1 2 Previous Next 22 Replies Latest reply on May 8, 2015 12:30 PM by Yanick Girouard

    Patch Catalog update error

    Steve Cupp

      We have 3 Windows patch catalogs in our environment 2 of them update correctly, the third gives us this error:

       

      Error    05/06/2015 22:47:39    Error while moving file from temp folder: RHM_Windows_Server_Patch_Catalog_CUJ-2015-05-06 22-44-18-709-0400, Error: Cannot rename file 'hf7b.xml' to '../hf7b.xml' : File exists

       

      Any ideas what could be causing this?

       

      Thanks much. . .

        • 1. Re: Patch Catalog update error
          Sean Berry

          What's the app server log telling you?

           

          Sent from my iPad

          • 2. Re: Patch Catalog update error
            Steve Cupp

            Lots of stuff like this. . .

            [06 May 2015 22:47:39,825] [WorkItem-Thread-31] [INFO] [cupps@TRINITY-HEALTH.ORG:BLAdmins:] [CatalogUpdate] Patch: Windows8.1-KB2998097-v5-x64.msu already exists in workspace directory..skipping download

             

            Then this at the time I see the error in the run log. . .

            [06 May 2015 22:47:39,841] [WorkItem-Thread-94] [ERROR] [cupps@TRINITY-HEALTH.ORG:BLAdmins:] [Patch-Metadata-Updator] Error while moving file from temp folder: RHM_Windows_Server_Patch_Catalog_CUJ-2015-05-06 22-44-18-709-0400

            java.io.IOException: Cannot rename file 'hf7b.xml' to '../hf7b.xml' : File exists

                at com.bladelogic.om.patch.app.psu.BLRemoteFileSystem.rename(BLRemoteFileSystem.java:278)

                at com.bladelogic.om.patch.app.psu.BLRemoteFileSystem.moveFile(BLRemoteFileSystem.java:300)

                at com.bladelogic.om.patch.model.job.catalogUpdate.WindowsCatalogFeedUpdateWorkItem.replaceOldMetadata(WindowsCatalogFeedUpdateWorkItem.java:1052)

                at com.bladelogic.om.patch.model.job.catalogUpdate.AbstractCatalogFeedUpdateWorkItem.processDepotObjectNotifyCache(AbstractCatalogFeedUpdateWorkItem.java:541)

                at com.bladelogic.om.patch.model.job.catalogUpdate.AbstractCatalogFeedUpdateWorkItem.notifyRemainingDepotObjects(AbstractCatalogFeedUpdateWorkItem.java:410)

                at com.bladelogic.om.patch.model.job.catalogUpdate.AbstractCatalogFeedUpdateWorkItem.execute(AbstractCatalogFeedUpdateWorkItem.java:254)

                at com.bladelogic.om.infra.app.service.workitem.WorkItem.doExecute(WorkItem.java:127)

                at com.bladelogic.om.infra.app.service.workitem.thread.WorkItemThread.execute(WorkItemThread.java:176)

                at com.bladelogic.om.infra.app.service.workitem.thread.WorkItemThread.execute(WorkItemThread.java:51)

                at com.bladelogic.om.infra.app.service.thread.BlBlockingThread.run(BlBlockingThread.java:95)

            [06 May 2015 22:47:39,841] [WorkItem-Thread-94] [ERROR] [cupps@TRINITY-HEALTH.ORG:BLAdmins:] [Patch-Metadata-Updator] Error while moving file from temp folder: RHM_Windows_Server_Patch_Catalog_CUJ-2015-05-06 22-44-18-709-0400, Error: Cannot rename file 'hf7b.xml' to '../hf7b.xml' : File exists

            java.io.IOException: Cannot rename file 'hf7b.xml' to '../hf7b.xml' : File exists

                at com.bladelogic.om.patch.app.psu.BLRemoteFileSystem.rename(BLRemoteFileSystem.java:278)

                at com.bladelogic.om.patch.app.psu.BLRemoteFileSystem.moveFile(BLRemoteFileSystem.java:300)

                at com.bladelogic.om.patch.model.job.catalogUpdate.WindowsCatalogFeedUpdateWorkItem.replaceOldMetadata(WindowsCatalogFeedUpdateWorkItem.java:1052)

                at com.bladelogic.om.patch.model.job.catalogUpdate.AbstractCatalogFeedUpdateWorkItem.processDepotObjectNotifyCache(AbstractCatalogFeedUpdateWorkItem.java:541)

                at com.bladelogic.om.patch.model.job.catalogUpdate.AbstractCatalogFeedUpdateWorkItem.notifyRemainingDepotObjects(AbstractCatalogFeedUpdateWorkItem.java:410)

                at com.bladelogic.om.patch.model.job.catalogUpdate.AbstractCatalogFeedUpdateWorkItem.execute(AbstractCatalogFeedUpdateWorkItem.java:254)

                at com.bladelogic.om.infra.app.service.workitem.WorkItem.doExecute(WorkItem.java:127)

                at com.bladelogic.om.infra.app.service.workitem.thread.WorkItemThread.execute(WorkItemThread.java:176)

                at com.bladelogic.om.infra.app.service.workitem.thread.WorkItemThread.execute(WorkItemThread.java:51)

                at com.bladelogic.om.infra.app.service.thread.BlBlockingThread.run(BlBlockingThread.java:95)

             

            Then at the end of the run this. . .

