miércoles, 6 de abril de 2011
Patch management con SWA
Los parches para los equipos HP-UX se deben bajar de la web http://www.itrc.hp.com para ello deben dar de alta un user dentro de la misma pagina y vinclularlo con un contrato de soporte activo.
Instalacion de SWA
Bajar el soft de www.hp.com/go/swa-download la ultima version de swa actualmente es la C.02.85
Una que lo bajamos y copiamos al equipo procedemos a la instalacion
<root@test2:/tmp>swinstall -s /tmp/SwAssistant_C.02.85_HP-UX_B.11.23_IA_PA.depot
Luego de la instalacion verificamos el estado del producto
<root@test2:/tmp>swverify SWA
======= 03/30/11 10:24:11 SAT BEGIN swverify SESSION
(non-interactive) (jobid=test2-0038)
* Session started for user "root@test2".
* Beginning Selection
* Target connection succeeded for "test2:/".
* Software selections:
+ Jre15.JRE15,l=/opt/java1.5,r=1.5.0.19.00,a=HP-UX_B.11.11_32/64,v=HP,fr=1.5.0.19.00,fa=HP-UX_B.11.31_IA
+ Jre15.JRE15-COM,l=/opt/java1.5,r=1.5.0.19.00,a=HP-UX_B.11.11_32/64,v=HP,fr=1.5.0.19.00,fa=HP-UX_B.11.11_32/64
+ Jre15.JRE15-COM-DOC,l=/opt/java1.5,r=1.5.0.19.00,a=HP-UX_B.11.11_32/64,v=HP,fr=1.5.0.19.00,fa=HP-UX_B.11.11_32/64
+ Jre15.JRE15-IPF32,l=/opt/java1.5,r=1.5.0.19.00,a=HP-UX_B.11.11_32/64,v=HP,fr=1.5.0.19.00,fa=HP-UX_B.11.22_IA
+ Jre15.JRE15-IPF32-HS,l=/opt/java1.5,r=1.5.0.19.00,a=HP-UX_B.11.11_32/64,v=HP,fr=1.5.0.19.00,fa=HP-UX_B.11.22_IA
+ Jre15.JRE15-IPF64,l=/opt/java1.5,r=1.5.0.19.00,a=HP-UX_B.11.11_32/64,v=HP,fr=1.5.0.19.00,fa=HP-UX_B.11.22_IA
+ Jre15.JRE15-IPF64-HS,l=/opt/java1.5,r=1.5.0.19.00,a=HP-UX_B.11.11_32/64,v=HP,fr=1.5.0.19.00,fa=HP-UX_B.11.22_IA
+ Judy-lib.JUDY,l=/,r=B.11.31.04.18,a=HP-UX_B.11.31_IA/PA,v=HP,fr=B.11.31.04.18,fa=HP-UX_B.11.31_IA
+ Judy-lib.JUDY-COMMON,l=/,r=B.11.31.04.18,a=HP-UX_B.11.31_IA/PA,v=HP,fr=B.11.31.04.18,fa=HP-UX_B.11.31_IA/PA
SWA.SWA-JAR,l=/,r=C.02.85,a=HP-UX_B.11.23_IA/PA,v=HP,fr=C.02.85,fa=HP-UX_B.11.23_IA/PA
SWA.SWA-MX,l=/,r=C.02.85,a=HP-UX_B.11.23_IA/PA,v=HP,fr=C.02.85,fa=HP-UX_B.11.23_IA/PA
SWA.SWA-REPORT,l=/,r=C.02.85,a=HP-UX_B.11.23_IA/PA,v=HP,fr=C.02.85,fa=HP-UX_B.11.23_IA/PA
SWA.SWA-SH,l=/,r=C.02.85,a=HP-UX_B.11.23_IA/PA,v=HP,fr=C.02.85,fa=HP-UX_B.11.23_IA/PA
+ SwaMin.SWA-RUN,l=/,r=C.02.85,a=HP-UX_B.11.23_IA/PA,v=HP,fr=C.02.85,fa=HP-UX_B.11.23_IA
* A "+" indicates an automatic selection due to dependency or
the automatic selection of a patch or reference bundle.
* Selection succeeded.
* Beginning Analysis
* Session selections have been saved in the file
"/.sw/sessions/swverify.last".
* The analysis phase succeeded for "test2:/".
* Verification succeeded.
NOTE: More information may be found in the agent logfile using the
command "swjob -a log test2-0038 @ test2:/".
