Errors whe using swinstall via gui hp-ux 11.11 (782 Views)
Reply
Honored Contributor
likid0
Posts: 979
Registered: ‎03-01-2005
Message 1 of 10 (782 Views)
Accepted Solution

Errors whe using swinstall via gui hp-ux 11.11

[ Edited ]

Hi,

 

I'm having a strange problem on several servers, when triying to install software from a depot via swinstall gui.

 

My local server's and remote depot server are hp-ux 11.11, with the Gold Dec 2009 patch bundles installed.

 

The problem I get is when I use swinstall -s /var/opt/ignite/depots/patches/11.11, I select the patches Ok, and it does the analysis without problem, but when I select logfile, to check out the analysis it gives and error:

 

 The logfile display is not available because the agent has denied access

 

And I can't see the logfile, after that doesn't let me patch.

 

If I install directly using the swinstall  cli, it works fine, no problems at all.

 

 

 

 

 

On the swagent log I get:

 

       * 35 of 123 filesets will be Skipped.
       * 88 of 123 filesets had no Errors or Warnings.
       * The Analysis Phase succeeded.

ERROR:   Cannot authenticate local principal "root".
ERROR:   Cannot authenticate local principal "root".
ERROR:   Checking authorization for the session failed.  You may no
         longer have the proper permission for this operation.
ERROR:   Cannot authenticate local principal "root".
ERROR:   Checking authorization for the session failed.  You may no
         longer have the proper permission for this operation.
ERROR:   This Agent session lost the RPC connection to the Controller
         or Target Agent that initiated the session.  RPC runtime
         detected this lost connection.  The session is being shut
         down.  (pid=2685)
WARNING: Internal problem in function "IDAM_UnlockSoc".  Could not
         release the lock on "".  Lock will be released when this
         program stops.

 

On the swagentd log it reports no errors:

 

 * Started install agent on "/" for root@sgmrt.amena.es,
         pid=2684, 10/26/12 13:02:50 METDST
       * Started source agent on "/var/adm/crash/depot" for
         root@sgmrt, pid=4807, 10/26/12 13:02:52 METDST
       * Agent pid=2684 completed.  10/26/12 13:04:09 METDST
       * Agent pid=2685 completed.  10/26/12 13:04:10 METDST

 

Looks like and swagent comunication problem, but it's just when I select certain bundles, so it points more to a problem with permisions or software from the bundles inside the depot, the thing is on other 11.11 servers it works ok using the same depot and installing the same bundles that give errors here.

 

 

I have tried :

 

Doing a swcopy from the remote site to the local server, and then swinstall, the errors remain the same

restarting the agents: #swagentd -r

Giving access to all on the remote depot or local depot:

swacl -l depot -M any_other:crwit @ /var/opt/ignite/depots/patches

Doing a swverify on the depot ends ok:

swverify -d \* @ /var/adm/crash/depot

Check all name resolution just in case, but that part is ok

 

Any ideas?

 

 

P.S. This thread has been moved from HP-UX > System Administration to HP-UX > patches - HP Forums Moderator

 

 

 

Windows?, no thanks
Please use plain text.
Valued Contributor
Ralf Seefeldt
Posts: 166
Registered: ‎04-02-2001
Message 2 of 10 (765 Views)

Re: Errors when using swinstall via gui hp-ux 11.11

Hi,

 

  • you are running swinstall as what user?
  • You have problems only when installing specific bundles. What have these bundles in common? Do they contain files for a specific directory like /sbin, that require root permission to write to.?
  • Have you tried to download the not installing bundles again or to install them from CD without copying them to disk first?
  • Are there any syslog messages?
  • There may be a read or write log on the depot? Is there any process, that has the depot(s) in use? (File <depot directory>/catalog/swlock)
  • you may tie "touch /var/adm/sw/.sdkey" on the server holding the depot.
  • Have you used the "run_as_superuser=true"  option?

I hope, this gets you a bit closer to a solution.

 

Bye

Ralf

 

 

Please use plain text.
Honored Contributor
likid0
Posts: 979
Registered: ‎03-01-2005
Message 3 of 10 (757 Views)

Re: Errors when using swinstall via gui hp-ux 11.11

Hello, thanks for the help

 

  • you are running swinstall as what user? 

The user is root

 

  • You have problems only when installing specific bundles. What have these bundles in common? Do they contain files for a specific directory like /sbin, that require root permission to write to.?

They are patch bundles, some patch bundles work, others don't

 

  • Have you tried to download the not installing bundles again or to install them from CD without copying them to disk first?

I should try to download the patches again, the strange thing is on the majority of servers it works

 

  • Are there any syslog messages?

No, the syslog is clean

 

  • There may be a read or write log on the depot? Is there any process, that has the depot(s) in use? (File <depot directory>/catalog/swlock) 
  • No, there is nothing accessing the file, checked with lsof

 

  • you may tie "touch /var/adm/sw/.sdkey" on the server holding the depot.

I will give it a try

  • Have you used the "run_as_superuser=true"  option?

I'm using root

Windows?, no thanks
Please use plain text.
Honored Contributor
likid0
Posts: 979
Registered: ‎03-01-2005
Message 4 of 10 (755 Views)

Re: Errors when using swinstall via gui hp-ux 11.11

I forgot to look at the swinstall log...

 

It's giving:

 

..............

