4 Replies Latest reply on Feb 9, 2010 4:31 AM by JoeBidgood

    ePO4 - Repository pulls stopped working. Basic functionality of server is broken after Patch 6 installed.

      Fellow McAfee users,

       

      My ePO server has started displaying the following problem.

      The problem occurred immediatley after installing patch 6 onto the server.

       

      Problem : repository pulls no longer work.

       

      I discovered the following about the problem :

       

      1. When no user is logged onto the ePO server locally (which is how the server sits nearly all the time) repository updates fail, both manual or scheduled pulls.

      2. When a user IS logged onto the ePO server locally, repository pulls work fine, inlcuding both manual and scheduled pulls.

       

      From remote consoles.

       

      1.Manual pull from remote console, when no windows session logged onto on ePO server, repository pulls fail.

      2.Manual pull from remote console, when a user is logged onto windows on the ePO server, repository updates work ok,

       

      It looks like, for some reason, credentials are not getting pulled or passed correctly unless there is a user actually logged onto the ePO server itself, in windows.

      As the server normally runs in a state where nobody is actually logged onto it, ePO has been basically broken by the installation of the patch, very frustrating.

       

      When I check the server log files it does indeed report errors relating to not authenticating to the proxy server, though, as I say, credentials are certainly correct as manual pulls work ok when I am logged on to the server.

       

      I have spent a few hours on the phone with McAfee support yesterday, they where not able to advise of any known issues or soloutions.

      They advised the must escallate the case.

       

      After patch 6 was installed, the server was rebooted.

       

      Things I have tried since then are re-entering the credentials for the proxy.

      Trying a few other sets of proxy credentials.

      Re-creating pull tasks using different user accounts.

      Re-start McAfee services.

      Re-installation of Patch 6.

       

      As it is now the weekend I will need to wait probably till monday until the problem is even looked at.

       

      In the meantime, has anybody seen this problem before? If so, how did you fix it?

       

      As I have not been able to work out a soloution myself so far, so am hoping there is helpful expert on here, I would genuinely appreciate if somebody is willing to help resolve this for me.

      I am under pressure from my employers to fix this.

       

       

      Thank you,

       

      RM

       

       

       

      Message was edited by: rhythm_methods on 5/02/10 7:23:16 PM
        • 1. Re: ePO4 - Repository pulls stopped working. Basic functionality of server is broken after Patch 6 installed.

          Here are the log files from my server :

           

          If there is a user logged onto the server and the repository pull is run (either on schedule or manually) all works fine and logs show as follows:

           

          20100206064624 I #5996 EPOJNI Getting license data...
          20100206064624 I #5996 EPOJNI Getting license data...
          20100206064634 I #2816 EPOJNI Getting license data...
          20100206064634 I #2816 EPOJNI Getting license data...
          20100206064923 I #5608 EPOJNI Getting license data...
          20100206064939 X #3024 SiteMgr Constructing CSiteMgr()
          20100206064939 X #3024 SiteMgr SiteManager FinalConstruct() called
          20100206064939 X #3024 SiteMgr Key C:\PROGRA~1\McAfee\EPOLIC~1\DB\Keystore\rpmcafee.zip loaded, hash = H7LGlPbFtbARjG6MsNaop1QOFaU=
          20100206064940 X #3024 SiteMgr Key C:\PROGRA~1\McAfee\EPOLIC~1\DB\Keystore\rpmcafeesia.zip loaded, hash = F1HjtTzscUsaIb27nQtAdoFh8RI=
          20100206064940 X #3024 SiteMgr Key C:\PROGRA~1\McAfee\EPOLIC~1\DB\Keystore\smausafs011.zip loaded, hash = aehWqjext9+tTZq9T/nlr2mM/Ck=
          20100206064940 I #3024 SiteMgrWrap Created instance of Site Manager
          20100206064940 X #3024 DAL CConxIndex: Current used conx=1
          20100206064940 X #3024 DAL ~CConxIndex: Current used conx=0
          20100206064940 I #3024 SiteMgr SetEPOMode: SiteMgr enter ePO mode, server=AUSAFS011, port=8443, EPOUser=, Password=********
          20100206064940 X #3024 SiteMgr Entering DALInit()
          20100206064940 I #3024 SiteMgr DALInit: Connected to DAL successful
          20100206064940 X #3024 DAL CConxIndex: Current used conx=1
          20100206064940 X #3024 DAL ~CConxIndex: Current used conx=0
          20100206064940 I #3024 SiteMgr SetEPOMode: Set ePO mode successful
          20100206064940 I #3024 SiteMgr MirrorThreadProc: Mirror thread started
          20100206064940 I #3024 SIM_InetMgr Starting download session for site NAIFtp
          20100206064940 X #3024 SIM_InetMgr Server: ftp.nai.com:21
          20100206064940 X #3024 SIM_InetMgr Relative Path: CommonUpdater
          20100206064940 X #3024 SIM_InetMgr Username: Anonymous
          20100206064940 X #3024 SIM_InetMgr HTTP Proxy server: proxy
          20100206064940 X #3024 SIM_InetMgr FTP Proxy server: proxy
          20100206064940 X #3024 SIM_InetMgr HTTP Proxy user: aus\svc_epo

