8 Replies Latest reply: Jan 19, 2011 2:51 PM by 832591 RSS

    Update Manager/smpatch trouble

    807567
      On my x86_64 Solaris 10 box Update Manager and smpatch are no longer able to access public update servers. With Update Manager, a warning box appears on startup with nothing more than a yellow triangle/exclamation point and an OK button. Dropping down to the command line,
      smpatch analyze
      returns the following error "Failure: Unknown host (getupdates1.sun.com) connecting to https://getupdates1.sun.com/". I'm able to visit public internet sites with a browser so I'm confident the public interface is up and working. Any help troubleshooting this would be appreciated.
        • 1. Re: Update Manager/smpatch trouble
          807567
          Please run the attached script on the problem system and post the output on this forum.
          • 2. Re: Update Manager/smpatch trouble
            807567
            # ./suc.sh
            User:
            Logname: root
            Tue May 5 11:54:30 PDT 2009
            ceg2


            smpatch settings:

            patchpro.backout.directory - ""
            patchpro.baseline.directory - /var/sadm/spool
            patchpro.download.directory - /var/sadm/spool
            patchpro.install.types - rebootafter:reconfigafter:standard
            patchpro.patch.source - https://getupdates1.sun.com/
            patchpro.patchset current2 current2
            patchpro.proxy.host - ""
            patchpro.proxy.passwd **** ****
            patchpro.proxy.port - 8080
            patchpro.proxy.user - ""


            smpatch analyze:

            Failure: Unknown host (getupdates1.sun.com) connecting to https://getupdates1.sun.com/


            Entitlement:

            ----START-ENTITLEMENT-TOKENS----
            Solaris10Security
            SolarisSecurityUpdates
            SolarisDataIntegrityUpdates
            SolarisHardwareUpdates
            SolarisUtilityUpdates
            Public
            Solaris10
            SolarisAllUpdates
            ContractRequired
            -----END-ENTITLEMENT-TOKENS-----


            Sun UC patch revision:

            119789-09
            120336-04
            121082-06
            121082-08
            121119-13
            121119-15
            121454-02
            123004-03
            123006-07
            123631-03
            123896-05
            123896-10
            124187-07
            137138-09


            Solaris release:

            Solaris 10 10/08 s10x_u6wos_07b X86
            Copyright 2008 Sun Microsystems, Inc. All Rights Reserved.
            Use is subject to license terms.
            Assembled 27 October 2008


            Solaris Kernel: Generic_138889-08
            Machine Type: i86pc
            Platform: i86pc


            Java versions:



            System default:

            java version "1.5.0_18"
            Java(TM) Platform, Standard Edition for Business (build 1.5.0_18-b02)
            Java HotSpot(TM) Server VM (build 1.5.0_18-b02, mixed mode)


            Java 5:

            java version "1.5.0_18"
            Java(TM) Platform, Standard Edition for Business (build 1.5.0_18-b02)
            Java HotSpot(TM) Server VM (build 1.5.0_18-b02, mixed mode)


            Java 6:

            Unable to locate JRE meeting specification "1.6*"


            Java used by smpatch and updatemanager:

            /usr/sbin/pprosvc:JAVACMD="/usr/jdk/latest/bin/java -version:1.5+"
            /bin/updatemanager:JAVA_EXEC="/usr/jdk/latest/bin/java -version:1.5+"


            Cacao Java version:

            java-home=/usr/jdk/jdk1.5.0_18


            Cacao Base Directories:

            cacao.install.rt.base.dir=/
            cacao.install.etc.base.dir=/


            Software Cluster:

            CLUSTER=SUNWCXall


            All ccr properties:

