cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

ePO4 - Repository pulls stopped working. Basic functionality of server is broken after Patch 6 installed.

Fellow McAfee users,

My ePO server has started displaying the following problem.

The problem occurred immediatley after installing patch 6 onto the server.

Problem : repository pulls no longer work.

I discovered the following about the problem :

1. When no user is logged onto the ePO server locally (which is how the server sits nearly all the time) repository updates fail, both manual or scheduled pulls.

2. When a user IS logged onto the ePO server locally, repository pulls work fine, inlcuding both manual and scheduled pulls.

From remote consoles.

1.Manual pull from remote console, when no windows session logged onto on ePO server, repository pulls fail.

2.Manual pull from remote console, when a user is logged onto windows on the ePO server, repository updates work ok,

It looks like, for some reason, credentials are not getting pulled or passed correctly unless there is a user actually logged onto the ePO server itself, in windows.

As the server normally runs in a state where nobody is actually logged onto it, ePO has been basically broken by the installation of the patch, very frustrating.

When I check the server log files it does indeed report errors relating to not authenticating to the proxy server, though, as I say, credentials are certainly correct as manual pulls work ok when I am logged on to the server.

I have spent a few hours on the phone with McAfee support yesterday, they where not able to advise of any known issues or soloutions.

They advised the must escallate the case.

After patch 6 was installed, the server was rebooted.

Things I have tried since then are re-entering the credentials for the proxy.

Trying a few other sets of proxy credentials.

Re-creating pull tasks using different user accounts.

Re-start McAfee services.

Re-installation of Patch 6.

As it is now the weekend I will need to wait probably till monday until the problem is even looked at.

In the meantime, has anybody seen this problem before? If so, how did you fix it?

As I have not been able to work out a soloution myself so far, so am hoping there is helpful expert on here, I would genuinely appreciate if somebody is willing to help resolve this for me.

I am under pressure from my employers to fix this.

Thank you,

RM

Message was edited by: rhythm_methods on 5/02/10 7:23:16 PM
4 Replies

Re: ePO4 - Repository pulls stopped working. Basic functionality of server is broken after Patch 6 installed.

Here are the log files from my server :

If there is a user logged onto the server and the repository pull is run (either on schedule or manually) all works fine and logs show as follows:

20100206064624 I #5996 EPOJNI Getting license data...
20100206064624 I #5996 EPOJNI Getting license data...
20100206064634 I #2816 EPOJNI Getting license data...
20100206064634 I #2816 EPOJNI Getting license data...
20100206064923 I #5608 EPOJNI Getting license data...
20100206064939 X #3024 SiteMgr Constructing CSiteMgr()
20100206064939 X #3024 SiteMgr SiteManager FinalConstruct() called
20100206064939 X #3024 SiteMgr Key C:\PROGRA~1\McAfee\EPOLIC~1\DB\Keystore\rpmcafee.zip loaded, hash = H7LGlPbFtbARjG6MsNaop1QOFaU=
20100206064940 X #3024 SiteMgr Key C:\PROGRA~1\McAfee\EPOLIC~1\DB\Keystore\rpmcafeesia.zip loaded, hash = F1HjtTzscUsaIb27nQtAdoFh8RI=
20100206064940 X #3024 SiteMgr Key C:\PROGRA~1\McAfee\EPOLIC~1\DB\Keystore\smausafs011.zip loaded, hash = aehWqjext9+tTZq9T/nlr2mM/Ck=
20100206064940 I #3024 SiteMgrWrap Created instance of Site Manager
20100206064940 X #3024 DAL CConxIndex: Current used conx=1
20100206064940 X #3024 DAL ~CConxIndex: Current used conx=0
20100206064940 I #3024 SiteMgr SetEPOMode: SiteMgr enter ePO mode, server=AUSAFS011, port=8443, EPOUser=, Password=********
20100206064940 X #3024 SiteMgr Entering DALInit()
20100206064940 I #3024 SiteMgr DALInit: Connected to DAL successful
20100206064940 X #3024 DAL CConxIndex: Current used conx=1
20100206064940 X #3024 DAL ~CConxIndex: Current used conx=0
20100206064940 I #3024 SiteMgr SetEPOMode: Set ePO mode successful
20100206064940 I #3024 SiteMgr MirrorThreadProc: Mirror thread started
20100206064940 I #3024 SIM_InetMgr Starting download session for site NAIFtp
20100206064940 X #3024 SIM_InetMgr Server: ftp.nai.com:21
20100206064940 X #3024 SIM_InetMgr Relative Path: CommonUpdater
20100206064940 X #3024 SIM_InetMgr Username: Anonymous
20100206064940 X #3024 SIM_InetMgr HTTP Proxy server: proxy
20100206064940 X #3024 SIM_InetMgr FTP Proxy server: proxy
20100206064940 X #3024 SIM_InetMgr HTTP Proxy user: aus\svc_epo

