topic Re: swa question in Operating System - HP-UX

swa question

Waqar Razi — Fri, 23 Jan 2009 19:09:13 GMT

I am new to SWA, I am planning to install it in my HPUX environment. I have few questions in this regard.

1- Does SWA needs to be installed on every server in the machine or we just need to install it on one central server and then from this server, analyse other servers for patch and security analysis.

2- We have some hardware which is not under HP support, I am planning to install swa on that test server and then perform some analysis there untill we are comfortible with the tool and we are ready to move it to other servers. But this server is on the Production subnet. Will it be interfering with other servers in the environment.

Re: swa question

James R. Ferguson — Fri, 23 Jan 2009 19:14:08 GMT

Hi Wagar:

#1 Install it on every server where you want the feature.

#2 No, this isn't a problem

The SWA manpages and SWA Guide (below) offet lots of good information:

http://docs.hp.com/en/5992-5372/index.html

Regards!

...JRF...

Re: swa question

Waqar Razi — Fri, 23 Jan 2009 19:17:33 GMT

I am trying to run swa report command but it is terminating with the following error:

* Gathering Inventory
NOTE: Created a template "/home/root-i/.swa/ignore" file. Please read this
file for more information about how to ignore issues in the future.
* Getting Catalog of Recommended Actions and Software
ERROR: Failed to read: https://ftp.itrc.hp.com/wpsl/bin/doc.pl/screen=wpslDow
nloadPatch/swa_catalog.xml.gz?PatchName=/export/patches/swa_catalog.xm
l.gz Message: URL cannot be opened.
sun.security.validator.ValidatorException: No trusted certificate
found

======= 01/23/09 14:12:37 EST END Report on Issues and New Software failed
with 1 error. (user=ubuaaia) (jobid=tiger)

NOTE: More information may be found in the Software Assistant logfile
"/var/opt/swa/swa.log".

Can some one guide me please?

Re: swa question

Patrick Wallek — Fri, 23 Jan 2009 19:21:40 GMT

I have SWA installed on a single server and do all of my swa analyses from it.

I have a script that will run the analysis for me.

# cat frx-report.sh
#!/usr/bin/sh

cd /home/root/swa

for SERVER in $(cat /home/root/sys_list)
do
rm -f ${SERVER}-swa-report.html ${SERVER}-swa-logfile.log ${SERVER}-swa-analysis.raw
/opt/swa/bin/swa report -s ssh://root@${SERVER} -x html_report=${SERVER}-swa-report.html \
-x analysis_file=${SERVER}-swa-analysis.raw -x logfile=${SERVER}-swa-logfile.log \
-x crl_check=false
done

The /home/root/sys_list is just a list of servers that I want to generate a report for. I use ssh to allow passwordless communication between all servers.

I then have another script that will analyze the reports generated and create patch depots for each server.

# cat swa-get-patches.sh
#!/usr/bin/sh

cd /home/root/swa

for SERVER in $(cat /home/root/sys_list)
do
swa get -x logfile=${SERVER}-swa-get-logfile.log -x analysis_file=${SERVER}-swa-analysis.raw -t ${SERVER}.depot
done

Re: swa question

Patrick Wallek — Fri, 23 Jan 2009 19:22:49 GMT

Add the option '-x crl_check=false' to the 'swa report' command you are running.

Re: swa question

James R. Ferguson — Fri, 23 Jan 2009 19:26:11 GMT

Hi (again) Wagar:

See:

http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1295442

...with regard to your error.

Patrick has an excellent answer to your first question. This might be less work as the number of servers you manage increases since you don't have to update SWA everywhere.

Regards!

...JRF...

Re: swa question

Waqar Razi — Fri, 23 Jan 2009 19:30:14 GMT

No luck, still same error:

/opt/swa/bin/swa report -x crl_check=false

======= 01/23/09 14:23:25 EST BEGIN Report on Issues and New Software
(user=ubuaaia) (jobid=tiger)

* Gathering Inventory
* Using existing inventory for host "tiger"
* Getting Catalog of Recommended Actions and Software
ERROR: Failed to read: https://ftp.itrc.hp.com/wpsl/bin/doc.pl/screen=wpslDow
nloadPatch/swa_catalog.xml.gz?PatchName=/export/patches/swa_catalog.xm
l.gz Message: URL cannot be opened.
sun.security.validator.ValidatorException: No trusted certificate
found

======= 01/23/09 14:23:35 EST END Report on Issues and New Software failed
with 1 error. (user=ubuaaia) (jobid=tiger)

NOTE: More information may be found in the Software Assistant logfile
"/var/opt/swa/swa.log".

Re: swa question

James R. Ferguson — Fri, 23 Jan 2009 19:32:39 GMT

Hi (again) Wagar:

> No luck, still same error: /opt/swa/bin/swa report -x crl_check=false

Try running again. I have been successful that way.

Regards!

...JRF...

Re: swa question

Bob E Campbell — Fri, 23 Jan 2009 22:25:10 GMT

Please make sure that you are running the most recent bits (C.02.11) available at https://www.hp.com/go/swa. We had a fire drill in December in which changes to the ITRC broke some of the assumptions in our code.

Just to be sure I checked all systems and protocols and as I type this everything is happy using the C.02.11 bits.