[pca] Strange proxy behavior - Error 401: MOS data missing (long)

[Lee Roth]

(I'm sorry this is so long, but it's kind of complicated._

I have a successful PCA proxy server setup; client systems use a properly
configured /etc/pca.conf which grabs patches via a central caching PCA
server to grab patches from Oracle. This is on my internal network.

I've tried to duplicate my setup in a DMZ network, and am using the client
/etc/pca.conf and PCA proxy /etc/pca-proxy.conf files as a template. In
the DMZ, a different network setup is used to go outbound to the Oracle
server.

My problem is with my DMZ client/proxy server setup.

My pca.pl version is 20110329-01.

The client system can successfully receive patchdiag.xref and it gets
pulled from Oracle (I first deleted it from the cache directory on the PCA
proxy server). CMD:  ./pca.pl --debug -x

I suspect that somehow, the PCA proxy is not authenticating using my
Oracle MOS account... here is what I get on the client system when trying
to download a patch (via the PCA proxy):

 client># ./pca.pl -d 139382
 Using /var/tmp/patch/patchdiag.xref from May/10/11
 Host: elmer5 (SunOS 5.10/Generic_141444-09/sparc/sun4u)
 List: 139382 (1/56)

 Patch  IR   CR RSB Age Synopsis
------ -- - -- --- --- 
-------------------------------------------------------
 139382 -- < 03 RS-  56 GNOME 2.0.2: libpng Patch

 Looking for 139382-03 (1/1)
 Trying http://10.44.19.68/pca-proxy.cgi?
 Failed (Error 401: MOS data missing)

 Please enter My Oracle Support Account User: ^C
 ERROR: Caught a SIGINT
 client>#

I have "debug=1" in my /etc/pca-proxy.conf file on my PCA proxy, but for
some reason it isn't writing a debug log in /var/tmp/. I can do a "touch
/var/tmp/pca-proxy-debug.txt" from the Apache webserver account, so it
isn't a file permissions issue.

Here is my config file from the PCA proxy server:

 # Sun Online Account
 user=somename at somedomain.net
 passwd=GooDLucK
 # Other
 wget=/usr/local/bin/wget
 wgetproxy=https://10.77.23.2:80
 patchdir=/storage/pca-patch
 xrefdir=/storage/pca-patch
 dltries=3
 threads=5
 syslog=user
 debug=1
 nocache=1

As a test on my PCA proxy, I went to the main patch directory, did a
symbolic link "ln -s /etc/pca-proxy.conf ./pca.conf" and then issued the
command "./pca.pl -d 139382" and it is able to download that specific
patch just fine, so my Oracle MOS account info stored in
/etc/pca-proxy.conf must be doing the job.

I am using a .wgetrc file for the account that Apache is running under.

On my PCA proxy, I have wget version 1.12. On the client, I have wget
version 1.10.2.

Any suggestions on how to troubleshoot this?

Thanks,

Lee