KNOWN ISSUE: Client machines are unable to download a software package that contains a .asp file

book

Article ID: 158861

calendar_today

Updated On:

Products

Management Platform (Formerly known as Notification Server)

Issue/Introduction

Customer reported that they have an issue where the client machines are unable to download from their package server a software package that contains a .asp file.

Steps to duplicate:

1-Disable UNC source downloads under package server settings.(disable Publish UNC Codebase)
2-Edit the coresettings.config file Set PkgSvrPUclishUNC type"local" Value="false" GenerateNSUNCPackageCodebases" type="local" value="0"
3-Create a package that has *.asp file in it and assign it to be delivered to your site server and work stations in question.
4-Check the site server and it will get there with the codebase.
5-Go to a workstation that is serviced by the site server and check the package. The codebase does not show up for the package from the Agent details. The agent doesn't appear to attempt the package download from the log entries.
6-Go to the Site Server IIS logs and it will show a 403 error as follows:
2013-04-01 20:25:57 W3SVC1 SMP-W2K3-01 192.168.2.20 HEAD /Altiris/PS/pkggroup_{79b0978c-552d-4ed7-9197-df9a42113c1d}/{D2C42A66-A883-4BC8- ABC9-90C5A089C7E2}/cache/archivesinkadmin.asp - 80 - 192.168.2.20 HTTP/1.1 - - - SMP-W2K3-01.EPM.local 403 0 175 205 0
2013-04-01 20:31:57 W3SVC1 SMP-W2K3-01 192.168.2.20 HEAD /Altiris/PS/pkggroup_{79b0978c-552d-4ed7-9197-df9a42113c1d}/{D2C42A66-A883-4BC8- ABC9-90C5A089C7E2}/cache/archivesinkadmin.asp - 80 - 192.168.2.20 HTTP/1.1 - - - SMP-W2K3-01.EPM.local 403 0 175 205 0


The Notification Server has the correct files and delivers it to the Site server which has the correct files under the altiris agent\package delivery folder. The same box also has the files in the altiris agent\agents\software management\software delivery\GUID## folder. The agent computer does not get the software management\software delivery\GUID## folder created for the package. If you browse to the package location using the internet browser, if you "right-click>Save Target as" on the .asp file, it will not download.

 

Error 1:

Process: AeXNSAgent.exe (1828)
Module: AeXNetComms.dll
Source: AeXNetworkTransport
Description:
GetFiles
'HTTP://SMP.Domain.com/Altiris/PS/%7BC947A3AB-EB50-44B3-A36A-87892E6230B4%7D/program%20files/Common%20Files/Crystal%20Decisions/2.0/crystalreportviewers/crsmarttag.asp\'->\'C:\Windows\Temp\SWD\{C947A3AB-EB50-44B3-A36A-87892E6230B4}\program
files\Common Files\Crystal Decisions\2.0\crystalreportviewers\crsmarttag.asp'
failed: HTTP error: 403 Forbidden (-2147209951)

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

Process: AeXNSAgent.exe (1828)
Module: AeXNetComms.dll
Source: CoNetworkTransport(544)
Description:
HTTP error: 403 Forbidden (-2147209951)

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

Process: AeXNSAgent.exe (1828)
Module: AeXPackageDelivery.dll
Source: PackageDownload
Description:
Download Package failed: HTTP error: 403 Forbidden (-2147209951)
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

Error 2:

Process: AeXNSAgent.exe (1788)
Module: AeXNetComms.dll
Source: AeXNetworkTransport
Description:
GetFiles
'HTTP://SMP.Domain.com/Altiris/PS/%7B30962913-54D5-427B-8CC1-6E6B3F39DFD1%7D/program%20files/Common%20Files/Crystal%20Decisions/2.0/crystalreportviewers/EnterpriseReportManager.asmx\'->\'C:\Program
Files\Altiris\Altiris Agent\Agents\SoftwareManagement\Software
Delivery\{30962913-54D5-427B-8CC1-6E6B3F39DFD1}\cache\program files\Common
Files\Crystal Decisions\2.0\crystalreportviewers\EnterpriseReportManager.asmx'
failed: HTTP error: 403 Forbidden (-2147209951)

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
Process: AeXNSAgent.exe (1788)
Module: AeXNetComms.dll
Source: CoNetworkTransport(544)
Description:
HTTP error: 403 Forbidden (-2147209951)

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

Process: AeXNSAgent.exe (1788)
Module: AeXPackageDelivery.dll
Source: PackageDownload
Description:
Download Package failed: HTTP error: 403 Forbidden (-2147209951)

Cause

Known issue. Package server download location have protection from scripts download.

Fix:  Protected by IIS files will be downloaded through dedicated asp downloader script.

 

Resolution

This issue has been fixed in the ITMS 7.1 SP2 MP1 Rollup v6. See HOWTO81832 under item # 3149109.

ITMS 7.1 SP2 MP1 Rollup v6 addressed the issue where files within a package that have specific file extensions (IIS reserved extensions such as .ASP) are not transferred. In addition to the fixes installed server side by the rollup, a list of allowable extensions must be maintained client side. The following steps demonstrate how to create and maintain this list in the client registry.

To update the registry on all clients:

1. Add file extensions to "ProtectedIISFileExtensions" list to clients, not just Package Servers.
2. Symantec suggests creating a task with the command line:

REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Altiris\Altiris Agent" /v ProtectedIISFileExtensions /t REG_SZ /d "asp, aspx" /f

Note: '"asp, aspx" is the list of needed extensions that can be downloaded via http codebases.


Applies To

 ITMS 7.1 SP2 MP1