[pca] Service Unavailable

McGranahan, Jamen jamen.mcgranahan at Vanderbilt.Edu
Wed Sep 23 18:59:19 CEST 2009 

# wget --version
GNU Wget 1.11.4

Copyright (C) 2008 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later
<http://www.gnu.org/licenses/gpl.html>.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Originally written by Hrvoje Niksic <hniksic at xemacs.org>.
Currently maintained by Micah Cowan <micah at cowan.name>.

-------------------

I tried your suggestion of applying the -no-auth-challenge parameter and got an error: illegal option -no-auth-challenge. I looked up in the man page for wget and found auth-no-challenge, which I am assuming is what needs to be applied. However, when I did that, I get a 401 Error:

# /usr/local/bin/wget --auth-no-challenge --no-check-certificate --http-user="xxxxxx" --http-passwd="xxxxxxx" "https://sunsolve.sun.com/pdownload.do?target=119757-16&method=h" -O /opt/patches/119757-16.zip
--2009-09-23 11:55:49--  https://sunsolve.sun.com/pdownload.do?target=119757-16&method=h
Resolving sunsolve.sun.com... 192.18.108.40
Connecting to sunsolve.sun.com|192.18.108.40|:443... connected.
WARNING: cannot verify sunsolve.sun.com's certificate, issued by `/O=Sun Microsystems Inc/OU=VeriSign Trust Network/OU=Class 3 MPKI Secure Server CA/CN=Sun Microsystems Inc SSL CA':
  Self-signed certificate encountered.
HTTP request sent, awaiting response... 401 Unauthorized
Unknown authentication scheme.
Authorization failed.

Jamen McGranahan
Systems Services Librarian
Vanderbilt University

From: pca-bounces at lists.univie.ac.at [mailto:pca-bounces at lists.univie.ac.at] On Behalf Of Don O'Malley
Sent: Wednesday, September 23, 2009 11:49 AM
To: PCA (Patch Check Advanced) Discussion
Subject: Re: [pca] Service Unavailable

Hi Jamen,

What version of wget are you using?

bash-3.00# wget --version

GNU Wget 1.10.2



Copyright (C) 2005 Free Software Foundation, Inc.

This program is distributed in the hope that it will be useful,

but WITHOUT ANY WARRANTY; without even the implied warranty of

MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

GNU General Public License for more details.



Originally written by Hrvoje Niksic <hniksic at xemacs.org><mailto:hniksic at xemacs.org>.

bash-3.00#


If you are using wget version 1.11.x then you will need to add the "--no-auth-challenge" parameter to the direct wget request...

Best,
-Don

McGranahan, Jamen wrote:
# file /opt/patches/119757-16.zip
/opt/patches/119757-16.zip:     html document

Jamen McGranahan
Systems Services Librarian
Vanderbilt University

From: pca-bounces at lists.univie.ac.at<mailto:pca-bounces at lists.univie.ac.at> [mailto:pca-bounces at lists.univie.ac.at] On Behalf Of Bliss, Kevin L
Sent: Wednesday, September 23, 2009 11:38 AM
To: 'PCA (Patch Check Advanced) Discussion'
Subject: Re: [pca] Service Unavailable

Run "file /opt/patches/119757-16.zip".  The size difference sounds like maybe you just downloaded some html from sunsolve, possibly the acceptance policy.  That would explain why you did not go any further.

From: pca-bounces at lists.univie.ac.at<mailto:pca-bounces at lists.univie.ac.at> [mailto:pca-bounces at lists.univie.ac.at] On Behalf Of McGranahan, Jamen
Sent: Wednesday, September 23, 2009 9:34 AM
To: PCA (Patch Check Advanced) Discussion
Subject: Re: [pca] Service Unavailable

OK, well something is not right. A couple of things I notice: 1) We're not being sent to getupdates2; 2) we're not being sent to akamai.net. And though it would appear the patch downloaded, it's not. In fact, the size of the zip file is significantly smaller than the one Don O'Malley downloaded (ours = 28,405; Don's = 30,195,424):

