[pca] Service Unavailable
McGranahan, Jamen
jamen.mcgranahan at Vanderbilt.Edu
Wed Sep 23 18:42:12 CEST 2009
# file /opt/patches/119757-16.zip
/opt/patches/119757-16.zip: html document
Jamen McGranahan
Systems Services Librarian
Vanderbilt University
From: pca-bounces at lists.univie.ac.at [mailto:pca-bounces at lists.univie.ac.at] On Behalf Of Bliss, Kevin L
Sent: Wednesday, September 23, 2009 11:38 AM
To: 'PCA (Patch Check Advanced) Discussion'
Subject: Re: [pca] Service Unavailable
Run "file /opt/patches/119757-16.zip". The size difference sounds like maybe you just downloaded some html from sunsolve, possibly the acceptance policy. That would explain why you did not go any further.
From: pca-bounces at lists.univie.ac.at [mailto:pca-bounces at lists.univie.ac.at] On Behalf Of McGranahan, Jamen
Sent: Wednesday, September 23, 2009 9:34 AM
To: PCA (Patch Check Advanced) Discussion
Subject: Re: [pca] Service Unavailable
OK, well something is not right. A couple of things I notice: 1) We're not being sent to getupdates2; 2) we're not being sent to akamai.net. And though it would appear the patch downloaded, it's not. In fact, the size of the zip file is significantly smaller than the one Don O'Malley downloaded (ours = 28,405; Don's = 30,195,424):
/usr/local/bin/wget --no-check-certificate --http-user="xxxxxxxx" --http-passwd="xxxxxxxx" "https://sunsolve.sun.com/pdownload.do?target=119757-16&method=h" -O /opt/patches/119757-16.zip
--2009-09-23 11:26:35-- https://sunsolve.sun.com/pdownload.do?target=119757-16&method=h
Resolving sunsolve.sun.com... 192.18.108.40
Connecting to sunsolve.sun.com|192.18.108.40|:443... connected.
WARNING: cannot verify sunsolve.sun.com's certificate, issued by `/O=Sun Microsystems Inc/OU=VeriSign Trust Network/OU=Class 3 MPKI Secure Server CA/CN=Sun Microsystems Inc SSL CA':
Self-signed certificate encountered.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location: https://sunsolve.sun.com/validateSLA.do?orignalTarget=show.do?target=home [following]
--2009-09-23 11:26:36-- https://sunsolve.sun.com/validateSLA.do?orignalTarget=show.do?target=home
Reusing existing connection to sunsolve.sun.com:443.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: `/opt/patches/119757-16.zip'
[ <=> ] 28,405 --.-K/s in 0.1s
2009-09-23 11:26:37 (267 KB/s) - `/opt/patches/119757-16.zip' saved [28405]
Jamen McGranahan
Systems Services Librarian
Vanderbilt University
From: pca-bounces at lists.univie.ac.at [mailto:pca-bounces at lists.univie.ac.at] On Behalf Of Don O'Malley
Sent: Wednesday, September 23, 2009 10:58 AM
To: PCA (Patch Check Advanced) Discussion
Subject: Re: [pca] Service Unavailable
Hi Jamen,
I constantly test the SunSolve patch download service every 15 mins and have not seen any issues over the past few days at all.
Can you try and download patch 119757-16 with wget?
It's working fine for me:
# /usr/sfw/bin/wget --no-check-certificate --http-user="xxxxxxx" --http-passwd="xxxxxxx" "https://sunsolve.sun.com/pdownload.do?target=119757-16&method=h"<https://sunsolve.sun.com/pdownload.do?target=119757-16&method=h> -O /tmp/119757-16.zip
--16:49:22-- https://sunsolve.sun.com/pdownload.do?target=119757-16&method=h
=> `/tmp/119757-16.zip'
Resolving sunsolve.sun.com... 192.18.108.40
Connecting to sunsolve.sun.com|192.18.108.40|:443... connected.
WARNING: Certificate verification error for sunsolve.sun.com: self signed certificate in certificate chain
HTTP request sent, awaiting response... 302 Moved Temporarily
Location: https://getupdates2.sun.com/all_unsigned/119757-16.zip [following]
--16:49:25-- https://getupdates2.sun.com/all_unsigned/119757-16.zip
=> `/tmp/119757-16.zip'
Resolving getupdates2.sun.com... 198.232.168.157
Connecting to getupdates2.sun.com|198.232.168.157|:443... connected.
