[pca] Problem downloading patches with local proxy
Gurugunti, Mahesh
Mahesh.Gurugunti at alliancebernstein.com
Thu Sep 10 18:49:57 CEST 2009
My downloads seems to broken on the same lines, still unable to
download. For example as below:
-bash-3.00#pca -d 141910
Reading cffile /etc/pca.conf
Option download: 1
Option xrefdir: /pcarepo
Option nocheckxref: 1
Option patchdir: /pcarepo
Option user: xxx
Option passwd: xxxx
Option wgetproxy: http://gmdvproxy.acml.com:8080
Option debug: 1
ARGV: 141910
Version: 20090827-01
Config files: ./../etc/pca.conf /etc/pca.conf
Found /usr/sfw/bin/wget (1.10.2, 11002, https)
Using /usr/sfw/bin/wget
Prerequisites for threads not met, setting threads to 0
Never update
Expanded patch list: 141910
Reading from /usr/bin/showrev -p 2>/dev/null
Using /pcarepo/patchdiag.xref from Jul/16/09
Bad patch installed: 126365-06
120011-14 required by 141910: already installed
Host: amainf03 (SunOS 5.10/Generic_127127-11/sparc/sun4u)
List: 141910 (1/65)
Patch IR CR RSB Age Synopsis
------ -- - -- --- ---
-------------------------------------------------------
141910 -- < 01 -S- 65 SunOS 5.10: ntpq patch
Looking for 141910-01 (1/1)
Locking /pcarepo/.pcaLock.download.141910-01 failed
Locking /pcarepo/.pcaLock.download.141910-01 failed
Locking /pcarepo/.pcaLock.download.141910-01 failed
Locking /pcarepo/.pcaLock.download.141910-01 failed
Locking /pcarepo/.pcaLock.download.141910-01 failed
Locking /pcarepo/.pcaLock.download.141910-01 failed
Locking /pcarepo/.pcaLock.download.141910-01 failed
Locking /pcarepo/.pcaLock.download.141910-01 failed
Locking /pcarepo/.pcaLock.download.141910-01 failed
Locking /pcarepo/.pcaLock.download.141910-01 failed
Locking /pcarepo/.pcaLock.download.141910-01 failed
Locking /pcarepo/.pcaLock.download.141910-01 failed
Locking /pcarepo/.pcaLock.download.141910-01 failed
I hope the sun has updated the patch to address this download problem.
-----Original Message-----
From: pca-bounces at lists.univie.ac.at
[mailto:pca-bounces at lists.univie.ac.at] On Behalf Of Bliss, Kevin L
Sent: Wednesday, September 09, 2009 4:20 PM
To: 'PCA (Patch Check Advanced) Discussion'
Subject: Re: [pca] Problem downloading patches with local proxy
Has the patch gone in yet? I am still unable to download patches using
pca, wget, or curl. I can download the via browser so it is probably
not an entitlement issue.
-----Original Message-----
From: pca-bounces at lists.univie.ac.at
[mailto:pca-bounces at lists.univie.ac.at] On Behalf Of Don O'Malley
Sent: Wednesday, September 09, 2009 3:39 AM
To: PCA (Patch Check Advanced) Discussion
Subject: Re: [pca] Problem downloading patches with local proxy
Hi Richard,
We have identified a bug in the new Entitlement Service that is called
prior to proceeding with a patch download from Akamai.
The bug usually leads to transient 403 or 500 errors from the
Entitlement Service, similar to what you are seeing below, though I have
not seen the errors persist like this on subsequent retries before.
I have tested this fix in Beta over the past week almost now and have
confirmed that it will eliminate these errors (famous last words, I
know!).
The good news is that the fix is due to be pushed to production in
Thursday morning (Pacific Time).
Once this is live you should no longer see these errors (unless of
course you really aren't entitled to a patch, in which case you will get
a 403).
Sorry for the inconvenience.
Best,
-Don
Richard Skelton wrote:
> Hi Martin,
>
> Martin Paul wrote:
>> Richard Skelton wrote:
>>
>>> I have set-up and running a site PCA proxy which worked fine until
>>> Sun changed SunSolve a few weeks ago.
>>> The last two day I am not getting any new patches.
>>>
>>
>> So was this the first time you tried to download patches after the
>> SunSolve change or did it work at least once after the change?
>>
> Has worked on and off for the last few weeks.
>> You pca setup looks fine, I don't see a problem with that.
>>
>>
>>> https://sunsolve.sun.com/pdownload.do?target=142290-01&method=h
>>> => `/var/apache2/htdocs/pca/142290-01.tmp'
>>> Resolving proxy1.muc.infineon.com... 172.23.16.161
>>> Connecting to proxy1.muc.infineon.com|172.23.16.161|:81...
connected.
