WSUS rollup issue
hi,
i having rollup issues , wondering if can shed light on these issues.
i running newly built windows 2012 r2 dc wsus upstream "master" server ver 6.3.9600.16384. server downloads updates directly msft. no ssl. has 10 different computer groups. master replacing older windows 2003 wsus ver 3.2.7600.256 master, worked fine in every way. server wsus server. not have other function.
i have 4 downstream servers running windows 2008 r2 ent - wsus server ver 3.2.7600.256. no ssl. these servers in different countries, , have used them downstream bandwidth issues between sites. these downstream servers handle 120 clients each.
all of clients reporting in downstream server. if approve update master - after replication - downstream server gets approval. replications successful. have run server cleanup wizard on of servers. looks ok....however statuses not being rolled of servers. most, because ones rolling not rolling clients....just some.
i have cleared out software distribution folders on each of downstream servers , seemed in clients rolled up, still isn't right. status of updates ?.
in downstream servers getting errors like...exception=system.web.services.protocols.soapexception: there exception running extensions specified in config file. ---> maximum request length exceeded.
error wsusservice.24 soaputilities.logexception uss throwexception: actor = , method = ?, id=00000000-0000-0000-0000-000000000000, errorcode=internalservererror, message=
@ microsoft.updateservices.internal.soaputilities.logexception(soapexception e)
on upstream server getting errors...
lots of these
warning w3wp.46 dbconnection.onreceivinginfomessage invalid event dropped. eventinstanceid=85ef1862-eb4e-4d2e-b131-3b69fa58bfdf, computerid=e7180476-85ff-447d-bdf9-7b32c6dd87ba. invalid eventid.
lots of these
2016-06-03 08:30:43.343 utc warning w3wp.46 soaputilities.createexception throwexception: actor = http://mna-wsus:8530/clientwebservice/client.asmx, id=50eedff6-d148-463d-858f-1ff9f742d4f3, errorcode=cookieexpired, message=, client=399a0761-4ff5-4621-b7fd-59959835aa56
2016-06-03 08:30:43.531 utc warning w3wp.24 soaputilities.createexception throwexception: actor = http://mna-wsus:8530/clientwebservice/client.asmx, id=289c33d8-4f9a-4b9e-90b6-0127bc3a33b6, errorcode=cookieexpired, message=, client=399a0761-4ff5-4621-b7fd-59959835aa56
2016-06-03 08:30:43.671 utc warning w3wp.3 soaputilities.createexception throwexception: actor = http://mna-wsus:8530/clientwebservice/client.asmx, id=f913561f-b6ac-46c5-b634-24f9cb754b27, errorcode=cookieexpired, message=, client=399a0761-4ff5-4621-b7fd-59959835aa56
2016-06-03 08:30:44.125 utc warning w3wp.23 soaputilities.createexception throwexception: actor = http://mna-wsus:8530/clientwebservice/client.asmx, id=55827d69-8866-4bfa-b76c-00914b8953d8, errorcode=cookieexpired, message=, client=399a0761-4ff5-4621-b7fd-59959835aa56
2016-06-03 08:30:44.218 utc warning w3wp.12 soaputilities.createexception throwexception: actor = http://mna-wsus:8530/clientwebservice/client.asmx, id=2d056a71-62cb-4256-aff4-d2261e88cba9, errorcode=cookieexpired, message=, client=399a0761-4ff5-4621-b7fd-59959835aa56
2016-06-03 08:30:45.640 utc warning w3wp.43 soaputilities.createexception throwexception: actor = http://mna-wsus:8530/clientwebservice/client.asmx, id=e9bd5779-81c3-405d-9d7c-0aa67a5d607d, errorcode=cookieexpired, message=, client=399a0761-4ff5-4621-b7fd-59959835aa56
2016-06-03 08:30:46.593 utc warning w3wp.23 soaputilities.createexception throwexception: actor = http://mna-wsus:8530/clientwebservice/client.asmx, id=18b55ee2-6b84-45ca-9750-c3af284d7b5f, errorcode=cookieexpired, message=, client=399a0761-4ff5-4621-b7fd-59959835aa56
2016-06-02 23:56:42.754 utc error wsusservice.67 susservice.validateservercertificate find certificate problem. error: remotecertificatechainerrors
@ microsoft.updateservices.eventsystem.susservice.validateservercertificate(object sender, x509certificate certificate, x509chain chain, sslpolicyerrors sslpolicyerrors)
@ system.net.security.remotecertificatevalidationcallback.invoke(object sender, x509certificate certificate, x509chain chain, sslpolicyerrors sslpolicyerrors)
@ system.net.servercertvalidationcallback.callback(object state)
@ system.threading.executioncontext.runinternal(executioncontext executioncontext, contextcallback callback, object state, boolean preservesyncctx)
@ system.threading.executioncontext.run(executioncontext executioncontext, contextcallback callback, object state, boolean preservesyncctx)
