Astaro User Bulletin Board
Go Back   Astaro User Bulletin Board > Astaro Gateway Products > Hardware, Installation, Up2Date, Licensing

Welcome to the Astaro User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 09-26-2009, 06:09 PM
Junior Member
 
Join Date: Jun 2007
Posts: 2
Default Up2Date: Authentication failed, no valid answer from Authentication Servers

I need your help debugging the Up2date service for my Security Gateway v7.405. The Up2date has never worked since I stood up the system. I have the Security Gateway located between an outer router that connects to a DSL modem, and an inner router connected to my LAN. Here's my Management/Licensing/Overview

License information
Owner: YYYYYYYY
License ID: ******
Registration Date: 22 April 2007
Expiration Date: Never
Maximum concurrent connections: 1000
Maximum users: 10
Warranty period end date: 21 July 2007 (expired)

Maintenance
Level: None » Silver » Gold » Platinum » Platinum Plus
Start Date: 21 April 200
End Date: 22 April 2010

Subscriptions
Web Filtering: Licensed until 22 April 2010
IM/P2P Filtering: Licensed until 22 April 2010
Email Filtering: Licensed until 22 April 2010
Email Encryption: Licensed until 22 April 2010

I have enabled automatic firmware download and pattern installation, and have manually updated the firmware mutiple times in the past, but my patterns never update. It's still on pattern 7935.

From the Support/Tools/DNS Lookup I can successfully nslookup the up2date servers, but from Ping Check I cannot ping them even though I have checked Network-Security/Packet-Filter/ICMP/Ping-settings/Ping-from-Firewall. Is the ping necessary and is that a problem, as I can ping the up2date servers from my workstation? I see from Definitions/Services/Astaro-Up2Date service requires HTTP, HTTPS and Traceroute. And I can successfuly use Support/Tools/Traceroute to the Up2Date servers.

I have not made any manual modifications to the configuration files in /etc/up2date directory, but I see from the dates that some of the files have been updated today as I test.

So here's the output of audld.plx

/sbin/audld.plx --version
Astaro::Callstack 1.3 2007/01/15 16:36:47 agrosse
Astaro:: Datahash 1.7 2007/01/15 16:36:47 agrosse
Astaro::HaState 1.5.2.1.2.1 2008/12/08 21:24:31 mgehrlein
Astaro::Logdispatcher 1.15.2.1 2008/01/15 14:39:28 opolm
Astaro::Prettydump 1.3 2007/01/15 16:36:47 agrosse
Astaro::ProcessRunning 1.5.4.1 2008/04/22 13:05:17 agrosse
Astaro::Producttype 1.3.6.2 2009/04/30 17:22:01 agrosse
Astaro::Productversion 1.4 2007/01/15 16:36:47 agrosse
Astaro::Reporting::StdUnits 1.5.2.4.2.1 2008/04/22 07:20:44 cmoench
Astaro::Signal 1.1.2.3 2007/08/14 09:54:01 daniel
Astaro::Space 1.3 2007/01/15 16:36:47 agrosse
Astaro::Time::Bases 1.2 2007/01/15 16:36:48 agrosse
Astaro::Up2DateProgress 1.3.2.1.2.8 2009/01/29 09:57:34 hpfeiffer
Astaro::Up2DateStatus 1.12.4.3 2008/12/08 21:24:31 mgehrlein
Astaro::Versiontag 1.8 2007/01/15 16:36:47 agrosse
Astaro::file 1.18 2007/01/15 16:36:47 agrosse
Astaro::logging 1.47.2.2.4.4 2009/03/24 12:36:24 mgehrlein
Astaro::notifications 1.22 2007/01/15 16:36:47 agrosse
main 1.57.2.7.4.5 2009/04/30 17:21:06 agrosse


/sbin/audld.plx --level=d
Starting Up2Date Package Downloader (Version 1.57)

##################
2009-09-26 09:25:34.670 INFORMATIVE MESSAGE audld.plx[6046]: main::run:209()
| Starting Up2Date Package Downloader (Version 1.57)

##################
2009-09-26 09:25:34.682 DEBUG INFORMATION audld.plx[6046]: main::get_proxy_config:867()
| >> proxy configuration: $VAR1 = {
| 'status' => 0
| };

##################
2009-09-26 09:25:34.688 DEBUG INFORMATION audld.plx[6046]: main::run:250()
| proxy_config ={
| 'status' => 0
| }

##################
2009-09-26 09:25:34.692 DEBUG INFORMATION audld.plx[6046]: main::run:303()
| Selected update types: sys man-sw ips mpfc avira ohelp clam

##################
2009-09-26 09:25:35.210 DEBUG INFORMATION audld.plx[6046]: main:repare_server_list:446()
| sorted server list$VAR1 = [
| {
| 'name' => 'Server_2',
| 'Port' => '443',
| 'Host' => 'v7up2date2.astaro.com',
| 'Ip' => '213.144.15.5',
| 'Fallback_Ip' => '213.144.15.5'
| },
| {
| 'name' => 'Server_7',
| 'Port' => '443',
| 'Host' => 'v7up2date7.astaro.com',
| 'Ip' => '79.125.52.203',
| 'Fallback_Ip' => '79.125.52.203'
| },
cut off list to shorten posting
| ];

