VMware Cloud Community
rterra
Contributor
Contributor

Update Manager - Metadata for patch missing --- AAARRRGGGHHH!!

Hi Folks,

My apologizes for this. I know it's been re-hashed a thousand times. I think I've read every post of every thread regarding this topic.. I've also tried, I think, every possible work around to no avail. I'm essentially having the same issue as most, or at least some. I'll attempt to supply as much info as possible. I've also attached what I believe to be some of the relevant logs/files, etc. This is strictly for scanning/patching ESX hosts. I'm not interested in patching the VMs with this service.

I'm currently running VC 2.5 Update 1. Update Manager was originally installed with the VC installation. I've uninstalled/reinstalled UM to no avail. They both share the same SQL2005 DB (seperate server). Supposedly this is valid. I can successfully download "update_metadata.xml" which, from my understanding of how this works, is a list of the available patches that are used to compare against the ESX host (ESX 3.5 U1 in my environment. When I attempt to scan a host, I get the "metadata" message. I am using the default ports (80/443). There is nothing on the server using those ports (to the best of my knowledge). I've opened the appropriate ports both from the Security Profile setting within VC and from the host itself (esxcfg-firewall --openport 80/443, etc). I've modified the "vci-integrity.xml" file slightly per some posts that I read. Specifically the <PatchDeoptUrl> setting. I've restarted the services after making changes, I've ran "service mgmt-vmware restart" after making changes to ESX, etc. I'm still stuck!

I'm pretty much at wit's end. I'm hoping someone will be able to decifer something from the logs and or have some suggestion(s). I'm willing to try anything at this point. I think at one point I actually was able to download the actual patches, but, then I tried to figure out how I did it by starting over and I haven't been able to download any patches since.

Below are the logs, or pieces of them. If I'm missing anything, please let me know.

Thanks VERY much for any suggestions, help you may have!!

- Bob

vci-integrity.xml (sections)

<docRootHostUpdates>
    <namespace>"/vci/hostupdates"</namespace>
    <path>C:\Documents and Settings\All Users\Application Data\VMware\VMware Update Manager\Data\</path>
</docRootHostUpdates> 


<!-- location of server data -->
<patchStore>C:\Documents and Settings\All Users\Application Data\VMware\VMware Update Manager\Data\</patchStore>  <!-- . -->


<!-- HostUpdate Management Configuration -->
<HostConfig>
   <PatchDepotUrl>{color:#ff0000}http://tsvc2.ad.brown.edu:80/vci/hostupdates/hostupdate{color}</PatchDepotUrl> ({color:#ff0000}modified{color})

/var/log/vmware/esxupdate.log

[08May20-0850]   DEBUG:   summary: /usr/sbin/esxupdate --HA --flushcache -d [http://tsvc2.ad.brown.edu/vci/hostupdates/hostupdate/esx/esx-3.5.0] scan
[08May20-0850]   DEBUG:      root: Enabling hostagent interface
[08May20-0850]   DEBUG:        db: dbfile = [/etc/vmware/patchdb/patch.db], 67 keys
[08May20-0850]   DEBUG:     Depot: Download Rules: {'blacklist': ['*.rpm', '*/headers'], 'exclusives': []}
[08May20-0850]   ERROR:      root: [Errno 4] IOError: HTTP Error 404: Not Found
[08May20-0850]   ERROR: hostagent: BundleID:Unknown
[08May20-0850]   ERROR: hostagent: File:http://tsvc2.ad.brown.edu:80/vci/hostupdates/hostupdate/esx/esx-3.5.0/contents.xml.sig
[08May20-0850]   ERROR: hostagent: Extra:()

vmware-vci-9.log

[2008-05-20 08:50:57.832 'App' 908 verbose] [rpcConnectionWrapper,827] Waiting for a task to complete...
[2008-05-20 08:50:58.207 'HTTP server ./docroot/vci/downloads\;C:\Documents and Settings\All Users\Application Data\VMware\VMware Update Manager\Data\' 3772 verbose] Sent NotFound response for GET /vci/hostupdates/hostupdate/esx/esx-3.5.0/contents.xml.sig
[2008-05-20 08:50:58.222 'HTTP server ./docroot/vci/downloads\;C:\Documents and Settings\All Users\Application Data\VMware\VMware Update Manager\Data\' 3772 verbose] Sent NotFound response for GET /vci/hostupdates/hostupdate/esx/esx-3.5.0/contents.xml.sig
[2008-05-20 08:50:58.222 'HTTP server ./docroot/vci/downloads\;C:\Documents and Settings\All Users\Application Data\VMware\VMware Update Manager\Data\' 3772 verbose] Sent NotFound response for GET /vci/hostupdates/hostupdate/esx/esx-3.5.0/contents.xml.sig

vmware-vci-log4cpp.log (I'm not sure if I captured everything here)