          20100206064940 X #3024 SIM_InetMgr FTP Proxy user: aus\svc_epo
          20100206064940 I #3024 naInet FTP Session initialized
          20100206064940 I #3024 NaInet FTP Session 3 Logging into FTP Server: ftp.nai.com using User: Anonymous in win-inet mode
          20100206064940 I #3024 naInet HTTP Session initialized
          20100206064941 I #3024 naInet Connecting to HTTP Server using Microsoft WinInet
          20100206064941 I #3024 naInet Trying to connect to Proxy Server proxy:8080 using INTERNET_OPEN_TYPE_PROXY
          20100206064941 I #3024 naInet Connected to Server: ftp.nai.com on Port: 21 using WinInet
          20100206064941 X #3024 naInet Socket getting closed, Handle -1
          20100206064941 I #3024 SIM_InetMgr Started download session 1 for site NAIFtp
          20100206064941 I #3024 SiteMgr MirrorThreadProc: Downloading file catalog.z from NAIFtp
          20100206064941 I #3024 SIM_InetMgr Downloading file catalog.z from session 1, LocalDir=C:\WINDOWS\TEMP\nai30B.tmp\00000000, RemoteDir=
          20100206064941 I #3024 NaInet FTP session 3 Downloading file: /CommonUpdater/catalog.z from FTP Server: ftp.nai.com
          20100206064941 I #3024 NaInet FTP session 3 Downloading file from FTP server ftp.nai.com using WinInet [in proxy mode]
          20100206064941 I #3024 naInet Open URL: ftp://ftp.nai.com:21/CommonUpdater/catalog.z
          20100206064941 I #3024 naInet Trying to download using Microsoft WinInet library
          20100206064941 X #3024 naInet Impersonated logged on user successfully
          20100206064941 I #3024 naInet Conneting to Proxy Server proxy:8080 using INTERNET_OPEN_TYPE_PROXY
          20100206064941 I #3024 naInet No resume download needed, calling InternetOpenUrl
          20100206064943 X #3024 naInet Impersonated token closed
          20100206064943 I #3024 naInet Content Length is not available, no resumable download support
          20100206064943 I #3024 naInet Downloaded 3580 bytes this time
          20100206064943 I #3024 naInet Downloaded 0 bytes this time
          20100206064943 I #3024 SIM_InetMgr Downloaded file catalog.z successfully in session 1
          20100206064943 I #3024 SiteMgr DecryptAndExtractCatalogCabFile: Verified signature of catalog file C:\WINDOWS\TEMP\nai30B.tmp\00000000\catalog.z
          20100206064943 I #3024 SiteMgr DecryptAndExtractCatalogCabFile: Verified signature of catalog file C:/PROGRA~1/McAfee/EPOLIC~1/DB\software\catalog.z
          20100206064943 X #3024 DAL CConxIndex: Current used conx=1
          20100206064943 X #3024 DAL ~CConxIndex: Current used conx=0

           

           

          If no user is logged onto the server and a pull is run (either through scedule or manually from remote console) logs read as follows :

           

           

          20100206065018 X #4604 SiteMgr Constructing CSiteMgr()
          20100206065018 X #4604 SiteMgr SiteManager FinalConstruct() called
          20100206065018 X #4604 SiteMgr Key C:\PROGRA~1\McAfee\EPOLIC~1\DB\Keystore\rpmcafee.zip loaded, hash = H7LGlPbFtbARjG6MsNaop1QOFaU=
          20100206065018 X #4604 SiteMgr Key C:\PROGRA~1\McAfee\EPOLIC~1\DB\Keystore\rpmcafeesia.zip loaded, hash = F1HjtTzscUsaIb27nQtAdoFh8RI=

