Use "proxy server" and "Fastpath" option

Shaun, 

another point that isn't clear for me in the admin guide..

We have one PUS in our HQ which is doing subscription updates and which
serves to schedule deployments and every other administrative task.

In every location where we have bigger offices and user counts we have
set up a "cache server" (patchlink distribution point).

At the moment we set our main PUS as PUS settting for the agent and we
use the "use proxy" option to set the "local" cache server. 

I think the fastpath server option is new...as we have many mobility
users..would it be better to use the fastpath server option and add all
availble cache servers to this list to give the agent the possibility to
always choose the closest cache server instead of using the proxy server
option? 

You know what I mean?  

Thanks,
Tobias


-- 
tobaste
------------------------------------------------------------------------



0
tobaste
6/18/2009 9:16:02 PM
novell.zenworks.patch 2914 articles. 0 followers. Follow

42 Replies
935 Views

Similar Articles

[PageSpeed] 18

Tobaste,

fastpath is relatively new, and we'd need to discuss your environment 
before I could answer your question...

-- 

Shaun Pond


0
Shaun
6/18/2009 11:06:03 PM
Hi guys,

I'm a relatively new ZPM admin and am trying to get everything up and
running. 

I'm running the ZPM server Version: 6.4.2.1549 and the XP zpm client
6.4.2.405.    Our network environment is a traditional "hub" and "spoke"
environment.  Home office with many remotes.    The ZPM server resides
at the center of the network and is configured for non-authenticated SSL
connections.   I've a "caching" proxies server (Apache) in each of the
remote locations.    The clients I've deployed have the patch management
server listed appropriately https://xxxx.xxx.xxx and the deployment
proxy agent set appropriately to the local cache server.   

All this works well and the clients register back and I'm able to push
updates.  The only problem occurs is when the proxy is down.   If I
enter a "fastpath" option in the global policy to point to the ZPM
server, will this allow the clients to function if the proxy is down?  
Additionally,  as the server is HTTPS://xxx.xxx.xxx  the policy only
lets me enter http://  and port 443.

Looking at the admin guide, I'm a little confused on how this is
supposed to work.    Is fastpath the answer, when the proxy is down?

Thanks,

Kev Baeten


-- 
dvc0692
------------------------------------------------------------------------
dvc0692's Profile: http://forums.novell.com/member.php?userid=604
View this thread: http://forums.novell.com/showthread.php?t=376976

0
dvc0692
9/29/2009 6:26:02 PM
Dvc0692,

with fastpath, the agent will periodically check all of the proxies in 
its list, to find which is the "closest". If one's down, I'm sure that 
counts as "far away" :)

-- 

Shaun Pond


0
Shaun
9/30/2009 8:24:27 AM
Shaun,

Thanks for your reply.  If I understand your response,  I can only have
a caching "proxy" server set up as a fastpath server.   I can't really
use the PLUS as the fastpath server?

I did create a second proxy server for "fastpath" testing.  But,  when
I pushed out the client I was receiving the following error.

Unable to get all manual proxy settings. [FastPath.cpp:375]

The fastpath server I created was in the global policy settings with 10
min interval.


-- 
dvc0692
------------------------------------------------------------------------
dvc0692's Profile: http://forums.novell.com/member.php?userid=604
View this thread: http://forums.novell.com/showthread.php?t=376976

0
dvc0692
9/30/2009 2:06:02 PM
Dvc0692,

> I can't really
> use the PLUS as the fastpath server?
>
the intention of fastpath servers is to offload work from the server - 
they are caching proxies, no more, no less.

-- 

Shaun Pond


0
Shaun
9/30/2009 2:44:07 PM
Yup,  that's what I figured.   Any thoughts on the error message when
the fastpath is enabled?