WARNING: Certificate verification error for getupdates2.sun.com: self signed certificate in certificate chain
HTTP request sent, awaiting response... 302 Moved Temporarily
Location: https://a248.e.akamai.net/f/248/21808/15m/sun.download.akamai.com/21808/patches/patchroot/all_unsigned/119757-16.zip?AuthParam=1253721090_6bae977991dfa7e3686c26d6903a3ccd&TUrl=L0QdUQV8Z4i0fdED3QTP3SJDWA8FMyaJsHfIWf4X29kTWQpKEzIbwqFuyRPZ&TicketId=3aT1lVSAOBFV&GroupName=SWUP&BHost=sdlc5i.sun.com&FilePath=/patches/patchroot/all_unsigned/119757-16.zip&File=119757-16.zip [following]
--16:49:29-- https://a248.e.akamai.net/f/248/21808/15m/sun.download.akamai.com/21808/patches/patchroot/all_unsigned/119757-16.zip?AuthParam=1253721090_6bae977991dfa7e3686c26d6903a3ccd&TUrl=L0QdUQV8Z4i0fdED3QTP3SJDWA8FMyaJsHfIWf4X29kTWQpKEzIbwqFuyRPZ&TicketId=3aT1lVSAOBFV&GroupName=SWUP&BHost=sdlc5i.sun.com&FilePath=/patches/patchroot/all_unsigned/119757-16.zip&File=119757-16.zip
=> `/tmp/119757-16.zip'
Resolving a248.e.akamai.net... 88.221.94.17, 88.221.94.89
Connecting to a248.e.akamai.net|88.221.94.17|:443... connected.
WARNING: Certificate verification error for a248.e.akamai.net: unable to get local issuer certificate
HTTP request sent, awaiting response... 200 OK
Length: 54,063,440 (52M) [application/zip]
55% [===================> ] 30,195,424 432.64K/s ETA 00:42
While the 503 error does indeed indicate a server-side error, I'm just wondering if there is a proxy server between you and SunSolve (possibly one that does not support https requests) that you are attempting to access SunSolve through..
Best,
-Don
McGranahan, Jamen wrote:
We've been using PCA for several months now and it works really well. The past couple of days, however, we've not been able to download patches. We're getting ERROR 503: Service Unavailable. We're using the most current version of PCA. Last known successful download was Thursday, Sept 17 (our servers run PCA once a week, each at a different day). See below for details from one of our servers:
# pca.pl -i --debug
Option install: 1
Option patchdir: /exlibris/patches/.
Option user: -------------
Option passwd: --------------
Option syslog: local0
Option debug: 1
ARGV: missing
Version: 20090827-01
Config files: ./pca.conf pca.conf
Found /usr/local/bin/wget (1.11.4, 11104, https)
Using /usr/local/bin/wget
Prerequisites for threads not met, setting threads to 0
Never update
Expanded patch list: missing
xref mtime: Wed Sep 23 05:42:47 2009
xref now : Wed Sep 23 08:37:52 2009
xref ctime: Wed Sep 23 06:55:33 2009
xref age : 6139
Local file /var/tmp/patchdiag.xref is up to date
Reading from /usr/bin/showrev -p 2>/dev/null
Using /var/tmp/patchdiag.xref from Sep/22/09
119042-09 required by 119757: obsolete, replaced with 138217-01
138217-01 required by 119757: already installed
119254-51 required by 119757: already installed
121901-01 required by 119757: obsolete, replaced with 126538-01
126538-01 required by 119757: obsolete, replaced with 140899-01
140899-01 required by 119757: already installed
120011-09 required by 119757: already installed
139520-02 required by 119757: already installed
120201-04 required by 125719: already installed
118833-36 required by 140919: already installed
120011-14 required by 140919: already installed
127127-11 required by 140919: already installed
137137-09 required by 140919: already installed
139555-08 required by 140919: already installed
Host: acorn6 (SunOS 5.10/Generic_141414-10/sparc/sun4v)
List: missing (9/42)
Patch IR CR RSB Age Synopsis
------ -- - -- --- --- -------------------------------------------------------
119757 15 < 16 RS- 7 SunOS 5.10: Samba patch
Looking for 119757-16 (1/9)
Trying https://sunsolve.sun.com/ (1/1)
/usr/local/bin/wget "https://sunsolve.sun.com/pdownload.do?target=119757-16&method=h"<https://sunsolve.sun.com/pdownload.do?target=119757-16&method=h> --ca-certificate=./pca.pl --header="Authorization: Basic ZGFsZXBvdWx0ZXI6WE5wQ1JaNWc=" -O /exlibris/patches/./119757-16.tmp
--2009-09-23 08:38:05-- https://sunsolve.sun.com/pdownload.do?target=119757-16&method=h
Resolving sunsolve.sun.com... 192.18.108.40
Connecting to sunsolve.sun.com|192.18.108.40|:443... connected.
HTTP request sent, awaiting response... 503 Service Unavailable
2009-09-23 08:38:06 ERROR 503: Service Unavailable.
Failed
Failed (patch not found)
***********************************
* Jamen McGranahan
* Systems Services Librarian
* Library Information Technology Services
* Vanderbilt University
* Suite 700
* 110 21st Avenue South
* Nashville, TN 37240
* (615) 343-1614
* (615) 343-8834 (fax)
* jamen.mcgranahan at vanderbilt.edu<mailto:jamen.mcgranahan at vanderbilt.edu>
***********************************
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.univie.ac.at/mailman/private/pca/attachments/20090923/11b5487d/attachment-0001.html
More information about the pca
mailing list