[pca] Problem downloading patches with local proxy
Greg Putrich
gregp at n0qds.org
Thu Sep 10 18:56:12 CEST 2009
For what it's worth, I downloaded about 29 patches about an hour or so ago.
Ran pca 3 times before all of them were downloaded.
Greg
Gurugunti, Mahesh said:
> My downloads seems to broken on the same lines, still unable to
> download. For example as below:
>
> -bash-3.00#pca -d 141910
> Reading cffile /etc/pca.conf
> Option download: 1
> Option xrefdir: /pcarepo
> Option nocheckxref: 1
> Option patchdir: /pcarepo
> Option user: xxx
> Option passwd: xxxx
> Option wgetproxy: http://gmdvproxy.acml.com:8080
> Option debug: 1
> ARGV: 141910
> Version: 20090827-01
> Config files: ./../etc/pca.conf /etc/pca.conf
> Found /usr/sfw/bin/wget (1.10.2, 11002, https)
> Using /usr/sfw/bin/wget
> Prerequisites for threads not met, setting threads to 0
> Never update
> Expanded patch list: 141910
> Reading from /usr/bin/showrev -p 2>/dev/null
> Using /pcarepo/patchdiag.xref from Jul/16/09
> Bad patch installed: 126365-06
> 120011-14 required by 141910: already installed
> Host: amainf03 (SunOS 5.10/Generic_127127-11/sparc/sun4u)
> List: 141910 (1/65)
>
> Patch IR CR RSB Age Synopsis
> ------ -- - -- --- ---
> -------------------------------------------------------
> 141910 -- < 01 -S- 65 SunOS 5.10: ntpq patch
>
> Looking for 141910-01 (1/1)
> Locking /pcarepo/.pcaLock.download.141910-01 failed
> Locking /pcarepo/.pcaLock.download.141910-01 failed
> Locking /pcarepo/.pcaLock.download.141910-01 failed
> Locking /pcarepo/.pcaLock.download.141910-01 failed
> Locking /pcarepo/.pcaLock.download.141910-01 failed
> Locking /pcarepo/.pcaLock.download.141910-01 failed
> Locking /pcarepo/.pcaLock.download.141910-01 failed
> Locking /pcarepo/.pcaLock.download.141910-01 failed
> Locking /pcarepo/.pcaLock.download.141910-01 failed
> Locking /pcarepo/.pcaLock.download.141910-01 failed
> Locking /pcarepo/.pcaLock.download.141910-01 failed
> Locking /pcarepo/.pcaLock.download.141910-01 failed
> Locking /pcarepo/.pcaLock.download.141910-01 failed
>
>
> I hope the sun has updated the patch to address this download problem.
>
>
>
> -----Original Message-----
> From: pca-bounces at lists.univie.ac.at
> [mailto:pca-bounces at lists.univie.ac.at] On Behalf Of Bliss, Kevin L
> Sent: Wednesday, September 09, 2009 4:20 PM
> To: 'PCA (Patch Check Advanced) Discussion'
> Subject: Re: [pca] Problem downloading patches with local proxy
>
> Has the patch gone in yet? I am still unable to download patches using
> pca, wget, or curl. I can download the via browser so it is probably
> not an entitlement issue.
>
> -----Original Message-----
> From: pca-bounces at lists.univie.ac.at
> [mailto:pca-bounces at lists.univie.ac.at] On Behalf Of Don O'Malley
> Sent: Wednesday, September 09, 2009 3:39 AM
> To: PCA (Patch Check Advanced) Discussion
> Subject: Re: [pca] Problem downloading patches with local proxy
>
> Hi Richard,
>
> We have identified a bug in the new Entitlement Service that is called
> prior to proceeding with a patch download from Akamai.
> The bug usually leads to transient 403 or 500 errors from the
> Entitlement Service, similar to what you are seeing below, though I have
>
> not seen the errors persist like this on subsequent retries before.
>
> I have tested this fix in Beta over the past week almost now and have
> confirmed that it will eliminate these errors (famous last words, I
> know!).