/usr/local/bin/wget --no-check-certificate --http-user="xxxxxxxx" --http-passwd="xxxxxxxx" "https://sunsolve.sun.com/pdownload.do?target=119757-16&method=h"<https://sunsolve.sun.com/pdownload.do?target=119757-16&method=h> -O /opt/patches/119757-16.zip
--2009-09-23 11:26:35--  https://sunsolve.sun.com/pdownload.do?target=119757-16&method=h
Resolving sunsolve.sun.com... 192.18.108.40
Connecting to sunsolve.sun.com|192.18.108.40|:443... connected.
WARNING: cannot verify sunsolve.sun.com's certificate, issued by `/O=Sun Microsystems Inc/OU=VeriSign Trust Network/OU=Class 3 MPKI Secure Server CA/CN=Sun Microsystems Inc SSL CA':
  Self-signed certificate encountered.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location: https://sunsolve.sun.com/validateSLA.do?orignalTarget=show.do?target=home [following]
--2009-09-23 11:26:36--  https://sunsolve.sun.com/validateSLA.do?orignalTarget=show.do?target=home
Reusing existing connection to sunsolve.sun.com:443.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: `/opt/patches/119757-16.zip'

    [ <=>                                             ] 28,405      --.-K/s   in 0.1s

2009-09-23 11:26:37 (267 KB/s) - `/opt/patches/119757-16.zip' saved [28405]

Jamen McGranahan
Systems Services Librarian
Vanderbilt University

From: pca-bounces at lists.univie.ac.at<mailto:pca-bounces at lists.univie.ac.at> [mailto:pca-bounces at lists.univie.ac.at] On Behalf Of Don O'Malley
Sent: Wednesday, September 23, 2009 10:58 AM
To: PCA (Patch Check Advanced) Discussion
Subject: Re: [pca] Service Unavailable

Hi Jamen,

I constantly test the SunSolve patch download service every 15 mins and have not seen any issues over the past few days at all.

Can you try and download patch 119757-16 with wget?

It's working fine for me:

# /usr/sfw/bin/wget --no-check-certificate --http-user="xxxxxxx" --http-passwd="xxxxxxx" "https://sunsolve.sun.com/pdownload.do?target=119757-16&method=h"<https://sunsolve.sun.com/pdownload.do?target=119757-16&method=h> -O /tmp/119757-16.zip

--16:49:22--  https://sunsolve.sun.com/pdownload.do?target=119757-16&method=h

           => `/tmp/119757-16.zip'

Resolving sunsolve.sun.com... 192.18.108.40

Connecting to sunsolve.sun.com|192.18.108.40|:443... connected.

WARNING: Certificate verification error for sunsolve.sun.com: self signed certificate in certificate chain

HTTP request sent, awaiting response... 302 Moved Temporarily

Location: https://getupdates2.sun.com/all_unsigned/119757-16.zip [following]

--16:49:25--  https://getupdates2.sun.com/all_unsigned/119757-16.zip

           => `/tmp/119757-16.zip'

Resolving getupdates2.sun.com... 198.232.168.157

Connecting to getupdates2.sun.com|198.232.168.157|:443... connected.

WARNING: Certificate verification error for getupdates2.sun.com: self signed certificate in certificate chain

HTTP request sent, awaiting response... 302 Moved Temporarily

Location: https://a248.e.akamai.net/f/248/21808/15m/sun.download.akamai.com/21808/patches/patchroot/all_unsigned/119757-16.zip?AuthParam=1253721090_6bae977991dfa7e3686c26d6903a3ccd&TUrl=L0QdUQV8Z4i0fdED3QTP3SJDWA8FMyaJsHfIWf4X29kTWQpKEzIbwqFuyRPZ&TicketId=3aT1lVSAOBFV&GroupName=SWUP&BHost=sdlc5i.sun.com&FilePath=/patches/patchroot/all_unsigned/119757-16.zip&File=119757-16.zip [following]

--16:49:29--  https://a248.e.akamai.net/f/248/21808/15m/sun.download.akamai.com/21808/patches/patchroot/all_unsigned/119757-16.zip?AuthParam=1253721090_6bae977991dfa7e3686c26d6903a3ccd&TUrl=L0QdUQV8Z4i0fdED3QTP3SJDWA8FMyaJsHfIWf4X29kTWQpKEzIbwqFuyRPZ&TicketId=3aT1lVSAOBFV&GroupName=SWUP&BHost=sdlc5i.sun.com&FilePath=/patches/patchroot/all_unsigned/119757-16.zip&File=119757-16.zip

           => `/tmp/119757-16.zip'

Resolving a248.e.akamai.net... 88.221.94.17, 88.221.94.89

Connecting to a248.e.akamai.net|88.221.94.17|:443... connected.