Unable to get all manual proxy settings. [FastPath.cpp:375]


-- 
dvc0692
------------------------------------------------------------------------
dvc0692's Profile: http://forums.novell.com/member.php?userid=604
View this thread: http://forums.novell.com/showthread.php?t=376976

0
dvc0692
9/30/2009 3:46:02 PM
Dvc0692,

there was a problem with inherited proxy settings, that I believe was 
fixed in 6.4 SP2 - what version are you running?

-- 

Shaun Pond


0
Shaun
9/30/2009 3:58:50 PM
We applied SP2..... How do you tell?   Here's whats in the Tech Support
Tab

Version:  6.4.2.1549  

Replication Service Version:  6.4.2.202


-- 
dvc0692
------------------------------------------------------------------------
dvc0692's Profile: http://forums.novell.com/member.php?userid=604
View this thread: http://forums.novell.com/showthread.php?t=376976

0
dvc0692
10/1/2009 1:56:02 PM
Please keep this thread going. I am also running 6.4 SP2 and seeing a
lot of event logs with:  *Unable to get all manual proxy settings.
[FastPath.cpp:375]*

I've reevaluated my policies so that they only list the local FastPath
server, but it hasn't stopped the event log warnings.


-- 
trkneller
------------------------------------------------------------------------
trkneller's Profile: http://forums.novell.com/member.php?userid=897
View this thread: http://forums.novell.com/showthread.php?t=376976

0
trkneller
10/7/2009 1:26:02 PM
Trkneller,

OK, I have opened ticket 091008-000018 with Lumension to get an answer

-- 

Shaun Pond


0
Shaun
10/8/2009 12:04:44 PM
Trkneller,

at what point did the message start to happen?

-- 

Shaun Pond


0
Shaun
10/9/2009 5:07:20 AM
Trkneller,

did you have manual proxy settings before applying fastpath?
HKEY_LOCAL_MACHINE\SOFTWARE\Patchlink.com\Gravitix\Agent\Configuration
Verify the values for bkpproxyname and proxyname are removed.

-- 

Shaun Pond


0
Shaun
10/9/2009 4:04:49 PM
spond;1869967 Wrote: 
> Trkneller,
> 
> did you have manual proxy settings before applying fastpath?
> HKEY_LOCAL_MACHINE\SOFTWARE\Patchlink.com\Gravitix\Agent\Configuration
> Verify the values for bkpproxyname and proxyname are removed.
> 
> --
> 
> Shaun Pond

I checked the registry and those keys are blank.


-- 
trkneller
------------------------------------------------------------------------
trkneller's Profile: http://forums.novell.com/member.php?userid=897
View this thread: http://forums.novell.com/showthread.php?t=376976

0
trkneller
10/9/2009 6:56:02 PM
spond;1869582 Wrote: 
> Trkneller,
> 
> at what point did the message start to happen?
> 
> --
> 
> Shaun Pond

Tough to say. We reimaged all the computers in August. About three
weeks ago I pushed out the agent using AMC (6.4.2.37). Since intalled,
the event log has had *Unable to get all manual proxy settings.
[FastPath.cpp:375]*. It is in the event log about every 15-minutes; my
patch agent communication interval.


-- 
trkneller
------------------------------------------------------------------------
trkneller's Profile: http://forums.novell.com/member.php?userid=897
View this thread: http://forums.novell.com/showthread.php?t=376976

0
trkneller
10/9/2009 7:16:02 PM
Trkneller,

thanks

-- 

Shaun Pond


0
Shaun
10/10/2009 8:45:09 AM
Trkneller,

can you send me an agent log (ideally set to debug) from one of the 
machines that is seeing this issue please?

-- 

Shaun Pond


0
Shaun
10/13/2009 2:09:57 AM
spond;1871046 Wrote: 
> Trkneller,
> 
> can you send me an agent log (ideally set to debug) from one of the
> machines that is seeing this issue please?
> 
> --
> 
> Shaun Pond

Shaun,
I've just changed the policy logging level to debug. I'll be gathering
some data and should have something for you tomorrow.

