Originally posted by: SystemAdmin

Please can you assist?
I am running AIX53 TL08 on a p5 9110 server and I am struggling to get suma to work through our firewall. I can run a preview successfully, however downloads timeout. The error is as follows(with debug mode set on):-
0500-018 An internet request failed. (SUMA::Download, /usr/suma/lib/SUMA/Download.pm 910)
500 (Internal Server Error) Connect failed: connect: A remote host did not respond within the timeout period.; A remote host did not respond within the timeout period.
My suma settings are:-
FIXSERVER_PROTOCOL=https
DOWNLOAD_PROTOCOL=https
DL_TIMEOUT_SEC=180
DL_RETRY=5
MAX_CONCURRENT_DOWNLOADS=1
HTTP_PROXY=
HTTPS_PROXY=
FTP_PROXY=
SCREEN_VERBOSE=LVL_INFO
NOTIFY_VERBOSE=LVL_INFO
LOGFILE_VERBOSE=LVL_VERBOSE
MAXLOGSIZE_MB=1
REMOVE_CONFLICTING_UPDATES=no
REMOVE_DUP_BASE_LEVELS=no
REMOVE_SUPERSEDE=no
TMPDIR=/var/suma/tmp
FIXSERVER_URL=www14.software.ibm.com/webapp/set2/fixget
The suma command that I am running is:-
suma -x -a Action=Download -a RqType=ML -a FilterML=5300-08 -a FilterSysFile=/dev/null

Typical output without debugging on:-

Download FAILED: OpenGL.OpenGL_X.dev.vfb.5.3.8.2.bff
Download FAILED: OpenGL.OpenGL_X.rte.base.5.3.8.2.bff
......

Any ideas why this would fail?
Thanks
Stuart
#AIX-Forum

Originally posted by: tony.evans

What happens if you ftp to www14.software.ibm.com manually?

Also, can you connect to www7b.software.ibm.com via FTP?
#AIX-Forum

Originally posted by: SystemAdmin

Hi Tony,
Our network department have opened the firewall for https 443. I can ask them to open for ftp, but there is a lot of bureaucracy and red tape, so it will take a while. They are very strict about the firewall. Let me see what I can do.

Thanks for the reply
#AIX-Forum

Originally posted by: tony.evans

Sorry, missed that you'd set DOWNLOAD_PROTOCOL=https

Here's the raw output from a request using https,

https://www7b.software.ibm.com/aix/fixes/byCompID/5648C9802/Java131.adt/Java131.adt.debug.1.3.1.6.bff

Can you connect to that from your AIX host using https?
#AIX-Forum

Originally posted by: SystemAdmin

Hi Tony,
Here is what I tried:-

bvihlech1:/ >ftp www14.software.ibm.com 443
Connected to dispsd-42-www14.boulder.ibm.com

Regards
#AIX-Forum

Originally posted by: SystemAdmin

Hi Tony,
I guess the only way to test the raw download is to install Mozilla Firefox, or is there another way of doing this?
Thanks
Stuart
#AIX-Forum

Originally posted by: tony.evans

You could use wget (command line ftp/http/https client), links or lynx (text mode browsers) but you'll need SSL support built into them.

You can download them from the IBM AIX Toolbox page, but not in the normal section.

Go to http://www-03.ibm.com/systems/p/os/aix/linux/toolbox/download.html and then click on the "AIX Toolbox Cryptographic Content" link on the right-hand side, and you can start the process of logging in to get to the SSL stuff.

(At the moment, the site is giving me an error when trying to sign in, so maybe give it an hour or so before you try).

wget is a super tool even without SSL support, but if you want to test the https side of suma you'll need the SSL version.
#AIX-Forum

Originally posted by: SystemAdmin

Hi Tony,

Here is the output from lynx.

Alert!: Unable to connect to remote host.
Looking up www7b.software.ibm.com
Making HTTPS connection to www7b.software.ibm.com
Alert!: Unable to connect to remote host.

lynx: Can't access startfile https://www7b.software.ibm.com/aix/fixes/byCompID/5648C9802/Java131.adt/Java131.adt.debug.1.3.1.6.bff

Regards
Stuart
#AIX-Forum

Originally posted by: tony.evans

Your firewall is blocking the connection, hence SUMA not working either.
#AIX-Forum

Originally posted by: SystemAdmin

Hi Tony,
I'm inclined to agree with what you say, however, I am baffled by the fact that suma previews are successful. See below:-
suma -x -a Action=Preview -a RqType=ML -a FilterML=5300->
****************************************
Performing preview download.
****************************************
Download SUCCEEDED: /export/lpp_source/installp/ppc/OpenGL.OpenGL_X.dev.vfb.5.3.8.2.bff
Download SUCCEEDED: /export/lpp_source/installp/ppc/OpenGL.OpenGL_X.rte.base.5.3.8.2.bff
....
Download SUCCEEDED: /export/lpp_source/installp/ppc/xlsmp.rte.1.7.0.0.bff
Summary:
121 downloaded
0 failed
0 skipped
Regards
Stuart
#AIX-Forum

Originally posted by: tony.evans

The preview isn't downloading any files. Your firewall is allowing a connection to the primary SUMA server, but not to subsequent servers listed for downloads.

Unfortunately, AFAIK, that list of servers isn't published and does change (it recently changed for example).

Your network guys should be able to monitor the firewall logs and tell you specifically which connections are being refused to confirm this theory.
#AIX-Forum

Originally posted by: SystemAdmin

Thanks for all your help Tony,

I will discuss with our network / firewall guys

Regards
Stuart
#AIX-Forum