Patch deployment fails when using relays
Versions / Builds Affected
2012 (all builds)
Status
Resolved
Problem Summary
Patch deployments are failing when the patches are being deployed to an agent machine that is configured to use a relay.
TT / JIRAID
1058
How to Identify
1. When deploying patches the customer sees that all the patches fail to download and install. 2. Remediation job details shows 'Failed to download file' 3. They see 403 errors in the following logs: Patchagent.log: "warning",SendInternetRequest - Failed to establish. Status code is: 403 HTTPD\Access.log on the relay machine: "GET http://languardmain/files/repository/English/SxRlAMw8Cj_t7xowFWQt2VvSSSw=_rvkroots.exe HTTP/1.1" 403 268 4. On the LanGuard server the setting for the repository shows a UNC path (e.g. \\FileServer\Languard\) The issue is cause by an inability of the Apache web server to access the registry via SMB when using a UNC path.
Workaround / Fix Details
A patch was released via Program Updates for this issue. The patch was included in GFI LanGuard 2014 and higher versions
Required Actions
Ensure program updates are up to date Upgrade to the latest version
Priyanka Bhotika
Comments