          20100206065018 X #4604 SiteMgr Key C:\PROGRA~1\McAfee\EPOLIC~1\DB\Keystore\smausafs011.zip loaded, hash = aehWqjext9+tTZq9T/nlr2mM/Ck=

          20100206065018 I #4604 SiteMgrWrap Created instance of Site Manager

          20100206065018 X #4604 DAL CConxIndex: Current used conx=1

          20100206065018 X #4604 DAL ~CConxIndex: Current used conx=0

          20100206065018 I #4604 SiteMgr SetEPOMode: SiteMgr enter ePO mode, server=AUSAFS011, port=8443, EPOUser=, Password=********

          20100206065018 X #4604 SiteMgr Entering DALInit()

          20100206065018 I #4604 SiteMgr DALInit: Connected to DAL successful

          20100206065018 X #4604 DAL CConxIndex: Current used conx=1

          20100206065018 X #4604 DAL ~CConxIndex: Current used conx=0

          20100206065018 I #4604 SiteMgr SetEPOMode: Set ePO mode successful

          20100206065018 I #4604 SiteMgr MirrorThreadProc: Mirror thread started

          20100206065018 I #4604 SIM_InetMgr Starting download session for site NAIFtp

          20100206065018 X #4604 SIM_InetMgr Server: ftp.nai.com:21

          20100206065018 X #4604 SIM_InetMgr Relative Path: CommonUpdater
          20100206065018 X #4604 SIM_InetMgr Username: Anonymous

          20100206065018 X #4604 SIM_InetMgr HTTP Proxy server: proxy

          20100206065018 X #4604 SIM_InetMgr FTP Proxy server: proxy

          20100206065018 X #4604 SIM_InetMgr HTTP Proxy user: aus\svc_epo

          20100206065018 X #4604 SIM_InetMgr FTP Proxy user: aus\svc_epo

          20100206065018 I #4604 naInet FTP Session initialized

          20100206065018 I #4604 NaInet FTP Session 4 Logging into FTP Server:

          ftp.nai.com using User: Anonymous in win-inet mode

          20100206065018 I #4604 naInet HTTP Session initialized

          20100206065019 I #4604 naInet Connecting to HTTP Server using Microsoft WinInet

          20100206065019 I #4604 naInet Trying to connect to Proxy Server proxy:8080 using INTERNET_OPEN_TYPE_PROXY

          20100206065019 I #4604 naInet Connected to Server:

          ftp.nai.com on Port: 21 using WinInet

          20100206065019 X #4604 naInet Socket getting closed, Handle -1

          20100206065019 I #4604 SIM_InetMgr Started download session 1 for site NAIFtp

          20100206065019 I #4604 SiteMgr MirrorThreadProc: Downloading file catalog.z from NAIFtp

          20100206065019 I #4604 SIM_InetMgr Downloading file catalog.z from session 1, LocalDir=C:\WINDOWS\TEMP\nai30F.tmp\00000000, RemoteDir=

          20100206065019 I #4604 NaInet FTP session 4 Downloading file: /CommonUpdater/catalog.z from FTP Server:

          ftp.nai.com
          20100206065019 I #4604 NaInet FTP session 4 Downloading file from FTP server ftp.nai.com

          using WinInet [in proxy mode]
          20100206065019 I #4604 naInet Open URL: ftp://ftp.nai.com:21/CommonUpdater/catalog.z