======= 03/30/11 10:24:24 SAT END swverify SESSION (non-interactive)
(jobid=test2-0038)
Luego de instalar y verificar el estado del SWA, vamos a configurarlo para eso copiaremos el archivo de template swa.conf.template a swa.conf y luego lo editaremos
<root@test2:/etc/opt/swa>cp swa.conf.template swa.conf
En este caso vamos hacer una configuracion sencilla mediante proxy para ello solo necesitaremos el ID y Passwd de itrc (asociados a un contrato de soporte) y por ultimo la configuracion del proxy
hp_id=<ITRC_User>
hp_pw=<ITRC_Passwd>
proxy=http://proxy_user:user_passwd@proxy:port
Las demas opciones por ahora las dejaremos con los valores default
Ahora tenemos la configuracion lista para correr el reporte inicial
<root@corona:/var/adm/crash/Patch>swa report
======= 03/30/11 15:04:59 SAT BEGIN Report on Issues and New Software
(user=root) (jobid=corona)
* Gathering Inventory
* Using existing inventory for host "corona"
* Getting Catalog of Recommended Actions and Software
* Using existing local catalog file
* Performing Analysis
* Generating Reports
NOTE: See HTML-formatted report "/.swa/report/swa_report.html"
Software Assistant
Action Report
Assessment Profile
Inventory Source
Name: corona
OS: HP-UX B.11.31
Model: 9000/800/rp4440
Inventory File: /.swa/cache/swa_inventory_1985086693.xml
Inventory Date: 30 March 2011 08:59:29 GMT-03:00
Catalog Information
Catalog File: /.swa/cache/swa_catalog.xml
Catalog Date: 29 March 2011 22:32:08 GMT-03:00
Analysis Information
Analysis File: /.swa/cache/swa_analysis.xml
Analysis Date: 30 March 2011 15:05:14 GMT-03:00
Ignore Files: /.swa/ignore
Issues Ignored: 0
Selected Analyzers
QPK: latest Quality Pack bundle
SEC: security bulletins
PCW: patches with critical warnings
Recommended Actions
Patch Bundles
The following bundles are recommended by HP. The patches delivered in these
patch bundles might include fixes for patches not listed in this report. If
you will not install the patch bundles listed here, rerun the
analysis without the "QPK" analyzer and generate a new report to obtain
a full list of patches.
Bundle Revision Description
------ -------- -----------
QPK1131 B.11.31.1103.361 Quality Pack Depot for 11i v3, March 2011
With bundle QPKAPPS revision B.11.31.1103.361
With bundle QPKBASE revision B.11.31.1103.361
Patches
See the Detail or HTML report for more links to patch details such as
special installation instructions, patch quality rating, patch reboot,
and other dependencies.
Patches followed by an asterisk (*) or a plus sign (+) meet a dependency
for one or more of the recommended patches listed.
* identifies a patch dependency missing from the system.
+ identifies a patch dependency already installed on the system or
satisfied by an installed superseding patch.
Patch ID Date Description
-------- ---- -----------
PHKL_40944 2010-06-22 fs_filedscrp cumulative patch
PHKL_41796 2011-02-17 VRTS 5.0 MP1P4 VRTSvxfs Kernel Patch
PHSS_41535 2010-10-15 Serviceguard A.11.19.00
PHSS_41556 2010-12-10 OV EMANATE15.3 PA-RISC Consolidated Patch 8
PHSS_41557 2010-12-10 OV EMANATE15.3 IA-64 Consolidated Patch 8
PHSS_41775 2011-01-07 KRB5-Client Version 1.3.5.03 Cumulative patch
Manual Actions
See the Detail or HTML report for more information on each action.
The following Detection Confidence (DC) levels are used:
D - Detection confidence is "definite" and based on specific revisions
of installed software.
R - Detection confidence is "relevant" and based on installed software
but can not determine if action has been taken.
U - Detection confidence is "unknown" and based only on operating
system version.
Issue DC Date Description
----- -- ---- -----------
02351r6 D 2010-12-15 For NameService, install revision C.9.3.2.8.0 or
subsequent
02411r1 D 2009-03-10 For Jdk15, install revision 1.5.0.21.00 or
subsequent
02411r1 D 2009-03-10 For Jdk60, install revision 1.6.0.09.00 or
subsequent
02411r1 D 2009-03-10 For Jre60, install revision 1.6.0.09.00 or
subsequent
02415r1 D 2009-04-07 For PAM-Kerberos, install revision D.01.25 or
subsequent
02418r1 D 2009-03-31 For openssl, install revision A.00.09.08q.003 or
subsequent
02429r2 D 2009-06-02 For Jdk14, install revision 1.4.2.26.00 or
subsequent
02429r2 D 2009-06-02 For Jre14, install revision 1.4.2.26.00 or
subsequent
02465r1 D 2009-10-22 For hpuxwsAPACHE, install revision B.2.0.63.01 or
subsequent
02479r1 D 2010-01-28 For CIFS-Server, install revision A.02.04.01 or
subsequent
02479r1 D 2010-01-28 For CIFS-CFSM, install revision A.02.03.05 or
subsequent
02509r1 D 2010-03-26 For NFS, install revision B.11.31.09 or subsequent
02525r1 D 2010-04-27 For SysMgmtDB, install revision C.06.00.00.00 or
subsequent
02541r1 D 2010-06-17 For hpuxwsTOMCAT, install revision B.5.5.29.01 or
subsequent
02332r2 R 2008-05-20 For hpuxwsAPACHE, restart Apache
02335r2 R 2008-05-27 For OS-Core, verify group id and home directory for
all accounts
02342r2 R 2008-06-23 For hpuxwsAPACHE, restart Apache
02351r6 R 2010-12-15 For NameService, remove "query-source port" and
"query-source-v6 port" options in /etc/named.conf.
