Anyone else deploying the latest security-only patch MS-KB3192391 via a custom bulletin?

Hello all,

does anyone experience with tweaking SSL? I need to turn SSL v3 off on RCS in Radia 8.1. Documented is only configuring cipher set in EDMPROF.

Any idea?

Libor

What Service\Package setting controls whether the client deletes the compressed resources after the package installation is completed. (not the AIP, I mean the LIB\DATA resources).  I thought it was possible to configure these to remain in place but I can't seem to find the setting.  (we have 9.2 if it makes a diff)

test

test

 

In 7.8, when deploying the client agent from the Portal we had the capability to select a Profile (Agent Media install) and to select an Initialization file  (install.ini).

 

I'm looking in 10.0 and I dont see the same funcitonality with deploying an Agent.

 

 Is there something that I can enable in 10.0 to give me the drop down for selecting different install.ini when deploying from the Portal.

 

 

 

 

 A quick reminder that our custom Radia Patch Management solutions are not impacted by Microsoft's decision to limit OS patching to roll-ups instead of individual bulletins/kb's.  As long as the modules are available for manual download we can develop a custom Radia Patch Management solution based on individual requirements, including any individual kb's/patches released by Microsoft in the future.

I was able to acquire the latest wsusscn2.cab file around 5am this morning.

 

Hi ,

 

i am using 9.2 radia client automation application i am abel to add windows server but i am not able to add Linux server any one guide me????

Our group is at a bit of a stalemate when it comes to adding OS level Zstops to all CSDB services.

We currently support over 800 applications and when a new OS comes out we can spend months testing all our applications on the new OS platform.  Unfortunately, and as an example; if the service currently has a WIN7 zstop on it we can’t quickly test the applications on WIN10. It’s a long process carefully adjusting Zstops on every application so they can even be tested. (We have to do this by exporting the .xpi files and opening them in notepad, changing the Zstop, and reimporting back into the system.) That way it doesn’t modify the date and time stamp of the service and force a reinstall of the software throughout the environment.  As another example, if the application ends up working on WIN10 we would typically add the new OS Zstop to the service and will be faced with the same problem later when WIN12 comes out. 

That means that our only other solution is to NOT add an OS Zstop at all unless the software just won’t work on a particular OS.  We’ve gone through many discussions on the pros and cons of adding the OS level Zstop to all software. The biggest pro of adding the OS Zstops is to prevent major catastrophes like blue screening every machine that has a particular software on a new OS. The major con of the OS Zstop is that it can take months of testing on the new OS. With hundreds of supported applications, it becomes a huge undertaking.   

I’m curious what other companies are doing and if they face the same pain points that we go through when a new OS enters the picture? Maybe there is some solution we aren’t even considering?

L.S.,

I think I have done it once using a GUI (CSDB Editor?), but cannot remember how I did it.

From the Readme of QCCR1C50138:

 
1. Add a new attribute SUPLONGF in CLIENT.SETTINGS class.
2. Set the length of SUPLONGF attribute is 1 and value is Y/N.

I can navigate to PRIMARY / CLIENT / SETTINGS / _BASE_INSTANCE_ and there it stops. How do I add this attribute?

JP.

1. Can I/How do I, publish files that are not resident on the computer I'm logged into?  It seems mapped drives do not appear in the Publisher drop-down, only local drives. 

2. When I publish a file for deployment, how do I specify the delivery location desired on the client?  (Example: I publish the source file from my machine in c:temp\package\, I wish to have radia deploy the published package to the clients c:\dropzone\ folder.

We are in the inital phases of defining a new infrastuctrrue (Hardware Upgrade) which will require the site Satellite Full stream servers to be re-directed to an new upstream server. I'm wondering if any one has a script to do this? Would save me some time.

I am attempting to create a solution in which I remotely tell a system to capture an image of the C drive and store it to D partition. Then if the C becomes corrupt I can have someone manually load the image from D back over C using a imagex disk. Has anyone else been able to accomplish this or something similar? Personality Backup and Restore, along with capturing the image and pulling it back to the server will not suffice as we have technicians out in the field who will need to access the image(backup) on demand.

Hello, we are starting use Radia to deploy Microsoft patches, we have a highly remote environment and always connected through WWAN. My question is what is best practices for patching highly mobile devices, and if you use a VPN application how do you split the connection so it automatically downloads patches using WIFI once the computer connects once in house.

 

I’m migrating a CSDB to 9.2 and in the migration guides best practices, for the audit domain, it states to migrate the individual services. Based on this, I’m assuming it’s an export for each zservice in the audit domain to produce the instance, class and resource file.   In another part of the migrate guide, it states to export all resources for the CSDB, again I’m assuming a single resource file for all resources in the CSDB. The question is, if the audit domain is by service which produces a xpi, xpr, xpc won’t this over write the schema changes when I import it.