Thanks.


-- 
trkneller
------------------------------------------------------------------------
trkneller's Profile: http://forums.novell.com/member.php?userid=897
View this thread: http://forums.novell.com/showthread.php?t=376976

0
trkneller
10/13/2009 9:26:02 PM
Trkneller,

thanks

-- 

Shaun Pond


0
Shaun
10/14/2009 8:39:22 AM
spond;1871046 Wrote: 
> Trkneller,
> 
> can you send me an agent log (ideally set to debug) from one of the
> machines that is seeing this issue please?
> 
> --
> 
> Shaun Pond

I am attaching an agent log (debug mode enabled).


+----------------------------------------------------------------------+
|Filename: ZENworks Patch Management Agent.log                         |
|Download: http://forums.novell.com/attachment.php?attachmentid=3466   |
+----------------------------------------------------------------------+

-- 
trkneller
------------------------------------------------------------------------
trkneller's Profile: http://forums.novell.com/member.php?userid=897
View this thread: http://forums.novell.com/showthread.php?t=376976

0
trkneller
10/14/2009 1:26:01 PM
Trkneller,

great - thanks, adding that to the ticket

-- 

Shaun Pond


0
Shaun
10/14/2009 2:15:55 PM
Trkneller,

I'm having trouble getting them to understand why this is being seen as 
a problem :( Can you export the patchlink.com hive form the registry of 
one of the machines showing the problem? Send it to spond at novell dot 
com because it contains your serial number :)

-- 

Shaun Pond


0
Shaun
10/15/2009 10:07:09 AM
Trkneller,

I have your file, thanks - hopefully this will trigger something

-- 

Shaun Pond


0
Shaun
10/15/2009 2:35:01 PM
Trkneller,

what they tell me is:
Per this registry, no proxy has been configured. It is getting the fast path policy though. Here's an anomaly of sorts.
The last log file you sent, showed this
Proxy configuration is changing to "isms-win.wccs.lan:90". [FastPath.cpp:257]

However, in the registry the fast path information its getting is showing this
FastPathRoutes"="patchlink.wccs.lan,80,patchlink,ZJ8cQ4W5f+xsIkwBB1PAuX3jVJeKww==;"

Then i noticed that the PLUS server name appears to be the same
http://patchlink.wccs.lan/ 
So they are configuring the plus server to be one of their fast path servers, and they are configuring it to be authenticated.
Configuring the PLUS server to be the fast path server, is not ideal, since it can be set to the proxy more often than not. But either way, there would be  no need to put a username and password in for it. Thats probably causing the issue.

I would have the customer set fast path to use a single, actual proxy.  Set the fast path interval to like 2 minutes for the policy so it refreshes sooner. Hope this helps.

-- 

Shaun Pond


0
Shaun
10/15/2009 4:07:06 PM
spond;1873057 Wrote: 
> Trkneller,
> 
> what they tell me is:
> Per this registry, no proxy has been configured. It is getting the fast
> path policy though. Here's an anomaly of sorts.
> The last log file you sent, showed this
> Proxy configuration is changing to "isms-win.wccs.lan:90".
> [FastPath.cpp:257]
> 
> However, in the registry the fast path information its getting is
> showing this
> FastPathRoutes"="patchlink.wccs.lan,80,patchlink,ZJ8cQ4W5f+xsIkwBB1PAuX3jVJeKww==;"
> 
> Then i noticed that the PLUS server name appears to be the same
> http://patchlink.wccs.lan/
> So they are configuring the plus server to be one of their fast path
> servers, and they are configuring it to be authenticated.
> Configuring the PLUS server to be the fast path server, is not ideal,
> since it can be set to the proxy more often than not. But either way,
> there would be  no need to put a username and password in for it. Thats
> probably causing the issue.
> 
> I would have the customer set fast path to use a single, actual proxy. 
> Set the fast path interval to like 2 minutes for the policy so it
> refreshes sooner. Hope this helps.
> 
> --
> 
> Shaun Pond


Ok, I took the PLUS server out of all my policies FastPath routes; I
didn't realize that was a bad idea. I only have the local cache server
as a FastPath option, at this time.