>>> Proxy request sent, awaiting response... 503 Service Unavailable
>>> 08:16:25 ERROR 503: Service Unavailable.
>>>
>>
>> So your webproxy returns an error when its being asked to download a
>> patch from SunSolve. If it writes a logfile, please check that for
>> further details.
>>
>> Two things you might look into:
>>
>> Since the change on SunSolve, HTTPS is required to download patches
>> (before that HTTP was fine). Does you webproxy support HTTPS
requests?
>>
>> Look at
>> http://sunsolve.sun.com/search/document.do?assetkey=1-9-240066-1 -
>> there's a list of hosts you might have to add to your firewall rules,
>> to allow the webproxy to access them (sunsolve.sun.com is not enough
>> anymore).
>>
>> Martin.
>>
>>
> Today all the new patches were downloaded using PCA without changing
> anything from yesterday.
> As I has debug enabled I could see each patch download. I did up the
> download retries from 5 to 15.
> Still seeing lots of retries:-
>
> Wed Sep 9 09:49:34 2009: Option xrefdir: /var/apache2/htdocs/pca
> Wed Sep 9 09:49:34 2009: Option nocache: 1
> Wed Sep 9 09:49:34 2009: Option patchdir: /var/apache2/htdocs/pca
> Wed Sep 9 09:49:34 2009: Option user: xxxxxxx
> Wed Sep 9 09:49:34 2009: Option passwd: xxxxxxxx
> Wed Sep 9 09:49:34 2009: Option dltries: 15
> Wed Sep 9 09:49:34 2009: Option wgetproxy:
> http://proxy1.muc.infineon.com:81
> Wed Sep 9 09:49:34 2009: Option debug: 1
> Wed Sep 9 09:49:34 2009: Option proxy: 141919-02
> Wed Sep 9 09:49:34 2009: ARGV: 141919-02
> Wed Sep 9 09:49:34 2009: Version: 20090827-01
> Wed Sep 9 09:49:34 2009: Config files: /etc/pca-proxy.conf
> Wed Sep 9 09:49:34 2009: Found /usr/sfw/bin/wget (1.10.2, 11002,
https)
> Wed Sep 9 09:49:34 2009: Using /usr/sfw/bin/wget
> Wed Sep 9 09:49:34 2009: Prerequisites for threads not met, setting
> threads to 0
> Wed Sep 9 09:49:34 2009: Never update
> Wed Sep 9 09:49:34 2009: Requested file: 141919-02
> Wed Sep 9 09:49:34 2009: Trying https://sunsolve.sun.com/ (1/15)
> Wed Sep 9 09:49:34 2009: /usr/sfw/bin/wget
> "https://sunsolve.sun.com/pdownload.do?target=141919-02&method=h"
> --execute https_proxy=http://proxy1.muc.infineon.com:81
> --ca-certificate=/var/apache2/cgi-bin/pca-proxy.cgi
> --header="Authorization: Basic cnNrZWx0b246YnRjY3dqY2FndGU=" -O
> /var/apache2/htdocs/pca/141919-02.tmp >>/tmp/pca-proxy-debug.txt 2>&1
> --09:49:34--
> https://sunsolve.sun.com/pdownload.do?target=141919-02&method=h
> => `/var/apache2/htdocs/pca/141919-02.tmp'
> Resolving proxy1.muc.infineon.com... 172.23.16.161
> Connecting to proxy1.muc.infineon.com|172.23.16.161|:81... connected.
> Proxy request sent, awaiting response... 302 Moved Temporarily
> Location: https://getupdates2.sun.com/all_unsigned/141919-02.zip
> [following]
> --09:49:36-- https://getupdates2.sun.com/all_unsigned/141919-02.zip
> => `/var/apache2/htdocs/pca/141919-02.tmp'
> Connecting to proxy1.muc.infineon.com|172.23.16.161|:81... connected.
> Proxy request sent, awaiting response... 403 You are not entitled to
> retrieve this content.
> 09:49:39 ERROR 403: You are not entitled to retrieve this content..
>
> Wed Sep 9 09:49:39 2009: Failed
> Wed Sep 9 09:49:43 2009: Trying https://sunsolve.sun.com/ (2/15)
> Wed Sep 9 09:49:43 2009: /usr/sfw/bin/wget
> "https://sunsolve.sun.com/pdownload.do?target=141919-02&method=h"
> --execute https_proxy=http://proxy1.muc.infineon.com:81
> --ca-certificate=/var/apache2/cgi-bin/pca-proxy.cgi
> --header="Authorization: Basic cnNrZWx0b246YnRjY3dqY2FndGU=" -O
> /var/apache2/htdocs/pca/141919-02.tmp >>/tmp/pca-proxy-debug.txt 2>&1
> --09:49:43--
> https://sunsolve.sun.com/pdownload.do?target=141919-02&method=h
> => `/var/apache2/htdocs/pca/141919-02.tmp'
> Resolving proxy1.muc.infineon.com... 172.23.16.161
> Connecting to proxy1.muc.infineon.com|172.23.16.161|:81... connected.