 

 

 

 

 

The June acquisition is only bringing down MS16-070. I have an urgent case open with Accelerite to investigate the problem.

Hi there, Is there a way to export the published packages in Radia.

through radia 7.9 I used a batch file that called radconsw with an .ext file to select which radia manager I would connect to with radxplor. The ext file had been created in2001 with a radia paint program that now appears to be replaced by panelpgm. the combination of radconsw and the ext file made a change to the zmaster.zipaddr value on the machine it was run on, then launched radxplore to initiate the connecteion the the csdb editor. this is no longer functioning with the client upgraded to 9.2. are there new tools that replace what was working? is there a better method for selecting among several managers when launching the scdb editor?

I first created a computer object in my "Computers" OU. Ran a few patch notifies to the machine in the RCA Console and it succeeded. Next day I created a "Technology" sub OU under my "Domain" OU to keep things in order and did the same notifies, but the notifies failed. Just for the heck of it I moved the object back into the original OU since there it was succeeding, and the notifies didnt fail. Can anyone give some insight as to why this would be happening? I wouldnt think it would matter which container you have the computer object in. Thanks in advance.

When I launch the enterprise console I get a "The server is temporarily unable to service your request.Please try after sometime" error. How can I go about fixing this or what logs should I look into to remediate this error?

The package is a .exe, and I try to deploy this .exe with scripts .cmd and vbs. Inside de cmd I have the command line in order to install the setup.exe. The command line works perfectly alone, but when I try to deploy the package with the agent, it gives me an error: Method error. I don't know what is the problem. Could you help me please?

Folks, I’m looking for the best practices for un-installing a Radia agent. On these specific machines, they will not be upgraded a newer version of Radia, but will be imported into a homegrown patch distribution tool only. These devices are used in a Dyno cell environment and are isolated from the corporate network but have their own private non-routable network. Anyway, I need to see if there are best practices related to un-installing the radia agent.

I'm planning an upgrade from 7.8 to 9.2 and I noticed that a new edm attribute is in the ldif file labeled as edmUsers. Our schema was extended in version 4.2 in which it wasn't there. So the question I have is it required? We don't deploy services based on users. I think the answer is no, but I'm looking to confirm.

I noticed in 9.2 when you install a core server, the default configuration of the dda file is for core.dda.cfg and patch.dda.cfg to use the same DSN. Is this normal? I though in previous version that it was recommended to keep Inventory and patch separate? I'm planning an upgrade so I need to understand what the recommendations for patch and RIM. Any thoughts?

Can someone explain why/how the MySQL and Tomcat process are used on a Full Service Satellite. I had always understood these where part of the Core. However, I am seeing a bunch of stuff with netstat showing there is internal communication between some of these components during client connect. (SATLRCCDLIN549 is 127.0.0.1/localhost). I am running 9.1. TCP 127.0.0.1:3479 SATLRCCDLIN549:50604 ESTABLISHED [mysqld-nt.exe] TCP 127.0.0.1:3479 SATLRCCDLIN549:50605 ESTABLISHED [mysqld-nt.exe] TCP 127.0.0.1:3479 SATLRCCDLIN549:50607 ESTABLISHED [mysqld-nt.exe] TCP 127.0.0.1:3479 SATLRCCDLIN549:50608 ESTABLISHED [mysqld-nt.exe] TCP 127.0.0.1:3479 SATLRCCDLIN549:50609 ESTABLISHED [mysqld-nt.exe] TCP 127.0.0.1:3479 SATLRCCDLIN549:50610 ESTABLISHED [mysqld-nt.exe] TCP 127.0.0.1:3479 SATLRCCDLIN549:50611 ESTABLISHED [mysqld-nt.exe] TCP 127.0.0.1:3479 SATLRCCDLIN549:50612 ESTABLISHED [mysqld-nt.exe] TCP 127.0.0.1:3479 SATLRCCDLIN549:50613 ESTABLISHED [tomcat.exe] TCP 127.0.0.1:50605 SATLRCCDLIN549:3479 ESTABLISHED [tomcat.exe] TCP 127.0.0.1:50607 SATLRCCDLIN549:3479 ESTABLISHED [tomcat.exe] TCP 127.0.0.1:50608 SATLRCCDLIN549:3479 ESTABLISHED

Question withdrawn

I have patched around 40 machines in our environment using RCA but I want to know why the finalizing patch installation takes too much time. Also need to know about why I am getting too much errors on

The wsusscn2.cab file being acquired in my lab is currently dated Feb 9th. Seems like someone at Microsoft is sleeping on the job again.

HI Team, I need to know that after I patched machines through RCA then how much time will it take to reflect the status into the patch compliance reports. Thanks & Regards Sumant Kulkarni EMS Team|Polaris Ph: 022-27595658