[2008-05-20 08:50:57:738 'Activation.trace' 908 DEBUG]  [activationValidator, 979] 
------------------------------------------------------
Invoking scan on integrity.VcIntegrity:Integrity.VcIntegrity session BF4D58AB-A646-4DB2-A34B-C298E8212BBB
Arg entity:
(ManagedObjectReference) [
   'vim.HostSystem:host-8'
]
Arg baselineId:
(int) []
Arg updateId:
(int) []
Arg option:
(integrity.VcIntegrityScanOption) {
   dynamicType = <unset>, 
   reason = <unset>, 
   targetVm = false, 
}
------------------------------------------------------
[2008-05-20 08:50:57:738 'Activation' 908 INFO]  [activationValidator, 362] Leave Validate. Succeeded for integrity.VcIntegrity.scan on target: Integrity.VcIntegrity
[2008-05-20 08:50:57:754 'VciScanTask.ScanTask{4}' 908 INFO]  [vciTaskBase, 397] Save the VC task info into the database: task-758
[2008-05-20 08:50:57:754 'Activation.trace' 908 DEBUG]  [activationValidator, 1038] Invoke done: integrity.VcIntegrity.scan session: BF4D58AB-A646-4DB2-A34B-C298E8212BBB
Result:
'vim.Task:task-758'
[2008-05-20 08:50:57:769 'InventoryMonitor' 908 INFO]  [InventoryMonitor, 1523] Filter added for : session[35B38F5E-81A4-417C-AD43-D61D3355EE4C]81B5ED81-C29B-4E01-9FBF-1CBE1AB7C012
[2008-05-20 08:50:57:769 'JobDispatcher' 3404 DEBUG]  [JobDispatcher, 250] The number of tasks: 1
[2008-05-20 08:50:57:769 'JobDispatcher' 3404 INFO]  [JobDispatcher, 1143] Scheduling task ScanTask{4} that imposes 2 for Alpine new load: 2
[2008-05-20 08:50:57:769 'JobDispatcher' 3404 INFO]  [JobDispatcher, 272] Starting task ScanTask{4}
[2008-05-20 08:50:57:769 'VciScanTask.ScanTask{4}' 3404 INFO]  [vciTaskBase, 1056] VciTask { id: ScanTask{4}, type: com.vmware.vcIntegrity.ScanTask }: Setting VC task state to: running
[2008-05-20 08:50:57:769 'VciScanTask.ScanTask{4}' 908 DEBUG]  [vciTaskBase, 416] Task started...
[2008-05-20 08:50:57:769 'InventoryTree' 908 DEBUG]  [InventoryTree, 1213] Locking host-8
[2008-05-20 08:50:57:769 'JobDispatcher' 3404 DEBUG]  [JobDispatcher, 250] The number of tasks: 2
[2008-05-20 08:50:57:769 'JobDispatcher' 3404 INFO]  [JobDispatcher, 1143] Scheduling task VciHostScanTask{5} that imposes 1 for Alpine new load: 3
[2008-05-20 08:50:57:769 'JobDispatcher' 3404 INFO]  [JobDispatcher, 272] Starting task VciHostScanTask{5}
[2008-05-20 08:50:57:785 'VciHostScanTask.VciHostScanTask{5}' 908 INFO]  [vciHostScanTask, 121] Add scan host: host-8
[2008-05-20 08:50:57:785 'SingleHostScanTask.SingleHostScanTask{7}' 908 DEBUG]  [vciTaskBase, 869] No authentication data for current VC user
[2008-05-20 08:50:57:785 'JobDispatcher' 3404 DEBUG]  [JobDispatcher, 250] The number of tasks: 3
[2008-05-20 08:50:57:785 'JobDispatcher' 3404 INFO]  [JobDispatcher, 1143] Scheduling task ChainedTaskContainer{6}
[2008-05-20 08:50:57:785 'JobDispatcher' 3404 INFO]  [JobDispatcher, 272] Starting task ChainedTaskContainer{6}
[2008-05-20 08:50:57:785 'InventoryTree' 908 DEBUG]  [InventoryTree, 1213] Locking host-8
[2008-05-20 08:50:57:785 'JobDispatcher' 3404 DEBUG]  [JobDispatcher, 250] The number of tasks: 4
[2008-05-20 08:50:57:785 'JobDispatcher' 3404 INFO]  [JobDispatcher, 1143] Scheduling task SingleHostScanTask{7} that imposes 3 for ESX: host-8 new load: 3 that imposes 2 for Alpine new load: 5
[2008-05-20 08:50:57:785 'JobDispatcher' 3404 INFO]  [JobDispatcher, 272] Starting task SingleHostScanTask{7}
[2008-05-20 08:50:57:785 'SingleHostScanTask.SingleHostScanTask{7}' 908 DEBUG]  [vciTaskBase, 416] Task started...
[2008-05-20 08:50:57:800 'HostUpdateConfig' 908 INFO]  [hostUpdateConfig, 195] Custom depot in use: [http://tsvc2.ad.brown.edu/vci/hostupdates/hostupdate]
[2008-05-20 08:50:57:816 'SetFirewallConfig' 908 INFO]  [hostUpdateBase, 376] Checking firewall configuration for host: vmadmn3.ad.brown.edu
