Release notes > Fixed defects

Fixed defects

Server Automation10.50 fixes the defects listed in the table below. The table includes all defects that were fixed after the release of Server Automation 10.22.

The issues are listed first by subsystem, then numerically within each subsystem.

Feature Description Platform Fixed in version
AGENT  
Faster SA Agent Installation For information on the Agent Upgrade tool, on installing the agent, and on bringing servers under SA management, see the SA User Guide: Server Automation    
SA Agent Installer      
QCCR1D132960 Last Logoff Time is not set when users log out of Windows. Windows 10.50
QCCR1D191450 All future peval commands fail because of a corrupt persisto file.   10.50
QCCR1D191459 Presence of libeay32.dll interferes with agent functionality. Windows 10.50
QCCR1D193224 Running a communication test fails when more than 100 servers are selected (reachable and unreachable).   10.50
QCCR1D194086 Windows watchdog value should be parameterized. Windows 10.50
QCCR1D194543 The shadowbot does not make a reverse DNS call to log the hostname of the client. Linux 10.50
QCCR1D201693 ADT becomes root and does not properly set the sudo algorithm. Linux 10.50
QCCR1D205450 Agent startup fails on Windows Domain Controllers. Windows 10.50
QCCR1D210057 Agents can no longer communicate with the core due to SSLError: disabled for FIPS.    
QCCR1D210421 During software registration on a Solaris managed server, the following error message appears: unable to extract installed package list: 32512. Solaris 10.50
QCCR1D210428 Agent installation takes a long time when /etc/hosts has many lines.   10.50
QCCR1D210440 The package.dbg is increasing in size uncontrollably. HP-UX 10.50
QCCR1D213522 Spoke spawned sub processes do not terminate on timeout. Linux 10.50
QCCR1D214282 During hardware registration, the device UUID is set to "None". Windows 10.50
QCCR1D215121 OGFS uapi method invocation ignores a false boolean value. AIX 10.50
QCCR1D216891 The shadowbot can return invalid characters in the HTTP status line for error responses. Linux 10.50
QCCR1D218438 An error message MaxMessageSizeExceededException appears repeatedly in hub.log. Linux 10.50
QCCR1D224326 shell_rdp_handler.py should connect only to RDP-speaking Terminal Services. Linux 10.50
QCCR1D214282 During hardware registration, the device UUID value is set to 'None'. Windows 10.23
193194 SA does not support importing users with /home path directory. Solaris 10.22
194086/194087 Windows watchdog value should be parameterized. Windows 10.22
195034/195038 Unicode characters outside the ASCII codeset from server scripts are replaced with "?" (question marks) AIX 10.22
201693/203269 ADT becomes root does not properly set the sudo algorithm Linux 10.22
205450/205455 Agent startup failure on Windows Domain Controllers    
209632/209636 ptymonitor's debug_name should be configurable in agent.args and ptymonitor.debug_name, and ptymonitor.nopam should be exposed to users via agent.args. Independent 10.22
210057/210133 Attempt to upgrade to latest agent (ex 60.0.62417.1) fails and agent.err log reports below error. Run bs_hardware on the managed server also fails with the same error. -----Unexpected Error----- Traceback (most recent call last): File ".\bs_hardware.py", line 978, in blockingmainThread File ".\bs_hardware.py", line 872, in blockingmain SSLError: disabled for fips The issue only occurs on upgraded SA environment. Upgrade agent completes successfully on fresh install SA 10.20 and SA 10.21 environment.   10.22
210421/210425 Solaris 10 'unable to extract installed package list: 32512' error during software registration. Solaris 10.22
210428/210709 Agent installation takes a long time when /etc/hosts has many lines. Independent 10.22
210440/210443 package.dbg is increasing in size uncontrollably. HP-UX 10.22
AUDIT, COMPLIANCE AND REMEDIATION  
193457 C "Remediate all" preparation takes a long time on audits with many devices. Linux 10.50

194053 C

Exceptions are deleted from the audit when promoting changes on the Audit Policy. Linux 10.50
