Start a Conversation

This post is more than 5 years old

Solved!

Go to Solution

1078

November 5th, 2014 11:00

Bash patch for AVE 7.1.x failing

I'm trying to download the bash (shellshock) patch and having no luck. I followed the instructions carefully and this is what I get. Any ideas? I tried the ftp server listed in the PDF and also my own local server with no luck.

admin@q0bk10em:/usr/local/avamar/src/bashpatch/>: sudo /usr/local/avamar/lib/admin/security/ftp_service

Temporarily open outbound FTP for 18000 seconds

admin@q0bk10em:/usr/local/avamar/src/bashpatch/>:

admin@q0bk10em:/usr/local/avamar/src/bashpatch/>: curl --disable-eprt -P `hostname -i`:35000-35010 -O ftp://anonymous@172.18.33.187/HF_202719.tgz

  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current

                                 Dload  Upload   Total   Spent    Left  Speed

  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0

curl: (30) socket failure: Success

admin@q0bk10em:/usr/local/avamar/src/bashpatch/>: curl --disable-eprt -P `hostname -i`:35000-35010 -O ftp://avamar_ftp:anonymous@ftp.avamar.com/software/hotfixes/202719/HF_202719.tgz

  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current

                                 Dload  Upload   Total   Spent    Left  Speed

  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0

curl: (30) socket failure: Success

Attached is the PDF I used.

1 Attachment

2 Intern

 • 

207 Posts

November 5th, 2014 16:00

Download the new version of proxycp.jar (v2.28) on the Utility Node and try again, just added the fix for this issue.

Regards

Amol Powar

2 Intern

 • 

2K Posts

November 5th, 2014 11:00

I'm going to follow up internally on this procedure as the specified syntax will not work if active FTP is blocked at the firewall which is a fairly common configuration. In the meantime, you can copy the tarball to the Avamar server using an scp or SFTP client and proceed from there.

Edit: After looking into this, I'm going to recommend following the instructions in Appendix B.

2 Intern

 • 

309 Posts

November 5th, 2014 13:00

Thanks. I was able to use SFTP to get the files over. Not quite out of the woods yet . I get this when trying to update the proxy.

root@q0bk10em:/usr/local/avamar/src/bashpatch/#: java -jar /usr/local/avamar/src/bashpatch/proxycp.jar --shellshock HF_202719.tgz
File doesn't exist
======================= Starting ProxyCP ==========================

Proxycp : v2.27
Date    : November 5, 2014 4:05:05 PM EST

COMMAND : java -jar proxycp.jar --shellshock HF_202719.tgz

VDP/Nemo Detected : false
------------------------------------------------------------------------------------
Nov 05, 2014 4:05:10 PM com.avamar.mc.security.registry.ProviderRegistryBasic register
INFO: Provider "JsafeJCE version 5.0" is registered at position 1
Vcenter                                 Proxy                         PowerState     Resolve        Avagent        Version
------------------------------------------------------------------------------------------------------------------------------------------------
qaem21ms.firm.jonesday.qa               qabk10em.firm.jonesday.qa     poweredOn      172.18.49.144  Not Running    7.1.100-370
------------------------------------------------------------------------------------------------------------------------------------------------
No Proxies found for patching.....Exiting

2 Intern

 • 

309 Posts

November 6th, 2014 08:00


That was it, thanks.

No Events found!

Top