Re: Offline Patching
- From: SFaulconer <sfaulconer@xxxxxxxxx>
- Date: Sat, 08 Sep 2007 11:59:42 -0700
In reply to my own issue, I found a workable solution. Seems our proxy
server does not like the URLs with the username/password embedded.
I changed the line :
print FURL "http://$o{user}:$o{passwd}\@sunsolve.sun.com/pdownload.do?
target=$pp&method=h\n";
to just:
print FURL "http://sunsolve.sun.com/pdownload.do?target=$pp&method=h
\n";
And changed the wget line to:
`$o{wget} -i $furl --user=$o{user} --password=$o{passwd} $o{wgetq}
$o{wgetproxy} -O $o{patchdir}/$pp.tmp`;
and it appears to be working correctly now.
Thanks again for the help!
Steven
On Sep 8, 2:50 pm, SFaulconer <sfaulco...@xxxxxxxxx> wrote:
It does seem like PCA is the right tool for this. I've started working
on getting it implemented but have hit a snag with our internal proxy
servers returning a 400 (Bad Request) message whenever wget tries to
fetch the files from the furls. Going to dig into this more.
Thanks for the recommendations!
Steven
On Sep 7, 5:02 am, Martin Paul <m...@xxxxxxxxxxxxxxxx> wrote:
SFaulconer wrote:
I have essentially 3 networks of Sun systems I manage: Network A is
fully connected to the Internet (through an appropriate number of
firewalls/proxy servers), Network B is tied to Network A only through
limited communication (Network A can ftp TO Network B, but not the
reverse), and Network C which has no outside connections at all.
pca supports this fine (see "CREATING PATCH REPORTS FOR REMOTE MACHINES"
in the documentation). Basically, you would:
Collect information on the target machine (uname/showrev/pkginfo).
Transfer these input files to a machine with Internet connection (via
internal network or sneaker-net).
Run pca there, feeding the input data from the target machine using
pca's -f option. You can create a report, but also download all missing
patches for the target machine.
Pack up a copy of pca, patchdiag.xref and the downloaded patches and
transfer them to the target machine. Run pca there to install the patches.
It's easier of course if the machine with Internet connection and the
target machine are in a local network. pca can use NFS/FTP/HTTP to
access the patchdiag.xref file and downloaded patches. The best solution
is to set up a local caching proxy with pca. Like this, any machine
which can access a local web server with Internet access can download
any patch through the proxy, without needing access to the Internet itself.
Hope that helps,
mp.
--
Systems Administrator | Institute of Scientific Computing | Univ. of Vienna
|http://www.par.univie.ac.at/solaris/pca/
Patch Check Advanced | Analyze, download and install patches for Sun
Solaris
.
- Follow-Ups:
- Re: Offline Patching
- From: Martin Paul
- Re: Offline Patching
- References:
- Offline Patching
- From: SFaulconer
- Re: Offline Patching
- From: Martin Paul
- Re: Offline Patching
- From: SFaulconer
- Offline Patching
- Prev by Date: Re: Offline Patching
- Next by Date: LSILogic on Solaris 10
- Previous by thread: Re: Offline Patching
- Next by thread: Re: Offline Patching
- Index(es):
Relevant Pages
|
