From xcloud at tionghua.net  Sun Jan  2 18:13:36 2011
From: xcloud at tionghua.net (xcloud)
Date: Mon, 3 Jan 2011 01:13:36 +0800
Subject: [pca] Getting uninitialized value error. ne at line 1976,
	pattern match (m//) at line 374, ge at line 520
Message-ID: <000001cbaaa0$6447afa0$2cd70ee0$@tionghua.net>

Hi,

 

Tried running the the latest pca and patchdiag.xref but keep getting
uninitialized value error.

Any idea how to resolve it?

Below is the output from the script

 

Regards,

TH

 

---------------------------------

 

bash-3.00# ./pca.sh -V

Option list: 1

Option patchdir: /var/tmp/.

Option debug: 1

Command: ./pca.sh

ARGV: missing

Version: 20101221-01

CWD: /var/tmp

Found /usr/sfw/bin/wget (1.12, 11200, https)

Using /usr/sfw/bin/wget

Found /usr/bin/uname

Prerequisites for threads not met, setting threads to 0

Never update

Expanded patch list: missing

xref mtime: Mon Jan  3 00:08:48 2011

xref now  : Mon Jan  3 00:09:19 2011

xref ctime: Mon Jan  3 00:08:48 2011

xref age  : 31

Local file /var/tmp/patchdiag.xref is up to date

osname from uname: SunOS

Reading from /usr/bin/showrev -p  2>/dev/null

Using /var/tmp/patchdiag.xref from Jan/01/11

Use of uninitialized value in string ne at ./pca.sh line 1976.

Use of uninitialized value in string ne at ./pca.sh line 1976.

Use of uninitialized value in string ne at ./pca.sh line 1976.

Use of uninitialized value in string ne at ./pca.sh line 1976.

Use of uninitialized value in string ne at ./pca.sh line 1976.

Use of uninitialized value in string ne at ./pca.sh line 1976.

Use of uninitialized value in string ne at ./pca.sh line 1976.

Use of uninitialized value in string ne at ./pca.sh line 1976.

Use of uninitialized value in string ne at ./pca.sh line 1976.

Use of uninitialized value in string ne at ./pca.sh line 1976.

Use of uninitialized value in pattern match (m//) at ./pca.sh line 374.

Use of uninitialized value in pattern match (m//) at ./pca.sh line 374.

Use of uninitialized value in pattern match (m//) at ./pca.sh line 374.

Use of uninitialized value in pattern match (m//) at ./pca.sh line 374.

Use of uninitialized value in pattern match (m//) at ./pca.sh line 374.

Use of uninitialized value in pattern match (m//) at ./pca.sh line 374.

SUNWswmt patches: 106125 106126 107171 107172 108987 108988 110763 111666
111667 112951 114194

Use of uninitialized value in string ge at ./pca.sh line 520.

Use of uninitialized value in string ge at ./pca.sh line 520.

Use of uninitialized value in string ge at ./pca.sh line 520.

Use of uninitialized value in string ge at ./pca.sh line 520.

Use of uninitialized value in string ge at ./pca.sh line 520.

Use of uninitialized value in string ge at ./pca.sh line 520.

Use of uninitialized value in string ge at ./pca.sh line 520.

Use of uninitialized value in string ge at ./pca.sh line 520.

Use of uninitialized value in string ge at ./pca.sh line 520.

Use of uninitialized value in string ge at ./pca.sh line 520.

Use of uninitialized value in string ge at ./pca.sh line 520.

Use of uninitialized value in string ge at ./pca.sh line 520.

Host: solaris109 (SunOS 5.10/Generic_142910-17/i386/i86pc)

List: missing (0/0)

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.univie.ac.at/mailman/private/pca/attachments/20110103/6eeefacb/attachment.html 

From dpecka at techniservit.cz  Mon Jan  3 06:48:32 2011
From: dpecka at techniservit.cz (dpecka)
Date: Mon, 03 Jan 2011 06:48:32 +0100
Subject: [pca] (Error 403: Service Error) after year changed
Message-ID: <1294033712.13608.4.camel@sol10-nb.site>

Hi there ..

sorry for this deviantic molestation with Error: 403 but it seems like
something has changed on oracle site with year of 2011 ..

i'm no longer available to use pca to download patches ..
after little fiddling (re-entering CSI) i'm able to download patches by
hand from support.oracle.com appliance but not with pca. i'm getting
this output:

# pca -d 145668-01 --user=dpecka at techniservit.cz --debug
Option download: 1
Option patchdir: /var/tmp/+patch/.
Option user: <user>
Option debug: 1
Command: /share/pca.pl
ARGV: 145668-01
Version: 20101221-01
CWD: /var/tmp/+patch
Found /usr/sfw/bin/wget (1.10.2, 11002, https)
Found /opt/csw/bin/wget (1.11.4, 11104, https)
Using /opt/csw/bin/wget
Found /usr/bin/uname
Prerequisites for threads not met, setting threads to 0
Never update
Expanded patch list: 145668-01
xref mtime: Sun Jan  2 21:07:34 2011
xref now  : Mon Jan  3 05:24:46 2011
xref ctime: Mon Jan  3 03:56:57 2011
xref age  : 5269
Local file /var/tmp/patchdiag.xref is up to date
osname from uname: SunOS
Reading from /usr/bin/showrev -p  2>/dev/null
Using /var/tmp/patchdiag.xref from Jan/02/11
All operands are fully qualified patch IDs plus revisions
Host: s10u7-esx (SunOS 5.10/Generic_139556-08/i386/i86pc)
List: 145668-01 (1/0)

Patch  IR   CR RSB Age Synopsis
------ -- - -- --- ---
-------------------------------------------------------
145668 -- < 01 ---  13 Hardware PROM: SPARC T3-4 Sun System Firmware
8.0.2.b

Looking for 145668-01 (1/1)
Trying Oracle

Please enter My Oracle Support Account Password for
dpecka at techniservit.cz:

Trying https://getupdates.oracle.com/ (1/1)
Adding to /tmp/pca.288777: header=Authorization: Basic
<base64-user-passwd>
/opt/csw/bin/wget --progress=dot:binary
"https://getupdates.oracle.com/all_unsigned/145668-01.zip"
--ca-certificate=/share/pca.pl -O /var/tmp/+patch/./145668-01.tmp
--2011-01-03 05:24:52--
https://getupdates.oracle.com/all_unsigned/145668-01.zip
Resolving getupdates.oracle.com... 192.18.110.9
Connecting to getupdates.oracle.com|192.18.110.9|:443... connected.
HTTP request sent, awaiting response... 403 Service Error
2011-01-03 05:24:53 ERROR 403: Service Error.

Removing /tmp/pca.288777
Failed (Error 403: Service Error)
Failed (patch not found)
------------------------------------------------------------------------------
Download Summary: 1 total, 0 successful, 0 skipped, 1 failed

please check it .. it seems like there's something rotten.

regards boys and all good to new year of 2011

ps. it all worked few days ago


-- 
Best Regards / S Pozdravem

Daniel Pecka
--------------------------------------------------
SunOS Specialist, IT Administrator

www.techniservit.cz

mailto:<dpecka at techniservit.cz>
callto:<+0420603166533>



From martin at par.univie.ac.at  Mon Jan  3 09:30:11 2011
From: martin at par.univie.ac.at (Martin Paul)
Date: Mon, 03 Jan 2011 09:30:11 +0100
Subject: [pca] Getting uninitialized value error. ne at line 1976,
 pattern match (m//) at line 374, ge at line 520
In-Reply-To: <000001cbaaa0$6447afa0$2cd70ee0$@tionghua.net>
References: <000001cbaaa0$6447afa0$2cd70ee0$@tionghua.net>
Message-ID: <4D218913.6080509@par.univie.ac.at>

xcloud wrote:
> Tried running the the latest pca and patchdiag.xref but keep getting
> uninitialized value error.

This is most probably be caused by a corrupt copy of the patchdiag.xref file.

> Using /var/tmp/patchdiag.xref from Jan/01/11

This file should have a size of 3491140 bytes. If it's smaller, remove it and 
re-try. Unfortunately Sun/Oracle doesn't provide a checksum for PCA to verify 
valid copies of the xref file.

Martin.


From martin at par.univie.ac.at  Mon Jan  3 09:45:11 2011
From: martin at par.univie.ac.at (Martin Paul)
Date: Mon, 03 Jan 2011 09:45:11 +0100
Subject: [pca] (Error 403: Service Error) after year changed
In-Reply-To: <1294033712.13608.4.camel@sol10-nb.site>
References: <1294033712.13608.4.camel@sol10-nb.site>
Message-ID: <4D218C97.3030300@par.univie.ac.at>

dpecka wrote:
> sorry for this deviantic molestation with Error: 403 but it seems like
> something has changed on oracle site with year of 2011 ..

I've download a few patches today, and it worked fine.

> https://getupdates.oracle.com/all_unsigned/145668-01.zip
> Resolving getupdates.oracle.com... 192.18.110.9
> Connecting to getupdates.oracle.com|192.18.110.9|:443... connected.
> HTTP request sent, awaiting response... 403 Service Error
> 2011-01-03 05:24:53 ERROR 403: Service Error.

The "403: Service Error" is indeed unusual, and pointing at some problem with 
the Oracle server. Do you get this for all patch downloads or only for this one? 
I'm asking because 145668 is a firmware patch. I was able to download these with 
my type of support contract before the switch to Oracle, but nowadays the 
"Firmware" Support Level is required to access firmware patches. What does "pca 
--user ... --supplevel" show?

Martin.


From dpecka at techniservit.cz  Mon Jan  3 09:53:06 2011
From: dpecka at techniservit.cz (dpecka)
Date: Mon, 03 Jan 2011 09:53:06 +0100
Subject: [pca] (Error 403: Service Error) after year changed
In-Reply-To: <4D218C97.3030300@par.univie.ac.at>
References: <1294033712.13608.4.camel@sol10-nb.site>
	<4D218C97.3030300@par.univie.ac.at>
Message-ID: <1294044786.18549.0.camel@sol10-nb.site>

On Mon, 2011-01-03 at 09:45 +0100, Martin Paul wrote:
> dpecka wrote:
> > sorry for this deviantic molestation with Error: 403 but it seems like
> > something has changed on oracle site with year of 2011 ..
> 
> I've download a few patches today, and it worked fine.
> 
> > https://getupdates.oracle.com/all_unsigned/145668-01.zip
> > Resolving getupdates.oracle.com... 192.18.110.9
> > Connecting to getupdates.oracle.com|192.18.110.9|:443... connected.
> > HTTP request sent, awaiting response... 403 Service Error
> > 2011-01-03 05:24:53 ERROR 403: Service Error.
> 
> The "403: Service Error" is indeed unusual, and pointing at some problem with 
> the Oracle server. Do you get this for all patch downloads or only for this one? 
> I'm asking because 145668 is a firmware patch. I was able to download these with 
> my type of support contract before the switch to Oracle, but nowadays the 
> "Firmware" Support Level is required to access firmware patches. What does "pca 
> --user ... --supplevel" show?
> 
> Martin.
> 

bon apetit martin !!