>
> The good news is that the fix is due to be pushed to production in
> Thursday morning (Pacific Time).
> Once this is live you should no longer see these errors (unless of
> course you really aren't entitled to a patch, in which case you will get
>
> a 403).
>
> Sorry for the inconvenience.
>
> Best,
> -Don
>
> Richard Skelton wrote:
> > Hi Martin,
> >
> > Martin Paul wrote:
> >> Richard Skelton wrote:
> >>
> >>> I have set-up and running a site PCA proxy which worked fine until
> >>> Sun changed SunSolve a few weeks ago.
> >>> The last two day I am not getting any new patches.
> >>>
> >>
> >> So was this the first time you tried to download patches after the
> >> SunSolve change or did it work at least once after the change?
> >>
> > Has worked on and off for the last few weeks.
> >> You pca setup looks fine, I don't see a problem with that.
> >>
> >>
> >>> https://sunsolve.sun.com/pdownload.do?target=142290-01&method=h
> >>> => `/var/apache2/htdocs/pca/142290-01.tmp'
> >>> Resolving proxy1.muc.infineon.com... 172.23.16.161
> >>> Connecting to proxy1.muc.infineon.com|172.23.16.161|:81...
> connected.
> >>> Proxy request sent, awaiting response... 503 Service Unavailable
> >>> 08:16:25 ERROR 503: Service Unavailable.
> >>>
> >>
> >> So your webproxy returns an error when its being asked to download a
> >> patch from SunSolve. If it writes a logfile, please check that for
> >> further details.
> >>
> >> Two things you might look into:
> >>
> >> Since the change on SunSolve, HTTPS is required to download patches
> >> (before that HTTP was fine). Does you webproxy support HTTPS
> requests?
> >>
> >> Look at
> >> http://sunsolve.sun.com/search/document.do?assetkey=1-9-240066-1 -
> >> there's a list of hosts you might have to add to your firewall rules,
>
> >> to allow the webproxy to access them (sunsolve.sun.com is not enough
> >> anymore).
> >>
> >> Martin.
> >>
> >>
> > Today all the new patches were downloaded using PCA without changing
> > anything from yesterday.
> > As I has debug enabled I could see each patch download. I did up the
> > download retries from 5 to 15.
> > Still seeing lots of retries:-
> >
> > Wed Sep 9 09:49:34 2009: Option xrefdir: /var/apache2/htdocs/pca
> > Wed Sep 9 09:49:34 2009: Option nocache: 1
> > Wed Sep 9 09:49:34 2009: Option patchdir: /var/apache2/htdocs/pca
> > Wed Sep 9 09:49:34 2009: Option user: xxxxxxx
> > Wed Sep 9 09:49:34 2009: Option passwd: xxxxxxxx
> > Wed Sep 9 09:49:34 2009: Option dltries: 15
> > Wed Sep 9 09:49:34 2009: Option wgetproxy:
> > http://proxy1.muc.infineon.com:81
> > Wed Sep 9 09:49:34 2009: Option debug: 1
> > Wed Sep 9 09:49:34 2009: Option proxy: 141919-02
> > Wed Sep 9 09:49:34 2009: ARGV: 141919-02
> > Wed Sep 9 09:49:34 2009: Version: 20090827-01
> > Wed Sep 9 09:49:34 2009: Config files: /etc/pca-proxy.conf
> > Wed Sep 9 09:49:34 2009: Found /usr/sfw/bin/wget (1.10.2, 11002,
> https)
> > Wed Sep 9 09:49:34 2009: Using /usr/sfw/bin/wget
> > Wed Sep 9 09:49:34 2009: Prerequisites for threads not met, setting
> > threads to 0
> > Wed Sep 9 09:49:34 2009: Never update
> > Wed Sep 9 09:49:34 2009: Requested file: 141919-02
> > Wed Sep 9 09:49:34 2009: Trying https://sunsolve.sun.com/ (1/15)
> > Wed Sep 9 09:49:34 2009: /usr/sfw/bin/wget
> > "https://sunsolve.sun.com/pdownload.do?target=141919-02&method=h"
> > --execute https_proxy=http://proxy1.muc.infineon.com:81
> > --ca-certificate=/var/apache2/cgi-bin/pca-proxy.cgi
> > --header="Authorization: Basic cnNrZWx0b246YnRjY3dqY2FndGU=" -O
> > /var/apache2/htdocs/pca/141919-02.tmp >>/tmp/pca-proxy-debug.txt 2>&1
> > --09:49:34--
> > https://sunsolve.sun.com/pdownload.do?target=141919-02&method=h
> > => `/var/apache2/htdocs/pca/141919-02.tmp'
> > Resolving proxy1.muc.infineon.com... 172.23.16.161
> > Connecting to proxy1.muc.infineon.com|172.23.16.161|:81... connected.