'Remediate All' preparation takes a long time for audit with a large number of non-compliant target servers. Linux 10.50
194053/194273 Exceptions are deleted from the Audit when promote changes on the Audit Policy. Linux 10.22
202175/202177 Failed to take registry snapshot on Chinese Windows. UnicodeEncodeError: 'cp950' Linux 10.22
214650/214651 Audit & Compliance reports are not saved correctly in Unicode format. Independent 10.22
APX  
162834 C OS BP fails and displays the error message: Failed to inject required settings.[Errno 2] No such file or directory: '/tmp/osbp_info/media_server'.   10.50
187113 C 'BRDC SA agent sanitizer' APX blocks VMware customization specs.   10.50
209759 "Change user passwords for selected servers" fails to change the password when the UNIX server has a locale with chars set outside the ASCII. Linux 10.50
209759/210208 "Change user passwords for selected servers" fails to change the password when the UNIX server has a locale with chars outside the ASCII set. Linux 10.22
BUILD 10.50
191698 zip231 binary in agent hotfix causes various agent failures.   10.50
CPE  
192139 C Running a script against a device group containing a server managed by v12n and a deactivated agent fails.   10.50
193042 Installer does not calculate the necessary free disk space for DB export correctly when adding a new core to a mesh. Linux 10.50
193649 C Agent does not work properly when the code page cp28605 is set on managed Windows platform.   10.50
193663 C rhn_import fails with the error "httperror_seek_wrapper: HTTP Error 403: Forbidden".   10.50
194419 C Agent init.d script fails to run on AIX when /etc/environment contains a variable declaration that already exists and is read-only. AIX 10.50
194406 C ptymonitor crash issue occurs when running /opt/opsware/agent/pylibs/cog/bs_software due to a missing PATH env var. Linux 10.50
202175 C Failed to take registry snapshot on Chinese Windows. UnicodeEncodeError: 'cp950' Linux 10.50
215471 C Permission Denied error appears when running audits against servers that are attached to customers imported with cbt. Linux 10.50
215547 C opswgw.HijackService is broken because of IPv6 support. Linux 10.50
215606 C NGUI Job Logs: Failed jobs are listed when Status = "succeeded" is selected.   10.50
218522 C Waybot command proxy failover is broken for all versions of SA that use python 2.7. Linux 10.50
218594 C Spinclient masks OPLET response is returned if it is not an XMLRPC response. Linux 10.50
224581 C SLES remediation with Zypper may choose an older kernel for installation. Linux 10.50
DEPLOYABILITY  
206362 Catch-all exception handler in update_sw_policy.py obscures deeper exceptions.   10.50
189986 hpsa_add_dc_to_mesh.sh is not working correctly with a remote DB running on Solaris 10 server. Linux 10.50
192413 C How to keep SSL from using particular ciphers Port: 5678 HPESA vaultdaemon.   10.50
190859 C Giving custom realm_name to a sat [different from facility name] breaks the functionality.   10.50
183786 C Tnsnames.ora should not be created or changed on the remote DB. Linux 10.50
190924 C SA upgrade to SA 10.10 fails with database connection error for opsware_admin user. Linux 10.50
191024 C Documentation states that libxml2-python must be removed during installation.   10.50
194905 Installer fails when there are two dmp files to import. Linux 10.50
201846 Adding a separate slice prompts for a truth dump archive when it should not. Linux 10.50
204765 NGOI: InstallSAS state dpdump directory search/check never fails.   10.50
205370 Upgrade process fails when smb service is disabled in a startup script.   10.50
110791 C Feature to delete a facility in SA.   10.50
215597 Installer does not perform DB prereq checks when it warns the user that their DB version is not supported.   10.50
209202 The SA uninstaller script: “hpsa_uninstall.sh” has been removed and replaced with the script: “uninstall_opsware.sh”. Use the "uninstall_opsware.sh" script for SA installation procedures. Independent 10.22