            [06 May 2015 22:55:52,268] [WorkItem-Thread-21] [INFO] [cupps@TRINITY-HEALTH.ORG:BLAdmins:] [CatalogUpdate] Catalog update progress is 99% completed. Processing Depot batch 32 : 1000/1000 completed.

            [06 May 2015 22:55:52,299] [Job-Execution-1] [INFO] [cupps@TRINITY-HEALTH.ORG:BLAdmins:] [CatalogUpdate] Patches newly added: 0

            [06 May 2015 22:55:52,299] [Job-Execution-1] [INFO] [cupps@TRINITY-HEALTH.ORG:BLAdmins:] [CatalogUpdate] Patches updated: 23173

            [06 May 2015 22:55:52,299] [Job-Execution-1] [INFO] [cupps@TRINITY-HEALTH.ORG:BLAdmins:] [CatalogUpdate] Patches obsoleted: 9844

            [06 May 2015 22:55:52,299] [Job-Execution-1] [INFO] [cupps@TRINITY-HEALTH.ORG:BLAdmins:] [CatalogUpdate] Patches failed to be process: 0

            [06 May 2015 22:55:52,299] [Job-Execution-1] [INFO] [cupps@TRINITY-HEALTH.ORG:BLAdmins:] [CatalogUpdate] Patches downloaded: 0

            [06 May 2015 22:55:52,299] [Job-Execution-1] [INFO] [cupps@TRINITY-HEALTH.ORG:BLAdmins:] [CatalogUpdate] Patches failed to be downloaded: 0

            [06 May 2015 22:55:52,299] [Job-Execution-1] [INFO] [cupps@TRINITY-HEALTH.ORG:BLAdmins:] [CatalogUpdate] Patches with invalid/deprecated urls: 0

            [06 May 2015 22:55:52,299] [Job-Execution-1] [INFO] [cupps@TRINITY-HEALTH.ORG:BLAdmins:] [CatalogUpdate] Referrers newly added: 249

            [06 May 2015 22:55:52,299] [Job-Execution-1] [INFO] [cupps@TRINITY-HEALTH.ORG:BLAdmins:] [CatalogUpdate] Referrers updated: 602

            [06 May 2015 22:55:52,299] [Job-Execution-1] [INFO] [cupps@TRINITY-HEALTH.ORG:BLAdmins:] [CatalogUpdate] Referrers obsoleted: 11

            [06 May 2015 22:55:52,299] [Job-Execution-1] [INFO] [cupps@TRINITY-HEALTH.ORG:BLAdmins:] [CatalogUpdate] Referrers failed to be process: 0

            [06 May 2015 22:55:52,595] [Job-Execution-1] [INFO] [cupps@TRINITY-HEALTH.ORG:BLAdmins:] [CatalogUpdate] Creating the ISystem object for the host:NODCAPTBMC05 and the root dir:/D/Patch_Catalog/RHM_Windows

            [06 May 2015 22:55:52,642] [Job-Execution-1] [INFO] [cupps@TRINITY-HEALTH.ORG:BLAdmins:] [CatalogUpdate] Catalog update progress is completed.

            [06 May 2015 22:55:52,642] [Job-Execution-1] [ERROR] [cupps@TRINITY-HEALTH.ORG:BLAdmins:] [CatalogUpdate] The job 'RHM_Windows_Server_Patch_Catalog_CUJ-2015-05-06 22-44-18-709-0400' has failed

            • 3. Re: Patch Catalog update error
              Yanick Girouard

              Which version of BSA is this, and are y6ou using a http proxy server for your patch catalog downloads?

              • 4. Re: Patch Catalog update error
                Steve Cupp

                BSA Version: 8.5.01.231

                I believe the answer to the http proxy server question is no. . .

                • 5. Re: Patch Catalog update error
                  Bill Robinson

                  so that is either on the helper or the file server.  there should be a catalog_<id number> directory in the catalog and on the file server in the 'storage/patch/catalogs' dir.  maybe there is some permission issue on the original file ?  you could check the helper rscd and file server rscd logs around the same time as the error ?

                  • 6. Re: Patch Catalog update error
                    Yanick Girouard

                    Yeah, that or the file server agent permissions are wrong. Make sure the users.local of the file server agent has an entry like this:

                     

                    System:System rw,map=Administrator

                     

                    ..where Administrator must be a full administrator on Windows, or root on Unix.