02355r2 R 2009-11-02 For OS-Core, uRL http://itrc.hp.com
02355r2 R 2009-11-02 For ProgSupport, uRL http://itrc.hp.com
02365r1 R 2008-08-28 For hpuxwsAPACHE, restart Apache
02366r2 R 2009-05-08 For OS-Core, verify group id and home directory for
all accounts
02380r2 R 2008-11-10 For SysMgmtHomepage, install 2.2.9.1 or subsequent
02418r1 R 2009-03-31 For fips_1_1_2, install revision
FIPS-OPENSSL-1.1.2.048 or subsequent
02421r2 R 2009-10-01 For KRB5-Client, uRL http://itrc.hp.com
02435r1 R 2009-06-09 For fips_1_1_2, install revision
FIPS-OPENSSL-1.1.2.051 or subsequent
02440r1 R 2009-07-01 For NFS, install revision ONCplus B.11.31.07.01
02445r1 R 2009-07-29 For SG-Manager, install Serviceguard Manager
A.05.02 or subsequent
02445r1 R 2009-07-29 For SG-Manager-Addon, install Serviceguard Manager
A.05.02 or subsequent
02451r4 R 2010-12-16 For NameService, install
HPUX-NameServer_C.9.3.2.8.0_HP-UX_B.11.31_IA_PA.depot
02457r1 R 2009-09-22 For RBAC, uRL http://itrc.hp.com
02508r2 R 2010-04-21 For Sendmail, install C.8.13.3.5 or subsequent
02514r1 R 2010-03-27 For OS-Core, uRL http://itrc.hp.com
02514r1 R 2010-03-27 For ProgSupport, uRL http://itrc.hp.com
02520r1 R 2010-05-11 For SysMgmtServer, install Hot Fix Update Kit for
HP SIM 5.3 - HP-UX
02520r1 R 2010-05-11 For SysMgmtServer, install Hot Fix Update Kit for
HP SIM 6.0 - HP-UX
02523r2 R 2010-05-29 For NFS, install revision ONCplus B.11.31.09.01 or
subsequent
02543r1 R 2010-06-17 For hpuxwsAPACHE, hP-UX Web Server Suite v3.10
02544r1 R 2010-06-24 For KRB5-Client, uRL http://itrc.hp.com
02546r1 R 2010-09-16 For NameService, install C.9.3.2.8.0
02547r1 R 2010-07-12 For SysMgmtServer, update to HP SIM v6.1 or
subsequent
02590r1 R 2010-10-13 For SysMgmtServer, install the appropriate hotfix
02591r1 R 2010-10-18 For SysMgmtServer, install HP SIM v6.2 or
subsequent
02592r1 R 2010-10-18 For SysMgmtServer, install HP SIM v6.2 or
subsequent
02309r1 U 2008-02-06 Upgrade Select Identity software if in use.
02317r1 U 2008-04-01 Upgrade Select Identity software if in use.
02490r2 U 2010-04-02 Install SOAS_0017 or subsequent URL
http://support.openview.hp.com/selfsolve/patches
02490r2 U 2010-04-02 Install SOAS_0018 or subsequent URL
http://support.openview.hp.com/selfsolve/patches
02596r1 U 2010-10-18 If AssetManager is installed, apply the appropriate
patch
02627r1 U 2011-01-31 Apply the "5.41.002 piweb HF02" hotfix if HP
OpenView Performance Insight Server is installed
02633r1 U 2011-02-24 Update using FPUpdater if Java is installed
SEE ALSO
swa "issue", "detail", and "html" reports, swa-report(1m).
======= 03/30/11 15:05:17 SAT END Report on Issues and New Software
succeeded. (user=root) (jobid=corona)
NOTE: More information may be found in the Software Assistant logfile
"/var/opt/swa/swa.log".
<root@corona:/var/adm/crash/Patch>
luego hacemos el swa get -t <target_depot >
y por ultimo instalamos los parches con un swinstall interactivo
swinstall -s <full_path_to_target_depot>
Suscribirse a:
Enviar comentarios (Atom)
No hay comentarios:
Publicar un comentario