[pca] pca 20101216-02 reports ERROR 403: Service Error.

Dennis Clarke dclarke at blastwave.org
Fri Dec 17 05:58:15 CET 2010


At some point one must call it a night and realize that the problem is not
with pca nor wget or even some openssl linkage.

Martin, the Oracle service is broken.  Its not your fault and all the work
in the world can not fix what Oracle has shattered.


# ../../bin/pca --debug -f $PCA_FROMFILES -d 118666-29
Option download: 1
Option xrefdir: /root/pca_data/xref
Option patchdir: /root/pca_data/mercury/archive
Option user: <user>
Option passwd: <passwd>
Option fromfiles: /root/pca_data/mercury/system_data
Option wget: /opt/csw/bin/wget
Option debug: 1
Command: ../../bin/pca
ARGV: 118666-29
Version: 20101216-02
CWD: /root/pca_data/mercury
Found /opt/csw/bin/wget (1.11.4, 11104, https)
Using /opt/csw/bin/wget
Using /root/pca_data/mercury/system_data as prefix to read .out files
Prerequisites for threads not met, setting threads to 0
Never update
Expanded patch list: 118666-29
xref mtime: Thu Dec 16 18:22:53 2010
xref now  : Fri Dec 17 04:29:07 2010
xref ctime: Fri Dec 17 01:54:11 2010
xref age  : 9296
Local file /root/pca_data/xref/patchdiag.xref is up to date
osname from uname: SunOS
Reading from </root/pca_data/mercury/system_data/showrev.out
Using /root/pca_data/xref/patchdiag.xref from Dec/16/10
All operands are fully qualified patch IDs plus revisions
Host: mercury (SunOS 5.10/Generic_144488-02/sparc/sun4u)
List: 118666-29 (1/0)

Patch  IR   CR RSB Age Synopsis
------ -- - -- --- ---
-------------------------------------------------------
118666 28 < 29 RS-   2 JavaSE 5.0: update 27 patch (equivalent to JDK 5.0u27)

Looking for 118666-29 (1/1)
Trying Oracle
Trying https://getupdates.oracle.com/ (1/1)
wgetrc: found /root/.wgetrc
Adding to /tmp/pca.914003: header=Authorization: Basic <base64-user-passwd>
/opt/csw/bin/wget --progress=dot:binary
"https://getupdates.oracle.com/all_unsigned/118666-29.zip"
--ca-certificate=../../bin/pca -O
/root/pca_data/mercury/archive/118666-29.tmp
--2010-12-17 04:29:11-- 
https://getupdates.oracle.com/all_unsigned/118666-29.zip
Resolving getupdates.oracle.com... 192.18.110.9
Connecting to getupdates.oracle.com|192.18.110.9|:443... connected.
HTTP request sent, awaiting response... 403 Service Error
2010-12-17 04:29:12 ERROR 403: Service Error.

Removing /tmp/pca.914003
Failed (Error 403: Service Error)
Failed (patch not found)
------------------------------------------------------------------------------
Download Summary: 1 total, 0 successful, 0 skipped, 1 failed
#

I can use a diff rev of wget and get similar results.

# ../../bin/pca --debug -f $PCA_FROMFILES --wget=/usr/sfw/bin/wget -d
118666-29
Option download: 1
Option xrefdir: /root/pca_data/xref
Option patchdir: /root/pca_data/mercury/archive
Option user: <user>
Option passwd: <passwd>
Option fromfiles: /root/pca_data/mercury/system_data
Option wget: /usr/sfw/bin/wget
Option debug: 1
Command: ../../bin/pca
ARGV: 118666-29
Version: 20101216-02
CWD: /root/pca_data/mercury
Found /usr/sfw/bin/wget (1.12, 11200, https)
Using /usr/sfw/bin/wget
Using /root/pca_data/mercury/system_data as prefix to read .out files
Prerequisites for threads not met, setting threads to 0
Never update
Expanded patch list: 118666-29
xref mtime: Thu Dec 16 18:22:53 2010
xref now  : Fri Dec 17 04:40:09 2010
xref ctime: Fri Dec 17 01:54:11 2010
xref age  : 9958
Local file /root/pca_data/xref/patchdiag.xref is up to date
osname from uname: SunOS
Reading from </root/pca_data/mercury/system_data/showrev.out
Using /root/pca_data/xref/patchdiag.xref from Dec/16/10
All operands are fully qualified patch IDs plus revisions
Host: mercury (SunOS 5.10/Generic_144488-02/sparc/sun4u)
List: 118666-29 (1/0)

Patch  IR   CR RSB Age Synopsis
------ -- - -- --- ---
-------------------------------------------------------
118666 28 < 29 RS-   2 JavaSE 5.0: update 27 patch (equivalent to JDK 5.0u27)

Looking for 118666-29 (1/1)
Trying Oracle
Trying https://getupdates.oracle.com/ (1/1)
wgetrc: found /root/.wgetrc
Adding to /tmp/pca.158093: header=Authorization: Basic <base64-user-passwd>
/usr/sfw/bin/wget --progress=dot:binary
"https://getupdates.oracle.com/all_unsigned/118666-29.zip"
--ca-certificate=../../bin/pca -O
/root/pca_data/mercury/archive/118666-29.tmp
--2010-12-17 04:40:13-- 
https://getupdates.oracle.com/all_unsigned/118666-29.zip
Resolving getupdates.oracle.com... 192.18.110.9
Connecting to getupdates.oracle.com|192.18.110.9|:443... connected.
HTTP request sent, awaiting response... 403 Service Error
2010-12-17 04:40:14 ERROR 403: Service Error.