I changed the refresh interval to 2-minutes, also. 

I checked a client machine and it picked up the change in proxy, but it
retained the authentication mode. I manually de-selcted authenticated
mode, but how can I change that remotely on all clients?

I initially pushed these agents using the AMC. What sets the proxy
configuration and tells the agent to use authenticated mode?


-- 
trkneller
------------------------------------------------------------------------
trkneller's Profile: http://forums.novell.com/member.php?userid=897
View this thread: http://forums.novell.com/showthread.php?t=376976

0
trkneller
10/19/2009 6:06:02 PM
Ok, I thought I had removed the use authenticated setting in the policy
already. I didn't. I couldn't figure where that was coming from, but I
see I hadn't removed it yet.

It'll take a little time to see if this has resolved the *Unable to get
all manual proxy settings. [FastPath.cpp:375]* issue I was seeing.


-- 
trkneller
------------------------------------------------------------------------
trkneller's Profile: http://forums.novell.com/member.php?userid=897
View this thread: http://forums.novell.com/showthread.php?t=376976

0
trkneller
10/19/2009 6:16:01 PM
Trkneller,

OK, please let me know... :)

-- 

Shaun Pond


0
Shaun
10/20/2009 6:38:15 AM
spond;1874943 Wrote: 
> Trkneller,
> 
> OK, please let me know... :)
> 
> --
> 
> Shaun Pond

I've checked a few PCs and I see that they have picked up the changes.
No authentication is required and the proxy is set to the local cache
server. Still, I am seeing many (every 2-minutes per the refresh rate in
the policy) the message:  *Unable to get all manual proxy settings.
[FastPath.cpp:375]*


How can I validate that my cache server is functioning properly?


-- 
trkneller
------------------------------------------------------------------------
trkneller's Profile: http://forums.novell.com/member.php?userid=897
View this thread: http://forums.novell.com/showthread.php?t=376976

0
trkneller
10/20/2009 4:36:02 PM
Trkneller,

simplest way is to set your internet options to use that box as the 
proxy, and just browse the internet. I will pass this back to 
Lumension, can you send me the same data as before please?

-- 

Shaun Pond


0
Shaun
10/21/2009 6:54:54 AM
Trkneller,

Lumension would like to set up a webex session to look at this if 
that's OK. Timings next week go screwy because we finish daylight 
saving time this weekend... and Lumension are in Arizona, which of 
course does not use DST!
So for timezones, I will be in GMT next week, are you in EDT or CDT? 
Lumension are in MST...

-- 

Shaun Pond


0
Shaun
10/23/2009 3:13:00 PM
spond;1877444 Wrote: 
> Trkneller,
> 
> Lumension would like to set up a webex session to look at this if
> that's OK. Timings next week go screwy because we finish daylight
> saving time this weekend... and Lumension are in Arizona, which of
> course does not use DST!
> So for timezones, I will be in GMT next week, are you in EDT or CDT?
> Lumension are in MST...
> 
> --
> 
> Shaun Pond

Shaun,

I am here 7AM - 4PM EDT, but Tuesday through Friday next week I will be
in Denver for a conference.


-- 
trkneller
------------------------------------------------------------------------
trkneller's Profile: http://forums.novell.com/member.php?userid=897
View this thread: http://forums.novell.com/showthread.php?t=376976

0
trkneller
10/23/2009 4:56:02 PM
Trkneller,

don't know if I can get it organized for Monday - will it wait until 
the week after?