# pca -d 145668-01 --user=dpecka at techniservit.cz --debug --supplevel
Option download: 1
Option patchdir: /var/tmp/+patch/.
Option user: <user>
Option supplevel: 1
Option debug: 1
Command: /share/pca.pl
ARGV: 145668-01
Version: 20101221-01
CWD: /var/tmp/+patch
Found /usr/sfw/bin/wget (1.10.2, 11002, https)
Found /opt/csw/bin/wget (1.11.4, 11104, https)
Using /opt/csw/bin/wget
Found /usr/bin/uname
Prerequisites for threads not met, setting threads to 0
Never update
Determining MOS Support Levels


Please enter My Oracle Support Account Password for
dpecka at techniservit.cz:

Adding to /tmp/pca.942518: header=Authorization: Basic
<base64-user-passwd>
/opt/csw/bin/wget --progress=dot:binary
"https://support.oracle.com/CSP/login?cmd=status"
--ca-certificate=/share/pca.pl -O /tmp/pca.456900
--2011-01-03 09:03:53--  https://support.oracle.com/CSP/login?cmd=status
Resolving support.oracle.com... 141.146.54.16
Connecting to support.oracle.com|141.146.54.16|:443... connected.
HTTP request sent, awaiting response... 302 Redirect to Oracle SSO
Server
Location:
https://login.oracle.com/pls/orasso/orasso.wwsso_app_admin.ls_login?Site2pstoreToken=v1.2~8BD68849~2CBD1E77D373209508494081838D01B8496D0E26F244C65E3A2EA392AC1EDD5EEC6A021977113193933E11AF231EF731BA75FC8D4A4BCB04BD9DD013666197F5476C5106622291518C5572FD18E5030A86806581A8497DDC0BF39A782EC8F893FA7005087D9CF75A562E5633F3A471FB7382359D7C95396ED617686DE08B67554F61F10BC8ABDB01C973874BCB800A2915517D43FA74B9D8E76330F036E85EC602478044177B40008A0BEB1D607D1A003083689F677E41B82E1FF934511932B7 [following]
--2011-01-03 09:03:53--
https://login.oracle.com/pls/orasso/orasso.wwsso_app_admin.ls_login?Site2pstoreToken=v1.2~8BD68849~2CBD1E77D373209508494081838D01B8496D0E26F244C65E3A2EA392AC1EDD5EEC6A021977113193933E11AF231EF731BA75FC8D4A4BCB04BD9DD013666197F5476C5106622291518C5572FD18E5030A86806581A8497DDC0BF39A782EC8F893FA7005087D9CF75A562E5633F3A471FB7382359D7C95396ED617686DE08B67554F61F10BC8ABDB01C973874BCB800A2915517D43FA74B9D8E76330F036E85EC602478044177B40008A0BEB1D607D1A003083689F677E41B82E1FF934511932B7
Resolving login.oracle.com... 141.146.8.119
Connecting to login.oracle.com|141.146.8.119|:443... connected.
HTTP request sent, awaiting response... 500 Internal Server Error
2011-01-03 09:03:54 ERROR 500: Internal Server Error.

Removing /tmp/pca.942518
Failed (Error 500: Internal Server Error)

-- 
Best Regards / S Pozdravem

Daniel Pecka
--------------------------------------------------
SunOS Specialist, IT Administrator

www.techniservit.cz

mailto:<dpecka at techniservit.cz>
callto:<+0420603166533>



From martin at par.univie.ac.at  Mon Jan  3 09:54:44 2011
From: martin at par.univie.ac.at (Martin Paul)
Date: Mon, 03 Jan 2011 09:54:44 +0100
Subject: [pca] PCA & WGET issues
In-Reply-To: <B06AB59E167E9745BB49C2DB6A71934D0B45A8EE@EDHC01WEX02.bsc.bscal.com>
References: <B06AB59E167E9745BB49C2DB6A71934D0B45A8EE@EDHC01WEX02.bsc.bscal.com>
Message-ID: <4D218ED4.20501@par.univie.ac.at>

Coskun, Aydin wrote:
> I am having bit of issues with setting up my PCA server.  If I use
> pca.conf file I get Failed (Unknown Error) but if don't use pca.conf and
> I enter username and password interactively it works. Please help! 
> ...
> Here is my setup: 
> 
> # cat /pca/Scripts/pca.conf 
> #My Oracle Support Account
> user=my.email at mycompany.com
> passwd=WWWWWWWW

Just to be sure: You aren't using any quotation characters (like " or ' or \) in 
WWWWWWW, are you? The password should be written here as-is.

Please comment out this option:

> threads=6

Then run "/pca/Scripts/pca --debug -d 119254-78" again and show the debug output.

Martin.


From martin at par.univie.ac.at  Mon Jan  3 10:01:31 2011
From: martin at par.univie.ac.at (Martin Paul)
Date: Mon, 03 Jan 2011 10:01:31 +0100
Subject: [pca] (Error 403: Service Error) after year changed
In-Reply-To: <1294044786.18549.0.camel@sol10-nb.site>
References: <1294033712.13608.4.camel@sol10-nb.site>	<4D218C97.3030300@par.univie.ac.at>
	<1294044786.18549.0.camel@sol10-nb.site>
Message-ID: <4D21906B.5050504@par.univie.ac.at>

dpecka wrote:

> # pca -d 145668-01 --user=dpecka at techniservit.cz --debug --supplevel
> ...
> Connecting to login.oracle.com|141.146.8.119|:443... connected.
> HTTP request sent, awaiting response... 500 Internal Server Error
> 2011-01-03 09:03:54 ERROR 500: Internal Server Error.

*Sigh* .. from my experience this means that the Oracle server thinks that you 
provided an invalid user/password combination. Are you sure that you can login 
interactively to support.oracle.com with this MOS account? If so, please look at:

https://supporthtml.oracle.com/ep/faces/secure/km/DocumentDisplay.jspx?id=1269292.1&h=Y

and see whether you can verify your support levels with the method described 
there under "How to find what Support Levels a User has".

Martin.


From dpecka at techniservit.cz  Mon Jan  3 10:03:36 2011
From: dpecka at techniservit.cz (dpecka)
Date: Mon, 03 Jan 2011 10:03:36 +0100
Subject: [pca] (Error 403: Service Error) after year changed
In-Reply-To: <4D218C97.3030300@par.univie.ac.at>
References: <1294033712.13608.4.camel@sol10-nb.site>
	<4D218C97.3030300@par.univie.ac.at>
Message-ID: <1294045416.14020.4.camel@sol10-nb.site>




On Mon, 2011-01-03 at 09:45 +0100, Martin Paul wrote:

> dpecka wrote:
> > sorry for this deviantic molestation with Error: 403 but it seems like
> > something has changed on oracle site with year of 2011 ..
> 
> I've download a few patches today, and it worked fine.
> 
> > https://getupdates.oracle.com/all_unsigned/145668-01.zip
> > Resolving getupdates.oracle.com... 192.18.110.9
> > Connecting to getupdates.oracle.com|192.18.110.9|:443... connected.
> > HTTP request sent, awaiting response... 403 Service Error
> > 2011-01-03 05:24:53 ERROR 403: Service Error.
> 
> The "403: Service Error" is indeed unusual, and pointing at some problem with 
> the Oracle server. Do you get this for all patch downloads or only for this one? 
> I'm asking because 145668 is a firmware patch. I was able to download these with 
> my type of support contract before the switch to Oracle, but nowadays the 
> "Firmware" Support Level is required to access firmware patches. What does "pca 
> --user ... --supplevel" show?
> 
> Martin.
> 

-- 
Best Regards / S Pozdravem

Daniel Pecka
--------------------------------------------------
SunOS Specialist, IT Administrator

www.techniservit.cz

mailto:<dpecka at techniservit.cz>
callto:<+0420603166533>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.univie.ac.at/mailman/private/pca/attachments/20110103/eccddcce/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: oracle_error1.png
Type: image/png
Size: 203475 bytes
Desc: not available
Url : https://lists.univie.ac.at/mailman/private/pca/attachments/20110103/eccddcce/attachment-0001.png 

From martin at par.univie.ac.at  Mon Jan  3 11:29:15 2011
From: martin at par.univie.ac.at (Martin Paul)
Date: Mon, 03 Jan 2011 11:29:15 +0100
Subject: [pca] (Error 403: Service Error) after year changed
In-Reply-To: <1294045416.14020.4.camel@sol10-nb.site>
References: <1294033712.13608.4.camel@sol10-nb.site>	<4D218C97.3030300@par.univie.ac.at>
	<1294045416.14020.4.camel@sol10-nb.site>
Message-ID: <4D21A4FB.5030409@par.univie.ac.at>

It's really strange that interactive access to MOS works, while downloads via 
PCA/wget don't. You'll have to go a step back and take PCA out of the equation. 
Take a look at the wget examples in article 1199543.1:

https://supporthtml.oracle.com/ep/faces/secure/km/DocumentDisplay.jspx?id=1199543.1&h=Y

Try the example commands listed there to download sample patches. If these work 
with the same user/password and patchID which don't work with PCA, it must be a 
problem with PCA (it uses a slightly different, more general way to download 
files from Oracle).

If the sample commands don't work either, it's on Oracle. Maybe there's some 
internal issue with your MOS account, Support Levels, etc.

Martin.


From xcloud at tionghua.net  Mon Jan  3 13:15:12 2011
From: xcloud at tionghua.net (xcloud)
Date: Mon, 3 Jan 2011 20:15:12 +0800
Subject: [pca] Getting uninitialized value error. ne at line 1976,
	pattern match (m//) at line 374, ge at line 520
In-Reply-To: <4D218913.6080509@par.univie.ac.at>
References: <000001cbaaa0$6447afa0$2cd70ee0$@tionghua.net>
	<4D218913.6080509@par.univie.ac.at>
Message-ID: <000f01cbab3f$df3653c0$9da2fb40$@tionghua.net>


You are right. After re-download the patchdiag.xref, problem resolved.
Thanks you.

-----Original Message-----
From: pca-bounces at lists.univie.ac.at [mailto:pca-bounces at lists.univie.ac.at]
On Behalf Of Martin Paul
Sent: Monday, January 03, 2011 4:30 PM
To: PCA (Patch Check Advanced) Discussion
Subject: Re: [pca] Getting uninitialized value error. ne at line 1976,
pattern match (m//) at line 374, ge at line 520

xcloud wrote:
> Tried running the the latest pca and patchdiag.xref but keep getting 
> uninitialized value error.

This is most probably be caused by a corrupt copy of the patchdiag.xref
file.

> Using /var/tmp/patchdiag.xref from Jan/01/11

This file should have a size of 3491140 bytes. If it's smaller, remove it
and re-try. Unfortunately Sun/Oracle doesn't provide a checksum for PCA to
verify valid copies of the xref file.

Martin.