Removing /tmp/pca.158093
Failed (Error 403: Service Error)
Failed (patch not found)
------------------------------------------------------------------------------
Download Summary: 1 total, 0 successful, 0 skipped, 1 failed
#

Let me show you the depths of insanity :

# /usr/sfw/bin/wget -v --progress=dot:mega \
> --server-response --no-proxy --inet4-only \
> --bind-address=192.168.35.24 \
> --user=$PCA_USER --password=$PCA_PASSWD \
> --referer=https\:\/\/support.oracle.com\/CSP\/ui\/flash.html \
> --user-agent=Mozilla\/5.0\ \(X11\;\ U\;\ SunOS\ i86pc\;\ en-US\;\
rv\:1.9.2.10\)\ Gecko\/20101021\ Firefox\/3.6.10 \
> --ca-certificate=$PCA_XREFDIR/getupdates.pem --random-file=/dev/urandom \
> --secure-protocol=SSLv3 --no-check-certificate \
> -O $PCA_PATCHDIR/118666-29.zip \
> https://getupdates.oracle.com/all_unsigned/118666-29.zip
--2010-12-17 04:45:23-- 
https://getupdates.oracle.com/all_unsigned/118666-29.zip
Resolving getupdates.oracle.com... 192.18.110.9
Connecting to getupdates.oracle.com|192.18.110.9|:443... connected.
HTTP request sent, awaiting response...
  HTTP/1.1 302 Redirect to Oracle SSO Server for login
  Date: Fri, 17 Dec 2010 04:45:23 GMT
  Server: Oracle-iPlanet-Web-Server/7.0
  Location:
https://login.oracle.com/pls/orasso/orasso.wwsso_app_admin.ls_login?Site2pstoreToken=
six lines of HEX snipped
  Content-type: text/html;charset=UTF-8
  Content-Length: 79
  Keep-Alive: timeout=5, max=100
  Connection: Keep-Alive
  Content-Language: en
Location:
https://login.oracle.com/pls/orasso/orasso.wwsso_app_admin.ls_login?Site2pstoreToken=
six lines of HEX snipped [following]
--2010-12-17 04:45:23-- 
https://login.oracle.com/pls/orasso/orasso.wwsso_app_admin.ls_login?Site2pstoreToken=
six lines of HEX snipped
Resolving login.oracle.com... 141.146.8.119
Connecting to login.oracle.com|141.146.8.119|:443... connected.
HTTP request sent, awaiting response...
  HTTP/1.1 302 Moved Temporarily
  Date: Fri, 17 Dec 2010 04:45:24 GMT
  Server: Oracle-Application-Server-10g/10.1.2.0.2 Oracle-HTTP-Server
  Content-Length: 1932
  Set-Cookie: ORASSO_AUTH_HINT=v1.0~20101217124524; Domain=.oracle.com;
Path=/
  Cache-Control: private
  Location: https://login.oracle.com/mysso/signon.jsp?site2pstoretoken= 
six lines of HEX snipped
&p_error_code=&p_submit_url=https%3A%2F%2Flogin.oracle.com%2Fsso%2Fauth&p_cancel_url=https%3A%2F%2Flogin.oracle.com&ssousername=&subscribername=
  Connection: close
  Content-Type: text/html; charset=UTF-8
  Set-Cookie: BIGipServerloginadc_oracle_com_http=2030932621.25630.0000;
expires=Fri, 17-Dec-2010 12:45:24 GMT; path=/
Location: https://login.oracle.com/mysso/signon.jsp?site2pstoretoken=  six
lines of HEX snipped
&p_error_code=&p_submit_url=https%3A%2F%2Flogin.oracle.com%2Fsso%2Fauth&p_cancel_url=https%3A%2F%2Flogin.oracle.com&ssousername=&subscribername=
[following]
--2010-12-17 04:45:24-- 
https://login.oracle.com/mysso/signon.jsp?site2pstoretoken=  six lines of
HEX snipped
&p_error_code=&p_submit_url=https%3A%2F%2Flogin.oracle.com%2Fsso%2Fauth&p_cancel_url=https%3A%2F%2Flogin.oracle.com&ssousername=&subscribername=
Connecting to login.oracle.com|141.146.8.119|:443... connected.
HTTP request sent, awaiting response...
  HTTP/1.1 200 OK
  Date: Fri, 17 Dec 2010 04:45:24 GMT
  Server: Oracle-Application-Server-10g/10.1.2.0.2 Oracle-HTTP-Server
  Cache-Control: no-cache
  Pragma: no-cache
  Expires: Thu, 29 cfhOct 1969 17:04:19 GMT
  Connection: close
  Content-Type: text/html; charset=UTF-8
  Set-Cookie: BIGipServerloginadc_oracle_com_http=2030932621.25630.0000;
expires=Fri, 17-Dec-2010 12:45:24 GMT; path=/
Length: unspecified [text/html]
Saving to: `/root/pca_data/mercury/archive/118666-29.zip'

     0K                                                       62.4K=0.1s

2010-12-17 04:45:24 (62.4 KB/s) -
`/root/pca_data/mercury/archive/118666-29.zip' saved [7508]

# ls archive/118666-29.zip
archive/118666-29.zip
#
# file archive/118666-29.zip
archive/118666-29.zip: html document

Martin, if you see this, pca works. It has for years. You didn't break
anything.  You should not have to 'fix' anything.

-- 
Dennis




More information about the pca mailing list