                     

                    Then in exports, you should have:

                     

                    * rw,user=file_server_user

                     

                    ... where file_server_user is a user that is the owner (with full control access) of the file server's root directory recursively. You can set * to a select list of hosts too for more security, such as all your application servers.

                     

                    The users file should be left blank and you should never push ACL to that agent from the console.

                    • 7. Re: Patch Catalog update error
                      Steve Cupp

                      We don't have a helper on our Windows Patch catalogs, our File server has this folder, D:\Program Files\BMC Software\Bladelogic\storage\patch\catalog, with the folders below in it:

                       

                      The RSCD log on the File server from the time of the error:

                      05/06/15 22:55:52.661 DEBUGrscd -  10.200.102.39 1220 BladeLogicRSCD@NODCAPTBMC05->NODC_BMCPROD_ADM@NODCAPTBMC05:PrivilegeMapped (BLAdmins:cupps@TRINITY-HEALTH.ORG): CM: ***** New connection *****
                      05/06/15 22:55:52.661 INFO2rscd -  10.200.102.39 1220 BladeLogicRSCD@NODCAPTBMC05->NODC_BMCPROD_ADM@NODCAPTBMC05:PrivilegeMapped (BLAdmins:cupps@TRINITY-HEALTH.ORG): CM: access ("D:/Program Files/BMC Software/Bladelogic/storage/patch/catalog/catalog_2000864/.usable", 0) = -1 ENOENT (No such file or directory)

                       

                      So it looks like this ".usable" file isn't there?

                      • 8. Re: Patch Catalog update error
                        Steve Cupp

                        We are not seeing any access issues to our BSA File Server. We don't push ACLs to it. Below are the RSCD agent files:

                         

                        Exports file:

                        #

                        #  Copyright (c) 2001-2012 BladeLogic, Inc.

                        #       -- All Rights Reserved --

                        #

                        #  This file is read by the "rscd" to determine permissions for the given host.

                        #

                        # Please read the BMCBladeLogicAdministration.pdf or "exports" man page for details

                        # on how to use this file.

                        #

                        *   rw,user=NODC_BMCPROD_ADM

                         

                        Users file:

                        #

                        #  Copyright (c) 2001-2012 BladeLogic, Inc.

                        #       -- All Rights Reserved --

                        #

                        # This file contains a list of user permission overrides. The permissions

                        # defined in this file will override any associated permissions defined in the

                        # "exports" file.

                        #

                        # Please read the BMCBladeLogicAdministration.pdf or "users" man page for details

                        # on how to use this file.

                        #

                         

                        users.local file:

                        #

                        #  Copyright (c) 2001-2012 BladeLogic, Inc.

                        #       -- All Rights Reserved --

                        #

                        # This file contains a list of user permission overrides. The permissions

                        # defined in this file will override any associated permissions defined in the

                        # "exports" or "users" file.

                        #

                        # Please read the BMCBladeLogicAdministration.pdf for details on how to use this

                        # file.

                        #

                        • 9. Re: Patch Catalog update error
                          Yanick Girouard

                          Normally you should have the System:System entry in your users.local because for security reasons, the file server should not run using a full admin account, but the System accounts needs to have that in order to properly start the agent. Is NODC_BMCPROD_ADM a full administrator on the system? If so, this is a security risk and probably should be corrected. What I'm stating is also documented clearly here: https://docs.bmc.com/docs/display/public/bsa85/Configuring+the+file+server+agent+ACLs

                           

                          Other than that, what are the ACLs of the hf7b.xml file located in the directory that Bill pointed out? Can you paste the output of the CACLS command run against it?

                          • 10. Re: Patch Catalog update error
                            Steve Cupp

                            D:\Program Files\BMC Software\Bladelogic\storage\patch\catalog\catalog_2000864\hf7b.xml BUILTIN\Administrators:F

                            NT AUTHORITY\SYSTEM:F

                            BUILTIN\Administrators:F

                            BUILTIN\Users:R

                            • 11. Re: Patch Catalog update error
                              Yanick Girouard

                              Is your NODC_BMCPROD_ADM user part of the Administrators group?

                              • 12. Re: Patch Catalog update error
                                Steve Cupp

                                Yes. . .

                                We are looking into the possibility that the RSCD.exe process is holding the hf7b.xml file open and therefore it can't be deleted. We have to wait until the RSCD agent service can be stopped/started our File Server, it is quite busy right now running production work.

                                • 13. Re: Patch Catalog update error
                                  Yanick Girouard

                                  If you want to check that, I suggest using Process Explorer (from Microsoft/Sysinternals) to search for the handles holding the file. Probably the quickest way unless you have another tool.

                                  • 14. Re: Patch Catalog update error
                                    Steve Cupp

                                    Sorry for not mentioning that, we used that exact utility to find that.

                                    1 2 Previous Next