-- 

Shaun Pond


0
Shaun
10/23/2009 5:10:36 PM
Trkneller,

also:
On one of the machines getting the fast path error- In the registry
HKEY_LOCAL_MACHINE\SOFTWARE\Patchlink.com\Gravitix\Agent\Configuration
Set proxybypass to 'False'

-- 

Shaun Pond


0
Shaun
10/24/2009 4:53:01 AM
spond;1877546 Wrote: 
> Trkneller,
> 
> don't know if I can get it organized for Monday - will it wait until
> the week after?
> 
> --
> 
> Shaun Pond

Yes, that would be fine.


-- 
trkneller
------------------------------------------------------------------------
trkneller's Profile: http://forums.novell.com/member.php?userid=897
View this thread: http://forums.novell.com/showthread.php?t=376976

0
trkneller
10/26/2009 11:26:01 AM
spond;1877805 Wrote: 
> Trkneller,
> 
> also:
> On one of the machines getting the fast path error- In the registry
> HKEY_LOCAL_MACHINE\SOFTWARE\Patchlink.com\Gravitix\Agent\Configuration
> Set proxybypass to 'False'
> 
> --
> 
> Shaun Pond

I have made the change. Waiting for results.


-- 
trkneller
------------------------------------------------------------------------
trkneller's Profile: http://forums.novell.com/member.php?userid=897
View this thread: http://forums.novell.com/showthread.php?t=376976

0
trkneller
10/26/2009 11:36:01 AM
Trkneller,

OK, I don't see this as a solution, but it will be interesting

-- 

Shaun Pond


0
Shaun
10/26/2009 2:26:28 PM
spond;1878290 Wrote: 
> Trkneller,
> 
> OK, I don't see this as a solution, but it will be interesting
> 
> --
> 
> Shaun Pond

I think you were correct. I am still seeing the cpp: 375 message in the
event logs on the test pc.


-- 
trkneller
------------------------------------------------------------------------
trkneller's Profile: http://forums.novell.com/member.php?userid=897
View this thread: http://forums.novell.com/showthread.php?t=376976

0
trkneller
10/28/2009 5:46:01 PM
Trkneller,

thanks - will report back to Lumension with this. Let's set up a webex 
session for next week - email me with your contacts details and 
availability and we'll sort something. spond at novell dot com

-- 

Shaun Pond


0
Shaun
10/29/2009 8:03:52 AM
Trkneller,

Lumension have asked as a last check: please can you make sure that the 
agent logging level is set to debug, and send me an agent log from an 
affected PC?

-- 

Shaun Pond


0
Shaun
10/30/2009 8:40:31 AM
Trkneller,

just a heads-up: I finally (having lost 3 days to rebuilding my 
machine) have got round to testing their proposed solution, and on my 
machine it does not work: the messages stop, but so does everything 
else, once you do a deployment.

-- 

Shaun Pond


0
Shaun
11/12/2009 12:20:41 PM
spond;1887762 Wrote: 
> Trkneller,
> 
> just a heads-up: I finally (having lost 3 days to rebuilding my
> machine) have got round to testing their proposed solution, and on my
> machine it does not work: the messages stop, but so does everything
> else, once you do a deployment.
> 
> --
> 
> Shaun Pond

I understand and will wait patiently.


-- 
trkneller
------------------------------------------------------------------------
trkneller's Profile: http://forums.novell.com/member.php?userid=897
View this thread: http://forums.novell.com/showthread.php?t=376976

0
trkneller
11/17/2009 1:16:02 PM
Trkneller,

caught up in preparing the next set of ZEN7 patches for release... I 
hope tomorrow will be less frantic...

-- 

Shaun Pond


0
Shaun
11/17/2009 1:49:41 PM
Tobaste,

for everyone in this thread: I have just published TID 7004932 for this 
issue.

-- 

Shaun Pond


0
Shaun
11/25/2009 12:39:35 PM
Reply:

Web resources about - Use "proxy server" and "Fastpath" option - novell.zenworks.patch

Resources last updated: 12/1/2015 4:07:50 AM