f



Can't get patches via smpatch, update manager, web, or wget; can't re-register with sconadm or update manager

I have a Sun software support contract.

Since the new My Oracle thing went alive, I've been unable to update
via smpatch or the update manager--voluminous Java error messages in /
var/adm/messages include:

Jan 23 16:33:41 osprey root: [ID 702911 user.error]  =>
com.sun.patchpro.util.CachingDownloader@16c79d7
<=Downloader.getResponseCode() : IOExceptionNo route to host

Other messages seem to suggest failure to use a proxy server (I have
no proxy server here), although my network is behind a Solaris 10
'ipfilter' firewall that nat's the internal hosts.

I've tried re-registering both with sconadm and the update manager
(the former just fails authentication; the latter says it can't
connect and asks whether there's a proxy server involved (not in this
case). Both fail.

I can log in to My Oracle with my new login and password, but cannot
get to the recommended patch sets. Connections to
https://getupdates.oracle.com/patch_cluster/10_x86_Recommended_CPU_2011-01.zip
just time out.  Similarly, attempting to get the same patch set via
command-line 'wget' (using login and password) also time out.

smpatch merely reports "Error 500."

Any magic incantations I've missed?  thanks.
0
evanstimk (10)
1/23/2011 10:06:52 PM
comp.unix.solaris 26025 articles. 2 followers. Post Follow

10 Replies
3679 Views

Similar Articles

[PageSpeed] 2

On 01/24/11 11:06 AM, tkevans wrote:
> I have a Sun software support contract.

I guess the obvious answer is open a case!  Have you?

-- 
Ian Collins
0
Ian
1/23/2011 10:16:41 PM
On Jan 23, 4:16=A0pm, Ian Collins <ian-n...@hotmail.com> wrote:
> On 01/24/11 11:06 AM, tkevans wrote:
>
> > I have a Sun software support contract.
>
> I guess the obvious answer is open a case! =A0Have you?
>
> --
> Ian Collins

I could download the cluster by the link you have given me, are you
sure you are correctly registered with My Oracle Support?
0
kartikvashishta108
1/23/2011 10:19:38 PM
On Jan 23, 5:06=A0pm, tkevans <evanst...@gmail.com> wrote:
> I have a Sun software support contract.
>
> Since the new My Oracle thing went alive, I've been unable to update
> via smpatch or the update manager--voluminous Java error messages in /
> var/adm/messages include:
>
> Jan 23 16:33:41 osprey root: [ID 702911 user.error] =A0=3D>
> com.sun.patchpro.util.CachingDownloader@16c79d7
> <=3DDownloader.getResponseCode() : IOExceptionNo route to host
>
> Other messages seem to suggest failure to use a proxy server (I have
> no proxy server here), although my network is behind a Solaris 10
> 'ipfilter' firewall that nat's the internal hosts.
>
> I've tried re-registering both with sconadm and the update manager
> (the former just fails authentication; the latter says it can't
> connect and asks whether there's a proxy server involved (not in this
> case). Both fail.
>
> I can log in to My Oracle with my new login and password, but cannot
> get to the recommended patch sets. Connections tohttps://getupdates.oracl=
e.com/patch_cluster/10_x86_Recommended_CPU_20...
> just time out. =A0Similarly, attempting to get the same patch set via
> command-line 'wget' (using login and password) also time out.
>
> smpatch merely reports "Error 500."
>
> Any magic incantations I've missed? =A0thanks.

There is a P1 bug filed for this issue according to the Sun Oracle
community at https://communities.oracle.com/portal/server.pt/community/orac=
le_sun_technologies/388.
Some customers have stated they can manually download patches. As well
as use their old Sun login & password, but have not tried myself.
Still awaiting for an official Solaris patch to be released, hopefully
it will be very soon !
0
bm2b
1/24/2011 1:24:03 PM
On Jan 23, 5:16=A0pm, Ian Collins <ian-n...@hotmail.com> wrote:
> On 01/24/11 11:06 AM, tkevans wrote:
>
> > I have a Sun software support contract.
>
> I guess the obvious answer is open a case! =A0Have you?

Well, I tried, and despite My Oracle showing I have the right to open
SR's, when I try to do so, it's denied with a message that says I
don't have the right to open SR's. Guess I'll have to call. thanks.
0
tkevans
1/25/2011 1:26:23 AM
> I could download the cluster by the link you have given me, are you
> sure you are correctly registered with My Oracle Support?

It appears I am.  I have the Support Identifier that says I have
rights to patches (and to enter SR's), but both are denied when I try.

0
tkevans
1/25/2011 1:27:53 AM
In article <b0ff4a81-9d8a-4058-bb47-65a84f9589ba@r40g2000prh.googlegroups.com>,
tkevans  <evanstimk@gmail.com> wrote:
>It appears I am.  I have the Support Identifier that says I have
>rights to patches (and to enter SR's), but both are denied when I try.

Sign-in via non-Flash interface:
<URL:https://supporthtml.oracle.com>

Click on "Profile" in the top right.