From Aydin.Coskun at blueshieldca.com  Mon Jan  3 17:43:21 2011
From: Aydin.Coskun at blueshieldca.com (Coskun, Aydin)
Date: Mon, 3 Jan 2011 08:43:21 -0800
Subject: [pca] PCA & WGET issues
In-Reply-To: <4D218ED4.20501@par.univie.ac.at>
References: <B06AB59E167E9745BB49C2DB6A71934D0B45A8EE@EDHC01WEX02.bsc.bscal.com>
	<4D218ED4.20501@par.univie.ac.at>
Message-ID: <B06AB59E167E9745BB49C2DB6A71934D0B45A8F1@EDHC01WEX02.bsc.bscal.com>

Hey Martin,

No there is no characters (like " or ' or \) in the password. I
deliberately used only UPPER CASE and lowercase mixed with numbers in
the password no special characters. 

Please see the debug output below. Looks like we have another problem at
this time, the "getupdates.oracle.com" can't be resolved. I have tried
to access it from two different networks but no luck. 

I know this is not related to my initial issue but do you folks know if
anything changed between last year and now on this
"getupdates.oracle.com" address?  

~ Aydin


# /pca/Scripts/pca --debug -d 119254-78
Option download: 1
Option patchdir: /pca/.
Option user: <user>
Option passwd: <passwd>
Option syslog: user
Option safe: 1
Option dltries: 5
Option debug: 1
Command: /pca/Scripts/pca
ARGV: 119254-78
Version: 20101221-01
CWD: /pca
Config files: /pca/Scripts/pca.conf 
Found /usr/sfw/bin/wget (1.9.1, 10901, https)
Found /opt/csw/bin/wget (1.11, 11100, https)
Using /opt/csw/bin/wget
Found /usr/bin/uname
Prerequisites for threads not met, setting threads to 0
Never update
Expanded patch list: 119254-78
xref mtime: Wed Dec 29 12:07:01 2010
xref now  : Mon Jan  3 08:28:09 2011
xref ctime: Mon Jan  3 08:25:39 2011
xref age  : 150
Local file /var/tmp/patchdiag.xref is up to date
osname from uname: SunOS
Reading from /usr/bin/showrev -p  2>/dev/null
Using /var/tmp/patchdiag.xref from Dec/29/10
Bad patch installed: 120094-14
Bad patch installed: 120272-12
Bad patch installed: 124393-04
All operands are fully qualified patch IDs plus revisions
Host: myhostwwwww (SunOS 5.10/Generic_125100-10/sparc/sun4u)
List: 119254-78 (1/0)

Patch  IR   CR RSB Age Synopsis
------ -- - -- --- ---
-------------------------------------------------------
119254 42 < 78 RS-  31 SunOS 5.10: Install and Patch Utilities Patch

Looking for 119254-78 (1/1)
Trying Oracle
Trying https://getupdates.oracle.com/ (1/5)
Adding to /tmp/pca.871710: header=Authorization: Basic
<base64-user-passwd>
/opt/csw/bin/wget --progress=dot:binary
"https://getupdates.oracle.com/all_unsigned/119254-78.zip"
--ca-certificate=/pca/Scripts/pca -O /pca/./119254-78.tmp
--2011-01-03 08:28:13--
https://getupdates.oracle.com/all_unsigned/119254-78.zip
Resolving getupdates.oracle.com... failed: node name or service name not
known.
wget: unable to resolve host address `getupdates.oracle.com'
Removing /tmp/pca.871710
Failed (Unknown Error)
Trying https://getupdates.oracle.com/ (2/5)
Adding to /tmp/pca.342057: header=Authorization: Basic
<base64-user-passwd>
/opt/csw/bin/wget --progress=dot:binary
"https://getupdates.oracle.com/all_unsigned/119254-78.zip"
--ca-certificate=/pca/Scripts/pca -O /pca/./119254-78.tmp
--2011-01-03 08:28:17--
https://getupdates.oracle.com/all_unsigned/119254-78.zip
Resolving getupdates.oracle.com... failed: node name or service name not
known.
wget: unable to resolve host address `getupdates.oracle.com'
Removing /tmp/pca.342057
Failed (Unknown Error)
Trying https://getupdates.oracle.com/ (3/5)
Adding to /tmp/pca.112407: header=Authorization: Basic
<base64-user-passwd>
/opt/csw/bin/wget --progress=dot:binary
"https://getupdates.oracle.com/all_unsigned/119254-78.zip"
--ca-certificate=/pca/Scripts/pca -O /pca/./119254-78.tmp
--2011-01-03 08:28:23--
https://getupdates.oracle.com/all_unsigned/119254-78.zip
Resolving getupdates.oracle.com... failed: node name or service name not
known.
wget: unable to resolve host address `getupdates.oracle.com'
Removing /tmp/pca.112407
Failed (Unknown Error)
Trying https://getupdates.oracle.com/ (4/5)
Adding to /tmp/pca.257831: header=Authorization: Basic
<base64-user-passwd>
/opt/csw/bin/wget --progress=dot:binary
"https://getupdates.oracle.com/all_unsigned/119254-78.zip"
--ca-certificate=/pca/Scripts/pca -O /pca/./119254-78.tmp
--2011-01-03 08:28:31--
https://getupdates.oracle.com/all_unsigned/119254-78.zip
Resolving getupdates.oracle.com... failed: node name or service name not
known.
wget: unable to resolve host address `getupdates.oracle.com'
Removing /tmp/pca.257831
Failed (Unknown Error)
Trying https://getupdates.oracle.com/ (5/5)
Adding to /tmp/pca.442031: header=Authorization: Basic
<base64-user-passwd>
/opt/csw/bin/wget --progress=dot:binary
"https://getupdates.oracle.com/all_unsigned/119254-78.zip"
--ca-certificate=/pca/Scripts/pca -O /pca/./119254-78.tmp
--2011-01-03 08:28:41--
https://getupdates.oracle.com/all_unsigned/119254-78.zip
Resolving getupdates.oracle.com... failed: node name or service name not
known.
wget: unable to resolve host address `getupdates.oracle.com'
Removing /tmp/pca.442031
Failed (Unknown Error)
Failed (patch not found)
------------------------------------------------------------------------
------
Download Summary: 1 total, 0 successful, 0 skipped, 1 failed







-----Original Message-----
From: pca-bounces at lists.univie.ac.at
[mailto:pca-bounces at lists.univie.ac.at] On Behalf Of Martin Paul
Sent: Monday, January 03, 2011 12:55 AM
To: PCA (Patch Check Advanced) Discussion
Subject: Re: [pca] PCA & WGET issues

Coskun, Aydin wrote:
> I am having bit of issues with setting up my PCA server.  If I use
> pca.conf file I get Failed (Unknown Error) but if don't use pca.conf
and
> I enter username and password interactively it works. Please help! 
> ...
> Here is my setup: 
> 
> # cat /pca/Scripts/pca.conf 
> #My Oracle Support Account
> user=my.email at mycompany.com
> passwd=WWWWWWWW

Just to be sure: You aren't using any quotation characters (like " or '
or \) in 
WWWWWWW, are you? The password should be written here as-is.

Please comment out this option:

> threads=6

Then run "/pca/Scripts/pca --debug -d 119254-78" again and show the
debug output.

Martin.



From martin at par.univie.ac.at  Mon Jan  3 19:55:57 2011
From: martin at par.univie.ac.at (Martin Paul)
Date: Mon, 03 Jan 2011 19:55:57 +0100
Subject: [pca] PCA & WGET issues
In-Reply-To: <B06AB59E167E9745BB49C2DB6A71934D0B45A8F1@EDHC01WEX02.bsc.bscal.com>
References: <B06AB59E167E9745BB49C2DB6A71934D0B45A8EE@EDHC01WEX02.bsc.bscal.com>	<4D218ED4.20501@par.univie.ac.at>
	<B06AB59E167E9745BB49C2DB6A71934D0B45A8F1@EDHC01WEX02.bsc.bscal.com>
Message-ID: <4D221BBD.7010206@par.univie.ac.at>

Hi Aydin,

> Please see the debug output below. Looks like we have another problem at
> this time, the "getupdates.oracle.com" can't be resolved. I have tried
> to access it from two different networks but no luck.

This really seems to point at a problem with the DNS resolution setup on 
your site. What do you get from "nslookup getupdates.oracle.com" or 
"getent hosts getupdates.oracle.com"? Are /etc/resolv.conf and 
/etc/nsswitch.conf configured correctly?

Martin.


From dpecka at techniservit.cz  Tue Jan  4 10:03:48 2011
From: dpecka at techniservit.cz (dpecka)
Date: Tue, 04 Jan 2011 10:03:48 +0100
Subject: [pca] (Error 403: Service Error) after year changed
In-Reply-To: <4D21906B.5050504@par.univie.ac.at>
References: <1294033712.13608.4.camel@sol10-nb.site>
	<4D218C97.3030300@par.univie.ac.at>
	<1294044786.18549.0.camel@sol10-nb.site>
	<4D21906B.5050504@par.univie.ac.at>
Message-ID: <1294131828.12687.4.camel@sol10-nb.site>

Hello Martin,

thanks, it wasn't due to an your script but because of something rotten
there .. it's now resolved. i sent them angry email with request that i
have troubles and they replied at todays morning with apologies that all
should be okay ...

i have now on dashboard now:
Support Level: Software
Classification: General

and your script prints out this:
SW: Existing Oracle software and Sun middleware
PUB: Oracle Open Office/StarOffice and patch utilities

so thanks, regards, and sorry for poking.

ave, daniel


On Mon, 2011-01-03 at 10:01 +0100, Martin Paul wrote:
> dpecka wrote:
> 
> > # pca -d 145668-01 --user=dpecka at techniservit.cz --debug --supplevel
> > ...
> > Connecting to login.oracle.com|141.146.8.119|:443... connected.
> > HTTP request sent, awaiting response... 500 Internal Server Error
> > 2011-01-03 09:03:54 ERROR 500: Internal Server Error.
> 
> *Sigh* .. from my experience this means that the Oracle server thinks that you 
> provided an invalid user/password combination. Are you sure that you can login 
> interactively to support.oracle.com with this MOS account? If so, please look at:
> 
> https://supporthtml.oracle.com/ep/faces/secure/km/DocumentDisplay.jspx?id=1269292.1&h=Y
> 
> and see whether you can verify your support levels with the method described 
> there under "How to find what Support Levels a User has".
> 
> Martin.
> 
-- 
Best Regards / S Pozdravem

Daniel Pecka
--------------------------------------------------
SunOS Specialist, UNIX Administrator

www.techniservit.cz

mailto:<dpecka at techniservit.cz>
callto:<+0420603166533>



From Aydin.Coskun at blueshieldca.com  Tue Jan  4 17:22:04 2011
From: Aydin.Coskun at blueshieldca.com (Coskun, Aydin)
Date: Tue, 4 Jan 2011 08:22:04 -0800
Subject: [pca] PCA & WGET issues
In-Reply-To: <4D221BBD.7010206@par.univie.ac.at>
References: <B06AB59E167E9745BB49C2DB6A71934D0B45A8EE@EDHC01WEX02.bsc.bscal.com>	<4D218ED4.20501@par.univie.ac.at><B06AB59E167E9745BB49C2DB6A71934D0B45A8F1@EDHC01WEX02.bsc.bscal.com>
	<4D221BBD.7010206@par.univie.ac.at>
Message-ID: <B06AB59E167E9745BB49C2DB6A71934D0B45A8F5@EDHC01WEX02.bsc.bscal.com>

That seems to have fixed the problem. 

Thanks Martin for this great tool and also your prompt help.

~ Aydin



-----Original Message-----
From: pca-bounces at lists.univie.ac.at
[mailto:pca-bounces at lists.univie.ac.at] On Behalf Of Martin Paul
Sent: Monday, January 03, 2011 10:56 AM
To: PCA (Patch Check Advanced) Discussion
Subject: Re: [pca] PCA & WGET issues

Hi Aydin,

> Please see the debug output below. Looks like we have another problem
at
> this time, the "getupdates.oracle.com" can't be resolved. I have tried
> to access it from two different networks but no luck.

This really seems to point at a problem with the DNS resolution setup on

your site. What do you get from "nslookup getupdates.oracle.com" or 
"getent hosts getupdates.oracle.com"? Are /etc/resolv.conf and 
/etc/nsswitch.conf configured correctly?

Martin.



From dpecka at techniservit.cz  Thu Jan  6 17:28:35 2011
From: dpecka at techniservit.cz (dpecka)
Date: Thu, 06 Jan 2011 17:28:35 +0100
Subject: [pca] feature request: reuse possibility of downloaded patches
Message-ID: <1294331315.2053.4.camel@sol10-nb.site>

Hi there,

probably i'm doing it badly but reuse possibility of downloaded patches
should prove helpful ...

eg did:

pca -Ii $patch --user=$me --debug

^^ current dir is filled with patches which doesn't seem that are reused
when doing real job without -I .. probably it could be fixed by
--wgetopt="-nc"

regards, daniel


-- 
Best Regards / S Pozdravem

Daniel Pecka
--------------------------------------------------
SunOS Specialist, IT Administrator

www.techniservit.cz

mailto:<dpecka at techniservit.cz>
callto:<+0420603166533>



From dpecka at techniservit.cz  Thu Jan  6 20:05:42 2011
From: dpecka at techniservit.cz (dpecka)
Date: Thu, 06 Jan 2011 20:05:42 +0100
Subject: [pca] feature request: reuse possibility of downloaded patches
In-Reply-To: <1294331315.2053.4.camel@sol10-nb.site>
References: <1294331315.2053.4.camel@sol10-nb.site>
Message-ID: <1294340742.2273.0.camel@sol10-nb.site>

sorry, my bad, it works of course okay

On Thu, 2011-01-06 at 17:28 +0100, dpecka wrote:
> Hi there,
> 
> probably i'm doing it badly but reuse possibility of downloaded patches
> should prove helpful ...
> 
> eg did:
> 
> pca -Ii $patch --user=$me --debug
> 
> ^^ current dir is filled with patches which doesn't seem that are reused
> when doing real job without -I .. probably it could be fixed by
> --wgetopt="-nc"
> 
> regards, daniel
> 
> 
-- 
Best Regards / S Pozdravem

Daniel Pecka
--------------------------------------------------
SunOS Specialist, IT Administrator

www.techniservit.cz

mailto:<dpecka at techniservit.cz>
callto:<+0420603166533>



From laurent at elanor.org  Wed Jan 19 11:03:42 2011
From: laurent at elanor.org (Laurent Blume)
Date: Wed, 19 Jan 2011 11:03:42 +0100
Subject: [pca] Strange patch requirement for 125556-09
Message-ID: <4D36B6FE.8000403@elanor.org>

Hi all,

Ok, this is not exactly a PCA question, but I believe it's sufficiently 
related. If not, kick me out ;-)

This patch was just pushed out a few days ago:
125556 08 < 09 R--   6 SunOS 5.10_x86: patch behavior patch

What bothers me are the Special Install Instructions in its README:
NOTE 1:  This is a special patch that corrects the behavior of other 
patches by replacing their installation scripts.  *Thus, this patch must 
be installed on the target boot environment prior to the patch(es) whose 
installation scripts are being corrected.*  See the Problem Description 
field above for the list of patch issues being addressed.

And the patches that are being corrected are those:
6987486 installation of 142909/142910 can break sendmail

/usr/lib/patch/patch_override_dir/142909_SUNWsndmr_preinstall
/usr/lib/patch/patch_override_dir/142910_SUNWsndmr_preinstall

But how exactly is it possible to install this patch prior to this one?
142910 17 = 17 RS- 134 SunOS 5.10_x86: kernel patch

So how about the issue it's supposed to fix? My sendmail seems ok, so far.

Thanks for any explanation!

Laurent


From jh at baltic-online.de  Wed Jan 19 11:15:43 2011
From: jh at baltic-online.de (Jan Holzhueter)
Date: Wed, 19 Jan 2011 11:15:43 +0100
Subject: [pca] Strange patch requirement for 125556-09
In-Reply-To: <4D36B6FE.8000403@elanor.org>
References: <4D36B6FE.8000403@elanor.org>
Message-ID: <4D36B9CF.5060504@baltic-online.de>

Am 19.01.11 11:03, schrieb Laurent Blume:

> But how exactly is it possible to install this patch prior to this one?
> 142910 17 = 17 RS- 134 SunOS 5.10_x86: kernel patch

They change the xref file that 142910-17 depends on this new patch.
Of cause if you already installed 142910-17 it doesn't help much :)

( pca -l 142910 should show that 125556-09 would be installed first.)


Greetings
Jan






From martin at par.univie.ac.at  Wed Jan 19 11:47:30 2011
From: martin at par.univie.ac.at (Martin Paul)
Date: Wed, 19 Jan 2011 11:47:30 +0100
Subject: [pca] Strange patch requirement for 125556-09
In-Reply-To: <4D36B6FE.8000403@elanor.org>
References: <4D36B6FE.8000403@elanor.org>
Message-ID: <4D36C142.3010200@par.univie.ac.at>

Hi Laurent,

> But how exactly is it possible to install this patch prior to this one?
> 142910 17 = 17 RS- 134 SunOS 5.10_x86: kernel patch

The idea with this "Place Holder Patch" was that the kernel patches would always 
depend on it, so when a new kernel patch is installed, the place holder patch 
would be installed before it, including required fixes for kernel patch 
installation bugs discovered after the kernel patch was published. Gerry Haskins 
writes about in a comment on:

   http://blogs.sun.com/patch/entry/solaris_10_kernel_patchid_progression

(search for 125555). In the case of 142910, this won't work I guess, as it 
doesn't require 125556, unlike an earlier kernel patch. So I guess there's not 
really a guarantee, that the most recent revision of 125556 will alway be 
installed before the latest kernel patch.

> So how about the issue it's supposed to fix? My sendmail seems ok, so far.

Looking at the 142910_SUNWsndmr_preinstall file, it seems to take care that the 
config/local_only property is preserved. Maybe that isn't done in the original 
file? Shouldn't really "break" something, then.

Martin.


From laurent at elanor.org  Wed Jan 19 12:13:19 2011
From: laurent at elanor.org (Laurent Blume)
Date: Wed, 19 Jan 2011 12:13:19 +0100
Subject: [pca] Strange patch requirement for 125556-09
In-Reply-To: <4D36C142.3010200@par.univie.ac.at>
References: <4D36B6FE.8000403@elanor.org> <4D36C142.3010200@par.univie.ac.at>
Message-ID: <4D36C74F.7030103@elanor.org>

Le 19.01.2011 11:47, Martin Paul a ?crit :
> (search for 125555). In the case of 142910, this won't work I guess, as
> it doesn't require 125556, unlike an earlier kernel patch. So I guess
> there's not really a guarantee, that the most recent revision of 125556
> will alway be installed before the latest kernel patch.

Yes, the lack of dependency is kind of surprising. Is there some other 
special handling of them in PCA or Sun patching tools to ensure they are 
applied in the correct order if needed?

> Looking at the 142910_SUNWsndmr_preinstall file, it seems to take care
> that the config/local_only property is preserved. Maybe that isn't done
> in the original file? Shouldn't really "break" something, then.

Aaaaaahhhh, I should have thought it was *this* issue then. Yes, I 
assume that 4 months after the fact, people would have found a way to 
re-enable non local connections to their sendmail. One of the several 
annoying issues with S10U9 upgrade, though not the worst.

Laurent


From martin at par.univie.ac.at  Wed Jan 19 12:23:32 2011
From: martin at par.univie.ac.at (Martin Paul)
Date: Wed, 19 Jan 2011 12:23:32 +0100
Subject: [pca] Strange patch requirement for 125556-09
In-Reply-To: <4D36C74F.7030103@elanor.org>
References: <4D36B6FE.8000403@elanor.org> <4D36C142.3010200@par.univie.ac.at>
	<4D36C74F.7030103@elanor.org>
Message-ID: <4D36C9B4.5020302@par.univie.ac.at>

Laurent Blume wrote:
> Yes, the lack of dependency is kind of surprising. Is there some other 
> special handling of them in PCA or Sun patching tools to ensure they are 
> applied in the correct order if needed?

125555/125556 are not handled in a special way in PCA. I do sort the patch 
utility patches to the top of the list, because the install_cluster does the 
same, but I'm not otherwise messing with patch dependencies.

As for Sun/Oracle: They seem to strongly encourage the use of patch clusters 
only. Gerry Haskins writes:

   As discussed in the
   http://blogs.sun.com/patch/entry/solaris_10_recommended_patching_strategy
   which I published last week, we're really trying to encourage customers to
   move away from selecting unique patch combinations and to instead use the
   Solaris OS patch clusters and patch bundles as the core of your patching
   strategy.

Maybe I shouldn't say this, but it's obvious anyway: Oracle doesn't want you to 
use PCA for patching. But I can live with that :)

Martin.


From laurent at elanor.org  Fri Jan 21 09:55:36 2011
From: laurent at elanor.org (Laurent Blume)
Date: Fri, 21 Jan 2011 09:55:36 +0100
Subject: [pca] Strange patch requirement for 125556-09
In-Reply-To: <4D36C9B4.5020302@par.univie.ac.at>
References: <4D36B6FE.8000403@elanor.org>
	<4D36C142.3010200@par.univie.ac.at>	<4D36C74F.7030103@elanor.org>
	<4D36C9B4.5020302@par.univie.ac.at>
Message-ID: <4D394A08.7010802@elanor.org>

Le 19.01.2011 12:23, Martin Paul a ?crit :
> As discussed in the
> http://blogs.sun.com/patch/entry/solaris_10_recommended_patching_strategy
> which I published last week, we're really trying to encourage customers to
> move away from selecting unique patch combinations and to instead use the
> Solaris OS patch clusters and patch bundles as the core of your patching
> strategy.
>
> Maybe I shouldn't say this, but it's obvious anyway: Oracle doesn't want
> you to use PCA for patching. But I can live with that :)

Well, I understand that they don't want you to use Update Manager, which 
is very, very reasonable.

That they might be giving up on dependencies is not very good news though.