> Proxy request sent, awaiting response... 302 Moved Temporarily
> Location: https://getupdates2.sun.com/all_unsigned/141919-02.zip
> [following]
> --09:49:45-- https://getupdates2.sun.com/all_unsigned/141919-02.zip
> => `/var/apache2/htdocs/pca/141919-02.tmp'
> Connecting to proxy1.muc.infineon.com|172.23.16.161|:81... connected.
> Proxy request sent, awaiting response... 403 You are not entitled to
> retrieve this content.
> 09:49:48 ERROR 403: You are not entitled to retrieve this content..
>
> Wed Sep 9 09:49:48 2009: Failed
> Wed Sep 9 09:49:54 2009: Trying https://sunsolve.sun.com/ (3/15)
> Wed Sep 9 09:49:54 2009: /usr/sfw/bin/wget
> "https://sunsolve.sun.com/pdownload.do?target=141919-02&method=h"
> --execute https_proxy=http://proxy1.muc.infineon.com:81
> --ca-certificate=/var/apache2/cgi-bin/pca-proxy.cgi
> --header="Authorization: Basic cnNrZWx0b246YnRjY3dqY2FndGU=" -O
> /var/apache2/htdocs/pca/141919-02.tmp >>/tmp/pca-proxy-debug.txt 2>&1
> --09:49:54--
> https://sunsolve.sun.com/pdownload.do?target=141919-02&method=h
> => `/var/apache2/htdocs/pca/141919-02.tmp'
> Resolving proxy1.muc.infineon.com... 172.23.16.161
> Connecting to proxy1.muc.infineon.com|172.23.16.161|:81... connected.
> Proxy request sent, awaiting response... 302 Moved Temporarily
> Location: https://getupdates2.sun.com/all_unsigned/141919-02.zip
> [following]
> --09:49:56-- https://getupdates2.sun.com/all_unsigned/141919-02.zip
> => `/var/apache2/htdocs/pca/141919-02.tmp'
> Connecting to proxy1.muc.infineon.com|172.23.16.161|:81... connected.
> Proxy request sent, awaiting response... 403 You are not entitled to
> retrieve this content.
> 09:49:59 ERROR 403: You are not entitled to retrieve this content..
>
> Wed Sep 9 09:49:59 2009: Failed
> Wed Sep 9 09:50:07 2009: Trying https://sunsolve.sun.com/ (4/15)
> Wed Sep 9 09:50:07 2009: /usr/sfw/bin/wget
> "https://sunsolve.sun.com/pdownload.do?target=141919-02&method=h"
> --execute https_proxy=http://proxy1.muc.infineon.com:81
> --ca-certificate=/var/apache2/cgi-bin/pca-proxy.cgi
> --header="Authorization: Basic cnNrZWx0b246YnRjY3dqY2FndGU=" -O
> /var/apache2/htdocs/pca/141919-02.tmp >>/tmp/pca-proxy-debug.txt 2>&1
> --09:50:07--
> https://sunsolve.sun.com/pdownload.do?target=141919-02&method=h
> => `/var/apache2/htdocs/pca/141919-02.tmp'
> Resolving proxy1.muc.infineon.com... 172.23.16.161
> Connecting to proxy1.muc.infineon.com|172.23.16.161|:81... connected.
> Proxy request sent, awaiting response... 302 Moved Temporarily
> Location: https://getupdates2.sun.com/all_unsigned/141919-02.zip
> [following]
> --09:50:09-- https://getupdates2.sun.com/all_unsigned/141919-02.zip
> => `/var/apache2/htdocs/pca/141919-02.tmp'
> Connecting to proxy1.muc.infineon.com|172.23.16.161|:81... connected.
> Proxy request sent, awaiting response... 403 You are not entitled to
> retrieve this content.
> 09:50:13 ERROR 403: You are not entitled to retrieve this content..
>
> Wed Sep 9 09:50:13 2009: Failed
> Wed Sep 9 09:50:23 2009: Trying https://sunsolve.sun.com/ (5/15)
> Wed Sep 9 09:50:23 2009: /usr/sfw/bin/wget
> "https://sunsolve.sun.com/pdownload.do?target=141919-02&method=h"
> --execute https_proxy=http://proxy1.muc.infineon.com:81
> --ca-certificate=/var/apache2/cgi-bin/pca-proxy.cgi
> --header="Authorization: Basic cnNrZWx0b246YnRjY3dqY2FndGU=" -O
> /var/apache2/htdocs/pca/141919-02.tmp >>/tmp/pca-proxy-debug.txt 2>&1
> --09:50:23--
> https://sunsolve.sun.com/pdownload.do?target=141919-02&method=h
> => `/var/apache2/htdocs/pca/141919-02.tmp'
> Resolving proxy1.muc.infineon.com... 172.23.16.161
> Connecting to proxy1.muc.infineon.com|172.23.16.161|:81... connected.