Is your CSI # listed?
If not, what happens when you "Add new" on the very bottom of that page?

John
groenveld@acm.org
0
groenvel
1/25/2011 3:56:32 AM
On Jan 24, 8:26=A0pm, tkevans <evanst...@gmail.com> wrote:
> On Jan 23, 5:16=A0pm, Ian Collins <ian-n...@hotmail.com> wrote:
>
> > On 01/24/11 11:06 AM, tkevans wrote:
>
> > > I have a Sun software support contract.
>
> > I guess the obvious answer is open a case! =A0Have you?
>
> Well, I tried, and despite My Oracle showing I have the right to open
> SR's, when I try to do so, it's denied with a message that says I
> don't have the right to open SR's. Guess I'll have to call. thanks.

There's a couple of smpatch and sconadm related bugs posted on
https://communities.oracle.com/portal/server.pt/community/view_discussion_t=
opic/216?threadid=3D77226.
Or login to http://support.oracle.com click on Communities too.
0
bm2b
1/25/2011 3:57:07 PM
On Jan 23, 5:06=A0pm, tkevans <evanst...@gmail.com> wrote:
> I have a Sun software support contract.
>
> Since the new My Oracle thing went alive, I've been unable to update
> via smpatch or the update manager--voluminous Java error messages in /
> var/adm/messages include:
>
> Jan 23 16:33:41 osprey root: [ID 702911 user.error] =A0=3D>
> com.sun.patchpro.util.CachingDownloader@16c79d7
> <=3DDownloader.getResponseCode() : IOExceptionNo route to host
>
> Other messages seem to suggest failure to use a proxy server (I have
> no proxy server here), although my network is behind a Solaris 10
> 'ipfilter' firewall that nat's the internal hosts.
>
> I've tried re-registering both with sconadm and the update manager
> (the former just fails authentication; the latter says it can't
> connect and asks whether there's a proxy server involved (not in this
> case). Both fail.
>
> I can log in to My Oracle with my new login and password, but cannot
> get to the recommended patch sets. Connections tohttps://getupdates.oracl=
e.com/patch_cluster/10_x86_Recommended_CPU_20...
> just time out. =A0Similarly, attempting to get the same patch set via
> command-line 'wget' (using login and password) also time out.
>
> smpatch merely reports "Error 500."
>
> Any magic incantations I've missed? =A0thanks.

If your contract or entitlement is not an issue, check out "Patch
download automation for Sun products using wget (Doc ID 1199543.1)"
It contains a list of new urls for https://getupdates.oracle.com.
0
bm2b
1/25/2011 4:06:38 PM
tkevans wrote:
> I have a Sun software support contract.
> 
> Since the new My Oracle thing went alive, I've been unable to update
> via smpatch or the update manager--voluminous Java error messages in /
> var/adm/messages include:

It would be interesting to see what PCA says. You could try:

   $ wget http://www.par.univie.ac.at/solaris/pca/stable/pca
   $ chmod +x pca
   $ ./pca --supplevel
   ...
   $ ./pca
   ...

With "--supplevel", it will show you the support levels for a given MOS account. 
The second command should download the patchdiag.xref from Oracle and show a 
report of all missing patches. You could then try to download them with "./pca 
--download". Any error returned might point at the problem you've got.

Martin.
-- 
SysAdmin | Research Group Scientific Computing - University of Vienna
      PCA | Analyze, download and install patches for Solaris
          | http://www.par.univie.ac.at/solaris/pca/
0
Martin
1/26/2011 8:47:02 AM
On Jan 26, 3:47=A0am, Martin Paul <m...@par.univie.ac.at> wrote:

> It would be interesting to see what PCA says. You could try:

As the OP, I wanted to summarize what I've learned here. (Skinny: once
you apply the January, 2011, Recommended patch set, 'smpatch' starts
working again.)

First, as Martin suggested, pca did confirm my access to Patches via
MOS.  However, I still could not download them either with a browser
or with 'wget' (using my MOS login and password).

At first, his appeared to be a firewall-related problem, rather than
mis-provisioned support contract.  My systems are behind a Solaris
ipfilter firewall, and while I have never had any trouble accessing
*any* web site before, I simply could not access
'getupdates.oracle.com' with a browser or with 'wget'. "No route to
host."

Posters to the solarisx86 mailing list have also turned up non-working
sun.com URL's embedded in Update Manager/smpatch config file--
specifically, https://updates1.sun.com is referenced in /var/cc-ccr/
ccpatchsvr.properties

Using a system outside my local firewall, I was able to download the
January, 2011, Recommended Patch set (proving my support contract is
properly provisioned in MOS).  And, having applied it to my systems
manually, I can report smpatch now works again, and the no-route-to-
host-error with wget has also gone away.

Not sure what the patch set did (or if Oracle somehow fixed things
otherwise with the unreachable URL's).

0
tkevans
2/1/2011 2:44:14 AM
Reply: