Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 12173 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos AV - Linux 9.7.2 - can't install from CID - Failed to replicate from all update sources

boara

Hi,

the CID installation on a SUSE Server was successful. After the installation, the download of the virus pattern from sophos was successful.

but

to install the AV on other Linux Servers was not successful - I've created a savinstpkg.tgz file with all necessary informations inside. I do the installation according to the startup guide. I've started the installation with [root@servername sophos-av]# ./install.sh and following answer was showed:

[root@servername sophos-av]# ./install.sh
Downloading http://x.x.x.x/avupdate/savlinux/cidsync.upd
19393 bytes downloaded in 0.003340 secs (5.537693 MiB/s)
Failed to replicate from http://x.x.x.x/avupdate
Failed to replicate from all update sources
[root@servername sophos-av]#

config in apache:

Alias /avupdate "/xyz/xyz2/avupdate/"

<Directory "/xyz/xyz2/avupdate/">
Options Indexes MultiViews
AllowOverride None
Order allow,deny
Allow from all
</Directory>

Log entry in apache:

Access-log:

192.x.x.x - - [06/Mar/2015:03:48:56 +0100] "GET /avupdate/savlinux/cidsync.upd HTTP/1.1" 200 19393 "-" "<UA u=\"None\" c=\"servername\" a=\"savlinux\" v=\"9.7.2\"/>"

Error-log:

no entry

Following things struck me:

- a foldername with savlinux don't exist in a standard sophos installation (only sav-linux). After I create a second folder with savlinux - the installation process found the folder but this error messages was presented.

- I can browse with a browser the complete structure of /avupdate an all subfolders and can also download all files manually but with the install process with sophos it doesn't work. So I think it can't be a problem on the apache.

What do you mean? Thank's a lot for your input!

cheers,

Bo

:56160


This thread was automatically locked due to age.
  • 0

    The savlinux directory is added to handle certain cases with SEC managed CIDs. savupdate will try with and without /savupdate/ in the URL.

    How are you populating /xyz/xyz2/avupdate/ ?

    Running the mkinstpkg install.sh with -v5 --debug might tell us more about what is going wrong.

    What does: 

     wget x.x.x.x/.../sav.dat

    return?

    :56164
  • 0
    • How are you populating /xyz/xyz2/avupdate/ ?

    I work on apache2 with alias to the separated folders.
    /xyz/ is a separate partition on a harddisk (for example "www")

    /xyz2/ is the first subfolder for all hosted alias on apache2 (for example "infra")

    /avupdate/ folder for sophos AV

    Running the mkinstpkg install.sh with -v5 --debug might tell us more about what is going wrong.

    [root@servername sophos-av]# ./install.sh -v5 --debug
Update to include '*' priority 10
Update to exclude 'sav-*' priority 20
Update to exclude 'sdf.xml' priority 20
Update to include 'sav-linux/licence*' priority 30
Update to include 'sav-linux/manifest.dat' priority 30
Update to include 'sav-linux/manifest.spec' priority 30
Update to include 'sav-linux/cidsync.upd' priority 30
Update to include 'sav-linux/common/*' priority 30
Update to include 'sav-linux/x86/*' priority 30
Update to include 'uncdownload/*' priority 20
Update to exclude 'talpa/*' priority 20
Update to include 'talpa/talpa-srcpack.tar.gz' priority 30
Update to include 'talpa/manifest.dat' priority 30
Update to include 'talpa/cidsync.upd' priority 30
Update to include 'talpa/copying' priority 30
Update to include 'talpa/talpa-redhat/combined.tgz' priority 30
Update to include 'talpa/talpa-redhat/talpa-binpack-redhat-x86_64-3.10.0-123.el7.x86_64-1smpmonmay5111657edt2014.tar.gz' priority 30
Update to include 'talpa/talpa-redhat/talpa-binpack-redhat-x86_64-3.10.0-123.el7.x86_64.tar.gz' priority 30
Update to exclude 'sav-linux/x86/32/*' priority 40
Update to exclude 'uncdownload/32/*' priority 40
Updating from http://ipadress/infra/avupdate
Reading ipadress/.../cidsync.upd
Downloading ipadress/.../cidsync.upd
19393 bytes downloaded in 0.005172 secs (3.575900 MiB/s)
Reading /opt/sophos-av/update/cache/Primary/cidsync.upd
Replicating sub-package directory 'ipadress/.../savlinux':
Failed to replicate from http://ipadress/infra/avupdate
Exception recorded in /opt/sophos-av/tmp/savupdateException.log
Manifest missing from UPD
Failed to replicate from all update sources

    Enclose the details from /opt/sophos-av/tmp/savupdateException.log

    STR:Manifest missing from UPD
REPR:InvalidManifestData('Manifest missing from UPD',)
Traceback (most recent call last):
  File "Updater.py", line 139, in tryUpdate
  File "Updater.py", line 110, in update
  File "CidUpdater.py", line 171, in update
  File "CidUpdater.py", line 97, in updateFromExpectedLastElement
  File "CidUpdater.py", line 68, in updateFromCidsync
  File "CidUpdater.py", line 38, in updateFromCid
  File "CidSimple.py", line 130, in replicate
  File "CidSimple.py", line 92, in __verifyAgainstManifests
InvalidManifestData&colon; Manifest missing from UPD

    What does: 

     wget x.x.x.x/.../sav.dat

    Result with sav.dat

    servername:/tmp # wget ipadress/.../sav.dat
--2015-03-06 13:12:45--  ipadress/.../sav.dat
Connecting to ipadress:80... connected.
HTTP request sent, awaiting response... 404 Not Found
2015-03-06 13:12:45 ERROR 404: Not Found.

    Result with an existing file:

    servername:/tmp # wget ipadress/.../libSUL.so.0
--2015-03-06 13:14:59--  ipadress/.../libSUL.so.0
Connecting to ipadress:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 461016 (450K) [application/x-sharedlib]
Saving to: `libSUL.so.0'

100%[============================================================================================================================================>] 461,016     --.-K/s   in 0.002s

2015-03-06 13:14:59 (191 MB/s) - `libSUL.so.0' saved [461016/461016]

servername:/tmp #
    :56166
  • 0

    I'm afraid you haven't really answered my question:

    • How are you populating /xyz/xyz2/avupdate/ ?

    i.e. Where are you getting the files from? e.g. SEC/SUM

    I think you may have messed up the structure of the CID. 

    savlinux/x86/64/lib64/lib/SUL.so.0

    is not a valid path inside a SAV Linux install set. It should be sav-linux/x86/64/lib64/lib/SUL.so.0

    :56169