##################
2009-09-26 09:25:35.227 DEBUG INFORMATION audld.plx[6046]: main:repare_server_list:467()
| using the following servers: $VAR1 = [
| '213.144.15.5:443',
| '213.144.15.5:443',
| '79.125.52.203:443',
| '79.125.52.203:443',
| '218.213.238.229:443',
| '218.213.238.229:443',
| '75.101.226.191:443',
| '75.101.226.191:443',
| '128.121.10.115:443',
| '128.121.10.115:443',
| '128.242.114.243:443',
| '128.242.114.243:443',
| '213.198.93.249:443',
| '213.198.93.249:443'
| ];

##################
2009-09-26 09:25:35.229 DEBUG INFORMATION audld.plx[6046]: main::authenticate:487()
| >>>>>> START up2date authentication

##################
2009-09-26 09:25:35.231 DEBUG INFORMATION audld.plx[6046]: main::authenticate:492()
| GLOBALCONF={
| 'authserverlist' => '/etc/up2date/servers.sorted',
| 'gbaseworkdir' => '/var/up2date/',
| 'proxyconfigfile' => '/etc/up2date/proxy.conf'
| }

##################
2009-09-26 09:25:35.236 DEBUG INFORMATION audld.plx[6046]: Internal::Systemattributes::get:1640()
| Start fetching system attributes ...

##################
2009-09-26 09:25:36.562 DEBUG INFORMATION audld.plx[6046]: main::authenticate:540()
| Auth attribs:
| {
| 'build' => 'asg-7.103-080219-2.iso',
| 'ccc' => '78',
| 'hid' => '21e2da61c8b6422fd18eb000f6f1db8a',
| 'lid' => '121486',
| 'luips' => '10',
| 'oem' => '',
| 'patchup2date' => 1,
| 'pkg_avira' => '7555',
| 'pkg_clam' => '73852',
| 'pkg_ips' => '7119',
| 'pkg_man-sw' => '720',
| 'pkg_mpfc' => '71',
| 'pkg_ohelp' => '7172',
| 'pkg_sys' => '7405',
| 'product' => 'TM_GROMIT',
| 'uips' => 2,
| 'ver' => '7.405'
| }

##################
2009-09-26 09:25:36.565 DEBUG INFORMATION audld.plx[6046]: main::authenticate:550()
| authentication vars string: '&pkg_mpfc=71&pkg_ohelp=7172&pkg_ips=7119&uips=2&l uips=10&hid=21e2da61c8b6422fd18eb000f6f1db8a&pkg_a vira=7555&ver=7%2e405&oem=&pkg_sys=7405&lid=121486 &patchup2date=1&build=asg%2d7%2e103%2d080219%2d2%2 eiso&pkg_clam=73852&product=TM_GROMIT&ccc=78&pkg_m an-sw=720'
Authenticating ...

##################
2009-09-26 09:25:36.576 DEBUG INFORMATION audld.plx[6046]: Modules::Trad_Get_Filelist::contact:1478()
| outbound interface for '213.144.15.5' (213.144.15.5) : (255.255.255.255)

##################
2009-09-26 09:25:36.577 DEBUG INFORMATION audld.plx[6046]: Modules::Trad_Get_Filelist::contact:1490()
| Authentication request: https://213.144.15.5:443/authenticat...55.255.255.255

##################
2009-09-26 09:25:36.890 WARNING audld.plx[6046]: Modules::Trad_Get_Filelist::contact:1523()
| Could not connect to Authentication Server 213.144.15.5:443 (code=500).

##################
2009-09-26 09:25:36.903 DEBUG INFORMATION audld.plx[6046]: Modules::Trad_Get_Filelist::contact:1478()
| outbound interface for '213.144.15.5' (213.144.15.5) : (255.255.255.255)

##################
2009-09-26 09:25:36.906 DEBUG INFORMATION audld.plx[6046]: Modules::Trad_Get_Filelist::contact:1490()
| Authentication request: https://213.144.15.5:443/authenticat...55.255.255.255

##################
2009-09-26 09:25:36.915 WARNING audld.plx[6046]: Modules::Trad_Get_Filelist::contact:1523()
| Could not connect to Authentication Server 213.144.15.5:443 (code=500).

Above block repeats for 79.125.52.203, 218.213.238.229, 75.101.226.191, 128.121.10.115, 128.242.114.243, 213.198.93.249

##################
2009-09-26 09:25:37.215 AN ERROR OCCURED audld.plx[6046]: Modules::Trad_Get_Filelist::contact:1583()
| All 14 Authentication Servers failed
| '75.101.226.191:443' Code: '500'
| '213.144.15.5:443' Code: '500'
| '213.198.93.249:443' Code: '500'
| '128.121.10.115:443' Code: '500'
| '218.213.238.229:443' Code: '500'
| '128.242.114.243:443' Code: '500'
| '79.125.52.203:443' Code: '500'
Authentication failed, no valid answer from Authentication Servers

##################
2009-09-26 09:25:37.224 AN ERROR OCCURED audld.plx[6046]: main::alf:900()
| id="3703" severity="error" sys="system" sub="up2date" name="Authentication failed, no valid answer from Authentication Servers"
#

Thank you in advance for your assistance.

AstroTurf
Reply With Quote
  #2 (permalink)  
Old 10-05-2009, 01:47 PM
Junior Member
 
Join Date: Jul 2009
Posts: 11
Default

do you have some sort of ACLs on your "outer" network?
Reply With Quote
Reply

Tags
authentication, error, failed, server, up2date

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 03:17 AM.

 

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.


These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases. issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.