Laurent


From martin at par.univie.ac.at  Fri Jan 21 10:21:55 2011
From: martin at par.univie.ac.at (Martin Paul)
Date: Fri, 21 Jan 2011 10:21:55 +0100
Subject: [pca] Strange patch requirement for 125556-09
In-Reply-To: <4D394A08.7010802@elanor.org>
References: <4D36B6FE.8000403@elanor.org>	<4D36C142.3010200@par.univie.ac.at>	<4D36C74F.7030103@elanor.org>	<4D36C9B4.5020302@par.univie.ac.at>
	<4D394A08.7010802@elanor.org>
Message-ID: <4D395033.5060809@par.univie.ac.at>

Laurent Blume wrote:
> That they might be giving up on dependencies is not very good news though.

To be fair, the issue we're talking about is a very special case, and actually 
there's no good solution for this problem in the current patch infrastructure: 
Patch requirements aren't added to an existing revision, and no new kernel patch 
  revision will be generated for a rather small fix.

It would have been better to add such fixes as in 125555/125556 to the patch 
utilities patch instead: There's already a recommendation to install the newest 
revision of this patch ahead of any patch session, and PCA always moves it to 
the top of the patch list when installing patch sets. If needed an implicit 
requirement could be added to PCA (and maybe patchadd) which doesn't allow 
installing any patch unless the most recent revision of the patch utilities 
patch is installed - the would make more sense, IMHO.

Martin.


From bl at gfz-potsdam.de  Mon Jan 24 15:26:47 2011
From: bl at gfz-potsdam.de (Bleek Thomas)
Date: Mon, 24 Jan 2011 15:26:47 +0100
Subject: [pca] Samba Patch wants to be installed even when no samba is
	installed at all
Message-ID: <CA6F40A5-37FA-47FE-B4F0-C61515965AB8@gfz-potsdam.de>

Hello,

is it worth to to create a SR in wonderful new MOS or should Martin create another exception in PCA for this small problem?

It seems that the samba patch 146363-01 for sparc wants to be installed even if no samba packages are on the system.
The reason seems to be the GNU and open source man pages (SUNWsfman).
146363|01|Jan/04/11|R|S| |  |10|sparc;119757-19;|SUNWsfman:11.10.0,REV=2005.01.08.05.16;SUNWsmbaS:11.10.0,REV=2005.01.08.05.16;SUNWsmbar:11.10.0,REV=2005.01.08.05.16;SUNWsmbau:11.10.0,REV=2005.01.08.05.16;|SunOS 5.10: Samba patch

What should I do here?

Thanks,
tb
--
Dr. Thomas Bleek, Netzwerkadministrator
Helmholtz-Zentrum Potsdam
Deutsches GeoForschungsZentrum
Telegrafenberg G261
D-14473 Potsdam
Tel.: +49 331 288- 1818/1681 Fax.: 1730 Mobil: +49 172 1543233
E-Mail: bl at gfz-potsdam.de

root at cgp2.gfz-potsdam.de:/tmp>pca -i
Using /var/tmp/patchdiag.xref from Jan/23/11
Host: cgp2.gfz-potsdam.de (SunOS 5.10/Generic_144488-07/sparc/sun4u)
List: missing (1/20)

Patch  IR   CR RSB Age Synopsis
------ -- - -- --- --- -------------------------------------------------------
146363 -- < 01 RS-  20 SunOS 5.10: Samba patch

Looking for 146363-01 (1/1)
Found patch file

Installing 146363-01 (1/1)
Unzipping patch
Running patchadd

Validating patches...

Loading patches installed on the system...

Done!

Loading patches requested to install.

Done!

The following requested patches have packages not installed on the system
Package SUNWsmbar from directory SUNWsmbar in patch 146363-01 is not installed on the system. Changes for package SUNWsmbar will not be applied to the system.
Package SUNWsmbau from directory SUNWsmbau in patch 146363-01 is not installed on the system. Changes for package SUNWsmbau will not be applied to the system.
Package SUNWsmbaS from directory SUNWsmbaS in patch 146363-01 is not installed on the system. Changes for package SUNWsmbaS will not be applied to the system.

Checking patches that you specified for installation.

Done!


The following requested patches will not be installed because
at least one required patch is not installed on this system.

           0 For patch 146363-01, required patch 119757-19 does not exist.



No patches to install.

Failed (exit code 2)

Failed (15:40:10/00:00:11/00:00:16, 1/1, 0/0/1)
------------------------------------------------------------------------------
Download Summary: 1 total, 0 successful, 1 skipped, 0 failed
Install Summary : 1 total, 0 successful, 0 skipped, 1 failed

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2243 bytes
Desc: not available
Url : https://lists.univie.ac.at/pipermail/pca/attachments/20110124/30425eae/attachment.bin 

From al at everycity.co.uk  Mon Jan 24 19:25:21 2011
From: al at everycity.co.uk (Alasdair Lumsden)
Date: Mon, 24 Jan 2011 18:25:21 +0000
Subject: [pca] 502 Proxy Errors when using pca
Message-ID: <4D3DC411.70401@everycity.co.uk>

Hi All,

This morning I registered for My Oracle Support, and had our Solaris 10 
support entitlement added to the account.

I'm able to download patches fine via My Oracle Support, however when 
using an updated PCA, I mostly get 502 Proxy Errors (But sometimes it 
works - on a run against 123 patches I got maybe 5 or so).

The server is on the public Internet with no firewall (only NAT, but 
nothing that would interfere with a straight TCP session). We never had 
an issue with pca prior to My Oracle Support.

This is on Solaris 10 update 7 on x86, with the latest pca.

Here's some output:

# pca -a -d
Downloading xref file to /var/tmp/patchdiag.xref
Trying https://getupdates.oracle.com/ (1/1)
Using /var/tmp/patchdiag.xref from Jan/23/11
Host: XXXXX.everycity.co.uk (SunOS 5.10/Generic_142901-15/i386/i86pc)
List: missing (123/12344)

Patch  IR   CR RSB Age Synopsis
------ -- - -- --- --- 
-------------------------------------------------------
119255 76 < 78 RS-  52 SunOS 5.10_x86: Install and Patch Utilities Patch

Looking for 119255-78 (1/123)
Found patch file
------------------------------------------------------------------------------
118668 27 < 29 RS-  40 JavaSE 5.0_x86: update 27 patch (equivalent to 
JDK 5.0u27)

Looking for 118668-29 (2/123)
Trying Oracle

Please enter My Oracle Support Account User: XXXXXX
Please enter My Oracle Support Account Password: XXXXXX

Trying https://getupdates.oracle.com/ (1/1)
Failed (Error 502: Proxy Error)
Failed (patch not found)
------------------------------------------------------------------------------
119060 55 < 56 RS-  70 X11 6.6.2_x86: Xsun patch

Looking for 119060-56 (3/123)
Trying Oracle
Trying https://getupdates.oracle.com/ (1/1)
Failed (Error 502: Proxy Error)
Failed (patch not found)
------------------------------------------------------------------------------


I asked someone in #solaris on IRC who uses PCA and has a My Oracle 
Support contract to try this, and they had exactly the same issue.

Does anyone have any ideas as to what the problem could be?

Many thanks,

Alasdair

-- 
Alasdair Lumsden



From martin at par.univie.ac.at  Tue Jan 25 10:25:34 2011
From: martin at par.univie.ac.at (Martin Paul)
Date: Tue, 25 Jan 2011 10:25:34 +0100
Subject: [pca] Samba Patch wants to be installed even when no samba is
 installed at all
In-Reply-To: <CA6F40A5-37FA-47FE-B4F0-C61515965AB8@gfz-potsdam.de>
References: <CA6F40A5-37FA-47FE-B4F0-C61515965AB8@gfz-potsdam.de>
Message-ID: <4D3E970E.1030909@par.univie.ac.at>

Hi,

Bleek Thomas wrote:
> It seems that the samba patch 146363-01 for sparc wants to be installed even if no samba packages are on the system.
> The reason seems to be the GNU and open source man pages (SUNWsfman).

Yes, you're right. It was a bad decision by Sun to put all those man pages into 
a single package instead of putting them into the same package as the binaries 
(or into separate packages like SUNWsmbam, etc.).

I've put a workaround into the current development release, so that 
146363/146364 shouldn't show up in the list of missing patches anymore if none 
of the SUNWsmb* packages are installed.

Martin.


From martin at par.univie.ac.at  Tue Jan 25 10:38:08 2011
From: martin at par.univie.ac.at (Martin Paul)
Date: Tue, 25 Jan 2011 10:38:08 +0100
Subject: [pca] 502 Proxy Errors when using pca
In-Reply-To: <4D3DC411.70401@everycity.co.uk>
References: <4D3DC411.70401@everycity.co.uk>
Message-ID: <4D3E9A00.5050002@par.univie.ac.at>

Hi,

Alasdair Lumsden wrote:
> This morning I registered for My Oracle Support, and had our Solaris 10 
> support entitlement added to the account.
> 
> I'm able to download patches fine via My Oracle Support, however when 
> using an updated PCA, I mostly get 502 Proxy Errors (But sometimes it 
> works - on a run against 123 patches I got maybe 5 or so).

I haven't seen "502 Proxy Error" yet, but the fact that you can download a very 
small set of patches points at problems with authentication and support 
entitlements. The 5 patches you got might be those which are available freely. 
It also tells us that this is not a problem with wget, local web proxies etc.

Can you try to run this command:

   pca --supplevel

You should see "OS" and "PUB" listed there. Then show us debug output from a 
sample failing patch download:

   pca --debug --download 119060-56

One possible reason for the failing download could be that it might Oracle take 
some time to allow automatic patch downloads after entering support contract 
data. ISTR that it was about 24 hours with Sun.

> I asked someone in #solaris on IRC who uses PCA and has a My Oracle 
> Support contract to try this, and they had exactly the same issue.

Another possible reason could be a temporary problem with the MOS server, 
especially if two users see the same error at the same time. Any changes when 
you re-try today?

Martin.


From Sudhir_Patel at amat.com  Tue Jan 25 11:02:06 2011
From: Sudhir_Patel at amat.com (Sudhir_Patel at amat.com)
Date: Tue, 25 Jan 2011 04:02:06 -0600
Subject: [pca] AUTO: Sudhir Patel/APPLIED MATERIALS is out of the office.
	(returning 01/31/2011)
Message-ID: <OF80AB1CFD.661179A0-ON86257823.00371FC0-86257823.00371FC0@amat.com>


I am out of the office until 01/31/2011.

I am attending a 5-day training session.
Please send an email as I will be checking after hours and responding as
necessary. Thanks.


Note: This is an automated response to your message  "Re: [pca] Samba Patch
wants to be installed even when no samba is installed at all" sent on
1/25/2011 3:25:34 AM.

This is the only notification you will receive while this person is away.