          20100206065019 I #4604 naInet Trying to download using Microsoft WinInet library

          20100206065019 I #4604 naInet Conneting to Proxy Server proxy:8080 using INTERNET_OPEN_TYPE_PROXY

          20100206065019 I #4604 naInet No resume download needed, calling InternetOpenUrl

          20100206065019 E #4604 naInet HTTP Server returned Error : 502

          20100206065019 I #4604 naInet Failed to download the URL /CommonUpdater/catalog.z using Wininet

          20100206065019 I #4604 NaiInet FTP session 4 Wininet failed, Trying to download again using winsock

          20100206065019 I #4604 NaInet FTP session 4 Logging into FTP Server:

          ftp.nai.com using User: Anonymous in winsock-mode

          20100206065019 I #4604 naInet FTP session 4 Connecting to FTP Server:

          ftp.nai.com on Port: 21 using socket

          20100206065040 E #4604 naInet FTP session 4 Failed to connect to FTP Server:

          ftp.nai.com:21, error 10060

          20100206065040 I #4604 SIM_InetMgr Download file catalog.z failed in session 1, nainet ret=0

          20100206065040 X #4604 DAL CConxIndex: Current used conx=1

          20100206065040 X #4604 DAL ~CConxIndex: Current used conx=0

          20100206065040 X #4604 DAL CConxIndex: Current used conx=1

          20100206065040 X #4604 DAL ~CConxIndex: Current used conx=0

          20100206065040 X #4604 DAL CConxIndex: Current used conx=1

          20100206065040 X #4604 DAL ~CConxIndex: Current used conx=0

          20100206065040 e #4604 SiteMgr MirrorThreadProc: Download file catalog.z from NAIFtp failed, hr=-2147467259

          20100206065040 I #4604 SrvEvtInf Generating Event

          20100206065040 X #4604 DAL CConxIndex: Current used conx=1

          20100206065040 X #4604 DAL ~CConxIndex: Current used conx=0

          20100206065040 X #4604 naInet Socket getting closed, Handle -1

          20100206065040 I #4604 naInet HTTP Session closed

          20100206065040 I #4604 naInet ------------------------------------------------------------

          20100206065040 I #4604 naInet FTP Session 4 closed

          20100206065040 I #4604 naInet ------------------------------------------------------------

          20100206065040 I #4604 SIM_InetMgr Session 1 ended, result=1

          20100206065040 I #4604 SiteMgr MirrorThreadProc: Mirror thread ended

          20100206065040 x #4604 SiteMgr SiteMgr main control final release...

           

           

           

          If anybody is willing to offer some help to me then this would be very much appreciated, as I said, since it was I who installed patch 6 on the server, I am under pressure to get this fixed ASAP.

           

          There where no other changed made to configuration on environment. It was simply a case of all working ok, patch 6 installed, server rebooted, repository pulls failing.

          (I installed patch 6 as a couple of the fixes listed where things that had been bothering me, which, indeed have been fixed by the patch. Unfortunatley basic functionailty has been killed in the process)

           

          Virtual beer is on offer for a soloution, or a real one if you can come and collect it.

           

           

          Message was edited by: rhythm_methods on 5/02/10 7:27:17 PM
          • 2. Re: ePO4 - Repository pulls stopped working. Basic functionality of server is broken after Patch 6 installed.
            JoeBidgood

            Going by this set of logs and the ones in the other thread, this really does look like a straight proxy authentication issue. I realise that this may sound simplistic, but please try setting the proxy password for the account to something simple, change it in ePO, and try the pull again.

            Strangely enough you may be having problems now not because P6 has introduced a problem but rather because it has fixed a problem tha you were using before    Earlier versions of ePO had a defect whereby they would use the credentials of the logged on user even if separate proxy credentials were specified, which may explain why it used to work and now doesn't.

             

            Regards -

             

            Joe

            • 3. Re: ePO4 - Repository pulls stopped working. Basic functionality of server is broken after Patch 6 installed.

              Hi Joe,

               

              Thanks for your reply, and for taking the time to bother posting, and it was a good idea, but unfortunatley I tried that already before posting or calling McAfee.

               

              Aha!

               

              The problem it seems is as follows.

               

              There is a group on the srever which has the ePO service account in it (the credentials which are used for the pull).

               

              When clickin on the properties of that service account, it showed up as strange characters, not as normal.

              So the account was removed from the group and re-added and bingo, it started working again. Which is great.

               

              It looks like, somehow, and I have no idea how, that the account in that group was somehow corrupted or something during the installation of the patch 6.

              (I am talking about in computer managment on the server)

               

              This makes no sense to me in terms of what happened, but simple removing the account from the group and re-adding it, has fixed the problem.

              How the hell that happened, yea, I just don't get it.

               

              Anyway, that fixed it........does this make any sense to anyone? How can running an ePO patch cause a coruption on an account in a group on the machine......bizarre........

               

              But anyway, this info might help somebody else, so thought I should post it anyway.

               

              Cheers.

               

              RM.

               

              I will be buying myself a few beers to celebrate.

               

               

              Message was edited by: rhythm_methods on 8/02/10 9:42:15 PM
              • 4. Re: ePO4 - Repository pulls stopped working. Basic functionality of server is broken after Patch 6 installed.
                JoeBidgood

                Glad it's working now... and no, I have no explanation either

                 

                Regards -

                 

                Joe