Troubleshooting Java LiveUpdate 3.x

Products

• Scan Engine
• Mail Security for Domino
• Endpoint Protection
• Messaging Gateway

Issue/Introduction

This document contains suggestions and technical steps to troubleshoot Java LiveUpdate (JLU) 3.x.

 

Resolution

The steps below should help you in troubleshooting Java LiveUpdate issues.

Make sure your Java Runtime Environment is properly configured:
The JRE should be enabled with the correct Java Cryptography Extension "JCE Unlimited Strength Jurisdiction Policy" files.
To download the correct JCE policy files refer to the Attachments section below.

NOTE: For Macintosh, the JCE jar is not required for normal operations, and most users do not need to run the JLU configuration GUI (ConfigEditor). The Cryptix library "cryptix-jce-provider.jar" required to use ConfigEditor, if needed, is attached to this document (see "Attachments" below). It should be placed under the default JLU install path, as follows:

(Mac OS) /Library/Application Support/Symantec/LiveUpdate

Should you need to replace the JCE policy files, the following is the default location, provided for your convenience.

(Mac OS) /Library/Java/Home/lib/security

 

Check if liveupdate.conf exists and is correct:

JLU requires a valid configuration file to work properly.  See Configuring Java LiveUpdate for details.

Windows 32-bit OS: C:\Documents and Settings\All Users\Application Data\Symantec\Java LiveUpdate\liveupdate.conf
Windows 64-bit OS: C:\ProgramData\Symantec\Java Liveupdate\liveupdate.conf
Linux/Solaris/MacOS: /etc/liveupdate.conf

 

 

 

Check the Java LiveUpdate log:

Windows 32-bit OS: C:\Documents and Settings\All Users\Application Data\Symantec\Java LiveUpdate\liveupdt.log
Windows 64-bit OS: C:\ProgramData\Symantec\Java Liveupdate\liveupdt.log
Linux: /opt/Symantec/LiveUpdate/liveupdt.log
Mac OS: /Library/Application Support/Symantec/LiveUpdate/liveupdt.log

Ensure you're running the correct version of Java LiveUpdate for your product:
You can check the installed JLU version by following the steps below:

1. Open a command prompt
2. Type: "java -cp /path/to/jlu.jar com.symantec.liveupdate.Version"
   Note: this may need to be prefaced with "sudo" to elevate privilege.

Note: the file "jlu.jar" can be found under the common JLU installation path (e.g. on Windows: C:\Program Files\Common Files\Symantec Shared\Java LiveUpdate)

   

Ensure no other LiveUpdate processes are running at the same time
The JLU log will tell if other instances of LiveUpdate are running, as follows:

Dec 15, 2011 9:30:06 PM An active JLU session has been detected.
Dec 15, 2011 9:30:06 PM Checking to see if a session of JLU is running at port 34146.
Dec 15, 2011 9:30:06 PM An active JLU session has been detected.
Dec 15, 2011 9:30:06 PM Checking to see if a session of JLU is running at port 34165.
Dec 15, 2011 9:30:06 PM An active JLU session has been detected.  

 

LiveUpdate Administrator 2.x (LUA 2.x) - Recommendations
If LUA is used in the environment to provide SMSDOM AV definitions, it is important to make sure that the LiveUpdate configuration file (liveupdate.conf) contains the correct information on how to connect to the LUA server.

Below is a sample Solaris "liveupdate.conf" file showing working settings to download AV defs from a LUA server called "lua.domain.com".

hosts/0/url=http://lua.domain.com:7070/clu-prod
workdir=/tmp
logfile=/tmp/liveupdt.log    

 

Ensure proper settings are in Java LiveUpdate config file:
If you're using JLU 3.6.x, then ensure your JRE has the appropriate JCE policy files installed (see the section above). 
Failure to apply correct JCE policy files will result in a 0Kb liveupdate.conf file written every time you update it.

When using JLU 3.6.x on a Windows environment, you should change its settings via the GUI via the command:

    java -cp /path/to/jlu.jar ConfigEditor

- Mac OS: /Library/Application Support/Symantec/LiveUpdate/liveupdate.conf

For more information on how to change settings via the Java GUI, please refer to the following document:
How to change settings in Java LiveUpdate 3.6 or higher

Debug Java LiveUpdate
To debug a Java LiveUpdate session, run the following Java commands from a prompt.

Notes:
- Output is to stdout and to Java LiveUpdate logfile if set in the configuration file.
- All commands are entered on a single line.
- Macintosh and Linux commands may need to be prefaced with "sudo" to elevate privilege.

Macintosh (SEP for Mac):

AV definitions
java -cp /Library/Application\ Support/Norton\ Solutions\ Support/LiveUpdate/jlu.jar com.symantec.liveupdate.LiveUpdate -d 
 

Linux (including SAV for Linux, SAVFL):

AV definitions
/usr/java/jre1.5.0_17/bin/java -classpath /opt/Symantec/LiveUpdate/jlu.jar com.symantec.liveupdate.LiveUpdate –d

URL Lists (only for products using them)
/usr/java/jre1.5.0_17/bin/java -classpath /opt/Symantec/LiveUpdate/jlu.jar com.symantec.liveupdate.LiveUpdate -d

DDR Lists (only for products using them)
/usr/java/jre1.5.0_17/bin/java -classpath /opt/Symantec/LiveUpdate/jlu.jar com.symantec.liveupdate.LiveUpdate –d


Windows:
Default location for Windows:
a. For 32bit - C:\Program files\Common files\Symantec Shared\Java LiveUpdate\
b. For 64bit - C:\Program files (x86)\Common files\Symantec Shared\Java LiveUpdate\

AV definitions
java -classpath "c:\Program Files\Common Files\Symantec Shared\Java LiveUpdate\jlu.jar" com.symantec.liveupdate.LiveUpdate -d

URL Lists (only for products using them)
java -classpath "c:\Program Files\Common Files\Symantec Shared\Java LiveUpdate\jlu.jar" com.symantec.liveupdate.LiveUpdate -d

DDR Lists (only for products using them)
java -classpath "c:\Program Files\Common Files\Symantec Shared\Java LiveUpdate\jlu.jar" com.symantec.liveupdate.LiveUpdate -d  



Alternatively, you can run the above commands and specify which package to download.
In the following example all packages for Linux are downloaded:

> java -classpath </path/to/jlu.jar> com.symantec.liveupdate.LiveUpdate –d [ -p CSAPI Avenge Definitions for x86-redhat7.2 -v 1.0 -l SymAllLanguages -t virusdef ]
> java -classpath </path/to/jlu.jar> com.symantec.liveupdate.LiveUpdate -d [ -p CSAPI URLListLookup Definitions for x86-redhat7.2 -v 1.0 -l SymAllLanguages -t cfcurllist ]
> java -classpath </path/to/jlu.jar> com.symantec.liveupdate.LiveUpdate –d [ -p CSAPI DDR Definitions for x86-redhat7.2 -v 1.0 -l SymAllLanguages -t cfcfilter ]

 

Attempt a Java LiveUpdate re-installation

If you want to attempt a new installation of JLU, please follow the steps below:

1. Open a command prompt
2. Type: "java -cp /path/to/jlu.jar Installer"

 Note: you will need to restart the machine once the install is completed.

References
The KB articles noted under Related Articles may help you further in troubleshooting Java LiveUpdate 3.x.