            20:
            Property not defined: 20

            cns.assetid:
            3FNAh31+hVFZKSZ/6lWoGcHek4E=

            cns.br.SunUCenabled:
            true

            cns.ccr.keyGenPath:
            /usr/lib/cc-ccr/bin/ccrKeyGen

            cns.clientid:
            0738d13c-0efc-4247-852e-0488f5652718

            cns.httpproxy.auth:


            cns.httpproxy.ipaddr:


            cns.httpproxy.port:


            cns.patchsvr.cachelocation:
            /var/sadm/spool/patchsvr

            cns.patchsvr.patchsource:
            https://getupdates1.sun.com/

            cns.regtoken:
            e0231c05-96f6-404a-8b53-4f06fd3733d5:1269734400000:T

            cns.security.password:
            T6xjvlsYzIudnMTGfS8bepBnweOKopvjYIjioMpyF6X0

            cns.security.privatekey:
            -----BEGIN ENCRYPTED PRIVATE KEY-----
            MIICxjBABgkqhkiG9w0BBQ0wMzAbBgkqhkiG9w0BBQwwDgQI+QdgIUSzmzYCAggA
            MBQGCCqGSIb3DQMHBAgrvY3IqD8XxwSCAoD5BPIv1nEIrdI73hP1a8gk/bJI/Zhu
            a/AAF+EZynLGm8Tu5IXRmf/qttIUP6Ayewwxsfgqxy5smRB3H281u/3zyo0yQizu
            ZrZomImzHCnBa26xEK2CP9PiulUghDxp5bihZd5/WF4ucrO/Mf3V/KTHMIhyCzPP
            rNAC+M/VIahLT+ELQAz/dPVo1WFvGVtwVbu9tnuSI6a1QFAujZuQcq38VCY043Ht
            tEutntvkZxdSu+I18rckpGfX8PAEu7WWOsebyBQw1dl9NqGWVUtYae3dUupRXC3H
            fo4JFz5244Myhzkck6+IpJu9nI9NsLNyP+mg2WqBtFl8t48nblZrVRDWx96UqVzQ
            tsQkTqyGyHVPovIeuo1tx1MJjM9x5SAQRB6TqBwwjjhrhHxpk9d3OKU/w9cQPF1I
            9EAHrrpvmdOF9dZYMpXd3gdZSLD9TKVx2IzdOUFCH1B52ISM9iZ2lIq38y+51ZcR
            xaDSDdRa4Mq+7DQUTWNbnGxqcb5RXU8O5Pn6Err40+alIG3tW1P43r3CUJphhNSt
            J6soUkDe7rIk40+zDR2aX1vROYkiuxUXvV3LvmAU4AXsocEyiM3BbpClL3/u0Zuf
            oviK5ja4ak9OpDHd4pw/xXYEP+puX5p5e+0HIArVuU8GVPYxeK42DZkch2/pxULB
            uzC/M2qWyBg9npXlNoQjhzJQAPrVJlFcDWX7n7ZmWOtT11/FblPtE4ljgyyhIf3X
            vLaVSJlWlZAriIL8nLHPtsOMJTU4NjwU7O8xOa8MwGUcrtH4Jwc14ETP6h0mHDwv
            D8bVe4ladOBh2jNXbpT/d5CKwLqkBvZlKLudC8L+z0K4rTPhjtcnO53S
            -----END ENCRYPTED PRIVATE KEY-----

            cns.security.publickey:
            -----BEGIN PUBLIC KEY-----
            MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCsEewzoKTT4KMqL6K93JqyaIa+
            KqWqiVUOaxoI3htrA9D8eW1fs3g9QvPsfkMKF18KYld6fW75QfQEXipcr1GHuag+
            Q5VmO98t2xencUPNVAZEu12QlT3qHaRxadF1F7QQBkXGAHogKteJoHsf/ObU6/Qj
            xKkoEzUfqKbuDX7geQIDAQAB
            -----END PUBLIC KEY-----


            cns.swup.UMautolaunch:
            false

            cns.swup.autoAnalysis.enabled:
            true

            cns.swup.checkinInterval:
            2

            cns.swup.lastCheckin:
            0

            cns.swup.patchbaseline:
            current

            cns.swup.regRequired:
            true

            cns.transport.serverurl:
            https://cns-transport.sun.com



            patchsvr settings:

