[RESOLVED] WAPTWUA Repository

[jonathan.k]

Good morning,

While waiting for a solution for a repository on a Pi, I am performing tests on a Debian system.
The repository is clearly visible in the repository tab, and it is properly synchronized.

I pushed the configuration to an OU (wapt-get.ini):

Code: Select all

[global]
repo_url=https://depot-mas-tg.mondomaine.local/wapt
send_usage_report=1
use_hostpackages=1
wapt_server=https://srv-wapt.mondomaine.local
use_kerberos=0
check_certificates_validity=1
verify_cert=0
dnsdomain=
max_gpo_script_wait=180
pre_shutdown_timeout=180
hiberboot_enabled=0
use_ad_groups=1
use_repo_rules=True
waptaudit_task_period=1d
use_fqdn_as_uuid=1
[wapt-templates]
repo_url=https://store.wapt.fr/wapt
verify_cert=1
[waptwua]
enabled=True
default_allow=false
install_at_shutdown=true
install_delay=7d
download_scheduling=1d
allow_direct_download = False

When I request an update check, I get the following error:

Code: Select all

Start Windows Updates Scans

Ensure wuauserv Auto Update option is disabled
Scanning with windows updates rules:
{
 "direct_download": false, 
 "default_allow": false, 
 "install_delay": "7d", 
 "download_scheduling": "1d", 
 "filter": "Type='Software' or Type='Driver'", 
 "install_scheduling": null
}

Unable to refresh wsusscan cab, using old one. (error: ConnectionError: HTTPSConnectionPool(host='depot-mas-tg.mondomaine.local', port=443): Max retries exceeded with url: /waptwua/wsusscn2.cab (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x09598730>: Failed to establish a new connection: [Errno 10061] Aucune connexion n\x92a pu \xeatre \xe9tablie car l\x92ordinateur cible l\x92a express\xe9ment refus\xe9e',)))

Thank you for your help.

[dcardon]

Hi Jonathan,

did you install the tis-enable-remote-repo-nginx package after deploying the agent on the Debian system?
Is the nginx process listening (netstat -tapn | grep 443 after installing net-tools)?
Is there a firewall configured on the machine (iptables -L)?

Denis

[jonathan.k]

The tis-enable-remote-repo-nginx package was not installed, now it is.

Here is the result of the command netstat -tapn |grep 443:

Code: Select all

tcp        0      0 0.0.0.0:443             0.0.0.0:*               LISTEN      568/nginx: master p

And here is the result of a scan launched from the console:

Code: Select all

Start Windows Updates Scans

Ensure wuauserv Auto Update option is disabled
Scanning with windows updates rules:
{
 "direct_download": false, 
 "default_allow": false, 
 "install_delay": "7d", 
 "download_scheduling": "1d", 
 "filter": "Type='Software' or Type='Driver'", 
 "install_scheduling": null
}
Looking for updates with filter: Type='Software' or Type='Driver'
   Connecting to local update searcher using offline wsusscn2 file...
   Offline Update searcher ready...

Waiting for WUA search to complete
Waiting for WUA search to complete
Searching s
Searching 1s

Searching 2s

Searching 3s

Searching 4s

Searching 5s

Searching 6s

...

It seems to be ending without error, but I'm not sure.

[dcardon]

Hi Jonathan,

you should be able to retrieve the status from the WAPT console under the Windows Update tab. It should show the installed KBs and the KBs awaiting installation.

Denis

[jonathan.k]

Hi Denis

, that's all good for me, I do have pending updates.

Thanks, I'm marking this as resolved.