Anybody have a truly functional Patch Management Component?

Does anyone have a flawless Patch Management component? One that updates caches, distributes patches, completes a daily subscription download, and just works the way it's designed to? If so, what's your setup? ZCM and agent version, Windows, SLES, Internal DB, etc? I'm just curious if switching our configuration would help our situation. We've had issues with Patch Management for as long as we've had the product. I have two SRs in and nothing is happening. :-(
We're running the ZCM 11.2.1/SLES 11 virtual appliance. Single primary and an internal Sybase DB.

Originally Posted by jdkoerner
The forceful update is due to bad setup of the patch bundles. Usually you
can look in your application or setup event log and see the switches that
are being used by patch management. On a lot of non MS critical patches
they are wrong or the logic of the bundle ignores if you have set to no
reboot. For example a number of Lync patches don't end up with the
/norestart switch even if you set the deployment to no reboot.
Getting individual patches fixed is a real pain. I have one SR from March
that still has not got anywhere and it actually the second one for the same
problem. I stopped doing new SRs for individual patches after I got Acrobat
reader 10.1.2 and then 10.1.3 fixed so they would install correctly on 64
bit machines. Now 10.1.4 is wrong with the same problem but I am sick of
going through the hassle when nothing was learned or carried forward from
the 2 previous patches. I think problems with individual patches obviously
don't get much priority but if they don't work then what is the point of
using patch management.
I am sure most of us here could generate a list of patches that do the
forceful no warning reboot but not sure if we would have to SR each one or
could do it as a bundle. If we dumped in a number of them the may get
looked at with a little more urgency.
Jim Koerner
Server - ZCM 11.2.1 w/MU2 and Internal Database on Win2008R2x64
Client - ZCM 11.2.1 w/MU2 on Win7SP1x64 and WinXPx32
"baarsd" <[email protected]> wrote in message
news:[email protected]...
>
> I can't say we have either! We are running ZCM 11.2.1 as well (Windows
> server 2008 R2 x64) with an Oracle 11g backend database (on Windows
> server 2008 R2 x64) and have just started using ZPM - I have an SR
> (#10794524091) open because all the patches I've tried deploying have
> varying levels of failure -
>
> - tried deploying Adobe Reader 10.1.4 update as a baseline, machines
> started rebooting VERY forcefully (no chance to save anything, just
> *bang* it's rebooting)
> - Skype update failing to install (that's posted here
> http://forums.novell.com/novell-prod...h-failing.html)
> - Java updates reporting errors;
> "Action "Failed to launch C:\Program Files
> (x86)\Novell\ZENworks/zpm/Remediate.exe. Exit code: 144" of the child
> bundle "Oracle Java JRE 1.6.0_35 for Windows (Update) (All-)195861068"
> failed."
> In "Programs and Features" it appears to be installed but if I try and
> verify java ('Verify Java Version'
> (Verify Java Version)) it says it isn't
> installed
>
> So I'm not very impressed with the product at the moment
>
>
> --
> baarsd
> ------------------------------------------------------------------------
> baarsd's Profile: View Profile: baarsd - Novell Forums
> View this thread: Anybody have a truly functional Patch Management Component?
>
If you're getting slow responses on your SR's, you can post on the Product Neutral -> Talk to a technical services manager and post your SR # and they should be able to prod things along for you, hopefully.

Similar Messages

Windows 7 SP1 Prerequisite not in patch management

Reading the notes for Windows 7 Service pack 1 it has a prerequisite of MS
update 976902 which as far as I can tell is not offered up by patch
management. Does this strike anyone else as odd to not have it available in
patch management. I would also think that SP1 would not be offered for
install if I didn't have this update installed.
If I run windows update I am offered up 976902 but not SP1.
http://support.microsoft.com/kb/976902 is the prerequisite
Best Regards,
Jim Koerner