20100206064940 X #3024 SIM_InetMgr FTP Proxy user: aus\svc_epo
20100206064940 I #3024 naInet FTP Session initialized
20100206064940 I #3024 NaInet FTP Session 3 Logging into FTP Server: ftp.nai.com using User: Anonymous in win-inet mode
20100206064940 I #3024 naInet HTTP Session initialized
20100206064941 I #3024 naInet Connecting to HTTP Server using Microsoft WinInet
20100206064941 I #3024 naInet Trying to connect to Proxy Server proxy:8080 using INTERNET_OPEN_TYPE_PROXY
20100206064941 I #3024 naInet Connected to Server: ftp.nai.com on Port: 21 using WinInet
20100206064941 X #3024 naInet Socket getting closed, Handle -1
20100206064941 I #3024 SIM_InetMgr Started download session 1 for site NAIFtp
20100206064941 I #3024 SiteMgr MirrorThreadProc: Downloading file catalog.z from NAIFtp
20100206064941 I #3024 SIM_InetMgr Downloading file catalog.z from session 1, LocalDir=C:\WINDOWS\TEMP\nai30B.tmp\00000000, RemoteDir=
20100206064941 I #3024 NaInet FTP session 3 Downloading file: /CommonUpdater/catalog.z from FTP Server: ftp.nai.com
20100206064941 I #3024 NaInet FTP session 3 Downloading file from FTP server ftp.nai.com using WinInet [in proxy mode]
20100206064941 I #3024 naInet Open URL: ftp://ftp.nai.com:21/CommonUpdater/catalog.z
20100206064941 I #3024 naInet Trying to download using Microsoft WinInet library
20100206064941 X #3024 naInet Impersonated logged on user successfully
20100206064941 I #3024 naInet Conneting to Proxy Server proxy:8080 using INTERNET_OPEN_TYPE_PROXY
20100206064941 I #3024 naInet No resume download needed, calling InternetOpenUrl
20100206064943 X #3024 naInet Impersonated token closed
20100206064943 I #3024 naInet Content Length is not available, no resumable download support
20100206064943 I #3024 naInet Downloaded 3580 bytes this time
20100206064943 I #3024 naInet Downloaded 0 bytes this time
20100206064943 I #3024 SIM_InetMgr Downloaded file catalog.z successfully in session 1
20100206064943 I #3024 SiteMgr DecryptAndExtractCatalogCabFile: Verified signature of catalog file C:\WINDOWS\TEMP\nai30B.tmp\00000000\catalog.z
20100206064943 I #3024 SiteMgr DecryptAndExtractCatalogCabFile: Verified signature of catalog file C:/PROGRA~1/McAfee/EPOLIC~1/DB\software\catalog.z
20100206064943 X #3024 DAL CConxIndex: Current used conx=1
20100206064943 X #3024 DAL ~CConxIndex: Current used conx=0

If no user is logged onto the server and a pull is run (either through scedule or manually from remote console) logs read as follows :

20100206065018 X #4604 SiteMgr Constructing CSiteMgr()
20100206065018 X #4604 SiteMgr SiteManager FinalConstruct() called
20100206065018 X #4604 SiteMgr Key C:\PROGRA~1\McAfee\EPOLIC~1\DB\Keystore\rpmcafee.zip loaded, hash = H7LGlPbFtbARjG6MsNaop1QOFaU=
20100206065018 X #4604 SiteMgr Key C:\PROGRA~1\McAfee\EPOLIC~1\DB\Keystore\rpmcafeesia.zip loaded, hash = F1HjtTzscUsaIb27nQtAdoFh8RI=