> Proxy request sent, awaiting response... 302 Moved Temporarily
> Location: https://getupdates2.sun.com/all_unsigned/141919-02.zip
> [following]
> --09:50:25-- https://getupdates2.sun.com/all_unsigned/141919-02.zip
> => `/var/apache2/htdocs/pca/141919-02.tmp'
> Connecting to proxy1.muc.infineon.com|172.23.16.161|:81... connected.
> Proxy request sent, awaiting response... 302 Moved Temporarily
> Location:
>
https://a248.e.akamai.net/f/248/21808/15m/sun.download.akamai.com/21808/
patches/patchroot/all_unsigned/141919-02.zip?AuthParam=1252486347_4ac168
c3231307eeab0bc19f6763a316&TUrl=L0QdUQV8Z4i0fdED3QTP3SJDWA8FMyaJsHfIWf4X
29kTWQpKEzIbwqFuyRPZ&TicketId=3q3ymVCONx5U&GroupName=SWUP&BHost=sdlc3g.s
un.com&FilePath=/patches/patchroot/all_unsigned/141919-02.zip&File=14191
9-02.zip
> [following]
> --09:50:28--
>
https://a248.e.akamai.net/f/248/21808/15m/sun.download.akamai.com/21808/
patches/patchroot/all_unsigned/141919-02.zip?AuthParam=1252486347_4ac168
c3231307eeab0bc19f6763a316&TUrl=L0QdUQV8Z4i0fdED3QTP3SJDWA8FMyaJsHfIWf4X
29kTWQpKEzIbwqFuyRPZ&TicketId=3q3ymVCONx5U&GroupName=SWUP&BHost=sdlc3g.s
un.com&FilePath=/patches/patchroot/all_unsigned/141919-02.zip&File=14191
9-02.zip
>
> => `/var/apache2/htdocs/pca/141919-02.tmp'
> Connecting to proxy1.muc.infineon.com|172.23.16.161|:81... connected.
> Proxy request sent, awaiting response... 200 OK
> Length: 148,553 (145K) [application/zip]
>
> 0K .......... .......... .......... .......... .......... 34%
> 111.84 KB/s
> 50K .......... .......... .......... .......... .......... 68%
> 399.69 KB/s
> 100K .......... .......... .......... .......... ..... 100%
> 494.61 KB/s
>
> 09:50:29 (218.71 KB/s) - `/var/apache2/htdocs/pca/141919-02.tmp' saved
> [148553/148553]
>
> Wed Sep 9 09:50:29 2009: Done
>
-----------------------------------------------------------------------------------
The information contained in the linked e-mail transmission and any
attachments may be privileged and confidential and is intended only for
the use of the person(s) named in the linked e-mail transmission. If you
are not the intended recipient, or an employee or agent responsible for
delivering this message to the intended recipient, you should not
review, disseminate, distribute or duplicate this e-mail transmission or
any attachments. If you are not the intended recipient, please contact
the sender immediately by reply e-mail and destroy all copies of the
original message. We do not accept account orders and/or instructions
related to AllianceBernstein products or services by e-mail, and
therefore will not be responsible for carrying out such orders and/or
instructions. The linked e-mail transmission and any attachments are
provided for informational purposes only and should not be construed in
any manner as any solicitation or offer to buy or sell any investment
opportunities or any related financial instruments and should not be
construed in any manner as a public offer of any investment
opportunities or any related financial instruments. If you, as the
intended recipient of the linked e-mail transmission, the purpose of
which is to inform and update our clients, prospects and consultants of
developments relating to our services and products, would not like to
receive further e-mail correspondence from the sender, please "reply"
to the sender indicating your wishes. Although we attempt to sweep
e-mail and attachments for viruses, we will not be liable for any
damages arising from the alteration of the contents of this linked e-mail
transmission and any attachments by a third party or as a result of any
virus being passed on. Please note: Trading instructions sent
electronically to Bernstein shall not be deemed accepted until a
representative of Bernstein acknowledges receipt electronically or by
telephone. Comments in the linked e-mail transmission and any
attachments are part of a larger body of investment analysis. For our
research reports, which contain information that may be used to
support investment decisions, and disclosures, see our website at
www.bernsteinresearch.com.
More information about the pca
mailing list