> > Proxy request sent, awaiting response... 302 Moved Temporarily
> > Location: https://getupdates2.sun.com/all_unsigned/141919-02.zip
> > [following]
> > --09:49:36-- https://getupdates2.sun.com/all_unsigned/141919-02.zip
> > => `/var/apache2/htdocs/pca/141919-02.tmp'
> > Connecting to proxy1.muc.infineon.com|172.23.16.161|:81... connected.
> > Proxy request sent, awaiting response... 403 You are not entitled to
> > retrieve this content.
> > 09:49:39 ERROR 403: You are not entitled to retrieve this content..
> >
> > Wed Sep 9 09:49:39 2009: Failed
> > Wed Sep 9 09:49:43 2009: Trying https://sunsolve.sun.com/ (2/15)
> > Wed Sep 9 09:49:43 2009: /usr/sfw/bin/wget
> > "https://sunsolve.sun.com/pdownload.do?target=141919-02&method=h"
> > --execute https_proxy=http://proxy1.muc.infineon.com:81
> > --ca-certificate=/var/apache2/cgi-bin/pca-proxy.cgi
> > --header="Authorization: Basic cnNrZWx0b246YnRjY3dqY2FndGU=" -O
> > /var/apache2/htdocs/pca/141919-02.tmp >>/tmp/pca-proxy-debug.txt 2>&1
> > --09:49:43--
> > https://sunsolve.sun.com/pdownload.do?target=141919-02&method=h
> > => `/var/apache2/htdocs/pca/141919-02.tmp'
> > Resolving proxy1.muc.infineon.com... 172.23.16.161
> > Connecting to proxy1.muc.infineon.com|172.23.16.161|:81... connected.
> > Proxy request sent, awaiting response... 302 Moved Temporarily
> > Location: https://getupdates2.sun.com/all_unsigned/141919-02.zip
> > [following]
> > --09:49:45-- https://getupdates2.sun.com/all_unsigned/141919-02.zip
> > => `/var/apache2/htdocs/pca/141919-02.tmp'
> > Connecting to proxy1.muc.infineon.com|172.23.16.161|:81... connected.
> > Proxy request sent, awaiting response... 403 You are not entitled to
> > retrieve this content.
> > 09:49:48 ERROR 403: You are not entitled to retrieve this content..
> >
> > Wed Sep 9 09:49:48 2009: Failed
> > Wed Sep 9 09:49:54 2009: Trying https://sunsolve.sun.com/ (3/15)
> > Wed Sep 9 09:49:54 2009: /usr/sfw/bin/wget
> > "https://sunsolve.sun.com/pdownload.do?target=141919-02&method=h"
> > --execute https_proxy=http://proxy1.muc.infineon.com:81
> > --ca-certificate=/var/apache2/cgi-bin/pca-proxy.cgi
> > --header="Authorization: Basic cnNrZWx0b246YnRjY3dqY2FndGU=" -O
> > /var/apache2/htdocs/pca/141919-02.tmp >>/tmp/pca-proxy-debug.txt 2>&1
> > --09:49:54--
> > https://sunsolve.sun.com/pdownload.do?target=141919-02&method=h
> > => `/var/apache2/htdocs/pca/141919-02.tmp'
> > Resolving proxy1.muc.infineon.com... 172.23.16.161
> > Connecting to proxy1.muc.infineon.com|172.23.16.161|:81... connected.