INFRASTRUCTURE-CORE  
208105 C Spin software registration logging is too verbose; causes performance bottleneck.    
195146 When connecting to one server, followed by a second, the authentication performed on the second connect uses the authentication from the previous connection.   10.50
194985 C SA OpenSSL vulnerability - CVE-2014-3571. Linux 10.50
209890 C spin:1004 load balancing rule should be not be set to STICKY.   10.50
221170 There is reip.sh functionality difference between 9.x and 10.x. Hence, you cannot rename the functionality without changing the IP. Linux 10.50
203725 C RSA <SecurIDAuthenticator> unable to load ./libsecuridwrapper.so.   10.50
JBOSS MIGRATION  
192921 SA upgrade process fails intermittently with an ArrayIndexOutOfBoundsException in the oracle.jdbc.driver.DynamicByteArray class. RHEL 10.50
OS PROVISIONING  
221199 C ProLiant Scripting Toolkit for Linux x64 - 2015.06.0 is using an old version of the Toolkit. Linux 10.50
192472 C Upgrade fails as the item is already available in the library. Linux 10.50
193783 C OS Build Plan fails reboot on satellite facility.   10.50
194888 SA Client does not allow "." in a Kickstart file.   10.50
202061 C OSSequenceService.configureAutomaticProvisioningRule API is not scalable.   10.50
207208 C OSBP disables security logging during build. Linux 10.50
207496 C Server boots into unprovisioned servers pool with incorrect NIC information.   10.50
208369 C MBC hostname changes to the default value after hardware registration.   10.50
208875 C RHEL 7 OS Provisioning fails when the custom kickstart config file contains lines that begin with the percent (%) character.   10.50
210046 C Conrep fails to save hardware configuration when provisioning ProLiant Gen9 servers. Linux 10.50
212959 OSBP does not prompt for the server to be assigned to a customer. Linux 10.50
215444 C MBC fails when attempting to provision a server. Linux 10.50
217645 C RedHat7 provisioning fails when % post script contains % the include statement. Linux 10.50
218931 C OSBP - A connection to the agent cannot be established. Linux 10.50
188842 C Twist error : ilo auto registration fails silently. Independent 10.50
220007 C Proliant Build Plans fail because the ZIP packages have not been updated to work with the Service OS. Linux 10.50
221529 C WinPE runs in issue when it cannot download DHCPOptions.ini from tftp server with Infoblox DHCP server. Linux 10.50
225057 C Unattend XML file injection script is mangling the DNS-Client component.   10.50
217645 RedHat7 provisioning fails when %post script contains %include statement. Linux 10.23
218931 OS Build Plans fail in certain satellite facilities with the following error message: "A connection to the agent cannot be established". Linux 10.23
93006 Ability to create/modify network boot ISO was added. Windows, Linux 10.22
194888 When saving the configuration file for a Build Plan in the SA Client, an exception will be raised when adding a "." (dot). Independent 10.22
207208 Previous use of OS Sequences to build out a RHEL 5 server allowed the use of Permissive SELinux settings, which in turn provided valuable logging information of any suspect actions SELinux detected on the system. OSBPs on 10.20 appear to disable SELinux entirely, removing these logs. You can now set SELinux permissive mode in OS Build Plans. Linux 10.22
207496/207497 Server boots into unprovisioned servers pool with incorrect NIC info. Windows 10.22
208369/212185 MBC hostname being changed to default after hardware registration Independent 10.22
208875 During RHEL 7 OS Provisioning, SA makes changes to custom ks.cfg file causing to fail due to incorrect placement of %end tag. RHEL 10.22
212650 Mount hangs prompting for password at 5SERVER_X86_64 platform, finally failing the overall build. Linux 10.22
PATCHING  
190753 C CBT fails to import certain Windows patches.   10.50
191519 C Unable to determine True Patch Availability Status when download URL changes with the same checksum and exists on Word. Linux 10.50
191652 C populate-opsware-update-library can take a long time to process the MS patch DB and provides no feedback to user.   10.50
191974 C The solpatch_import tool fails to import Solaris 10 patches with the error "SSL routines:SSL3_GET_RECORD:wrong version number".   10.50
194286 C Deleted Windows patches can have their UNITS record put into a hybrid DELETED/ACTIVE state if wsusscn2.cab is imported before the UNITS record is GC'ed.   10.50
199011 MBSA .cab import via populate-opsware-update-library script takes too long. Windows 10.50
201369 C Previously installed common multi-binaries can cause false "Installed Patch" errors. Windows 10.50
203190 C HP-UX depots might be downloaded multiple times, wasting disk space and potentially causing timeouts.   10.50
203191 C HP-UX bundles are not reported in compliance.   10.50
202022 C Unable to import the Solaris 10 01/13 (Update 11) Patch Bundle into SA.   10.50
203364 C CBT message should be clear when certain Windows patches are not uploaded. Linux 10.50
