Re: [pca] Service Unavailable

[Don O'Malley]

Hi Jamen, What version of wget are you using? bash-3.00# wget --version GNU Wget 1.10.2 Copyright (C) 2005 Free Software Foundation, Inc. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. Originally written by Hrvoje Niksic <hnik...@xemacs.org>. bash-3.00# If you are using wget version 1.11.x then you will need to add the "--no-auth-challenge" parameter to the direct wget request... Best, -Don   McGranahan, Jamen wrote: # file /opt/patches/119757-16.zip /opt/patches/119757-16.zip:     html document   Jamen McGranahan Systems Services Librarian Vanderbilt University   From: pca-boun...@lists.univie.ac.at [mailto:pca-boun...@lists.univie.ac.at] On Behalf Of Bliss, Kevin L Sent: Wednesday, September 23, 2009 11:38 AM To: 'PCA (Patch Check Advanced) Discussion' Subject: Re: [pca] Service Unavailable   Run “file /opt/patches/119757-16.zip”.  The size difference sounds like maybe you just downloaded some html from sunsolve, possibly the acceptance policy.  That would explain why you did not go any further.   From: pca-boun...@lists.univie.ac.at [mailto:pca-boun...@lists.univie.ac.at] On Behalf Of McGranahan, Jamen Sent: Wednesday, September 23, 2009 9:34 AM To: PCA (Patch Check Advanced) Discussion Subject: Re: [pca] Service Unavailable   OK, well something is not right. A couple of things I notice: 1) We’re not being sent to getupdates2; 2) we’re not being sent to akamai.net. And though it would appear the patch downloaded, it’s not. In fact, the size of the zip file is significantly smaller than the one Don O’Malley downloaded (ours = 28,405; Don’s = 30,195,424):   /usr/local/bin/wget --no-check-certificate --http-user="xxxxxxxx" --http-passwd="xxxxxxxx" "https://sunsolve.sun.com/pdownload.do?target=119757-16&method=h" -O /opt/patches/119757-16.zip --2009-09-23 11:26:35--  https://sunsolve.sun.com/pdownload.do?target=119757-16&method=h Resolving sunsolve.sun.com... 192.18.108.40 Connecting to sunsolve.sun.com|192.18.108.40|:443... connected. WARNING: cannot verify sunsolve.sun.com's certificate, issued by `/O=Sun Microsystems Inc/OU=VeriSign Trust Network/OU=Class 3 MPKI Secure Server CA/CN=Sun Microsystems Inc SSL CA':   Self-signed certificate encountered. HTTP request sent, awaiting response... 302 Moved Temporarily Location: https://sunsolve.sun.com/validateSLA.do?orignalTarget=show.do?target=home [following] --2009-09-23 11:26:36--  https://sunsolve.sun.com/validateSLA.do?orignalTarget=show.do?target=home Reusing existing connection to sunsolve.sun.com:443. HTTP request sent, awaiting response... 200 OK Length: unspecified [text/html] Saving to: `/opt/patches/119757-16.zip'       [ <=>                                             ] 28,405      --.-K/s   in 0.1s      2009-09-23 11:26:37 (267 KB/s) - `/opt/patches/119757-16.zip' saved [28405]   Jamen McGranahan Systems Services Librarian Vanderbilt University   From: pca-boun...@lists.univie.ac.at [mailto:pca-boun...@lists.univie.ac.at] On Behalf Of Don O'Malley Sent: Wednesday, September 23, 2009 10:58 AM To: PCA (Patch Check Advanced) Discussion Subject: Re: [pca] Service Unavailable   Hi Jamen, I constantly test the SunSolve patch download service every 15 mins and have not seen any issues over the past few days at all. Can you try and download patch 119757-16 with wget? It's working fine for me: # /usr/sfw/bin/wget --no-check-certificate --http-user="xxxxxxx" --http-passwd="xxxxxxx" "https://sunsolve.sun.com/pdownload.do?target=119757-16&method=h" -O /tmp/119757-16.zip --16:49:22--  https://sunsolve.sun.com/pdownload.do?target=119757-16&method=h            => `/tmp/119757-16.zip' Resolving sunsolve.sun.com... 192.18.108.40 Connecting to sunsolve.sun.com|192.18.108.40|:443... connected. WARNING: Certificate verification error for sunsolve.sun.com: self signed certificate in certificate chain HTTP request sent, awaiting response... 302 Moved Temporarily Location: https://getupdates2.sun.com/all_unsigned/119757-16.zip [following] --16:49:25--  https://getupdates2.sun.com/all_unsigned/119757-16.zip            => `/tmp/119757-16.zip' Resolving getupdates2.sun.com... 198.232.168.157 Connecting to getupdates2.sun.com|198.232.168.157|:443... connected. WARNING: Certificate verification error for getupdates2.sun.com: self signed certificate in certificate chain HTTP request sent, awaiting response... 