Child SUM not picking up all subscriptions from parent

Hello Alex,

so the source (in Configure update manager) is http://yourserver/SophosUpdate? I'm not sure though what you mean by but now the child can only see the OS X version (it doesn't use the CIDs but the Warehouse folder)? Is \CIDs\S000\SAVSCFXP\ on the child empty or doesn't exist at all? Are there any error messages? And when did it stop working?

Christian

I think it stopped working a day or two ago, I only noticed when we introduced some new Windows machines to the network and it failed because there was not a package available which could protect them.

On the child I have ESC0SX and SAVSCFXP folders both with recent content.  In fact it looks like existing machines are updating but new ones can't because it doesn't believe there is a package.  No error messages, just a missing subscription.

Sounds strange. Well, in SEC View->Bootstrap Locations ... - is the output correct? Like:

Software subscription	Location	Platforms	Version	Features
Recommended				
	\\Parent\SophosUpdate\CIDs\S000\SAVSCFXP	Windows 2000 and above	9.5.5.463	
	\\Parent\SophosUpdate\CIDs\S000\ESCOSX		MAC OS X 10.4+	7.2.5.1000	
	\\Child\SophosUpdate\CIDs\S000\SAVSCFXP		Windows 2000 and above	9.5.5.463
	\\Child\SophosUpdate\CIDs\S000\ESCOSX		MAC OS X 10.4+	7.2.5.1000	

because there was not a package available which could protect them

Were you using the Protect Computers wizard? If there were no messages - how did you find out that protection failed (and because of a missing subscription)? Or did the wizard tell you?

Christian

This isn't looking promising, if I do view->Bootstrap locations the console crashes with the following error...

.\SUMUtils.cpp(745) : Assertion failed (record.size() == 7) && L"Each record returned by the BootstrapDataProvider.GetData method must have 7 fields."
----- [outer exception] -----
   -- error: 0x80004005 (Unspecified error)
   -- facility: Generic (System)

   at 6
   at 3
   at 2
   at 1
   at class std::map<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,class std::vector<class std::vector<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,class std::allocator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > >,class std::allocator<class std::vector<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,class std::allocator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > > > >,struct std::less<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > >,class std::allocator<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const ,class std::vector<class std::vector<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,class std::allocator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > >,class std::allocator<class std::vector<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,class std::allocator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > > > > > > > __cdecl AL::GetBootstrapData(void)
   at 2
   at 1
   at long __stdcall BootstrapLocationsViewerData::Initialize(struct IUnknown *)
   at 3
   at 2
   at 1
   at __w64 long __thiscall CMainFrame::OnViewBootstrapLocations(unsigned short,unsigned short,struct HWND__ *,int &)
   at int __cdecl Run(int,enum bl::ConsoleType::Type)
   at int __stdcall wWinMain(struct HINSTANCE__ *,struct HINSTANCE__ *,wchar_t *,int)

----- [outer exception] -----
   -- error: 0x80004005 (Unspecified error)
   -- facility: Generic (System)

   at 3
   at 2
   at 1
   at class std::map<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,class std::vector<class std::vector<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,class std::allocator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > >,class std::allocator<class std::vector<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,class std::allocator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > > > >,struct std::less<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > >,class std::allocator<struct std::pair<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > const ,class std::vector<class std::vector<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,class std::allocator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > >,class std::allocator<class std::vector<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >,class std::allocator<class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> > > > > > > > > __cdecl AL::GetBootstrapData(void)
   at 2
   at 1
   at long __stdcall BootstrapLocationsViewerData::Initialize(struct IUnknown *)
   at 3
   at 2
   at 1
   at __w64 long __thiscall CMainFrame::OnViewBootstrapLocations(unsigned short,unsigned short,struct HWND__ *,int &)
   at int __cdecl Run(int,enum bl::ConsoleType::Type)
   at int __stdcall wWinMain(struct HINSTANCE__ *,struct HINSTANCE__ *,wchar_t *,int)

I used the wizard to attempt to protect the computer as the auto protect failed and that is when I got the error about the packages.

Ok, you've got me here. This is beyond my meager knowledge :smileywink:

Seriously - you should call Support with this information.

Christian

Thanks for your help so far, now opening a case!

Sophos are still looking into this for me.  Just looking at the updating policy it seems like it has lost some references for theWindows version.  See attached picture...

Don't want to forestall Support. Looks like the Warehouse became corrupt (which of course it shouldn't). The string you see is also the name of a folder in the warehouse. It contains an .xml file which lists the available versions of the product. If you view it it looks something like this:

- <version>
- <attributes>
  <md5 extent="x000">6ea4a5df3f17e279ce647fccea87d01c</md5> 
  </attributes>
  <rollOut version-id="9.5.5.463" majorRollOut="192" minorRollOut="5" updated="2011-03-01T15:42:25" /> 
  <md5 extent="x000">bb464273489e195d47221a2c6071dc6b</md5> 
  </version>

 The first md5 string refers to the attributes file (6ea4a5df3f17e279ce647fccea87d01cx000.xml) which contains among other attributes

- <Attribute name="EMLVersion">
  <Str1024>9.5.5 VDL4.63G</Str1024> 
  </Attribute>

 and

- <Attribute name="ReleaseTags">
- <ReleaseTag>
  <BaseVersion>9.5</BaseVersion> 
  <Tag>RECOMMENDED</Tag> 
  <Label>D43962A7-BC2A-4720-9C79-89239065D1DF</Label> 
  </ReleaseTag>
- <ReleaseTag>
  <BaseVersion>9</BaseVersion> 
  <Tag>RECOMMENDED</Tag> 
  <Label>822CDC34-081F-4D57-9106-D124C0DC2D46</Label> 
  </ReleaseTag>
  </Attribute>

Either something's missing or corrupt or there was an error writing the values to the database.

Of course I don't want to interfere with Support - but as this is a forum here's my idea: If it doesn't look like I described I'd give emptying the Warehouse a try. If you intend to do it please check with Support whether they feel it is ok to do so as it might destroy "evidence".

Christian

Thanks Christian, I will give support a while to come back to me first, if it takes too long I will try this.  Could just move it all, see what happens then move it back I guess if need be.

The Warehouse is "just" what SUM downloaded and SUM will go and download everything again if it's empty (BTW: just in case something's "stuck" there is more to delete - see here. But I'm lazy and as "Working" might contain path names of excessive length this means extra work which I try to avoid :smileywink:).

Christian