204623 C Unable to uninstall Windows patch KB3018238 via SA. Linux 10.50
188279 C PatchBundle unittype adding changed unit_file_name and unit_loc format. This caused CBT import/exports to fail leaving customers with unusable data. Linux 10.50
207414 C solpatch_import displays the following error: "NameError: global name 'srcpath' is not defined".   10.50
219653 From the November and December MBSA patch imports, HPSA is not creating instances of some DotNet 4.6 Patches: November: 2012_x64 is missing Q3097999 December: 2008_x86 is missing Q3099874 (the x64 instance is there).   10.23
SOFTWARE MANAGEMENT  
221154 C rhn_import fails to download packages.    
184160 RedHat Linux patching spends significantly longer time in App Compliance phase, with much higher overall CPU usage on Database server and larger LCREP_DATA tablespace consumed. Independent 10.50
156243 C Server scripts fail with the following error code: wayscripts.lockFailed. Linux 10.50
192225 C rhn_import fails with the following error message: "RHN SSO Login Failed".   10.50
194285 C A unit uploaded with the same unit_loc of a previously deleted unit can result in a REALM_UNITS leak.   10.50
183704 C Core content synchronization is not working as expected. Linux 10.50
201463 C Support for RHEL 7 packages using rhn_import tool.   10.50
195137 SA global shell API connections bypassing UNIX security. Independent 10.50
203674 C The error "User doesn't have install software permissions" appears on scheduled jobs if one of the server is decommissioned and the server ID does not exist. Independent 10.50
203847 C uln_import is not able to register users or servers in SA versions higher than 10.02. An "AttributeError: sendall" error appears.   10.50
204068 Provide option to skip importing superseded MBSA patches. Windows 10.50
205299 C opsware.agent_reach.check_reachability does not handle errors for remote commands. Linux 10.50
207396 C Email from a remediation job contains a stack trace regardless of the job status.   10.50
207715 Difficult to troubleshoot Satellite upgrade failure due to an upstream Satellite being temporarily disconnected from mesh.   10.50
210407 Upgrade RPM displays a conflict error while deploying a package.   10.50
211056 C Zypper integration fails if there is no RMP-Python package available on the managed server. SLES 10.50
212106 C Automatic communications test jobs fail to run due to the "STALE" status.   10.50
189055 C A disabled software policy with AUO (Automatic Update Ordering) disabled cannot be changed.   10.50
214703 C Transactions should be handled and not dropped if the sending vault's file system is full. Linux 10.50
215460 Receiving "Unexpected error: ValueError: unconverted data remains: UTC" when using redhat_import to import RHEL7 label.   10.50
217393 C The populate-opsware-update-library ignores errors during extraction of wsusscn2.cab upload. Linux 10.50
220969 C Vault concurrency problem around fetching transactions from the database. HP-UX 10.50
224486 C suse_manager_import should use the API to determine the package download URL. Linux 10.50
219820 The Change Password APX sets incorrect passwords on target servers when invoked from the API. Windows 10.23
221154 Due to a change to where Red Hat packages are downloaded, the SA rhn_import is not working.   10.23
217393 If an error occurs inside the wordbot during the long extraction process of the wsusscn2.cab upload, then the populate-opsware-update-library ignores this error and displays a success message.   10.23
215460 When using redhat_import to import RHEL7 label, the error "Unexpected error: ValueError: unconverted data remains: UTC" is displayed.   10.23
203847/203905 uln_import is not able to register user/servers in SA versions higher than 10.02. "AttributeError: sendall" error OEL 10.22
211056 Remediation fails with following error on SA client: The remediate operation cannot be performed because an error occurred during preview. Non-zero exit code (None) from dependency solver. Linux 10.22
USABILITY  
194765 When using a file copy operation from the Device Explorer, an update of the device name occurred instead while trying to select the target server. Linux 10.50
208925 C NGUI threads spawned to retrieve device summary data can overload the twist. Linux 10.50
VIRTUALIZATION  
202047 C Downloading an updated existing cookbook does not get the latest one if Tsunami is used. Independent 10.50
214224 Oracle performance problems on certain queries with optimizer_index_cost_adj set to 20. Linux 10.50
CERTIFICATE
QCCR1D220269 While performing recertification of the SA Core, some reachable servers failed during Phase 4 and 8 with this status: AGENT RESTART FAILED.   10.23
GATEWAY
QCCR1D215547 If you configure a hijack service statement on a non-root gateway, the proxied connection is being passed to the root realm and is not being properly hijacked by the intervening GW. Linux 10.23
QCCR1D218366 Egress ephemeral port reuse can cause a slice to become registered in a non-TRANSITIONAL realm.    