20100206065018 X #4604 SiteMgr Key C:\PROGRA~1\McAfee\EPOLIC~1\DB\Keystore\smausafs011.zip loaded, hash = aehWqjext9+tTZq9T/nlr2mM/Ck=

20100206065018 I #4604 SiteMgrWrap Created instance of Site Manager

20100206065018 X #4604 DAL CConxIndex: Current used conx=1

20100206065018 X #4604 DAL ~CConxIndex: Current used conx=0

20100206065018 I #4604 SiteMgr SetEPOMode: SiteMgr enter ePO mode, server=AUSAFS011, port=8443, EPOUser=, Password=********

20100206065018 X #4604 SiteMgr Entering DALInit()

20100206065018 I #4604 SiteMgr DALInit: Connected to DAL successful

20100206065018 X #4604 DAL CConxIndex: Current used conx=1

20100206065018 X #4604 DAL ~CConxIndex: Current used conx=0

20100206065018 I #4604 SiteMgr SetEPOMode: Set ePO mode successful

20100206065018 I #4604 SiteMgr MirrorThreadProc: Mirror thread started

20100206065018 I #4604 SIM_InetMgr Starting download session for site NAIFtp

20100206065018 X #4604 SIM_InetMgr Server: ftp.nai.com:21

20100206065018 X #4604 SIM_InetMgr Relative Path: CommonUpdater
20100206065018 X #4604 SIM_InetMgr Username: Anonymous

20100206065018 X #4604 SIM_InetMgr HTTP Proxy server: proxy

20100206065018 X #4604 SIM_InetMgr FTP Proxy server: proxy

20100206065018 X #4604 SIM_InetMgr HTTP Proxy user: aus\svc_epo

20100206065018 X #4604 SIM_InetMgr FTP Proxy user: aus\svc_epo

20100206065018 I #4604 naInet FTP Session initialized

20100206065018 I #4604 NaInet FTP Session 4 Logging into FTP Server:

ftp.nai.com using User: Anonymous in win-inet mode

20100206065018 I #4604 naInet HTTP Session initialized

20100206065019 I #4604 naInet Connecting to HTTP Server using Microsoft WinInet

20100206065019 I #4604 naInet Trying to connect to Proxy Server proxy:8080 using INTERNET_OPEN_TYPE_PROXY

20100206065019 I #4604 naInet Connected to Server:

ftp.nai.com on Port: 21 using WinInet

20100206065019 X #4604 naInet Socket getting closed, Handle -1

20100206065019 I #4604 SIM_InetMgr Started download session 1 for site NAIFtp

20100206065019 I #4604 SiteMgr MirrorThreadProc: Downloading file catalog.z from NAIFtp

20100206065019 I #4604 SIM_InetMgr Downloading file catalog.z from session 1, LocalDir=C:\WINDOWS\TEMP\nai30F.tmp\00000000, RemoteDir=

20100206065019 I #4604 NaInet FTP session 4 Downloading file: /CommonUpdater/catalog.z from FTP Server:

ftp.nai.com
20100206065019 I #4604 NaInet FTP session 4 Downloading file from FTP server ftp.nai.com

using WinInet [in proxy mode]
20100206065019 I #4604 naInet Open URL: ftp://ftp.nai.com:21/CommonUpdater/catalog.z