> > Proxy request sent, awaiting response... 302 Moved Temporarily
> > Location: https://getupdates2.sun.com/all_unsigned/141919-02.zip
> > [following]
> > --09:49:56-- https://getupdates2.sun.com/all_unsigned/141919-02.zip
> > => `/var/apache2/htdocs/pca/141919-02.tmp'
> > Connecting to proxy1.muc.infineon.com|172.23.16.161|:81... connected.
> > Proxy request sent, awaiting response... 403 You are not entitled to
> > retrieve this content.
> > 09:49:59 ERROR 403: You are not entitled to retrieve this content..
> >
> > Wed Sep 9 09:49:59 2009: Failed
> > Wed Sep 9 09:50:07 2009: Trying https://sunsolve.sun.com/ (4/15)
> > Wed Sep 9 09:50:07 2009: /usr/sfw/bin/wget
> > "https://sunsolve.sun.com/pdownload.do?target=141919-02&method=h"
> > --execute https_proxy=http://proxy1.muc.infineon.com:81
> > --ca-certificate=/var/apache2/cgi-bin/pca-proxy.cgi
> > --header="Authorization: Basic cnNrZWx0b246YnRjY3dqY2FndGU=" -O
> > /var/apache2/htdocs/pca/141919-02.tmp >>/tmp/pca-proxy-debug.txt 2>&1
> > --09:50:07--
> > https://sunsolve.sun.com/pdownload.do?target=141919-02&method=h
> > => `/var/apache2/htdocs/pca/141919-02.tmp'
> > Resolving proxy1.muc.infineon.com... 172.23.16.161
> > Connecting to proxy1.muc.infineon.com|172.23.16.161|:81... connected.
> > Proxy request sent, awaiting response... 302 Moved Temporarily
> > Location: https://getupdates2.sun.com/all_unsigned/141919-02.zip
> > [following]
> > --09:50:09-- https://getupdates2.sun.com/all_unsigned/141919-02.zip
> > => `/var/apache2/htdocs/pca/141919-02.tmp'
> > Connecting to proxy1.muc.infineon.com|172.23.16.161|:81... connected.
> > Proxy request sent, awaiting response... 403 You are not entitled to
> > retrieve this content.
> > 09:50:13 ERROR 403: You are not entitled to retrieve this content..
> >
> > Wed Sep 9 09:50:13 2009: Failed
> > Wed Sep 9 09:50:23 2009: Trying https://sunsolve.sun.com/ (5/15)
> > Wed Sep 9 09:50:23 2009: /usr/sfw/bin/wget
> > "https://sunsolve.sun.com/pdownload.do?target=141919-02&method=h"
> > --execute https_proxy=http://proxy1.muc.infineon.com:81
> > --ca-certificate=/var/apache2/cgi-bin/pca-proxy.cgi
> > --header="Authorization: Basic cnNrZWx0b246YnRjY3dqY2FndGU=" -O
> > /var/apache2/htdocs/pca/141919-02.tmp >>/tmp/pca-proxy-debug.txt 2>&1
> > --09:50:23--
> > https://sunsolve.sun.com/pdownload.do?target=141919-02&method=h
> > => `/var/apache2/htdocs/pca/141919-02.tmp'
> > Resolving proxy1.muc.infineon.com... 172.23.16.161
> > Connecting to proxy1.muc.infineon.com|172.23.16.161|:81... connected.
> > Proxy request sent, awaiting response... 302 Moved Temporarily
> > Location: https://getupdates2.sun.com/all_unsigned/141919-02.zip
> > [following]
> > --09:50:25-- https://getupdates2.sun.com/all_unsigned/141919-02.zip
> > => `/var/apache2/htdocs/pca/141919-02.tmp'
> > Connecting to proxy1.muc.infineon.com|172.23.16.161|:81... connected.
> > Proxy request sent, awaiting response... 302 Moved Temporarily
> > Location:
> >
> https://a248.e.akamai.net/f/248/21808/15m/sun.download.akamai.com/21808/
> patches/patchroot/all_unsigned/141919-02.zip?AuthParam=1252486347_4ac168
> c3231307eeab0bc19f6763a316&TUrl=L0QdUQV8Z4i0fdED3QTP3SJDWA8FMyaJsHfIWf4X
> 29kTWQpKEzIbwqFuyRPZ&TicketId=3q3ymVCONx5U&GroupName=SWUP&BHost=sdlc3g.s
> un.com&FilePath=/patches/patchroot/all_unsigned/141919-02.zip&File=14191
> 9-02.zip
> > [following]
> > --09:50:28--
> >
> https://a248.e.akamai.net/f/248/21808/15m/sun.download.akamai.com/21808/
> patches/patchroot/all_unsigned/141919-02.zip?AuthParam=1252486347_4ac168
> c3231307eeab0bc19f6763a316&TUrl=L0QdUQV8Z4i0fdED3QTP3SJDWA8FMyaJsHfIWf4X
> 29kTWQpKEzIbwqFuyRPZ&TicketId=3q3ymVCONx5U&GroupName=SWUP&BHost=sdlc3g.s
> un.com&FilePath=/patches/patchroot/all_unsigned/141919-02.zip&File=14191
> 9-02.zip
> >
> > => `/var/apache2/htdocs/pca/141919-02.tmp'
> > Connecting to proxy1.muc.infineon.com|172.23.16.161|:81... connected.
> > Proxy request sent, awaiting response... 200 OK
> > Length: 148,553 (145K) [application/zip]
> >
> > 0K .......... .......... .......... .......... .......... 34%
> > 111.84 KB/s
> > 50K .......... .......... .......... .......... .......... 68%
> > 399.69 KB/s
> > 100K .......... .......... .......... .......... ..... 100%
> > 494.61 KB/s
> >
> > 09:50:29 (218.71 KB/s) - `/var/apache2/htdocs/pca/141919-02.tmp' saved
>
> > [148553/148553]
> >
> > Wed Sep 9 09:50:29 2009: Done
> >
>
>
> -----------------------------------------------------------------------------------
> The information contained in the linked e-mail transmission and any
> attachments may be privileged and confidential and is intended only for
> the use of the person(s) named in the linked e-mail transmission. If you
> are not the intended recipient, or an employee or agent responsible for
> delivering this message to the intended recipient, you should not
> review, disseminate, distribute or duplicate this e-mail transmission or
> any attachments. If you are not the intended recipient, please contact
> the sender immediately by reply e-mail and destroy all copies of the
> original message. We do not accept account orders and/or instructions
> related to AllianceBernstein products or services by e-mail, and
> therefore will not be responsible for carrying out such orders and/or
> instructions. The linked e-mail transmission and any attachments are
> provided for informational purposes only and should not be construed in
> any manner as any solicitation or offer to buy or sell any investment
> opportunities or any related financial instruments and should not be
> construed in any manner as a public offer of any investment
> opportunities or any related financial instruments. If you, as the
> intended recipient of the linked e-mail transmission, the purpose of
> which is to inform and update our clients, prospects and consultants of
> developments relating to our services and products, would not like to
> receive further e-mail correspondence from the sender, please "reply"
> to the sender indicating your wishes. Although we attempt to sweep
> e-mail and attachments for viruses, we will not be liable for any
> damages arising from the alteration of the contents of this linked e-mail
> transmission and any attachments by a third party or as a result of any
> virus being passed on. Please note: Trading instructions sent
> electronically to Bernstein shall not be deemed accepted until a
> representative of Bernstein acknowledges receipt electronically or by
> telephone. Comments in the linked e-mail transmission and any
> attachments are part of a larger body of investment analysis. For our
> research reports, which contain information that may be used to
> support investment decisions, and disclosures, see our website at
> www.bernsteinresearch.com.
>
>
More information about the pca
mailing list