209890/209892 spin:1004 load balancing rule should be not be set to STICKY.   10.22
SHADOWBOT
216891 The shadowbot can return invalid characters in the HTTP status line for error responses. Linux 10.23
TRUTH (MODEL REPOSITORY)
214224 Oracle performance problems occur on certain queries with optimizer_index_cost_adj set to 20. Linux 10.23
TWIST (WEB SERVICES DATA ACCESS ENGINE)
215606 NGUI job logs: Failed jobs are listed when you select the “Succeeded” status.   10.23
218594 Spinclient masks OPLET response results if it is not an XMLRPC response. Linux 10.23
192429/192718 SoftwarePolicyService.startRemediate does not scale well Independent 10.22
210531 Add CRL (Certificate Revocation List) support for access to SA using SA Client desktop client with smart card authentication. Independent 10.22
212522 Modify CAC / PIV Smartcard certificate validation to allow multiple CA root certificates. Linux 10.22
WAY (COMMAND ENGINE)
218522 Waybot command proxy failover is broken for all versions of SA that use python 2.7. Linux 10.23
CHEF
202047/202213 Downloading an updated existing cookbook does not get the latest one if tsunami is used. Independent 10.22
DCML EXPORT TOOL (DET)
203364 CBT message should be clear when certain Windows patches are not uploaded. Linux 10.22
JOBS
203674/203677 "User doesn't have install software permissions" on scheduled jobs if one of the server is decommissioned and the server id does not exist. Independent 10.22
MANAGED PLATFORMS
204565/204797 Unknown OS showing up for RHEL 7.1 bs_hardware and in SA UI. Independent 10.22
OGFS/OGSH (HUB)
194543/202417 Input/output error when accessing a server filesystem in OGFS. Linux 10.22
SERVER MODULE (SMO)
132960/203672 Last Logoff Time not set when users log out of Windows Windows 10.22
SPIN (DATA ACCESS ENGINE)
208105/208107 Spin software registration logging is too verbose, causes performance bottleneck Independent 10.22
SPOKE (GLOBAL FILE SYSTEM MODULE)
210203 The logging configuration should be read from /etc/opt/opsware/spoke/spoke.conf to maintain consistency with the main configuration file. Independent 10.22
213522/213527 Spoke spawned subprocesses can escape termination on timeout Linux 10.22
UCMDB
210696/210696 The SA-UCMDB connector periodically sends updates to uCMDB but it does not try to remove objects that don't exist in SA any more. That is, if an IP is changed on a managed server SA sends the new one to uCMDB but doesn't remove the old one. In uCMDB the server now will be associated with 2 IPs. Linux 10.22
WAY (COMMAND ENGINE)
205299/205302 opsware.agent_reach.check_reachability does not handle errors gracefully for remote commands Linux 10.22
212106 The job load fails with the spin.invalidTransaction error, and then when a Way tries to reload the job it gets marked as STALE. Independent 10.22