swa question

[Waqar Razi]

I am new to SWA, I am planning to install it in my HPUX environment. I have few questions in this regard.

1- Does SWA needs to be installed on every server in the machine or we just need to install it on one central server and then from this server, analyse other servers for patch and security analysis.

2- We have some hardware which is not under HP support, I am planning to install swa on that test server and then perform some analysis there untill we are comfortible with the tool and we are ready to move it to other servers. But this server is on the Production subnet. Will it be interfering with other servers in the environment.

[James R. Ferguson · Accepted solution]

Hi Wagar:

#1 Install it on every server where you want the feature.

#2 No, this isn't a problem

The SWA manpages and SWA Guide (below) offet lots of good information:

http://docs.hp.com/en/5992-5372/index.html

Regards!

...JRF...

[Waqar Razi]

I am trying to run swa report command but it is terminating with the following error:

* Gathering Inventory
NOTE: Created a template "/home/root-i/.swa/ignore" file. Please read this
file for more information about how to ignore issues in the future.
* Getting Catalog of Recommended Actions and Software
ERROR: Failed to read: https://ftp.itrc.hp.com/wpsl/bin/doc.pl/screen=wpslDow
nloadPatch/swa_catalog.xml.gz?PatchName=/export/patches/swa_catalog.xm
l.gz Message: URL cannot be opened.
sun.security.validator.ValidatorException: No trusted certificate
found

======= 01/23/09 14:12:37 EST END Report on Issues and New Software failed
with 1 error. (user=ubuaaia) (jobid=tiger)

NOTE: More information may be found in the Software Assistant logfile
"/var/opt/swa/swa.log".

Can some one guide me please?

[Patrick Wallek]

I have SWA installed on a single server and do all of my swa analyses from it.

I have a script that will run the analysis for me.

# cat frx-report.sh
#!/usr/bin/sh

cd /home/root/swa

for SERVER in $(cat /home/root/sys_list)
do
rm -f ${SERVER}-swa-report.html ${SERVER}-swa-logfile.log ${SERVER}-swa-analysis.raw
/opt/swa/bin/swa report -s ssh://root@${SERVER} -x html_report=${SERVER}-swa-report.html \
-x analysis_file=${SERVER}-swa-analysis.raw -x logfile=${SERVER}-swa-logfile.log \
-x crl_check=false
done

The /home/root/sys_list is just a list of servers that I want to generate a report for. I use ssh to allow passwordless communication between all servers.

I then have another script that will analyze the reports generated and create patch depots for each server.

# cat swa-get-patches.sh
#!/usr/bin/sh

cd /home/root/swa

for SERVER in $(cat /home/root/sys_list)
do
swa get -x logfile=${SERVER}-swa-get-logfile.log -x analysis_file=${SERVER}-swa-analysis.raw -t ${SERVER}.depot
done

[Patrick Wallek]

Add the option '-x crl_check=false' to the 'swa report' command you are running.

[James R. Ferguson]

Hi (again) Wagar:

See:

http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1295442

...with regard to your error.

Patrick has an excellent answer to your first question. This might be less work as the number of servers you manage increases since you don't have to update SWA everywhere.

Regards!

...JRF...

[Waqar Razi]

No luck, still same error:

/opt/swa/bin/swa report -x crl_check=false

======= 01/23/09 14:23:25 EST BEGIN Report on Issues and New Software
(user=ubuaaia) (jobid=tiger)

* Gathering Inventory
* Using existing inventory for host "tiger"
* Getting Catalog of Recommended Actions and Software
ERROR: Failed to read: https://ftp.itrc.hp.com/wpsl/bin/doc.pl/screen=wpslDow
nloadPatch/swa_catalog.xml.gz?PatchName=/export/patches/swa_catalog.xm
l.gz Message: URL cannot be opened.
sun.security.validator.ValidatorException: No trusted certificate
found

======= 01/23/09 14:23:35 EST END Report on Issues and New Software failed
with 1 error. (user=ubuaaia) (jobid=tiger)

NOTE: More information may be found in the Software Assistant logfile
"/var/opt/swa/swa.log".

[James R. Ferguson]

Hi (again) Wagar:

> No luck, still same error: /opt/swa/bin/swa report -x crl_check=false

Try running again. I have been successful that way.

Regards!

...JRF...

[Bob E Campbell]

Please make sure that you are running the most recent bits (C.02.11) available at https://www.hp.com/go/swa. We had a fire drill in December in which changes to the ITRC broke some of the assumptions in our code.

Just to be sure I checked all systems and protocols and as I type this everything is happy using the C.02.11 bits.