FYI noticed 976902 is now listed in patch management.
Jim
"Jim Koerner" <[email protected]> wrote in message
news:JNadp.22131$[email protected] ..
> Doing windows update you are not offered SP1 unless 976902 is installed
> and 976902 is offered up for installation. I have not tried to install
> SP1 yet without this update to see what happens. I will try on a VM
> shortly.
>
> Jim
>
> "Shaun Pond" <[email protected]> wrote in message
> news:[email protected]..
>> Jim,
>> it's strange, because I have installed SP1 on several machines now, and
>> I certainly didn't install that update first
>>
>>
>> --
>>
>> Shaun Pond
>>
>>

ZCM Patch Management Patch Status Inaccuracies

We currently have issues with ZCM Patch Management incorrectly reporting the status of a couple of Microsoft updates. Specifically, we have firm evidence of this for the following patches (but suspect there may be more):
Microsoft Office 2007 SP3 - Microsoft Baseline Security Analyzer shows it as required, ZCM says its already applied.
MS11-049 InfoPatch 2007 - Microsoft Baseline Security Analyzer shows it as required, ZCM says it's not applicable.
We are checking the ZCM status in both the {guid}.state file on the device (which has today's date stamp) and in ZCC - both of these places show the same, incorrect, status.
We see this issue on multiple managed devices. The zone is 10.3.3. Devices have 10.3.3 with Patch Management Agent Update 2.
This isn't a timing issue, as we have left things several days before checking the status again.
I am raising a call with our Novell reseller, but am interested to find out if anyone else is seeing similar issues.
Thanks,
Martin

metheridge,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://forums.novell.com/

Does anybody have a functioning 17" mbp with a 6Gb/s SSD drive?

I ordered a MacBookPro 17" (June 2011) with the 7200rpm hard drive which is a slow drive, but comes at no extra cost with the machine.
The ssd's Apple ships with the mbp's are relatively slow and expensive, so I do not consider them an option. I therefore ordered an OWC Mercury Pro 6G (240GB) sata3 SSD drive and replaced the hard drive with it. Under both Snow Leopard and Lion I get beach balls almost continuously. Installing the ssd in a co-workers 15" mbp makes the drives work at over 500 mb/s, so the drive is not the problem.
I explained this to the people at AppleCare's helpdesk and they state, since I used a non Apple item, they can't help me. They tell me to go to a local reseller and have them install the ssd for me. This way the mbp is still valid for AppleCare. The local reseller won't touch my mbp since I bought it online at Apple (and not at his store), plus I did not buy the OWC drive in his store. In short, AppleCare is useless here. They claim I should've ordered one of the Apple ssd's (which are basically sata2 drives).
Since the 17" mbp supports sata3 and has the fastest processors of the mbp range (which is why I bought it in the first place) I do not understand why Apple would force me to 'downgrade' to a non current ssd. I work with large 3D drawing files as well as multilayered large photoshop files, so having a fast drive is very beneficial to my workflow. The hardware in the 13" and 15" mbp's support the functionality of a 6G ssd in practice, whereas the 17" mbp only does that on paper. Selling my 17" and swapping it for a 15" model seems the only option but I refuse to believe a company that claims to be technologically advanced can ignore having specifications that only work on paper. There is no record, comment or even gossip of Apple indicating this is a problem, let alone they are working on a fix, despite finding numerous forums online where people have the same problem I have.
So for the record, on the official Apple Support site, directed to both Apple developers and users:
Is there anybody that has a functioning 17" MBP with a 6Gb/s SSD?
If you have, please let me know the specs or your machine and drive so I can see if there is a solution to unleash the full potential of my MBP.
I believe there is no sadder sight than the sullen tread of a caged (osx) Lion. Help me free the desert's fallen king!! ;-)

Thanks wjosten for your reply. I filled out a feedback form.
To comment on AussieDJ's post: I tried the OWC shielding kit, doesn't work. The problems described with 6Gb/s ssd's were all with pre March MBP's. Mine is a June 2011 MBP so I figured the problem would've been solved in the mean time. I guessed wrong there. Since I waited for the release of OSX Lion (and the trim support functionality) I thought this would solve the spinning beach ball issue. I guessed wrong there as well. Can't return the ssd anymore (>30 days) so I glued the ssd on our offices "wall of shame". Being an architecture office we have everybody in the office put up poorly designed objects here (sort of a cool and uncool board but then labelled ***? and No way!). I should've glued y 17" MBP on this wall actually (since it's hardware does not work with the 6Gb/s ssd), but the bugger is too heavy and won't stick... ;-)
The worst part of the story is that my dad got his 6Gb/s ssd to wortk in his windows notebook...and he does not skip an opportunity to rub it in (your MBP can't do no 6G)!
Let's hope there will be an EFI update!

Does anybody have XI's Project Management Documentation

Hi,gurus:
Now, there is a project of XI,does anybody have XI's Project Management Documentation ？it's very important for me to begin to project
Thanks for advanced
alex zhang

This will guide u throughout ur project
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/2791db90-0201-0010-dea7-ec869d783f9c
Regards,
Prateek

HT6147 I have 2 fully functioning iPad 1st Gen but there is no security patch for them?!!!?!

I have 2 fully functioning iPad 1st Gen but there is no security patch for them?!!!?!

No, because the security issue is not present in iOS 5 Safari. Only in iOS 6 and 7 versions.

Separate release of SAP Business Rules Management component

I am evaluating the possibility of using the SAP Business Rules Management for the company. What I have seen till now in SAP is that it is part of the SAP Netweaver composition environment which consists of lot of other components also. I don't want to use the other components. Is is possible to download a trail copy of only the Business Rules management component ? (I don't want to use the BPM and others.)

Hello Prashanth,
You can just select the usage type (functional unit) Business Process Management and Business Rules management for installation.
You can find more information on installation in the guide provided at the SAP service marketplace - https://websmp105.sap-ag.de/installnw73
Installation guide - SAP Systems Based on SAP NetWeaver 7.3 Application Server Java on Windows: MS SQL Server- https://websmp105.sap-ag.de/~sapidb/011000358700001259982010E
Best Regards,
Arti

Spiceworks Patch Management

Does anyone have a built in tool for Spiceworks Patch Management of 3rd Party Software?
With all of these Zero-day's coming from Adobe Flash I'm really looking into this issue more and more. Managing 120 devices for a major security patch, every month now for the past several months has been very tiresome.
Is there any functionality like this. Are they are good open source tools. The reporting is useful enough, but still a lot of overhead to perform the work.
This topic first appeared in the Spiceworks Community

Fishoil,
checkout the pathc I posted today -
http://download.novell.com/Download?...d=7DjPTWpuxeM~ - could it be
this?
Shaun Pond

Solaris 10 - Tools for Patch Management Automation

Hi,
What are the best tools (both Sun and third party) for patch management automation for a company using Solaris 10 with zones?
What are the pros / cons and cost of these tools? Which ones are the most widely used / the most recommended?
Current objectives for automation are to eliminate the current manual processes and to reduce planned and unplanned downtime.
Thanks!

I don't think you would want to fully automate it. You need to be able to test patches first on a test system to ensure they don't conflict with established applications and cause problems. You wouldn't want to install patches that relate to applications you don't have, or for upgrades you do not have or don't plan on having. That said, the smpatch utility can connect with Sun Solve, find patches, and download them, even install them if desired. You could easily script the process and run via cron to make it automated. I just don't think that's a good idea without having someone make decisions on what SHOULD be patched at any given time. The SMC facility also has a function that mimics smpatch, although you could not automate that. Also, smpatch can only be run from the global zone, and patches will percolate down to non-global zones automatically - smpatch will not run in a non-global zone (unless there's been changes made recently that I'm not aware).
There's also the problem where some patches require reboot while others do not. If the patch kills the system, what mechanism do you have in place for someone to know what patch was applied that killed the system, if the process is automated and a number of patches were applied?

Patch Manager 2.0 vs. /var/sadm installation problem.

Hello -
uname -a (minus the host name):
SunOS 5.8 Generic_117350-34 sun4u sparc SUNW,Ultra-5_10
Due to space restrictions, /var/sadm has been moved to another drive and a
soft link in /var created so that /var/sadm --> /void/sadm
Here starts the fun:
================== <-- More text at the matching string of equal-signs.
# ./pmsetup
Installing Patch Manager 2.0 ...
Processing package instance <SUNWppror> from
</void/home/mbecker/Patches/Patch_Manager_2.0/2.8/packages/sparc>
PatchPro core functionality (Root)
(sparc) 5.0,REV=2004.06.10.04.44
Copyright 2001 Sun Microsystems, Inc. All rights reserved.
Using <> as the package base directory.
## Processing package information.
## Processing system information.
3 package pathnames are already properly installed.
## Verifying package dependencies.
Installing PatchPro core functionality (Root) as <SUNWppror>
## Installing part 1 of 1.
pkgadd: ERROR: unable to create lock file </var/sadm/install/.pkg.lock>.
pkgadd: ERROR: Database lock failed.
Installation of <SUNWppror> failed (internal error) - package
partially installed.
There are 2 more packages to be installed.
Do you want to continue with installation [y,n,?] n
2 packages were not processed!
==================
And now /var contains a partially-populated /sadm directory. The soft-link to
the second drive has been removed. So I remove /var/sadm, recreate the soft
link, and <whew> everything is back to ..normal.
Must the install remove the soft link to /var/sadm --> /void/sadm ?
Must everything be shifted around to put /void/sadm back into /var/sadm? There
have been a lot of patches installed.. and there's a lot of stuff in those
folders.
Your time is appreciated.
Mark

Hello -
I ..found your response while searching for the solution to another problem.
The problem was ..fixed.. by moving the contents of /var/sadm to a free partition on a second drive then mounting that partition to /var/sadm.
By "free" ... I spent an evening backing up the second disk then doing a repartition. Brute force.. but it worked.
Regards,
Mark

UIX: Anybody have example of lovValidate checking against db?

Hi gang
Does anybody have an example in UIX of using the lovValidate event to check a user entered messageLovInput value against the database, and if an invalid entry, via showWindow, forcing the user to select a value from the LOV?
Any help appreciated.
CM.

Okay, IperProcedureCode is the attribute in the VO that the lovInput is attached to. When you write bindings.<attributeName> in your EL, then this comes out as the DCControlBinding (or a subclass) in the Java code. So I pass the binding into the EL method in order to get access to the binding container, the AM, the VO ... whatever.
I have defined that EL method myself and it's no big deal. You add an UI extension in your UIX config and in that UI extension you register the new EL functions.
This is the EL class:
package com.ge.med.bone.el;
import ...
public class DataUtilityElFunctions {
public static Method lookupInput;
static {
    try {
      lookupInput = DataUtilityElFunctions.class.getDeclaredMethod( "_lookupInput",
                                                                    new Class[] {
                                                                      JUCtrlAttrsBinding.class,
                                                                      String.class,
                                                                      String.class,
                                                                      String.class
    } catch( NoSuchMethodException nsme ) {
      // Will never ever happen!
//~ Constructors ***********************************************************************
private DataUtilityElFunctions( ) {}
//~ Methods ****************************************************************************
   * Performs the lookup of user input.
   * @param binding The JUCtrlsAttrsBinding as used to bind text fields.
   * @param input The input the user has typed in.
   * @param setResult Pass 'true' if you want to set the result automatically in the
   *        attribute.
   * @param clearUnresolved Pass 'true' if you want the attribute to be cleared if it
   *        couldn't be resolved. Needs setResult='true' to work.
   * @return The looked up value or null if none found or ambigous.
public static String _lookupInput( JUCtrlAttrsBinding binding,
                                     String input,
                                     String setResult,
                                     String clearUnresolved ) {
    String lookupResult = null;
    String attributeName = null;
    if( ( binding != null ) && ( input != null ) && ( input.length( ) > 0 ) ) {
      BaseViewObject viewObject = (BaseViewObject)binding.getViewObject( );
      DCBindingContainer container = binding.getBindingContainer( );
      attributeName = binding.getAttributeNames( )[ 0 ];
      BaseViewObject vo = (BaseViewObject)binding.getViewObject( );
      BaseAttributeDef attributeDef = vo.findExtendedAttributeDef( attributeName );
      if( attributeDef != null ) {
        TextLookupData data = new TextLookupData( container, attributeDef, attributeDef,
                                                  true );
        data.lookupInput( input );
        if( data.isAllLookedUp( ) ) {
          LookupDataItem item = (LookupDataItem)data.getLookedUpDataItems( ).get( 0 );
          lookupResult = item.getResolvedObject( ).toString( );
      if( ( setResult != null ) && setResult.equals( "true" ) ) {
        if( lookupResult != null ) {
          binding.setInputValue( lookupResult );
        } else if( ( clearUnresolved != null ) && clearUnresolved.equals( "true" ) ) {
          binding.setInputValue( null );
        } else {
          binding.setInputValue( input );
    return lookupResult;
}We use our own VO base class, don't let that disturb you. The TextLookupData class encapsulates the lookup. We already use this class in our Swing client to do the lookup. It uses the container to get to the AM, then creates the lookup VO, sets a nifty where-clause, executes the VO and then returns the lookup result after removing the lookup VO again.
Again, no big deal.
The EL function, as you can see, returns the result of the lookup or null if the lookup failed. I use this in the UIX event handler to determine whether the attribute that controls the LOV window showing should be set to "true" or "false".
param.seachText contains the user input at the moment of validation.
Of course, you could move the lookup stuff in a AM method if you prefer it that way.
The UI extension class:
package com.ge.med.bone.uix;
import ...
public class BoneUiExtension implements UIExtension {
//~ Constructors ***********************************************************************
   * Default constructor.<br> Creates the object and sets the parameters.<br>
public BoneUiExtension( ) {}
//~ Methods ****************************************************************************
   * Registers the parser manager
   * @param manager The parser manager.
public void registerSelf( ParserManager manager ) {
    manager.registerFunction( "http://xmlns.med.ge.com/centricity/bone/el/data",
                              "lookupInput",
                              new JavaMethod( DataUtilityElFunctions.lookupInput ) );
   * Register renderers with the look-and-feels.
   * @param laf The LAF or LAF extension to register with.
public void registerSelf( LookAndFeel laf ) {}
}and in our uix-config.xml:
      <extension-class>
        com.ge.med.bone.uix.BoneUiExtension
      </extension-class>In the UIX page that holds the lovInput I just add the namespace:
xmlns:dataEl="http://xmlns.med.ge.com/centricity/bone/el/data"Now I can simply call the EL function whenever I like. This EL stuff is pretty handy. I also use it to get custom labels that we defined for our attributes and to access resource bundles.
The input field contains a (medical) procedure code. Just for user convenience I also display read-only the description of the medical procedure after validation. This read-only field (with id _procedureName) needs a refresh after validation/lookup. That's why it's a partial refresh target.
That must be the longest posting I ever posted here :o)
Sascha

Is there anybody have implemented new forum of EP7.0 ?

Hello experts,
Is there anybody have implemented new forum of EP7.0 which is the same of the forum of SDN ?
I see the the bolg <a href="https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/5104">What you need to know about the new forums in SAP NetWeaver Collaboration</a>
and the document <a href="https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/204bb3bc-10ea-2910-448a-a780c63978cd">New Forums in the SAP NetWeaver Portal</a>.
But I can't find the patch and the note 1049553 of the new forum .
Is there anybody know where to download the patch for the new forum and how to installation ?
Thanks.
Best Regards,
Jianguo Chen

Hi,
yes, as said by SAP in the 2004s download site.
QUOTE :
Support Package Stacks for SAP NetWeaver 2004s released after April 2nd, 2007 will ONLY be available via SAP Solution Managers Maintenance Optimizer. Find more details here http://service.sap.com/solman-mopz.
Brad

Problems invoking sequential javascript functions to managed bean

Hi all.
I have a problem. I need to do the next steps in my application.
1. From my jsff, I need to obtain a String generated in a function in the Managed Bean.
2. Take this generated String in my jsff and send it to a javascript function in the same jsff.
3. The javascript function will sign this String and later will also send it to the managed bean.
Summarizing, in my page I need to call a function in managed bean to generate one String. The page must get this String and send it to a JavaScript function. Later, from this JavaScript funcion, send the String to the Managed Bean.
I have tried to do this with event handling (AdfCustomEvent.queue), but I think that my approach isn`t right. Now I`m trying to do this with the task flow.
Maybe this doub is because my lack of knowledge of adf... I am newby.
Any suggestion please?
Regards

I just did same thing for gov CAC card functions....
Create inputText/outputText visible="false" bind it to your bean, compute string in your bean and assign it to your it/ot.
ExtendedRenderKitService erks = Service.getService(context.getRenderKit(), ExtendedRenderKitService.class);
erks.addScript(context, script);
In the script you can use AdfPage.PAGE.findComponent('") to find your component
when your script done assign data to a second hidden control, that you can simple get from mb

Adobe Reader and Acrobat Pro updates for 11.0.10 being pushed out through SolarWinds Patch Manager are not being recognized as applicable.

I am trying to update our Adobe Reader and Acrobat Pro to 11.0.10 using the default MSP packages with SolarWinds Patch Manager. All of the systems keep reporting as 'NOT APPLICABLE'. All of the workstations have Reader11.0.09, with about 10% still on 11.0.08 (due to the fact that the reader 11.0.09 package only patched about 2/3 of the systems). All systems that have Acrobat Pro are 11.0.09.
In SolarWinds I am using the "Adobe Systems, Inc. Packages" node.
Adobe Systems Acrobat 11 Catalog
Adobe Systems Reader 11 Catalog
and the SW Patch Manager downloads the msp's straight from Adobe.
I have checked the msp's manually and they will update at least back to 11.0.07 in Reader, and 11.0.0 in Acrobat Pro. (I had an old stand alone system that still had Reader 11.0.07, and I did a new install of Pro and went straight to update 11.0.10)
The SolarWinds Tech said, "Okay. That content is produced by Adobe. Any questions concerning applicability logic or diagnosing why a package reports as NotApplicable when that's not expected would need to be directed to Adobe, as they are solely responsible for that content and its behavior".
I am new to SolarWinds Patch Manager, and any help or advice would be greatly appreciated.

It sounds like you are attempting to use the SCUP catalogs outside of the MS solution. I can almost guarantee you that Adobe didn't test it if it's not referenced in the ETK: 11 SCCM-SCUP — Enterprise Administration Guide
That being said there "should" be logging available in any deployment solution. Since I am not familiar with Solar-Winds particular solution I can't say if it logs errors and how verbose those logs might be. If you have logs then post the output and the forum members "might" be able to assist you.

How do I delete documents from my iPad that were added when it ran regular Acrobat, now that it has switched to DC? The docs are not on the cloud, and DC does not seem to have a delete function for non-cloud docs.

I use an iPad. It automatically switched me from old-fashioned Acrobat to DC. How do I delete docs that were put on my iPad with the old Acrobat? They are not in the cloud, and DC does not seem to have a delete function for them.

Hi,
By default, Acrobat DC for iOS displays recently viewed files. You need to switch to other file location (such as Local, Document Cloud, Creative Cloud) to delete, rename, move, or duplicate files.
You can switch to Local, if you would like to see the files and folders that are locally stored on your iPad.
Would you take a look at the following document to see how you can switch to other file location and delete files?
How to manage files in Acrobat DC for iOS
Please let us know if you have additional questions. Thank you.

Anybody have a truly functional Patch Management Component?

Similar Messages

Maybe you are looking for