ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Package download issues on Symantec Management Agent from a Windows 2003 Package Server.

book

Article ID: 161378

calendar_today

Updated On:

Products

Management Platform (Formerly known as Notification Server)

Issue/Introduction

 Symantec Management Agent is not able to download a package from Windows 2003 Package Server. Agent is able to download other packages, though.

 SMA logs:

"Operation 'Get File' failed. 
Path: \\SMP FQDN\SoftwareLibrary\Package G\SEP 12.1.5337.5000 - English\sdi.dat 
Error type: Network error 
Error note: UncTransfer::OpenSourceFile error. Failed to open source file 
Error message: The network path was not found","NetworkOperation","AeXNetComms.dll","7200","Errors"
 
When browsing to the package, in IIS, under the Package GUID folder, received - "HTTP Error 404 - File or Directory not found".
 
Events noticed on Package Server: 
"Unable to set security for file 'D:\Altiris\Altiris Agent\Package Delivery\{965accd2-e81b-4002-bb12-1acb4d6d91ae}', Error:The system cannot find the file specified
 
(2)","CFileSecurity","AeXNSCPackageServer.dll","2884","Errors" 
"Unable to get buffer length for SD of file 'D:\Altiris\Altiris Agent\Package Delivery\{965accd2-e81b-4002-bb12-1acb4d6d91ae}' 
 
(2)","CFileSecurity","AeXNSCPackageServer.dll","2884","Errors" 
"Status file is missing for the existing package: {965ACCD2-E81B-4002-BB12-1ACB4D6D91AE}. The package will be reinitialized","Package Server 
 
Agent","AeXNSCPackageServer.dll","2884","Warnings" 
 
Noticed that while browsing the SEP package {965accd2-e81b-4002-bb12-1acb4d6d91ae} in IIS received the following error in IIS logs: 
2014-11-03 12:09:14 W3SVC1 ROCBUC-INP01 10.26.1.54 GET /Rejected-By-UrlScan ~/Altiris/PS/Share/pkggroup_%7B14062f2b-bf8e-414f-9ff5-4287f3d91802%7D/%7B965ACCD2-E81B-
 
4002-BB12-1ACB4D6D91AE%7D/cache/SEP%2012.1.5337.5000%20-%20English/sdi.dat 9200 - 10.26.242.49 HTTP/1.1 - - - ROCBUC-INP01.ro.EU.lafargeone.net 404 2 1795 246 78

 

Cause

 Checked the package in the \Altiris\Altiris Agent\Package Delivery folder. The complete package was present. So, the Package Server had received the package.

The Agent however, had not received the package in the \Altiris\Altiris Agent\Agents\SoftwareManagement\Software Delivery folder.
 
The GET request was getting rejected by UrlScan as noticed in the URLScan logs.

Resolution

 Check the following: 

- Ensure that Directory Browsing is enabled in: Properties > Directory tab, for the package folder and subfolders in IIS. 
- For the Default Web Site, on the Home Directory tab, ensured Scripts and Executables is selected in the Execute Permissions list. 
- Make sure that the "Everyone" group has the following NTFS file system permissions on the C:\InetPub\wwwroot folder or on the folder that has the Web content for the site that you want: 
 
Read & Execute 
List Folder Contents 
Read 
 
- For the Default Web Site, on the Home Directory tab, make sure that DefaultAppPool is selecting in the Application pool box. 
- On the DefaultAppPool > Identity tab, make sure that the Network Service account is selected.
- On the Packahe GUID folder > Properties > Directory Security Tab > Authentication and access control, ensure that Integrated Windows authentication is checked along with Anonymous Access (IUSR_ServerName)
 
If you are getting some unexplainable 404 errors when accessing html or asp.net pages in IIS, and have exhausted the more common issues, check out your log file for URLScan errors. URLScan is a Microsoft security tool to help protect Internet Information Server. On your developer environment it might be getting in the way.
 
-The GET request was getting rejected by UrlScan as noticed in the URLScan logs as follows: 
 
2014-10-31 00:00:30 10.26.11.136 1 HEAD /Altiris/PS/Share/pkggroup_%7Ba4cd2343-79aa-4ea7-98e6-0e9b3486333c%7D/%7B965ACCD2-E81B-4002-BB12-1ACB4D6D91AE%7D/cache/SEP%2012.1.5337.5000%20-%20English/sdi.dat Rejected URL+contains+dot+in+path URL - - 
 
How Can I Disable URLScan:
 
    Go to the Control Panel -> Administrative Tools -> Internet Information Services
    Click WebSites folder, right click to get Properties
    Click ISAPI Filters tab, find URLScan in the list, click Remove button, then OK to save
    From Command Prompt (Start -> Run -> Cmd), type “iisreset”, to restart IIS
 
How Do I Configure URL Scan:
There is a configuration file located here:
<Windows Folder>\system32\inetsrv\urlscan\UrlScan.ini
Additional log files are also stored in that directory.
 
Checked in the UrlScan.ini, the setting for "AllowDotInPath" was = "0" . If 1, allow dots that are not file extensions. Hence, change this setting to 1 and reset IIS.

Applies To

Symantec Management Platform 7.5 SP1 HF3

Package Server on Windows Server 2003 Standard/Enterprise R2 SP1