VMware Cloud Community
MinoDC
Enthusiast
Enthusiast

VUM 6.0 U2 Proxy Authentication

Hi to all,

I've installed VUM 6.0 Update 2 (with embedded db and vcenter - AiO installation)

Now I can not connect VUM for download the patch through Proxy with Authentication.

The Proxy (Palo Alto) use local user db for authentication (Not AD integration)

From Release Note I found this:

VMware Update Manager does not use the configured proxy authentication

When you initiate a patch download task, even though Update Manager is configured to use a proxy with authentication, Update Manager uses anonymous credentials to authenticate to the proxy server. If the proxy server does not accept anonymous credentials, the patch download task may fail.

Workaround: Change Update Manager service to run using a local administrator account with local administrator rights or a domain account with local administrator rights.

I've tried these common steps:

From logs (vmware-vum-server-logXcpp.log ) i see this:

[2017-02-22 11:17:05:227 'DownloadMgr' 125152 DEBUG]  [downloadMgr, 438] Adding download job {45044496} to scheduler

[2017-02-22 11:17:05:227 'DownloadMgr' 125152 DEBUG]  [downloadMgr, 458] Waiting for download job {45044496} to finish...

[2017-02-22 11:17:05:227 'DownloadMgr' 70764 INFO]  [downloadMgr, 593] Executing download job {45044496}, url=https://hostupdate.vmware.com/software/VUM/PRODUCTION/main/vmw-depot-index.xml

[2017-02-22 11:17:05:227 'httpDownload' 70764 INFO]  [httpDownload, 571] Downloading https://hostupdate.vmware.com/software/VUM/PRODUCTION/main/vmw-depot-index.xml via proxy 10.0.1.7:8080

[2017-02-22 11:17:05:228 'httpDownload' 70764 INFO]  [httpDownload, 573] Proxy user: vmware.aod

[2017-02-22 11:17:05:228 'httpDownload' 70764 INFO]  [httpDownload, 791] Status code: 407

[2017-02-22 11:17:05:228 'httpDownload' 70764 ERROR]  [httpDownload, 1039] Error 4317 from WinHttpQueryAuthSchemes

[2017-02-22 11:17:05:229 'httpDownload' 70764 INFO]  [httpDownload, 926] Retrying https://hostupdate.vmware.com/software/VUM/PRODUCTION/main/vmw-depot-index.xml with proxy off

[2017-02-22 11:17:05:229 'httpDownload' 70764 INFO]  [httpDownload, 556] Downloading https://hostupdate.vmware.com/software/VUM/PRODUCTION/main/vmw-depot-index.xml

[2017-02-22 11:17:05:247 'httpDownload' 163740 ERROR]  [httpDownload, 732] Error 12030 from WinHttpSendRequest for url https://hostupdate.vmware.com/software/VUM/PRODUCTION/csco-main/csco-depot-index.xml

[2017-02-22 11:17:05:248 'httpDownload' 163740 WARN]  [httpDownload, 420] Download https://hostupdate.vmware.com/software/VUM/PRODUCTION/csco-main/csco-depot-index.xml failed: Error 12030 from WinHttpSendRequest for url https://hostupdate.vmware.com/software/VUM/PRODUCTION/csco-main/csco-depot-index.xml

[2017-02-22 11:17:05:248 'httpDownload' 163740 ERROR]  [httpDownload, 435] Reached retry download limit

I get the feeling that the VUM does not send the authentication credentials to the proxy.
On the proxy when the VUM tries to connect, the session is logged in with no credentials
. It's possible ???

Thanks to all for any suggestions.

Reply
0 Kudos
1 Reply
MinoDC
Enthusiast
Enthusiast

Any advice ???

Reply
0 Kudos