           PHSS_42852.DCE-CORE-DTS,l=/opt/dce,r=1.0,a=HP-UX_B.11.11_32/64,v=HP,fr=1.0,fa=HP-UX_B.11.11_32/64
             PHSS_42852.DCE-CORE-RUN,l=/opt/dce,r=1.0,a=HP-UX_B.11.11_32/64,v=HP,fr=1.0,fa=HP-UX_B.11.11_32/64
             PHSS_42852.DCE-CORE-SHLIB,l=/opt/dce,r=1.0,a=HP-UX_B.11.11_32/64,v=HP,fr=1.0,fa=HP-UX_B.11.11_32/64
             PHSS_42852.DCEC-ENG-A-MAN,l=/opt/dce,r=1.0,a=HP-UX_B.11.11_32/64,v=HP,fr=1.0,fa=HP-UX_B.11.11_32/64
       * A "+" indicates an automatic selection due to dependency or
         the automatic selection of a patch or reference bundle.
       * Beginning Analysis
ERROR:   Util_Random internal error:  Read of /dev/urandom failed,
         rv=0, size=8, Error 0 (0).
ERROR:   Internal error.  UTIL_Random failed.  Error 0 (0).  This error
         occurred in function "UTIL_RpcSetClientForLocalServer", source
         file "r_client.c", line 1017.  Please give this information to
         your Hewlett-Packard support contact.
       * "pc:/":  There will be no attempt to mount filesystems that
         appear in the filesystem table.
       * "pc:/":  32 filesets have the selected revision already
         installed.
       * "pc:/":  3 software objects were determined to be skipped
         in the analysis phase.
       * "pc:/":  2 bundles have the selected revision already
         installed.
       * "pc:/":  2 bundles cannot be installed because none of
         their filesets can be installed.
       * Ending Analysis
ERROR:   Util_Random internal error:  Read of /dev/urandom failed,
         rv=0, size=8, No such file or directory (2).
ERROR:   Internal error.  UTIL_Random failed.  No such file or
         directory (2).  This error occurred in function
         "UTIL_RpcSetClientForLocalServer", source file "r_client.c",
         line 1017.  Please give this information to your
         Hewlett-Packard support contact.

 

The urandom errors are coming up just when I pres the logfile

Windows?, no thanks
Please use plain text.
Honored Contributor
likid0
Posts: 979
Registered: ‎03-01-2005
Message 5 of 10 (752 Views)

Re: Errors when using swinstall via gui hp-ux 11.11

Arg! found the problem, the servers that gave the errors, had a directory called /dev/random and /dev/urandom ...

 

After deleting them it all works ok

Windows?, no thanks
Please use plain text.
Honored Contributor
Patrick Wallek
Posts: 13,736
Registered: ‎06-21-2000
Message 6 of 10 (746 Views)

Re: Errors when using swinstall via gui hp-ux 11.11

>>had a directory called /dev/random and /dev/urandom

 

You probably need to recreate the actual /dev/random and /dev/urandom files though.

Please use plain text.
Exalted Contributor
Steven E. Protter
Posts: 33,806
Registered: ‎08-15-2002
Message 7 of 10 (740 Views)

Re: Errors when using swinstall via gui hp-ux 11.11

[ Edited ]

This is an unusual error.

 

What is your authentication, is it AD, is root inadvertantly involved?

 

Try bouncing the swagentd daemon and running the command again.

 

Please post /etc/nsswitch.conf to allow me to debug authentication.

 

run lsdev

the urandom device may need to be rebuilt. Post the output.

 

Regards,

 

SEP

Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
Please use plain text.
Honored Contributor
likid0
Posts: 979
Registered: ‎03-01-2005
Message 8 of 10 (736 Views)

Re: Errors when using swinstall via gui hp-ux 11.11

Hi,

 

So, I dug a Little bit into the problem.

 

For startes not one of our 11.11 servers has the Random Numerator Packages installed:


> swlist -l product | grep  -i RandomNumGen  
>

 

With that in mind,  in servers where the swinstall is working Ok, it doesn't have the dirs /dev/random and /dev/urandom created because it's using openssl 0.9.7, and if I recall correctlly 9.7 and down didn't need the RNG to work:

 

OpenSSH_4.7p1+sftpfilecontrol-v1.2-hpn12v17, OpenSSL 0.9.7m 23 Feb 2007

 

On the other hand, where swinstall is not working, they all have the /dev/random and /dev/urandom dirs created, because they have version openssl 0.9.8 installed, and it won't work if you don't have RNG working:

 

OpenSSH_4.7p1, OpenSSL 0.9.8g 19 Oct 2007

 

So someone(not me :)) ), created the dirs as a work around to get ssh working until, they could stop to install the proper Randon Number Generator Package, that needs a reboot(like 3 years ago ;D).

 

So I imagine, that the swinstall gui reaches a point when it needs to generate entropy, sees /dev/urandom and thinks ok lets use it, because it's just a fake dir it gives and error

Windows?, no thanks
Please use plain text.
Honored Contributor
Bill Hassell
Posts: 14,200
Registered: ‎05-29-2000
Message 9 of 10 (727 Views)

Re: Errors when using swinstall via gui hp-ux 11.11

For 11.11, you need the KRNG(kernel randome number generator)  package. Otherwise, you'll have endless problems with more modern software (more modern than 10 years ago). the versions 10.20, 11.00 and 11.11 did not have a good random number generator and would cause newer versions of ssh to not initialize.

 

All of your 11.11 systems need this package:

 

     https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=KRNG11I

 

This is a free package and eliminates the previous versions that tried to generate entropy using various HP-UX commands, sometimes taking 10-40 seconds to run.

Please use plain text.
Frequent Advisor
Chirag Parikh
Posts: 51
Registered: ‎11-06-2007
Message 10 of 10 (665 Views)

Re: Errors when using swinstall via gui hp-ux 11.11

Hi,

 

How do you get this conclusion?

 

Thanks & Regards,

Chirag Parikh.

Please use plain text.
The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation