SUS Updates all error with NSURLErrorDomain error -1100

Question

Level 1

0 points

SUS Updates all error with NSURLErrorDomain error -1100

Hi

My 10.8.1 server ran out of space for updates so I switched the storage to a different volume. Then the NSURLErrorDomain error -1100 errors starated appearing. Thinking it was a problem with my server I reinstalled it and upgraded to 10.8.2. I also wiped the storage drive. So its a clean install. But I'm still getting these errors. No downloads have completed in 3 days.

Its the same hardware, the same ip, the same switch, that were all working before the server ran out of disk space.

Any suggestions on what to try now greatfully accepted.

Cheers

Jacqui

iMac (27-inch Mid 2011), OS X Mountain Lion (10.8.2)

Posted on Oct 2, 2012 6:09 PM

Reply

Answer 1

Linc Davis

Level 10

209,547 points

Oct 2, 2012 8:00 PM in response to ayejax

If you have more than one user account, these instructions must be carried out as an administrator.

Launch the Console application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad. Click Utilities, then Console in the icon grid.

Select "/var/log/install.log" from the file list. Post the messages from the last installation or update attempt, starting from the time when you initiated it. If you're not sure when that was, start over and note the time.

Post the log text, please, not a screenshot. If there are runs of repeated messages, post only one example of each. Don’t post many repetitions of the same message.

When posting a log extract, be selective. Don't post more than is requested.

Please do not indiscriminately dump thousands of lines from the log into a message.

Important: Some private information, such as your name, may appear in the log. Edit it out by search-and-replace in a text editor before posting.

Reply

Answer 2

ayejax Author

Level 1

0 points

Oct 3, 2012 2:13 PM in response to Linc Davis

Hi Linc

Thanks for helping out.

Here's what I found in /var/log/install.log from the last time I turned on Software Update Service

Oct 3 04:50:42myserver.ac.nz UserEventAgent[15]: SUNotificationPlugin[uid=0]: trigger from periodic

Oct 3 04:50:45myserver.ac.nz Software Update[1456]: SoftwareUpdateCheck: checking for updates

Oct 3 04:50:45myserver.ac.nz Software Update[1456]: SoftwareUpdate: Scan for client pid 1456 (/System/Library/CoreServices/Software Update.app/Contents/Resources/SoftwareUpdateCheck)

Oct 3 04:50:51myserver.ac.nz Software Update[1456]: SoftwareUpdate: Using catalog https://swscan.apple.com/content/catalogs/others/index-mountainlion-lion-snowleo pard-leopard.merged-1.sucatalog.gz

Oct 3 04:50:51myserver.ac.nz Software Update[1456]: Can't load distribution from https://swdist.apple.com/content/downloads/57/46/061-7415/PX3rPH4M5WqP56KzVrQdLd zYMpbZNdMnCN/061-7415.English.dist.gz: Host cert invalid or otherwise insecure download

+++++ message repeated with different items 384 times +++++

Oct 3 04:50:55myserver.ac.nz Software Update[1456]: Can't load distribution from https://swdist.apple.com/content/downloads/40/42/041-5409/tKmNdYqpSKkrfTC8hC83GZ zR3YCpDs57Bq/041-5409.English.dist.gz: Host cert invalid or otherwise insecure download

Oct 3 04:50:55myserver.ac.nz Software Update[1456]: Removing package source SUContentLocatorPackageSource from manager

Oct 3 04:50:55myserver.ac.nz Software Update[1460]: Acquired Lock: 200, 1456, 100

Oct 3 04:50:55myserver.ac.nz Software Update[1460]: Releasing Lock: 200, 1456, 100

Oct 3 04:50:55myserver.ac.nz Software Update[1456]: SoftwareUpdate: one or more scan resources not loaded successfully; will not reset success date/entity

Oct 3 04:50:55myserver.ac.nz Software Update[1456]: SoftwareUpdate: elapsed scan time = 10.2

Oct 3 04:50:56myserver.ac.nz Software Update[1456]: SoftwareUpdateCheck: scan found 0 recommended products

Oct 3 04:50:56myserver.ac.nz Software Update[1456]: SoftwareUpdate: 0 enabled config-data product(s): (want active updates only)

Oct 3 04:50:56myserver.ac.nz Software Update[1456]: SUCheckService: sending result 2 to peer

Oct 3 04:50:56myserver.ac.nz UserEventAgent[15]: SUNotificationPlugin[uid=0]: check done with result SUCheckServiceResultUpToDate

Oct 3 04:50:56myserver.ac.nz UserEventAgent[15]: SUNotificationPlugin[uid=0]: Not notifying appstoreupdateagent for user 0

Oct 3 04:50:56myserver.ac.nz Software Update[1456]: SUCheckService: okay to stop (did timeout=0)

Cheers

Jacqui

Reply

Answer 3

Linc Davis

Level 10

209,547 points

Oct 3, 2012 6:07 PM in response to ayejax

Please post a representative extract from each of these logs:

/var/log/swupd/swupd_error_log

/var/log/swupd/swupd_syncd_log

Reply

Answer 4

ayejax Author

Level 1

0 points

Oct 3, 2012 6:34 PM in response to Linc Davis

/var/log/swupd/swupd_error_log

[Wed Oct 03 16:09:37 2012] [notice] mod_bw : Memory Allocated 32 bytes (each conf takes 32 bytes)

[Wed Oct 03 16:09:37 2012] [notice] mod_bw : Version 0.8 - Initialized [1 Confs]

[Wed Oct 03 16:09:37 2012] [notice] Apache/2.2.22 (Unix) configured -- resuming normal operations

[Wed Oct 03 16:26:19 2012] [error] [client 130.217.217.5] Oct 3 16:26:19 myserver.ac.nz SoftwareUpdateServerGetCatalog[1024] <Debug>: REQUEST FOR CATALOG: /index-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog

[Wed Oct 03 16:26:19 2012] [error] [client 130.217.217.5] Oct 3 16:26:19 myserver.ac.nz SoftwareUpdateServerGetCatalog[1024] <Debug>: HTTP HOST: myserver.ac.nz:8088

[Wed Oct 03 16:26:19 2012] [error] [client 130.217.217.5] Oct 3 16:26:19 myserver.ac.nz SoftwareUpdateServerGetCatalog[1024] <Debug>: DOCUMENT ROOT: /Library/Server/Software Update/Data/html

[Wed Oct 03 16:26:19 2012] [error] [client 130.217.217.5] Oct 3 16:26:19 myserver.ac.nz SoftwareUpdateServerGetCatalog[1024] <Debug>: LINES WRITTEN: 15

/var/log/swupd/swupd_syncd_log

Oct 3 16:09:38 myserver.ac.nz swupd_syncd[954] <Info>: ========== Sync Started ==========

Oct 3 16:09:38 myserver.ac.nz swupd_syncd[954] <Info>: Checking service data location: /Library/Server/Software Update/Data/html

Oct 3 16:09:38 myserver.ac.nz swupd_syncd[954] <Info>: Retrieving catalog list

Oct 3 16:09:38 myserver.ac.nz swupd_syncd[954] <Info>: Retrieving deprecated udpates list

Oct 3 16:09:39 myserver.ac.nz swupd_syncd[954] <Info>: Retrieving remote catalog (SECURE): index-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog

Oct 3 16:09:44 myserver.ac.nz swupd_syncd[954] <Info>: Retrieving remote catalog (SECURE): index-lion-snowleopard-leopard.merged-1.sucatalog

Oct 3 16:09:44 myserver.ac.nz swupd_syncd[954] <Info>: Retrieving remote catalog (SECURE): index-leopard-snowleopard.merged-1.sucatalog

Oct 3 16:09:45 myserver.ac.nz swupd_syncd[954] <Info>: Updating local catalog: index-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog

Oct 3 16:10:23 myserver.ac.nz swupd_syncd[954] <Info>: * Auto-copy (ALL) option is ON. Applying option to eligible products.

Oct 3 16:10:23 myserver.ac.nz swupd_syncd[954] <Info>: * Auto-enable option is OFF. No products were changed.

Oct 3 16:10:23 myserver.ac.nz swupd_syncd[954] <Info>: * Manual mode - auto-download is ON, auto-enable option is OFF. Canceling pending enable requests only.

Oct 3 16:10:23 myserver.ac.nz swupd_syncd[954] <Info>: Updating local catalog: index-lion-snowleopard-leopard.merged-1.sucatalog

Oct 3 16:11:45 myserver.ac.nz swupd_syncd[954] <Info>: * Auto-copy (ALL) option is ON. Applying option to eligible products.

Oct 3 16:11:45 myserver.ac.nz swupd_syncd[954] <Info>: * Auto-enable option is OFF. No products were changed.

Oct 3 16:11:45 myserver.ac.nz swupd_syncd[954] <Info>: * Manual mode - auto-download is ON, auto-enable option is OFF. Canceling pending enable requests only.

Oct 3 16:11:45 myserver.ac.nz swupd_syncd[954] <Info>: Updating local catalog: index-leopard-snowleopard.merged-1.sucatalog

Oct 3 16:12:54 myserver.ac.nz swupd_syncd[954] <Info>: * Auto-copy (ALL) option is ON. Applying option to eligible products.

Oct 3 16:12:54 myserver.ac.nz swupd_syncd[954] <Info>: * Auto-enable option is OFF. No products were changed.

Oct 3 16:12:54 myserver.ac.nz swupd_syncd[954] <Info>: * Manual mode - auto-download is ON, auto-enable option is OFF. Canceling pending enable requests only.

Oct 3 16:12:55 myserver.ac.nz swupd_syncd[954] <Info>: Updating product updates information

The comes lots of these errors

Oct 3 16:12:55 myserver.ac.nz swupd_syncd[954] <Warning>: *** Missing version string for product 041-4728

Then comes lots of these errors

Oct 3 16:13:01 myserver.ac.nz swupd_syncd[954] <Error>: Download for "041-7716.el.dist" failed (reason: The operation couldn’t be completed. (NSURLErrorDomain error -1100.))

Which is where the discussion began.

Once again, thanks for the help.

Cheers

Jacqui

Reply

Answer 5

Linc Davis

Level 10

209,547 points

Oct 3, 2012 7:16 PM in response to ayejax

This appears to be a network problem. Do you connect to the Internet through a proxy server?

Reply

Answer 6

ayejax Author

Level 1

0 points

Oct 3, 2012 9:38 PM in response to Linc Davis

Hi

Yes I am behind a proxy, however there are rules in place to allow exceptions for my ip address to access http://swscan.apple.com, http://swquery.apple.com, http://swcdn.apple.com, swdownload.apple.com.

As I said up front, this whole thing started when my server ran out of space for updates. It used to work just fine.

If I use a browser from the server to access http://swscan.apple.com I get a Forbidden message from Apache Server at swdownload Port 80 so I'm getting out through the proxy ok.

Cheers

Jacqui

Reply

Answer 7

Linc Davis

Level 10

209,547 points

Oct 4, 2012 4:58 AM in response to ayejax

The URL's that you made exceptions for (http:...) are not the ones SUS uses. It uses https:...

Reply

Answer 8

ayejax Author

Level 1

0 points

Oct 4, 2012 5:55 PM in response to Linc Davis

Hi

I was mistaken in my response, the exceptions simply state the domain, not the protocol. So access to https was included. These exceptions were set up ages ago (circa 10.4) and I did check them again against http://support.apple.com/kb/HT3923?viewlocale=en_US, which has an update date of 25 July 2012 and does not mention https.

However your query on the proxy settings did enable me to resolve the issue.

This morning we granted unrestricted unauthorized proxy access to the update server and then monitored the locations that the server requested. We found that SUS was connecting to swdist.apple.com and that downloads had commenced.

We also found that while swquery exists, it does not accept connections, which my linux admin thinks may have contributed to the issue.

We've reverted to a varient of the original acl's on the proxy server having deleting swquery and added swdist and downloads have commenced.

Thanks for the assistance.

Cheers

Jacqui

Reply