From neil.a.houston at gmail.com  Tue Jan 25 11:04:24 2011
From: neil.a.houston at gmail.com (Neil Houston)
Date: Tue, 25 Jan 2011 11:04:24 +0100
Subject: [pca] 502 Proxy Errors when using pca
In-Reply-To: <4D3E9A00.5050002@par.univie.ac.at>
References: <4D3DC411.70401@everycity.co.uk>
	<4D3E9A00.5050002@par.univie.ac.at>
Message-ID: <AANLkTinHYKMpH_1Qqfn8vjb1cQ-QiwrMKts6iG8fitQb@mail.gmail.com>

Works for me:

neil at ray2:~$ ./pca -a -d 118668-29
Using /var/tmp/patchdiag.xref from Jan/24/11
Host: ray2 (SunOS 5.10/Generic_144489-02/i386/i86pc)
List: 118668-29 (1/0)

Patch  IR   CR RSB Age Synopsis
------ -- - -- --- ---
-------------------------------------------------------
118668 28 < 29 RS-  41 JavaSE 5.0_x86: update 27 patch (equivalent to JDK
5.0u27)

Looking for 118668-29 (1/1)
Trying Oracle

Please enter My Oracle Support Account User: XXXXX
Please enter My Oracle Support Account Password: XXXXX

Trying https://getupdates.oracle.com/ (1/1)
Done
------------------------------------------------------------------------------
Download Summary: 1 total, 1 successful, 0 skipped, 0 failed

Whereas it did appear to be failing yesterday.



On 25 January 2011 10:38, Martin Paul <martin at par.univie.ac.at> wrote:

> Hi,
>
>
> Alasdair Lumsden wrote:
>
>> This morning I registered for My Oracle Support, and had our Solaris 10
>> support entitlement added to the account.
>>
>> I'm able to download patches fine via My Oracle Support, however when
>> using an updated PCA, I mostly get 502 Proxy Errors (But sometimes it works
>> - on a run against 123 patches I got maybe 5 or so).
>>
>
> I haven't seen "502 Proxy Error" yet, but the fact that you can download a
> very small set of patches points at problems with authentication and support
> entitlements. The 5 patches you got might be those which are available
> freely. It also tells us that this is not a problem with wget, local web
> proxies etc.
>
> Can you try to run this command:
>
>  pca --supplevel
>
> You should see "OS" and "PUB" listed there. Then show us debug output from
> a sample failing patch download:
>
>  pca --debug --download 119060-56
>
> One possible reason for the failing download could be that it might Oracle
> take some time to allow automatic patch downloads after entering support
> contract data. ISTR that it was about 24 hours with Sun.
>
>
>  I asked someone in #solaris on IRC who uses PCA and has a My Oracle
>> Support contract to try this, and they had exactly the same issue.
>>
>
> Another possible reason could be a temporary problem with the MOS server,
> especially if two users see the same error at the same time. Any changes
> when you re-try today?
>
> Martin.
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.univie.ac.at/pipermail/pca/attachments/20110125/0f6a6318/attachment-0001.html 

From jh at baltic-online.de  Tue Jan 25 11:11:49 2011
From: jh at baltic-online.de (Jan Holzhueter)
Date: Tue, 25 Jan 2011 11:11:49 +0100
Subject: [pca] 502 Proxy Errors when using pca
In-Reply-To: <4D3E9A00.5050002@par.univie.ac.at>
References: <4D3DC411.70401@everycity.co.uk>
	<4D3E9A00.5050002@par.univie.ac.at>
Message-ID: <4D3EA1E5.8050505@baltic-online.de>

Am 25.01.11 10:38, schrieb Martin Paul:

> 
> Another possible reason could be a temporary problem with the MOS
> server, especially if two users see the same error at the same time. Any
> changes when you re-try today?

I think there was a problem with MOS yesterday. I had patch download
problems,too. With server timeout errors (using some diffrend download
script (harvester from ops-center). But that uses the same urls.
It worked a few hours later again.

Greetings

Jan




From Paul.VanBommel at gdcanada.com  Wed Jan 26 19:37:37 2011
From: Paul.VanBommel at gdcanada.com (Van Bommel, Paul)
Date: Wed, 26 Jan 2011 13:37:37 -0500
Subject: [pca] patch delta between two dates
Message-ID: <18CEB4EDBEE11A4783714F8B8ADA889609098A46@OTTSVW100.gdcan.com>

I've been asked to provide a list of patches that have been applied to a
system over a period of time. (about a year). These have been applied in
3-4 patching sessions.

We use PCA and it works very well. We record details in a single
directory on each system per patching session. Things like the download
and install output in a log  file, the patchdiag.xref used on that date,
any local pca.conf file, and the patch zip files. The zip files
sometimes get cleaned out from the local system to save space.  

My log file has a lot of details, and I was able to generate a list of
"Successfully" installed patches, but I don't trust this technique. Am I
on the right track here. (egrep '^Installing|^Successful' log.txt)

I'm starting to think I should have recorded the three files used by PCA
uname.out, showrev.out, and pkginfo.out with all the other files I was
storing. Then run PCA on the old input files with the last "baseline"
patchdiag.xref

Does anyone have a good technique to determine the delta of patches
added in a period of time. (using PCA or other tools)

What info do you record in a patch session to make your life easier when
questions like this popup?
The worst part is that I cannot go back in time to produce these file. I
can only start recording now.
I wish the base OS had some kind of version control. (not ZFS, something
in the package/patch database)

Thanks in advance.
Paul Van Bommel


The information contained in this e-mail message is PRIVATE. It may contain confidential information and may be legally privileged. It is intended for the exclusive use of the addressee(s). If you are not the intended recipient, you are hereby notified that any dissemination, distribution or reproduction of this communication is strictly prohibited. If the intended recipient(s) cannot be reached or if a transmission problem has occurred, please notify the sender immediately by return e-mail and destroy all copies of this message. 
Thank you. 



From dave at davidstark.name  Wed Jan 26 20:14:56 2011
From: dave at davidstark.name (Dave Stark)
Date: Wed, 26 Jan 2011 19:14:56 +0000
Subject: [pca] patch delta between two dates
In-Reply-To: <18CEB4EDBEE11A4783714F8B8ADA889609098A46@OTTSVW100.gdcan.com>
References: <18CEB4EDBEE11A4783714F8B8ADA889609098A46@OTTSVW100.gdcan.com>
Message-ID: <4D4072B0.2010508@davidstark.name>

Hi.

Check /var/sadm/patch - every patch that's been installed on the system 
should have a directory in there, and they're all datestamped from the 
patch install time.

As far as I can tell, they don't get removed when a patch is obsoleted 
(I've got a Sol6 host here with 4 different revisions of the same patch 
listed in /var/sadm/patch).

Dave

On 01/26/2011 06:37 PM, Van Bommel, Paul wrote:
> I've been asked to provide a list of patches that have been applied to a
> system over a period of time. (about a year). These have been applied in
> 3-4 patching sessions.
>
> We use PCA and it works very well. We record details in a single
> directory on each system per patching session. Things like the download
> and install output in a log  file, the patchdiag.xref used on that date,
> any local pca.conf file, and the patch zip files. The zip files
> sometimes get cleaned out from the local system to save space.
>
> My log file has a lot of details, and I was able to generate a list of
> "Successfully" installed patches, but I don't trust this technique. Am I
> on the right track here. (egrep '^Installing|^Successful' log.txt)
>
> I'm starting to think I should have recorded the three files used by PCA
> uname.out, showrev.out, and pkginfo.out with all the other files I was
> storing. Then run PCA on the old input files with the last "baseline"
> patchdiag.xref
>
> Does anyone have a good technique to determine the delta of patches
> added in a period of time. (using PCA or other tools)
>
> What info do you record in a patch session to make your life easier when
> questions like this popup?
> The worst part is that I cannot go back in time to produce these file. I
> can only start recording now.
> I wish the base OS had some kind of version control. (not ZFS, something
> in the package/patch database)
>
> Thanks in advance.
> Paul Van Bommel
>
>
> The information contained in this e-mail message is PRIVATE. It may contain confidential information and may be legally privileged. It is intended for the exclusive use of the addressee(s). If you are not the intended recipient, you are hereby notified that any dissemination, distribution or reproduction of this communication is strictly prohibited. If the intended recipient(s) cannot be reached or if a transmission problem has occurred, please notify the sender immediately by return e-mail and destroy all copies of this message.
> Thank you.
>
>



From opn.src.rocks at gmail.com  Wed Jan 26 20:26:45 2011
From: opn.src.rocks at gmail.com (Rajiv Gunja)
Date: Wed, 26 Jan 2011 14:26:45 -0500
Subject: [pca] patch delta between two dates
In-Reply-To: <18CEB4EDBEE11A4783714F8B8ADA889609098A46@OTTSVW100.gdcan.com>
References: <18CEB4EDBEE11A4783714F8B8ADA889609098A46@OTTSVW100.gdcan.com>
Message-ID: <AANLkTinz_2aCQ_u=tcugVZU5+dbxLOE9GhYbsBckSTc9@mail.gmail.com>

Van,
I have a wrapper script and create patch bundles for servers in 1 location -
local PCA Patch Proxy. This method allows me to keep a copy of the list of
patches generated along with the Xref file with which it was generated on
the PCA Patch Proxy server. pca -l missing in html format or text format on
a web-server does work well when audit needs to performed.
Storing multiple files per server with date will work if you have less than
200 servers, I have about 3000 servers, so 1 html file with date in its
filename works better for me.

On the server, where the patch is being installed, I have a wrapper script,
which writes to /var/log/installpatches.log and each time a bundle is
installed, the older one is backed up and the new log is appended to this
file. This file also contains the date/time on which it was installed.

Please check my blog for the wrapper script, if you need more information,
please send me an email.
Thanks

-GGR

--
Rajiv G Gunja
Blog: http://ossrocks.blogspot.com


On Wed, Jan 26, 2011 at 13:37, Van Bommel, Paul <Paul.VanBommel at gdcanada.com
> wrote:

> I've been asked to provide a list of patches that have been applied to a
> system over a period of time. (about a year). These have been applied in
> 3-4 patching sessions.
>
> We use PCA and it works very well. We record details in a single
> directory on each system per patching session. Things like the download
> and install output in a log  file, the patchdiag.xref used on that date,
> any local pca.conf file, and the patch zip files. The zip files
> sometimes get cleaned out from the local system to save space.
>
> My log file has a lot of details, and I was able to generate a list of
> "Successfully" installed patches, but I don't trust this technique. Am I
> on the right track here. (egrep '^Installing|^Successful' log.txt)
>
> I'm starting to think I should have recorded the three files used by PCA
> uname.out, showrev.out, and pkginfo.out with all the other files I was
> storing. Then run PCA on the old input files with the last "baseline"
> patchdiag.xref
>
> Does anyone have a good technique to determine the delta of patches
> added in a period of time. (using PCA or other tools)
>
> What info do you record in a patch session to make your life easier when
> questions like this popup?
> The worst part is that I cannot go back in time to produce these file. I
> can only start recording now.
> I wish the base OS had some kind of version control. (not ZFS, something
> in the package/patch database)
>
> Thanks in advance.
> Paul Van Bommel
>
>
> The information contained in this e-mail message is PRIVATE. It may contain
> confidential information and may be legally privileged. It is intended for
> the exclusive use of the addressee(s). If you are not the intended
> recipient, you are hereby notified that any dissemination, distribution or
> reproduction of this communication is strictly prohibited. If the intended
> recipient(s) cannot be reached or if a transmission problem has occurred,
> please notify the sender immediately by return e-mail and destroy all copies
> of this message.
> Thank you.
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.univie.ac.at/pipermail/pca/attachments/20110126/3f2f82cf/attachment.html 

From Aydin.Coskun at blueshieldca.com  Wed Jan 26 20:31:00 2011
From: Aydin.Coskun at blueshieldca.com (Coskun, Aydin)
Date: Wed, 26 Jan 2011 11:31:00 -0800
Subject: [pca] patch delta between two dates
In-Reply-To: <AANLkTinz_2aCQ_u=tcugVZU5+dbxLOE9GhYbsBckSTc9@mail.gmail.com>
References: <18CEB4EDBEE11A4783714F8B8ADA889609098A46@OTTSVW100.gdcan.com>
	<AANLkTinz_2aCQ_u=tcugVZU5+dbxLOE9GhYbsBckSTc9@mail.gmail.com>
Message-ID: <B06AB59E167E9745BB49C2DB6A71934D0B45A95A@EDHC01WEX02.bsc.bscal.com>

Hi Rajiv, 

In your wrapper script there is a reference to uninstall script but it
is not posted on your blog. Can you share it?

