Can you apply the patch via the web gui? -----Original Message----- From: Cisco Clean Access Users and Administrators [mailto:[EMAIL PROTECTED] On Behalf Of William Blake Sent: Wednesday, November 19, 2008 12:09 PM To: [email protected] Subject: Re: Cisco Field Notice 63180
Run the patch like this in the /store directory: Sh CAMSigPatch.sh William Blake Network Architecture Abercrombie & Fitch 614.946.4131 614.283.7053 ----- Original Message ----- From: Deborah Hovey [EMAIL PROTECTED] Sent: 11/19/2008 12:02 PM EST To: [email protected] Subject: Re: Cisco Field Notice 63180 I'm having trouble patching the CAM - I extracted, copied the file to the store directory, changed the permissions to 777, but I get an error running the script: [EMAIL PROTECTED] store]# ./CAMSigPatch.sh : bad interpreter: No such file or directory Any clue? >>> "Speight, Howard" <[EMAIL PROTECTED]> 11/19/08 11:02 AM >>> I started to post this myself, it hit us this past weekend. We have two CAMS, one for wireless and one for wired Residence Halls. We had a scheduled power outage Saturday night, came back up Sunday morning around 5am. Wireless came up just fine, Residence Halls did not. The error is not apparent although you certainly know there is a problem because the CAM refuses to pick up the CAS. I couldn't display anything under Device Management. Finally called TAC, the wireless CAM updated to version 8, Residence Halls was "stuck" on version 7. The DB had to be manually cleared. I had a great TAC person, and he had it fixed in fifteen minutes! Although I ended up powering down the stand-by machines and rebooting all the primaries because they seemed to be in limbo. The second problem I saw was windows clients using the Agent, could not login. I haven't deployed the Macintosh agent, Mac and Unix (anybody using the web login) got on fine. We run HA mode... See attached, if you're running version 7, I'd update as soon as possible... :-) Howard -----Original Message----- From: Cisco Clean Access Users and Administrators [mailto:[EMAIL PROTECTED] On Behalf Of Deborah Hovey Sent: Wednesday, November 19, 2008 10:04 To: [email protected] Subject: Re: Cisco Field Notice 63180 I have OSDF 7 and we update every hour, but I have not had any issues. I'm going to patch anyway to be on the safe side. >>> Ben Fielden <[EMAIL PROTECTED]> 11/19/2008 9:50 AM >>> Well, if you're really 'affected' you'll likely know it. Upon update we lost all service to campus. At that point everyone switched to our wireless infrastructure, which very nearly came down as well. That proved to be a fun evening... =) Ben Fielden ISS Student Technology Services The George Washington University Mike King wrote: > Hey People, > > Check this out, you might be affected and not even know it. > > http://www.cisco.com/en/US/ts/fn/631/fn63180.html > > A recently published Cisco NAC rule contained a software defect that > may result in a loss of service for NAC Servers (Clean Access > Servers). Customers with NAC Managers (Clean Access Managers) which > updated their Cisco Updates rulesets between 3:15AM PST 11/11/2008 and > 11:15AM PST 11/11/2008 are affected and subsequent updates will not be > downloaded. The affected version of the rule is OS Detection > Fingerprint Version 7. > > Note: "OS Detection Fingerprint" is referred to as "OSDF" for the > remainder of this document. >