            Patch source URL: https://getupdates1.sun.com/
            Cache location: /var/sadm/spool/patchsvr


            Sun UC package status:

            SUNWbreg not installed
            SUNWdc not installed


            Please attach /tmp/ceg2-050509-suc-out.Z in your reply to the Sun Update Connection Technical Support Team
            • 3. Re: Update Manager/smpatch trouble
              807567
              Thanks for posting the output. The system does appear to be up to date with regard to the Sun Update Connection patches. Are there any firewalls or proxies in place that may be blocking outbound connections? Try the tests below to verify that the appropriate connectivity is available:

              # telnet sun.com 80
              # telnet cns-services.sun.com 443
              # telnet getupdates1.sun.com 443
              # telnet a248.e.akamai.net 443

              A successful test should yield similar results to:

              # telnet getupdates1.sun.com 443
              Trying 198.232.168.136...
              Connected to getupdates1.sun.com.
              Escape character is '^]'.
              • 4. Re: Update Manager/smpatch trouble
                807567
                All of the suggested telnet connectivity tests were successful.
                • 5. Re: Update Manager/smpatch trouble
                  807567
                  As the connection tests are successful, at this stage I would suggest that you re-register the system, to do this, first run the following commands:

                  # cacaoadm stop
                  # cacaoadm status
                  # /usr/lib/cc-ccr/bin/eraseCCRRepository
                  # rm /var/scn/persistence/SCN*
                  # cacaoadm start

                  Then register the system as normal with sconadm or updatemanager.
                  • 6. Re: Update Manager/smpatch trouble
                    807567
                    Check your /etc/nsswitch.conf file and make sure host resolution is set to whatever resolves hosts (ie: files dns )
                    • 7. Re: Update Manager/smpatch trouble
                      832354
                      Dear am also struccing at same position
                      pls can you send me the attachment. May be it help me.
                      Thanks
                      • 8. Re: Update Manager/smpatch trouble
                        832591
                        I also have a machine that I can't register.
                        Not able to upgrade the OS at this time.
                        added the output that was requested earlier in the thread.

                        # cat /var/sadm/system/admin/CLUSTER
                        CLUSTER=SUNWCXall
                        root:/
                        # java -version
                        java version "1.5.0_26"
                        Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0_26-b03)
                        Java HotSpot(TM) Server VM (build 1.5.0_26-b03, mixed mode)
                        root:/
                        # smpatch get
                        patchpro.backout.directory - ""
                        patchpro.baseline.directory - /var/sadm/spool
                        patchpro.download.directory - /var/sadm/spool
                        patchpro.install.types - rebootafter:reconfigafter:standard
                        patchpro.patch.source https://getupdates1.sun.com https://getupdates1.sun.com/
                        patchpro.patchset - current2
                        patchpro.proxy.host proxy.global.$$.com ""
                        patchpro.proxy.passwd **** ****
                        patchpro.proxy.port "" 8080
                        patchpro.proxy.user - ""
                        root:/
                        # showrev -p |egrep '123005|121453|121118|120335|121081|121563|122231|119788|124463' | cut -f2 -d " "
                        121453-02
                        121081-06
                        121081-08
                        122231-01
                        121118-11
                        121118-12
                        121118-13
                        121118-15
                        121118-16
                        121118-17
                        121118-09
                        119788-08
                        119788-09
                        119788-10
                        120335-04
                        124463-02
                        123893-05
                        123893-10
                        123893-15
                        123893-20
                        123893-23
                        123005-05
                        123005-07
                        123005-08
                        123011-01
                        (root:/
                        # grep 2124 /var/cacao/instances/default/logs/cacao.0
                        No output here.

                        Any help would be appreciated.
                        Thanks