ayejax
Level 1 (0 points)

Q: SUS Updates all error with NSURLErrorDomain error -1100

Hi

My 10.8.1 server ran out of space for updates so I switched the storage to a different volume.  Then the NSURLErrorDomain error -1100 errors starated appearing.  Thinking it was a problem with my server I reinstalled it and upgraded to 10.8.2.  I also wiped the storage drive. So its a clean install. But I'm still getting these errors.  No downloads have completed in 3 days.

 

Its the same hardware, the same ip, the same switch, that were all working before the server ran out of disk space.

 

Any suggestions on what to try now greatfully accepted.

 

Cheers

Jacqui

iMac (27-inch Mid 2011), OS X Mountain Lion (10.8.2)

Posted on Oct 2, 2012 6:09 PM

Close
ayejax

Q: SUS Updates all error with NSURLErrorDomain error -1100

  • All replies
  • Helpful answers

  • by Linc Davis,

    Linc Davis Linc Davis Oct 2, 2012 8:00 PM in response to ayejax
    Level 10 (207,963 points)
    Applications
    Oct 2, 2012 8:00 PM in response to ayejax

    If you have more than one user account, these instructions must be carried out as an administrator.

    Launch the Console application in any of the following ways:

    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

    ☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

    ☞ Open LaunchPad. Click Utilities, then Console in the icon grid.

    Select "/var/log/install.log" from the file list. Post the messages from the last installation or update attempt, starting from the time when you initiated it. If you're not sure when that was, start over and note the time.

    Post the log text, please, not a screenshot. If there are runs of repeated messages, post only one example of each. Don’t post many repetitions of the same message.

    When posting a log extract, be selective. Don't post more than is requested.

    Please do not indiscriminately dump thousands of lines from the log into a message.

     

    Important: Some private information, such as your name, may appear in the log. Edit it out by search-and-replace in a text editor before posting.

  • by ayejax,

    ayejax ayejax Oct 3, 2012 2:13 PM in response to Linc Davis
    Level 1 (0 points)
    Oct 3, 2012 2:13 PM in response to Linc Davis

    Hi Linc

    Thanks for helping out.

     

    Here's what I found in /var/log/install.log from the last time I turned on Software Update Service

     

    Oct  3 04:50:42myserver.ac.nz UserEventAgent[15]: SUNotificationPlugin[uid=0]: trigger from periodic

    Oct  3 04:50:45myserver.ac.nz Software Update[1456]: SoftwareUpdateCheck: checking for updates

    Oct  3 04:50:45myserver.ac.nz Software Update[1456]: SoftwareUpdate: Scan for client pid 1456 (/System/Library/CoreServices/Software Update.app/Contents/Resources/SoftwareUpdateCheck)

    Oct  3 04:50:51myserver.ac.nz Software Update[1456]: SoftwareUpdate: Using catalog https://swscan.apple.com/content/catalogs/others/index-mountainlion-lion-snowleo pard-leopard.merged-1.sucatalog.gz

    Oct  3 04:50:51myserver.ac.nz Software Update[1456]: Can't load distribution from https://swdist.apple.com/content/downloads/57/46/061-7415/PX3rPH4M5WqP56KzVrQdLd zYMpbZNdMnCN/061-7415.English.dist.gz: Host cert invalid or otherwise insecure download

    +++++ message repeated with different items 384 times +++++

    Oct  3 04:50:55myserver.ac.nz Software Update[1456]: Can't load distribution from https://swdist.apple.com/content/downloads/40/42/041-5409/tKmNdYqpSKkrfTC8hC83GZ zR3YCpDs57Bq/041-5409.English.dist.gz: Host cert invalid or otherwise insecure download

    Oct  3 04:50:55myserver.ac.nz Software Update[1456]: Removing package source SUContentLocatorPackageSource from manager

    Oct  3 04:50:55myserver.ac.nz Software Update[1460]: Acquired Lock: 200, 1456, 100

    Oct  3 04:50:55myserver.ac.nz Software Update[1460]: Releasing Lock: 200, 1456, 100

    Oct  3 04:50:55myserver.ac.nz Software Update[1456]: SoftwareUpdate: one or more scan resources not loaded successfully; will not reset success date/entity

    Oct  3 04:50:55myserver.ac.nz Software Update[1456]: SoftwareUpdate: elapsed scan time = 10.2

    Oct  3 04:50:56myserver.ac.nz Software Update[1456]: SoftwareUpdateCheck: scan found 0 recommended products

    Oct  3 04:50:56myserver.ac.nz Software Update[1456]: SoftwareUpdate: 0 enabled config-data product(s):  (want active updates only)

    Oct  3 04:50:56myserver.ac.nz Software Update[1456]: SUCheckService: sending result 2 to peer

    Oct  3 04:50:56myserver.ac.nz UserEventAgent[15]: SUNotificationPlugin[uid=0]: check done with result SUCheckServiceResultUpToDate

    Oct  3 04:50:56myserver.ac.nz UserEventAgent[15]: SUNotificationPlugin[uid=0]: Not notifying appstoreupdateagent for user 0

    Oct  3 04:50:56myserver.ac.nz Software Update[1456]: SUCheckService: okay to stop (did timeout=0)

     

    Cheers

    Jacqui

  • by Linc Davis,

    Linc Davis Linc Davis Oct 3, 2012 6:07 PM in response to ayejax
    Level 10 (207,963 points)
    Applications
    Oct 3, 2012 6:07 PM in response to ayejax

    Please post a representative extract from each of these logs:

     

    /var/log/swupd/swupd_error_log

    /var/log/swupd/swupd_syncd_log

  • by ayejax,

    ayejax ayejax Oct 3, 2012 6:34 PM in response to Linc Davis
    Level 1 (0 points)
    Oct 3, 2012 6:34 PM in response to Linc Davis

    /var/log/swupd/swupd_error_log

    [Wed Oct 03 16:09:37 2012] [notice] mod_bw : Memory Allocated 32 bytes (each conf takes 32 bytes)

    [Wed Oct 03 16:09:37 2012] [notice] mod_bw : Version 0.8 - Initialized [1 Confs]

    [Wed Oct 03 16:09:37 2012] [notice] Apache/2.2.22 (Unix) configured -- resuming normal operations

    [Wed Oct 03 16:26:19 2012] [error] [client 130.217.217.5] Oct  3 16:26:19 myserver.ac.nz SoftwareUpdateServerGetCatalog[1024] <Debug>: REQUEST FOR CATALOG: /index-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog

    [Wed Oct 03 16:26:19 2012] [error] [client 130.217.217.5] Oct  3 16:26:19 myserver.ac.nz SoftwareUpdateServerGetCatalog[1024] <Debug>: HTTP HOST: myserver.ac.nz:8088

    [Wed Oct 03 16:26:19 2012] [error] [client 130.217.217.5] Oct  3 16:26:19 myserver.ac.nz SoftwareUpdateServerGetCatalog[1024] <Debug>: DOCUMENT ROOT: /Library/Server/Software Update/Data/html

    [Wed Oct 03 16:26:19 2012] [error] [client 130.217.217.5] Oct  3 16:26:19 myserver.ac.nz SoftwareUpdateServerGetCatalog[1024] <Debug>: LINES WRITTEN: 15

     

     

     

    /var/log/swupd/swupd_syncd_log

     

    Oct 3 16:09:38 myserver.ac.nz swupd_syncd[954] <Info>: ========== Sync Started ==========

    Oct 3 16:09:38 myserver.ac.nz swupd_syncd[954] <Info>: Checking service data location: /Library/Server/Software Update/Data/html

    Oct 3 16:09:38 myserver.ac.nz swupd_syncd[954] <Info>: Retrieving catalog list

    Oct 3 16:09:38 myserver.ac.nz swupd_syncd[954] <Info>: Retrieving deprecated udpates list

    Oct 3 16:09:39 myserver.ac.nz swupd_syncd[954] <Info>: Retrieving remote catalog (SECURE): index-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog

    Oct 3 16:09:44 myserver.ac.nz swupd_syncd[954] <Info>: Retrieving remote catalog (SECURE): index-lion-snowleopard-leopard.merged-1.sucatalog

    Oct 3 16:09:44 myserver.ac.nz swupd_syncd[954] <Info>: Retrieving remote catalog (SECURE): index-leopard-snowleopard.merged-1.sucatalog

    Oct 3 16:09:45 myserver.ac.nz swupd_syncd[954] <Info>: Updating local catalog: index-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog

    Oct 3 16:10:23 myserver.ac.nz swupd_syncd[954] <Info>: * Auto-copy (ALL) option is ON.  Applying option to eligible products.

    Oct 3 16:10:23 myserver.ac.nz swupd_syncd[954] <Info>: * Auto-enable option is OFF. No products were changed.