WARNING: Certificate verification error for a248.e.akamai.net: unable to get local issuer certificate

HTTP request sent, awaiting response... 200 OK

Length: 54,063,440 (52M) [application/zip]



55% [===================>                 ] 30,195,424   432.64K/s    ETA 00:42

While the 503 error does indeed indicate a server-side error, I'm just wondering if there is a proxy server between you and SunSolve (possibly one that does not support https requests) that you are attempting to access SunSolve through..

Best,
-Don


McGranahan, Jamen wrote:
We've been using PCA for several months now and it works really well. The past couple of days, however, we've not been able to download patches. We're getting ERROR 503: Service Unavailable. We're using the most current version of PCA.  Last known successful download was Thursday, Sept 17 (our servers run PCA once a week, each at a different day). See below for details from one of our servers:

# pca.pl -i --debug
Option install: 1
Option patchdir: /exlibris/patches/.
Option user: -------------
Option passwd: --------------
Option syslog: local0
Option debug: 1
ARGV: missing
Version: 20090827-01
Config files: ./pca.conf pca.conf
Found /usr/local/bin/wget (1.11.4, 11104, https)
Using /usr/local/bin/wget
Prerequisites for threads not met, setting threads to 0
Never update
Expanded patch list: missing
xref mtime: Wed Sep 23 05:42:47 2009
xref now  : Wed Sep 23 08:37:52 2009
xref ctime: Wed Sep 23 06:55:33 2009
xref age  : 6139
Local file /var/tmp/patchdiag.xref is up to date
Reading from /usr/bin/showrev -p  2>/dev/null
Using /var/tmp/patchdiag.xref from Sep/22/09
119042-09 required by 119757: obsolete, replaced with 138217-01
138217-01 required by 119757: already installed
119254-51 required by 119757: already installed
121901-01 required by 119757: obsolete, replaced with 126538-01
126538-01 required by 119757: obsolete, replaced with 140899-01
140899-01 required by 119757: already installed
120011-09 required by 119757: already installed
139520-02 required by 119757: already installed
120201-04 required by 125719: already installed
118833-36 required by 140919: already installed
120011-14 required by 140919: already installed
127127-11 required by 140919: already installed
137137-09 required by 140919: already installed
139555-08 required by 140919: already installed
Host: acorn6 (SunOS 5.10/Generic_141414-10/sparc/sun4v)
List: missing (9/42)

Patch  IR   CR RSB Age Synopsis
------ -- - -- --- --- -------------------------------------------------------
119757 15 < 16 RS-   7 SunOS 5.10: Samba patch

Looking for 119757-16 (1/9)
Trying https://sunsolve.sun.com/ (1/1)
/usr/local/bin/wget "https://sunsolve.sun.com/pdownload.do?target=119757-16&method=h"<https://sunsolve.sun.com/pdownload.do?target=119757-16&method=h> --ca-certificate=./pca.pl --header="Authorization: Basic ZGFsZXBvdWx0ZXI6WE5wQ1JaNWc=" -O /exlibris/patches/./119757-16.tmp
--2009-09-23 08:38:05--  https://sunsolve.sun.com/pdownload.do?target=119757-16&method=h
Resolving sunsolve.sun.com... 192.18.108.40
Connecting to sunsolve.sun.com|192.18.108.40|:443... connected.
HTTP request sent, awaiting response... 503 Service Unavailable
2009-09-23 08:38:06 ERROR 503: Service Unavailable.

Failed
Failed (patch not found)

***********************************
* Jamen McGranahan
* Systems Services Librarian
* Library Information Technology Services
* Vanderbilt University
* Suite 700
* 110 21st Avenue South
* Nashville, TN  37240
* (615) 343-1614
* (615) 343-8834 (fax)
* jamen.mcgranahan at vanderbilt.edu<mailto:jamen.mcgranahan at vanderbilt.edu>
***********************************

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.univie.ac.at/mailman/private/pca/attachments/20090923/e056b79f/attachment-0001.html

More information about the pca mailing list