302 Moved Temporarily Location: https://a248.e.akamai.net/f/248/21808/15m/sun.download.akamai.com/21808/patches/patchroot/all_unsigned/119757-16.zip?AuthParam=1253721090_6bae977991dfa7e3686c26d6903a3ccd&TUrl=L0QdUQV8Z4i0fdED3QTP3SJDWA8FMyaJsHfIWf4X29kTWQpKEzIbwqFuyRPZ&TicketId=3aT1lVSAOBFV&GroupName=SWUP&BHost=sdlc5i.sun.com&FilePath=/patches/patchroot/all_unsigned/119757-16.zip&File=119757-16.zip [following] --16:49:29--  https://a248.e.akamai.net/f/248/21808/15m/sun.download.akamai.com/21808/patches/patchroot/all_unsigned/119757-16.zip?AuthParam=1253721090_6bae977991dfa7e3686c26d6903a3ccd&TUrl=L0QdUQV8Z4i0fdED3QTP3SJDWA8FMyaJsHfIWf4X29kTWQpKEzIbwqFuyRPZ&TicketId=3aT1lVSAOBFV&GroupName=SWUP&BHost=sdlc5i.sun.com&FilePath=/patches/patchroot/all_unsigned/119757-16.zip&File=119757-16.zip            => `/tmp/119757-16.zip' Resolving a248.e.akamai.net... 88.221.94.17, 88.221.94.89 Connecting to a248.e.akamai.net|88.221.94.17|:443... connected. WARNING: Certificate verification error for a248.e.akamai.net: unable to get local issuer certificate HTTP request sent, awaiting response... 200 OK Length: 54,063,440 (52M) [application/zip]   55% [===================>                 ] 30,195,424   432.64K/s    ETA 00:42 While the 503 error does indeed indicate a server-side error, I'm just wondering if there is a proxy server between you and SunSolve (possibly one that does not support https requests) that you are attempting to access SunSolve through.. Best, -Don McGranahan, Jamen wrote: We’ve been using PCA for several months now and it works really well. The past couple of days, however, we’ve not been able to download patches. We’re getting ERROR 503: Service Unavailable. We’re using the most current version of PCA.  Last known successful download was Thursday, Sept 17 (our servers run PCA once a week, each at a different day). See below for details from one of our servers:   # pca.pl -i --debug Option install: 1 Option patchdir: /exlibris/patches/. Option user: ------------- Option passwd: -------------- Option syslog: local0 Option debug: 1 ARGV: missing Version: 20090827-01 Config files: ./pca.conf pca.conf Found /usr/local/bin/wget (1.11.4, 11104, https) Using /usr/local/bin/wget Prerequisites for threads not met, setting threads to 0 Never update Expanded patch list: missing xref mtime: Wed Sep 23 05:42:47 2009 xref now  : Wed Sep 23 08:37:52 2009 xref ctime: Wed Sep 23 06:55:33 2009 xref age  : 6139 Local file /var/tmp/patchdiag.xref is up to date Reading from /usr/bin/showrev -p  2>/dev/null Using /var/tmp/patchdiag.xref from Sep/22/09 119042-09 required by 119757: obsolete, replaced with 138217-01 138217-01 required by 119757: already installed 119254-51 required by 119757: already installed 121901-01 required by 119757: obsolete, replaced with 126538-01 126538-01 required by 119757: obsolete, replaced with 140899-01 140899-01 required by 119757: already installed 120011-09 required by 119757: already installed 139520-02 required by 119757: already installed 120201-04 required by 125719: already installed 118833-36 required by 140919: already installed 120011-14 required by 140919: already installed 127127-11 required by 140919: already installed 137137-09 required by 140919: already installed 139555-08 required by 140919: already installed Host: acorn6 (SunOS 5.10/Generic_141414-10/sparc/sun4v) List: missing (9/42)   Patch  IR   CR RSB Age Synopsis ------ -- - -- --- --- ------------------------------------------------------- 119757 15 < 16 RS-   7 SunOS 5.10: Samba patch   Looking for 119757-16 (1/9) Trying https://sunsolve.sun.com/ (1/1) /usr/local/bin/wget "https://sunsolve.sun.com/pdownload.do?target=119757-16&method=h" --ca-certificate=./pca.pl --header="Authorization: Basic ZGFsZXBvdWx0ZXI6WE5wQ1JaNWc=" -O /exlibris/patches/./119757-16.tmp --2009-09-23 08:38:05--  https://sunsolve.sun.com/pdownload.do?target=119757-16&method=h Resolving sunsolve.sun.com... 192.18.108.40 Connecting to sunsolve.sun.com|192.18.108.40|:443... connected. HTTP request sent, awaiting response... 503 Service Unavailable 2009-09-23 08:38:06 ERROR 503: Service Unavailable.   Failed Failed (patch not found)   *********************************** * Jamen McGranahan * Systems Services Librarian * Library Information Technology Services * Vanderbilt University * Suite 700 * 110 21st Avenue South * Nashville, TN  37240 * (615) 343-1614 * (615) 343-8834 (fax) * jamen.mcgrana...@vanderbilt.edu ***********************************