    Oct 3 16:10:23 myserver.ac.nz swupd_syncd[954] <Info>: * Manual mode - auto-download is ON, auto-enable option is OFF. Canceling pending enable requests only.

    Oct 3 16:10:23 myserver.ac.nz swupd_syncd[954] <Info>: Updating local catalog: index-lion-snowleopard-leopard.merged-1.sucatalog

    Oct 3 16:11:45 myserver.ac.nz swupd_syncd[954] <Info>: * Auto-copy (ALL) option is ON.  Applying option to eligible products.

    Oct 3 16:11:45 myserver.ac.nz swupd_syncd[954] <Info>: * Auto-enable option is OFF. No products were changed.

    Oct 3 16:11:45 myserver.ac.nz swupd_syncd[954] <Info>: * Manual mode - auto-download is ON, auto-enable option is OFF. Canceling pending enable requests only.

    Oct 3 16:11:45 myserver.ac.nz swupd_syncd[954] <Info>: Updating local catalog: index-leopard-snowleopard.merged-1.sucatalog

    Oct 3 16:12:54 myserver.ac.nz swupd_syncd[954] <Info>: * Auto-copy (ALL) option is ON.  Applying option to eligible products.

    Oct 3 16:12:54 myserver.ac.nz swupd_syncd[954] <Info>: * Auto-enable option is OFF. No products were changed.

    Oct 3 16:12:54 myserver.ac.nz swupd_syncd[954] <Info>: * Manual mode - auto-download is ON, auto-enable option is OFF. Canceling pending enable requests only.

    Oct 3 16:12:55 myserver.ac.nz swupd_syncd[954] <Info>: Updating product updates information

     

    The comes lots of these errors

    Oct 3 16:12:55 myserver.ac.nz swupd_syncd[954] <Warning>: *** Missing version string for product 041-4728

     

    Then comes lots of these errors

    Oct 3 16:13:01 myserver.ac.nz swupd_syncd[954] <Error>: Download for "041-7716.el.dist" failed (reason: The operation couldn’t be completed. (NSURLErrorDomain error -1100.))

     

    Which is where the discussion began.

     

    Once again, thanks for the help.

    Cheers

    Jacqui

  • by Linc Davis,

    Linc Davis Linc Davis Oct 3, 2012 7:16 PM in response to ayejax
    Level 10 (207,963 points)
    Applications
    Oct 3, 2012 7:16 PM in response to ayejax

    This appears to be a network problem. Do you connect to the Internet through a proxy server?

  • by ayejax,

    ayejax ayejax Oct 3, 2012 9:38 PM in response to Linc Davis
    Level 1 (0 points)
    Oct 3, 2012 9:38 PM in response to Linc Davis

    Hi

    Yes I am behind a proxy, however there are rules in place to allow exceptions for my ip address to access http://swscan.apple.com, http://swquery.apple.com, http://swcdn.apple.com, swdownload.apple.com.

     

    As I said up front, this whole thing started when my server ran out of space for updates.  It used to work just fine.

     

    If I use a browser from the server to access http://swscan.apple.com I get a Forbidden message from Apache Server at swdownload Port 80 so I'm getting out through the proxy ok.

     

    Cheers

    Jacqui

  • by Linc Davis,Helpful

    Linc Davis Linc Davis Oct 4, 2012 4:58 AM in response to ayejax
    Level 10 (207,963 points)
    Applications
    Oct 4, 2012 4:58 AM in response to ayejax

    The URL's that you made exceptions for (http:...) are not the ones SUS uses. It uses https:...

  • by ayejax,

    ayejax ayejax Oct 4, 2012 5:55 PM in response to Linc Davis
    Level 1 (0 points)
    Oct 4, 2012 5:55 PM in response to Linc Davis

    Hi

    I was mistaken in my response, the exceptions simply state the domain, not the protocol. So access to https was included. These exceptions were set up ages ago (circa 10.4) and I did check them again against http://support.apple.com/kb/HT3923?viewlocale=en_US, which has an update date of 25 July 2012 and does not mention https.

     

    However your query on the proxy settings did enable me to resolve the issue.

     

    This morning we granted unrestricted unauthorized proxy access to the update server and then monitored the locations that the server requested.  We found that SUS was connecting to swdist.apple.com and that downloads had commenced.

     

    We also found that while swquery exists, it does not accept connections, which my linux admin thinks may have contributed to the issue.

     

    We've reverted to a varient of the original acl's on the proxy server having deleting swquery and added swdist and downloads have commenced.

     

    Thanks for the assistance.

    Cheers

    Jacqui