This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Error Check of update source failed due to unexpected error 'XML_ERROR_INVALID_TOKEN'.

Hello Sophos Community,

One of our SUMs started acting up the other day and is unable to update from Sophos. Looking at the logs I consistently see the following error: "    Error    Check of update source failed due to unexpected error 'XML_ERROR_INVALID_TOKEN'."

Any ideas on how to fix this?

Thanks!

:15539


This thread was automatically locked due to age.
  • Hello torpy,

    haven't seen this one - what else is near this line? Suspects are SUM_Status.xml and specialactions.xml - but I can't check right now. IIRC it's safe to delete these and I'd also empty warehouse and working - but that might not be needed if the sumtrace logs show a hint.

    Christian
    :15547
  • Hello Christian,

    Thanks for the quick reply. Yes, I have already deleted the SUM_Status.xml and specialactions.xml and that didn't seem to help. I have also emptyed the warehouse and working directories.

    Any other ideas on how to troubleshoot?

    :15553
  • No, but please post a few lines from the SUMTrace log. As only this SUM shows the error it's probably something local ... But who knows.

    Christian
    :15557
  • Here is the SUMTrace that details the error:

    2011-08-17 14:22:52 : Cmd-ALL << [I1021][CheckWarehouseAction-19797af3-6bdd-48f1-9cdd-1efe10e20717][] Action 'CheckWarehouseAction-19797af3-6bdd-48f1-9cdd-1efe10e20717' with caller '' started...
    2011-08-17 14:22:52 : Cmd-ALL << [E4010][19797af3-6bdd-48f1-9cdd-1efe10e20717][XML_ERROR_INVALID_TOKEN] Warehouse check failed: XML_ERROR_INVALID_TOKEN
    2011-08-17 14:22:52 : Cmd-ALL << [E400D][CheckWarehouseAction-19797af3-6bdd-48f1-9cdd-1efe10e20717][] Action 'CheckWarehouseAction-19797af3-6bdd-48f1-9cdd-1efe10e20717' with caller '' failed!
    2011-08-17 14:22:52 : Cmd-ALL << [E400E][] Event with dispatcher ID '' failed to execute.
    2011-08-17 14:22:52 : Cmd-ALL << [I1020][] All events with dispatcher ID '' complete.

    :15757
  • Hello torpy,

    you can force the CheckWarehouse by editing the source (View/Edit configuration->Tab Sources->Edit->[Password:] Change and then clicking Cancel). Normally you'll see a few lines in the log and that's it - so hard to say where it fails. I assume it is using config.xml - that's the last idea I have (for now). It is rewritten when you change the configuration (the previous version is renamed to config.xml ~) - you can force the rewrite by removing/re-adding a subscription (View/Edit configuration->Tab Subscriptions) - so actually not changing anything. Before doing so copy these two files and check them.

    Christian

    :15767
  • Got some new errors today. Are these saying that the subscription is bad?

    8/18/2011 9:38:13 AM    Error    Decoding of product release Sophos Update Manager version RECOMMENDED was not done because the synchronization failed.
    8/18/2011 9:38:13 AM    Error    Version information for product 'Sophos Update Manager' was not gathered by dispatcher 'DispatcherSupplements-2011-08-18T13-38-12-22', as the last synchronization of that product failed.
    8/18/2011 9:38:13 AM    Error    Version information for product 'Sophos Enterprise Console' was not gathered by dispatcher 'DispatcherSupplements-2011-08-18T13-38-12-22', as the last synchronization of that product failed.
    8/18/2011 9:38:13 AM    Error    Decoding of product release Sophos Anti-Virus for Mac OS X 10.4+ version RECOMMENDED was not done because the synchronization failed.
    8/18/2011 9:38:13 AM    Error    Version information for product 'Sophos Anti-Virus for Mac OS X 10.4+' was not gathered by dispatcher 'DispatcherSupplements-2011-08-18T13-38-12-22', as the last synchronization of that product failed.
    8/18/2011 9:38:13 AM    Error    Decoding of product release Windows Endpoint Security and Control version RECOMMENDED was not done because the synchronization failed.
    8/18/2011 9:38:13 AM    Error    Version information for product 'Windows Endpoint Security and Control' was not gathered by dispatcher 'DispatcherSupplements-2011-08-18T13-38-12-22', as the last synchronization of that product failed.
    8/18/2011 9:38:13 AM    Error    Synchronize operation failed when synchronizing the protection data for product release 'Windows Endpoint Security and Control'. Details: XML_ERROR_INVALID_TOKEN
    8/18/2011 9:38:13 AM    Error    Synchronize operation failed when synchronizing the protection data for product release 'Windows Endpoint Security and Control'. Details: XML_ERROR_INVALID_TOKEN

    :15789
  • Looks like also the "self update" fails - please check the SUM version reported to SEC. Where does this SUM update from? If the source is not Sophos only a subset of the Warehouse is available to a "child" and there might be incompatibilities. If this is the cause, the question is why this SUM is backlevel - as it is set to RECOMMENDED it should be current.

    Christian
    :15797