvr between 2 firewalls, i.e: in a DMZ.

> The systems that are "behind" the "firewall" (quotes intended for

> clarity as it is not a real firewall),

If it is "supposed" to keep the "bad blokes" out, it is a "firewall" as firewall is an abstract term.

> So, my question is: How do I register these important

> systems when the ports required are not available?

Sun Update Connection does not support an offline mode of operation, or registration process. The host MUST connect to the Internet, which maybe via proxies, firewalls, etc.

> Sconadm is very optimistic as it will often report "success" when nothing is done.

> How do I know it's working?!

This command will return data when the host has been registered:

# /usr/lib/cc-ccr/bin/ccr -g cns.assetid

> Once the systems are registered, I have no problems patching them as

> they can get to my patchsvr proxy no worries.

Only the patchsvr needs to be registered to pull patches, so I think you have done all that is neccessary.

--

Modski

ForumModeratora at 2007-7-9 22:14:09 > top of Java-index,Administration Tools,Sun Update Connection-System...