swa catalog read failed

[Joao Rei]

I just installed swa.

While I was testing the tool I executed the command:
swa report -a QPK -a PCW -s -r detail
This failed in "Getting Catalog of Recommended Actions and Software"
...
"Message: URL cannot be opened. Connection timed out"
....

The point is, for security reasons we dont have any HPUX system with open network.

1. Is there any other way to get the catalog and force swa to read the manually installed catalog?
2. To execute swa is a requirent to have at least one system with open network?

Thanks
Regards

Joao Rei

[Bob E Campbell]

We have been having some intermittant problems with the ITRC service, but it only hits the HTTPS service. If you hit this problem you can resolve it with:

swa step catalog -x catalog_source=ftp://ftp.itrc.hp.com/export/patches/swa_catalog.xml.gz

Sorry for the trouble, we are working on it!

[Steven E. Protter]

Shalom,

Why not ssh in and run the command manually or execute it on the individual machines in cron.

You need output and if its important manually moving it to a central location is the price you pay for security.

SEP

[John Payne_2 · Accepted solution]

Joao,

SWA has an option called "catalog", where you can point to the catalog you got elseware, and copied to your machine.

swa report -x catalog=${user_dir}/cache/swa_catalog.xml

It's documented in the swa-report man page.

If you have a proxy server in your environment, you can use that also:

swa report -x https_proxy=http://proxy.your.domain:8000

You can also see /etc/opt/swa/swa.conf.template for examples. (And set things in /etc/opt/swa/swa.conf if you want it set every time...)

Hope it helps
John

[Bob E Campbell]

Whoops! Always read the full post Bob!!! I happened to get an email telling me the service had failed moments before reading your post and had assumed it was related...

We built several ways to handle this situation. If your system has indirect access you might be able to use the "-x download_cmd" option to use SSH to connect to a system with curl or similar tool.

You can also download the catalog from the FTP server and then sneakernet it onto your secure network. In this model you might want to use "-x catalog_source" to define a single, local repository or "-x catalog_max_age=-1" to block the attempt to update the current catalog.

Sorry for my haste!

[Joao Rei]

This was my first question in the forum.

I would like to thanks to all that replyed to my question.

Based on your replys I achieved to get the first report.

Thnks all.

Ill close this thread.

[Joao Rei]

I have the first report.