 

 ~ Aydin 

 

________________________________

From: pca-bounces at lists.univie.ac.at
[mailto:pca-bounces at lists.univie.ac.at] On Behalf Of Rajiv Gunja
Sent: Wednesday, January 26, 2011 11:27 AM
To: PCA (Patch Check Advanced) Discussion
Subject: Re: [pca] patch delta between two dates

 

Van,
I have a wrapper script and create patch bundles for servers in 1
location - local PCA Patch Proxy. This method allows me to keep a copy
of the list of patches generated along with the Xref file with which it
was generated on the PCA Patch Proxy server. pca -l missing in html
format or text format on a web-server does work well when audit needs to
performed.
Storing multiple files per server with date will work if you have less
than 200 servers, I have about 3000 servers, so 1 html file with date in
its filename works better for me.

On the server, where the patch is being installed, I have a wrapper
script, which writes to /var/log/installpatches.log and each time a
bundle is installed, the older one is backed up and the new log is
appended to this file. This file also contains the date/time on which it
was installed.

Please check my blog for the wrapper script, if you need more
information, please send me an email.
Thanks

-GGR

--
Rajiv G Gunja
Blog: http://ossrocks.blogspot.com



On Wed, Jan 26, 2011 at 13:37, Van Bommel, Paul
<Paul.VanBommel at gdcanada.com> wrote:

I've been asked to provide a list of patches that have been applied to a
system over a period of time. (about a year). These have been applied in
3-4 patching sessions.

We use PCA and it works very well. We record details in a single
directory on each system per patching session. Things like the download
and install output in a log  file, the patchdiag.xref used on that date,
any local pca.conf file, and the patch zip files. The zip files
sometimes get cleaned out from the local system to save space.

My log file has a lot of details, and I was able to generate a list of
"Successfully" installed patches, but I don't trust this technique. Am I
on the right track here. (egrep '^Installing|^Successful' log.txt)

I'm starting to think I should have recorded the three files used by PCA
uname.out, showrev.out, and pkginfo.out with all the other files I was
storing. Then run PCA on the old input files with the last "baseline"
patchdiag.xref

Does anyone have a good technique to determine the delta of patches
added in a period of time. (using PCA or other tools)

What info do you record in a patch session to make your life easier when
questions like this popup?
The worst part is that I cannot go back in time to produce these file. I
can only start recording now.
I wish the base OS had some kind of version control. (not ZFS, something
in the package/patch database)

Thanks in advance.
Paul Van Bommel


The information contained in this e-mail message is PRIVATE. It may
contain confidential information and may be legally privileged. It is
intended for the exclusive use of the addressee(s). If you are not the
intended recipient, you are hereby notified that any dissemination,
distribution or reproduction of this communication is strictly
prohibited. If the intended recipient(s) cannot be reached or if a
transmission problem has occurred, please notify the sender immediately
by return e-mail and destroy all copies of this message.
Thank you.



 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.univie.ac.at/pipermail/pca/attachments/20110126/fb308b73/attachment-0001.html 

From jeremy.finn at gmail.com  Wed Jan 26 23:16:05 2011
From: jeremy.finn at gmail.com (Jeremy Finn)
Date: Wed, 26 Jan 2011 17:16:05 -0500
Subject: [pca] pca patch recursion
Message-ID: <AANLkTin=BUO2p=Ask2N+9ieDbo_QMZ5a-rjuNmMARcGE@mail.gmail.com>

Hello,

Before I go off and re-invent the wheel, I thought I might pose a question
to the kind folks on this forum.

Does anybody know of a way to make pca recurse and look to see if a patch
which has obsoleted the listed patch is installed on the system?

Example:

# pca -l 118816

118816 -- < 04 --- 999 Obsoleted by: 127885-01 SunOS 5.10_x86:
/usr/xpg4/bin/awk
 patch

#

Does pca have a way to natively recurse and check to see if 127885-01 is
installed on the system?

Thank you,
Jeremy
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.univie.ac.at/pipermail/pca/attachments/20110126/d3a610f8/attachment.html 

From martin at par.univie.ac.at  Thu Jan 27 09:42:06 2011
From: martin at par.univie.ac.at (Martin Paul)
Date: Thu, 27 Jan 2011 09:42:06 +0100
Subject: [pca] pca patch recursion
In-Reply-To: <AANLkTin=BUO2p=Ask2N+9ieDbo_QMZ5a-rjuNmMARcGE@mail.gmail.com>
References: <AANLkTin=BUO2p=Ask2N+9ieDbo_QMZ5a-rjuNmMARcGE@mail.gmail.com>
Message-ID: <4D412FDE.8010501@par.univie.ac.at>

Hi Jeremy,

> Does anybody know of a way to make pca recurse and look to see if a patch
> which has obsoleted the listed patch is installed on the system?

Not directly. But you can maybe use the "chkmin" script I've put onto 
http://www.par.univie.ac.at/solaris/pca/contrib.html - its primary use is to 
check whether certain patches are installed in a given minimum revision, and it 
will also follow patch obsoletions.

Example:

   $ ./chkmin 118816-04
   $

This means that either 118816-04 or a patch which obsoletes it (127885-01 in 
that case) is installed. This is useful if you have a list of "required patches" 
for a certain application, which you can then be reduced to those which must be 
installed. Maybe that's what you're after anyway?

Martin.


From jeremy.finn at gmail.com  Thu Jan 27 12:31:10 2011
From: jeremy.finn at gmail.com (Jeremy Finn)
Date: Thu, 27 Jan 2011 06:31:10 -0500
Subject: [pca] pca patch recursion
In-Reply-To: <4D412FDE.8010501@par.univie.ac.at>
References: <AANLkTin=BUO2p=Ask2N+9ieDbo_QMZ5a-rjuNmMARcGE@mail.gmail.com>
	<4D412FDE.8010501@par.univie.ac.at>
Message-ID: <AANLkTimpDnHK7qgLt7Zzdj=vQwKx_2=_ZDMBV9Zjaeix@mail.gmail.com>

Martin,

That is exactly what I'm after. Many thanks for the suggestion - I'll give
it a try.

Regards,
Jeremy

On Thu, Jan 27, 2011 at 3:42 AM, Martin Paul <martin at par.univie.ac.at>wrote:

> Hi Jeremy,
>
>
> Does anybody know of a way to make pca recurse and look to see if a patch
>> which has obsoleted the listed patch is installed on the system?
>>
>
> Not directly. But you can maybe use the "chkmin" script I've put onto
> http://www.par.univie.ac.at/solaris/pca/contrib.html - its primary use is
> to check whether certain patches are installed in a given minimum revision,
> and it will also follow patch obsoletions.
>
> Example:
>
>  $ ./chkmin 118816-04
>  $
>
> This means that either 118816-04 or a patch which obsoletes it (127885-01
> in that case) is installed. This is useful if you have a list of "required
> patches" for a certain application, which you can then be reduced to those
> which must be installed. Maybe that's what you're after anyway?
>
> Martin.
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.univie.ac.at/pipermail/pca/attachments/20110127/6b13448a/attachment.html 

From opn.src.rocks at gmail.com  Thu Jan 27 15:58:42 2011
From: opn.src.rocks at gmail.com (Rajiv Gunja)
Date: Thu, 27 Jan 2011 09:58:42 -0500
Subject: [pca] patch delta between two dates
In-Reply-To: <B06AB59E167E9745BB49C2DB6A71934D0B45A95A@EDHC01WEX02.bsc.bscal.com>
References: <18CEB4EDBEE11A4783714F8B8ADA889609098A46@OTTSVW100.gdcan.com>
	<AANLkTinz_2aCQ_u=tcugVZU5+dbxLOE9GhYbsBckSTc9@mail.gmail.com>
	<B06AB59E167E9745BB49C2DB6A71934D0B45A95A@EDHC01WEX02.bsc.bscal.com>
Message-ID: <AANLkTin9JSmS7UjXcmd_nuGHLN-NrGfwNiRWyrGwmaQp@mail.gmail.com>

Aydin,
Email including the script sent.

-GGR
--
Rajiv G Gunja
Blog: http://ossrocks.blogspot.com


On Wed, Jan 26, 2011 at 14:31, Coskun, Aydin
<Aydin.Coskun at blueshieldca.com>wrote:

>  Hi Rajiv,
>
> In your wrapper script there is a reference to uninstall script but it is
> not posted on your blog. Can you share it?
>
>
>
>  ~ Aydin
>
>
>  ------------------------------
>
> *From:* pca-bounces at lists.univie.ac.at [mailto:
> pca-bounces at lists.univie.ac.at] *On Behalf Of *Rajiv Gunja
> *Sent:* Wednesday, January 26, 2011 11:27 AM
> *To:* PCA (Patch Check Advanced) Discussion
> *Subject:* Re: [pca] patch delta between two dates
>
>
>
> Van,
> I have a wrapper script and create patch bundles for servers in 1 location
> - local PCA Patch Proxy. This method allows me to keep a copy of the list of
> patches generated along with the Xref file with which it was generated on
> the PCA Patch Proxy server. pca -l missing in html format or text format on
> a web-server does work well when audit needs to performed.
> Storing multiple files per server with date will work if you have less than
> 200 servers, I have about 3000 servers, so 1 html file with date in its
> filename works better for me.
>
> On the server, where the patch is being installed, I have a wrapper script,
> which writes to /var/log/installpatches.log and each time a bundle is
> installed, the older one is backed up and the new log is appended to this
> file. This file also contains the date/time on which it was installed.
>
> Please check my blog for the wrapper script, if you need more information,
> please send me an email.
> Thanks
>
> -GGR
>
> --
> Rajiv G Gunja
> Blog: http://ossrocks.blogspot.com
>
>  On Wed, Jan 26, 2011 at 13:37, Van Bommel, Paul <
> Paul.VanBommel at gdcanada.com> wrote:
>
> I've been asked to provide a list of patches that have been applied to a
> system over a period of time. (about a year). These have been applied in
> 3-4 patching sessions.
>
> We use PCA and it works very well. We record details in a single
> directory on each system per patching session. Things like the download
> and install output in a log  file, the patchdiag.xref used on that date,
> any local pca.conf file, and the patch zip files. The zip files
> sometimes get cleaned out from the local system to save space.
>
> My log file has a lot of details, and I was able to generate a list of
> "Successfully" installed patches, but I don't trust this technique. Am I
> on the right track here. (egrep '^Installing|^Successful' log.txt)
>
> I'm starting to think I should have recorded the three files used by PCA
> uname.out, showrev.out, and pkginfo.out with all the other files I was
> storing. Then run PCA on the old input files with the last "baseline"
> patchdiag.xref
>
> Does anyone have a good technique to determine the delta of patches
> added in a period of time. (using PCA or other tools)
>
> What info do you record in a patch session to make your life easier when
> questions like this popup?
> The worst part is that I cannot go back in time to produce these file. I
> can only start recording now.
> I wish the base OS had some kind of version control. (not ZFS, something
> in the package/patch database)
>
> Thanks in advance.
> Paul Van Bommel
>
>
> The information contained in this e-mail message is PRIVATE. It may contain
> confidential information and may be legally privileged. It is intended for
> the exclusive use of the addressee(s). If you are not the intended
> recipient, you are hereby notified that any dissemination, distribution or
> reproduction of this communication is strictly prohibited. If the intended
> recipient(s) cannot be reached or if a transmission problem has occurred,
> please notify the sender immediately by return e-mail and destroy all copies
> of this message.
> Thank you.
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.univie.ac.at/pipermail/pca/attachments/20110127/fe2e181e/attachment.html 