20100206065019 I #4604 naInet Trying to download using Microsoft WinInet library

20100206065019 I #4604 naInet Conneting to Proxy Server proxy:8080 using INTERNET_OPEN_TYPE_PROXY

20100206065019 I #4604 naInet No resume download needed, calling InternetOpenUrl

20100206065019 E #4604 naInet HTTP Server returned Error : 502

20100206065019 I #4604 naInet Failed to download the URL /CommonUpdater/catalog.z using Wininet

20100206065019 I #4604 NaiInet FTP session 4 Wininet failed, Trying to download again using winsock

20100206065019 I #4604 NaInet FTP session 4 Logging into FTP Server:

ftp.nai.com using User: Anonymous in winsock-mode

20100206065019 I #4604 naInet FTP session 4 Connecting to FTP Server:

ftp.nai.com on Port: 21 using socket

20100206065040 E #4604 naInet FTP session 4 Failed to connect to FTP Server:

ftp.nai.com:21, error 10060

20100206065040 I #4604 SIM_InetMgr Download file catalog.z failed in session 1, nainet ret=0

20100206065040 X #4604 DAL CConxIndex: Current used conx=1

20100206065040 X #4604 DAL ~CConxIndex: Current used conx=0

20100206065040 X #4604 DAL CConxIndex: Current used conx=1

20100206065040 X #4604 DAL ~CConxIndex: Current used conx=0

20100206065040 X #4604 DAL CConxIndex: Current used conx=1

20100206065040 X #4604 DAL ~CConxIndex: Current used conx=0

20100206065040 e #4604 SiteMgr MirrorThreadProc: Download file catalog.z from NAIFtp failed, hr=-2147467259

20100206065040 I #4604 SrvEvtInf Generating Event

20100206065040 X #4604 DAL CConxIndex: Current used conx=1

20100206065040 X #4604 DAL ~CConxIndex: Current used conx=0

20100206065040 X #4604 naInet Socket getting closed, Handle -1

20100206065040 I #4604 naInet HTTP Session closed

20100206065040 I #4604 naInet ------------------------------------------------------------

20100206065040 I #4604 naInet FTP Session 4 closed

20100206065040 I #4604 naInet ------------------------------------------------------------

20100206065040 I #4604 SIM_InetMgr Session 1 ended, result=1

20100206065040 I #4604 SiteMgr MirrorThreadProc: Mirror thread ended

20100206065040 x #4604 SiteMgr SiteMgr main control final release...

If anybody is willing to offer some help to me then this would be very much appreciated, as I said, since it was I who installed patch 6 on the server, I am under pressure to get this fixed ASAP.

There where no other changed made to configuration on environment. It was simply a case of all working ok, patch 6 installed, server rebooted, repository pulls failing.

(I installed patch 6 as a couple of the fixes listed where things that had been bothering me, which, indeed have been fixed by the patch. Unfortunatley basic functionailty has been killed in the process)

Virtual beer is on offer for a soloution, or a real one if you can come and collect it.

Message was edited by: rhythm_methods on 5/02/10 7:27:17 PM
JoeBidgood
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 3 of 5

Re: ePO4 - Repository pulls stopped working. Basic functionality of server is broken after Patch 6 installed.

Going by this set of logs and the ones in the other thread, this really does look like a straight proxy authentication issue. I realise that this may sound simplistic, but please try setting the proxy password for the account to something simple, change it in ePO, and try the pull again.

Strangely enough you may be having problems now not because P6 has introduced a problem but rather because it has fixed a problem tha you were using before    Earlier versions of ePO had a defect whereby they would use the credentials of the logged on user even if separate proxy credentials were specified, which may explain why it used to work and now doesn't.

Regards -

Joe

Re: ePO4 - Repository pulls stopped working. Basic functionality of server is broken after Patch 6 installed.

Hi Joe,

Thanks for your reply, and for taking the time to bother posting, and it was a good idea, but unfortunatley I tried that already before posting or calling McAfee.

Aha!

The problem it seems is as follows.

There is a group on the srever which has the ePO service account in it (the credentials which are used for the pull).

When clickin on the properties of that service account, it showed up as strange characters, not as normal.

So the account was removed from the group and re-added and bingo, it started working again. Which is great.

It looks like, somehow, and I have no idea how, that the account in that group was somehow corrupted or something during the installation of the patch 6.

(I am talking about in computer managment on the server)

This makes no sense to me in terms of what happened, but simple removing the account from the group and re-adding it, has fixed the problem.

How the hell that happened, yea, I just don't get it.

Anyway, that fixed it........does this make any sense to anyone? How can running an ePO patch cause a coruption on an account in a group on the machine......bizarre........

But anyway, this info might help somebody else, so thought I should post it anyway.

Cheers.

RM.

I will be buying myself a few beers to celebrate.

Message was edited by: rhythm_methods on 8/02/10 9:42:15 PM
JoeBidgood
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 5 of 5

Re: ePO4 - Repository pulls stopped working. Basic functionality of server is broken after Patch 6 installed.

Glad it's working now... and no, I have no explanation either

Regards -

Joe

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community