[2008-05-20 08:50:57:816 'SetFirewallConfig' 908 INFO]  [hostUpdateBase, 377] Ruleset name: updateManager
[2008-05-20 08:50:57:816 'SetFirewallConfig' 908 INFO]  [hostUpdateBase, 388] Firewall ruleset already activated
[2008-05-20 08:50:58:300 'ScanHost' 908 INFO]  [hostUpdateBase, 279] Depot for update: Unknown corrupted. remove the package from DB.
[2008-05-20 08:50:58:300 'ScanHost' 908 ERROR]  [hostUpdateBase, 165] Patch Metadata Not Found: [PatchID: Unknown]
[2008-05-20 08:50:58:300 'SingleHostScanTask.SingleHostScanTask{7}' 908 ERROR]  [vciTaskBase, 442] Task execution has failed: SingleHostScan : Patch Metadata Not Found: [PatchID: Unknown]
[2008-05-20 08:50:58:300 'VciScanTask.ScanTask{4}' 908 DEBUG]  [vciTaskBase, 465] A subTask finished: VciHostScanTask{5}
[2008-05-20 08:50:58:316 'VciScanTask.ScanTask{4}' 908 DEBUG]  [vciTaskBase, 1052] SerializeToVimFault fault:
(integrity.fault.VcIntegrityFault) {
   dynamicType = <unset>, 
   msg = ""
}
Converted fault:
(vim.fault.ExtendedFault) {
   dynamicType = <unset>, 
   faultTypeId = "com.vmware.vcIntegrity.VcIntegrityFault", 
   data = (vim.KeyValue) [
      (vim.KeyValue) {
         dynamicType = <unset>, 
         key = "dynamicType", 
         value = "", 
      }, 
      (vim.KeyValue) {
         dynamicType = <unset>, 
         key = "dynamicProperty", 
         value = "", 
      }
   ], 
   msg = ""
}
[2008-05-20 08:50:58:316 'VciScanTask.ScanTask{4}' 908 INFO]  [vciTaskBase, 1056] VciTask { id: ScanTask{4}, type: com.vmware.vcIntegrity.ScanTask }: Setting VC task state to: error
[2008-05-20 08:50:58:316 'VciScanTask.ScanTask{4}' 908 DEBUG]  [vciTaskBase, 684] Task finished...
[2008-05-20 08:50:58:316 'SingleHostScanTask.SingleHostScanTask{7}' 908 DEBUG]  [vciTaskBase, 684] Task finished...
[2008-05-20 08:50:58:316 'JobDispatcher' 908 INFO]  [JobDispatcher, 1203]  Removing task ScanTask{4} that imposed Alpine load:2, new load: 3
[2008-05-20 08:50:58:316 'JobDispatcher' 3772 INFO]  [JobDispatcher, 1203]  Removing task VciHostScanTask{5} that imposed Alpine load:1, new load: 2
[2008-05-20 08:50:58:316 'JobDispatcher' 3772 INFO]  [JobDispatcher, 1203]  Removing task ChainedTaskContainer{6} that imposed Alpine load:0, new load: 2
[2008-05-20 08:50:58:316 'JobDispatcher' 3772 INFO]  [JobDispatcher, 1203]  Removing task SingleHostScanTask{7} that imposed ESX load:3 for esx host-8, new load: 0 that imposed Alpine load:2, new load: 0
[2008-05-20 08:50:58:316 'JobDispatcher' 3404 DEBUG]  [JobDispatcher, 250] The number of tasks: 0
[2008-05-20 08:50:58:316 'InventoryMonitor' 908 INFO]  [InventoryMonitor, 1545] Filter removed for : session[35B38F5E-81A4-417C-AD43-D61D3355EE4C]81B5ED81-C29B-4E01-9FBF-1CBE1AB7C012
[2008-05-20 08:50:58:316 'VciScanTask.ScanTask{4}' 908 INFO]  [vciTaskBase, 195] Delete VC task from database: task-758
[2008-05-20 08:50:58:316 'SetFirewallConfig' 908 INFO]  [hostUpdateBase, 347] No changes to firewall configuration for: updateManager
[2008-05-20 08:51:46:081 'InternalScheduledTasksMgr' 3888 INFO]  [internalScheduledTasksMgr, 131] Internal Scheduled Tasks Manager Timer callback...
[2008-05-20 08:51:46:081 'InternalScheduledTasksMgr' 3888 INFO]  [internalScheduledTasksMgr, 613] InvokeCallbacks. Total number of callbacks: 3
[2008-05-20 08:51:46:081 'InternalScheduledTasksMgr' 3888 INFO]  [internalScheduledTasksMgr, 240] Internal Scheduled Tasks Manager Timer callback end of this timer slice.....Rescheduling after 300000000 microseconds
[2008-05-20 08:51:46:081 'InternalScheduledTasksMgr' 3888 INFO]  [internalScheduledTasksMgr, 680] Patch store disk free space is: 35159478272
[2008-05-20 08:51:46:081 'InternalScheduledTasksMgr' 3888 INFO]  [internalScheduledTasksMgr, 715] Temp directory disk free space is: 35159478272

Message was edited by: RDellimmagine to add tags

0 Kudos
4 Replies
Jeff1981
Enthusiast
Enthusiast

Ddi you try to remove Internet Explorer Enhanced Security on your VC server and adding the vmware and shavlik sites to Trusted Sites? That worked for me Smiley Happy After this, I was finally able to download ESX updates and scanning the hosts Smiley Happy (before, I couldn't download any ESX updates and I would also get the metadata error)

0 Kudos
rterra
Contributor
Contributor

Hi Jeff,

Thanks for the info. I managed to get this straightened out with the help of VMware support. Basically, we uninstalled Update Manager and deleted the VCI (Update Manager) tables from the SQL database. We reinstalled Update Manager, which recreates the proper tables. After this everything (keeping fingers crossed) has been running smooth.

Thanks again!

- Bob

0 Kudos
jesse_gardner
Enthusiast
Enthusiast

For what its worth, I'll share my experience with this error and my solution. Long story short, I had a VC Update 1 installation. I rebuilt the server completely, and installed Update 2 from scratch, leaving the VC database intact but destroying the UM database. Afterwards it downloaded all the updates from the internet, but I couldn't scan the hosts, getting the error above. I ended up finding in the hosts' /var/log/vmware/esxupdate.log:

[08Aug21-0914] DEBUG: summary: /usr/sbin/esxupdate --HA --flushcache -d [http://%3cvc-server-ip%3e/vci/hostupdates/hostupdate/esx/esx-3.5.0] scan
[08Aug21-0914] DEBUG: root: Enabling hostagent interface
[08Aug21-0914] DEBUG: db: dbfile = [/etc/vmware/patchdb/patch.db], 71 keys
--08Aug21-0914] DEBUG: Depot: Download Rules: {'blacklist': --'*.rpm', '*/headers'--, 'exclusives': [--}
[08Aug21-0914] ERROR: root: [Errno 4] IOError: HTTP Error 404: Not Found: [/vci/hostupdates/hostupdate/esx/esx-3.5.0/contents.xml.sig|http://10.2.34.205/vci/hostupdates/hostupdate/esx/esx-3.5.0/contents.xml.sig]
[08Aug21-0914] ERROR: hostagent: BundleID:Unknown
[08Aug21-0914] ERROR: hostagent: File:[/]<vc-server-ip>:80/vci/hostupdates/hostupdate/esx/esx-3.5.0/contents.xml.sig
[08Aug21-0914] ERROR: hostagent: Extra:()

I also noticed that if you tried to install the Update Manager plugin from the VIC, you also got an error something like 404 file not found (in viclient-0.log, "Plugin Installer Error: System.Net.WebException: The remote server returned an error: (404) Not Found.."). So it was like the webserver on the Update Manager server wasn't working right. I noticed in the file \Program Files\VMware\Infrastructure\Update Manager\vci-integrity.xml the line:

<enableWebServer>false</enableWebServer>

I dug up an old version of vci-integrity.xml from backups, and found the whole section below missing, which includes <enableWebServer>true</enableWebServer>:

<!-- Web server related configuration >
<enableWebServer>true</enableWebServer>
<webServerPort>9084</webServerPort> <!
9084 >
<docRootMap>
<!

The default document handler will provide access to the client plugin
and to clients.xml. Files that are installed by the installer should
be served by this namespace handler.
>
<docRootGlobal>
<namespace>"/vci/downloads"</namespace> <!
download namespace >
<path>./docroot/vci/downloads</path>
</docRootGlobal>
<!

A dedicated handler for host updates provides access to update related
collateral downloaded by the server.
-->
<docRootHostUpdates>
<namespace>"/vci/hostupdates"</namespace>
<path>F:\VMware Update Manager Patches\</path>
</docRootHostUpdates>
</docRootMap>

Hope this helps someone.

0 Kudos
paulch
Contributor
Contributor

After adding the vmware and shavlik sites to Trusted Sites host esx files appeared on hostupdate directory. Thank you

0 Kudos