From Aydin.Coskun at blueshieldca.com  Thu Jan 27 17:25:33 2011
From: Aydin.Coskun at blueshieldca.com (Coskun, Aydin)
Date: Thu, 27 Jan 2011 08:25:33 -0800
Subject: [pca] patch delta between two dates
In-Reply-To: <AANLkTin9JSmS7UjXcmd_nuGHLN-NrGfwNiRWyrGwmaQp@mail.gmail.com>
References: <18CEB4EDBEE11A4783714F8B8ADA889609098A46@OTTSVW100.gdcan.com><AANLkTinz_2aCQ_u=tcugVZU5+dbxLOE9GhYbsBckSTc9@mail.gmail.com><B06AB59E167E9745BB49C2DB6A71934D0B45A95A@EDHC01WEX02.bsc.bscal.com>
	<AANLkTin9JSmS7UjXcmd_nuGHLN-NrGfwNiRWyrGwmaQp@mail.gmail.com>
Message-ID: <B06AB59E167E9745BB49C2DB6A71934D0B45A95F@EDHC01WEX02.bsc.bscal.com>

Thank you Rajiv ,

 

________________________________

From: pca-bounces at lists.univie.ac.at
[mailto:pca-bounces at lists.univie.ac.at] On Behalf Of Rajiv Gunja
Sent: Thursday, January 27, 2011 6:59 AM
To: PCA (Patch Check Advanced) Discussion
Subject: Re: [pca] patch delta between two dates

 

Aydin,
Email including the script sent.

-GGR
--
Rajiv G Gunja
Blog: http://ossrocks.blogspot.com



On Wed, Jan 26, 2011 at 14:31, Coskun, Aydin
<Aydin.Coskun at blueshieldca.com> wrote:

Hi Rajiv, 

In your wrapper script there is a reference to uninstall script but it
is not posted on your blog. Can you share it?

 

 ~ Aydin 

 

________________________________

From: pca-bounces at lists.univie.ac.at
[mailto:pca-bounces at lists.univie.ac.at] On Behalf Of Rajiv Gunja
Sent: Wednesday, January 26, 2011 11:27 AM
To: PCA (Patch Check Advanced) Discussion
Subject: Re: [pca] patch delta between two dates

 

Van,
I have a wrapper script and create patch bundles for servers in 1
location - local PCA Patch Proxy. This method allows me to keep a copy
of the list of patches generated along with the Xref file with which it
was generated on the PCA Patch Proxy server. pca -l missing in html
format or text format on a web-server does work well when audit needs to
performed.
Storing multiple files per server with date will work if you have less
than 200 servers, I have about 3000 servers, so 1 html file with date in
its filename works better for me.

On the server, where the patch is being installed, I have a wrapper
script, which writes to /var/log/installpatches.log and each time a
bundle is installed, the older one is backed up and the new log is
appended to this file. This file also contains the date/time on which it
was installed.

Please check my blog for the wrapper script, if you need more
information, please send me an email.
Thanks

-GGR

--
Rajiv G Gunja
Blog: http://ossrocks.blogspot.com

On Wed, Jan 26, 2011 at 13:37, Van Bommel, Paul
<Paul.VanBommel at gdcanada.com> wrote:

I've been asked to provide a list of patches that have been applied to a
system over a period of time. (about a year). These have been applied in
3-4 patching sessions.

We use PCA and it works very well. We record details in a single
directory on each system per patching session. Things like the download
and install output in a log  file, the patchdiag.xref used on that date,
any local pca.conf file, and the patch zip files. The zip files
sometimes get cleaned out from the local system to save space.

My log file has a lot of details, and I was able to generate a list of
"Successfully" installed patches, but I don't trust this technique. Am I
on the right track here. (egrep '^Installing|^Successful' log.txt)

I'm starting to think I should have recorded the three files used by PCA
uname.out, showrev.out, and pkginfo.out with all the other files I was
storing. Then run PCA on the old input files with the last "baseline"
patchdiag.xref

Does anyone have a good technique to determine the delta of patches
added in a period of time. (using PCA or other tools)

What info do you record in a patch session to make your life easier when
questions like this popup?
The worst part is that I cannot go back in time to produce these file. I
can only start recording now.
I wish the base OS had some kind of version control. (not ZFS, something
in the package/patch database)

Thanks in advance.
Paul Van Bommel


The information contained in this e-mail message is PRIVATE. It may
contain confidential information and may be legally privileged. It is
intended for the exclusive use of the addressee(s). If you are not the
intended recipient, you are hereby notified that any dissemination,
distribution or reproduction of this communication is strictly
prohibited. If the intended recipient(s) cannot be reached or if a
transmission problem has occurred, please notify the sender immediately
by return e-mail and destroy all copies of this message.
Thank you.

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.univie.ac.at/pipermail/pca/attachments/20110127/02a05820/attachment-0001.html 

From Aydin.Coskun at blueshieldca.com  Fri Jan 28 23:07:01 2011
From: Aydin.Coskun at blueshieldca.com (Coskun, Aydin)
Date: Fri, 28 Jan 2011 14:07:01 -0800
Subject: [pca] patch delta between two dates
In-Reply-To: <B06AB59E167E9745BB49C2DB6A71934D0B45A95F@EDHC01WEX02.bsc.bscal.com>
References: <AANLkTin9JSmS7UjXcmd_nuGHLN-NrGfwNiRWyrGwmaQp@mail.gmail.com>
	<B06AB59E167E9745BB49C2DB6A71934D0B45A95F@EDHC01WEX02.bsc.bscal.com>
Message-ID: <B06AB59E167E9745BB49C2DB6A71934D0B45A97E@EDHC01WEX02.bsc.bscal.com>

Hey Rajiv, 

 

I just noticed the luinstpatches.sh in your Create_Patch_Bundle.sh and
could not find it in your website. Can you provide this as well?

 

~ Aydin

 

________________________________

From: pca-bounces at lists.univie.ac.at
[mailto:pca-bounces at lists.univie.ac.at] On Behalf Of Coskun, Aydin
Sent: Thursday, January 27, 2011 8:26 AM
To: PCA (Patch Check Advanced) Discussion
Subject: Re: [pca] patch delta between two dates

 

Thank you Rajiv ,

 

________________________________

From: pca-bounces at lists.univie.ac.at
[mailto:pca-bounces at lists.univie.ac.at] On Behalf Of Rajiv Gunja
Sent: Thursday, January 27, 2011 6:59 AM
To: PCA (Patch Check Advanced) Discussion
Subject: Re: [pca] patch delta between two dates

 

Aydin,
Email including the script sent.

-GGR
--
Rajiv G Gunja
Blog: http://ossrocks.blogspot.com

On Wed, Jan 26, 2011 at 14:31, Coskun, Aydin
<Aydin.Coskun at blueshieldca.com> wrote:

Hi Rajiv, 

In your wrapper script there is a reference to uninstall script but it
is not posted on your blog. Can you share it?

 

 ~ Aydin 

 

________________________________

From: pca-bounces at lists.univie.ac.at
[mailto:pca-bounces at lists.univie.ac.at] On Behalf Of Rajiv Gunja
Sent: Wednesday, January 26, 2011 11:27 AM
To: PCA (Patch Check Advanced) Discussion
Subject: Re: [pca] patch delta between two dates

 

Van,
I have a wrapper script and create patch bundles for servers in 1
location - local PCA Patch Proxy. This method allows me to keep a copy
of the list of patches generated along with the Xref file with which it
was generated on the PCA Patch Proxy server. pca -l missing in html
format or text format on a web-server does work well when audit needs to
performed.
Storing multiple files per server with date will work if you have less
than 200 servers, I have about 3000 servers, so 1 html file with date in
its filename works better for me.

On the server, where the patch is being installed, I have a wrapper
script, which writes to /var/log/installpatches.log and each time a
bundle is installed, the older one is backed up and the new log is
appended to this file. This file also contains the date/time on which it
was installed.

Please check my blog for the wrapper script, if you need more
information, please send me an email.
Thanks

-GGR

--
Rajiv G Gunja
Blog: http://ossrocks.blogspot.com

On Wed, Jan 26, 2011 at 13:37, Van Bommel, Paul
<Paul.VanBommel at gdcanada.com> wrote:

I've been asked to provide a list of patches that have been applied to a
system over a period of time. (about a year). These have been applied in
3-4 patching sessions.

We use PCA and it works very well. We record details in a single
directory on each system per patching session. Things like the download
and install output in a log  file, the patchdiag.xref used on that date,
any local pca.conf file, and the patch zip files. The zip files
sometimes get cleaned out from the local system to save space.

My log file has a lot of details, and I was able to generate a list of
"Successfully" installed patches, but I don't trust this technique. Am I
on the right track here. (egrep '^Installing|^Successful' log.txt)

I'm starting to think I should have recorded the three files used by PCA
uname.out, showrev.out, and pkginfo.out with all the other files I was
storing. Then run PCA on the old input files with the last "baseline"
patchdiag.xref

Does anyone have a good technique to determine the delta of patches
added in a period of time. (using PCA or other tools)

What info do you record in a patch session to make your life easier when
questions like this popup?
The worst part is that I cannot go back in time to produce these file. I
can only start recording now.
I wish the base OS had some kind of version control. (not ZFS, something
in the package/patch database)

Thanks in advance.
Paul Van Bommel


The information contained in this e-mail message is PRIVATE. It may
contain confidential information and may be legally privileged. It is
intended for the exclusive use of the addressee(s). If you are not the
intended recipient, you are hereby notified that any dissemination,
distribution or reproduction of this communication is strictly
prohibited. If the intended recipient(s) cannot be reached or if a
transmission problem has occurred, please notify the sender immediately
by return e-mail and destroy all copies of this message.
Thank you.

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.univie.ac.at/pipermail/pca/attachments/20110128/9c440926/attachment.html 