@ system.threading.executioncontext.run(executioncontext executioncontext, contextcallback callback, object state)
@ system.net.servercertvalidationcallback.invoke(object request, x509certificate certificate, x509chain chain, sslpolicyerrors sslpolicyerrors)
@ system.net.security.securechannel.verifyremotecertificate(remotecertvalidationcallback remotecertvalidationcallback)
@ system.net.security.sslstate.completehandshake()
@ system.net.security.sslstate.checkcompletionbeforenextreceive(protocoltoken message, asyncprotocolrequest asyncrequest)
@ system.net.security.sslstate.processreceivedblob(byte[] buffer, int32 count, asyncprotocolrequest asyncrequest)
@ system.net.security.sslstate.startreceiveblob(byte[] buffer, asyncprotocolrequest asyncrequest)
@ system.net.security.sslstate.processreceivedblob(byte[] buffer, int32 count, asyncprotocolrequest asyncrequest)
@ system.net.security.sslstate.startreceiveblob(byte[] buffer, asyncprotocolrequest asyncrequest)
@ system.net.security.sslstate.processreceivedblob(byte[] buffer, int32 count, asyncprotocolrequest asyncrequest)
@ system.net.security.sslstate.startreceiveblob(byte[] buffer, asyncprotocolrequest asyncrequest)
@ system.net.security.sslstate.forceauthentication(boolean receivefirst, byte[] buffer, asyncprotocolrequest asyncrequest)
@ system.net.security.sslstate.processauthentication(lazyasyncresult lazyresult)
@ system.threading.executioncontext.runinternal(executioncontext executioncontext, contextcallback callback, object state, boolean preservesyncctx)
@ system.threading.executioncontext.run(executioncontext executioncontext, contextcallback callback, object state, boolean preservesyncctx)
@ system.threading.executioncontext.run(executioncontext executioncontext, contextcallback callback, object state)
@ system.net.tlsstream.processauthentication(lazyasyncresult result)
@ system.net.tlsstream.write(byte[] buffer, int32 offset, int32 size)
@ system.net.connectstream.writeheaders(boolean async)
@ system.net.httpwebrequest.endsubmitrequest()
@ system.net.httpwebrequest.getresponse()
@ system.web.services.protocols.webclientprotocol.getwebresponse(webrequest request)
@ system.web.services.protocols.soaphttpclientprotocol.invoke(string methodname, object[] parameters)
@ microsoft.updateservices.reporting.webservice.reporteventbatch(cookie cookie, datetime clienttime, reportingevent[] eventbatch)
@ microsoft.updateservices.internal.reporting.rollup.rollupeventreporter.reporteventbatchimpl(cookie cookie, reportingevent[] events)
@ microsoft.updateservices.internal.reporting.rollup.rollupeventreporter.reporteventbatch(cookie cookie, reportingevent[] eventsbatch)
@ microsoft.updateservices.internal.reporting.rollup.microsoftupdaterollup.reportevents(cookie cookie, reportingevent[] events)
@ microsoft.updateservices.internal.reporting.rollup.microsoftupdaterollup.dorollup()
@ microsoft.updateservices.internal.reporting.rollup.rollupagent.wakeupworkerthreadproc()
@ system.threading.executioncontext.runinternal(executioncontext executioncontext, contextcallback callback, object state, boolean preservesyncctx)
@ system.threading.executioncontext.run(executioncontext executioncontext, contextcallback callback, object state, boolean preservesyncctx)
@ system.threading.executioncontext.run(executioncontext executioncontext, contextcallback callback, object state)
@ system.threading.threadhelper.threadstart()
2016-06-02 23:56:42.769 utc warning wsusservice.67 servercertificatevalidator.verifyservercertificate the server certificate validation failed because of ssl policy error: remotecertificatechainerrors
2016-06-02 23:56:42.785 utc warning wsusservice.67 webservicecommunicationhelper.processwebserviceproxyexception processwebserviceproxyexception found exception webexception. action: retry. exception details: system.net.webexception: underlying connection closed: not establish trust relationship ssl/tls secure channel. ---> system.security.authentication.authenticationexception: remote certificate invalid according validation procedure.
@ system.net.security.sslstate.startsendauthresetsignal(protocoltoken message, asyncprotocolrequest asyncrequest, exception exception)
@ system.net.security.sslstate.processreceivedblob(byte[] buffer, int32 count, asyncprotocolrequest asyncrequest)
@ system.net.security.sslstate.startreceiveblob(byte[] buffer, asyncprotocolrequest asyncrequest)
@ system.net.security.sslstate.processreceivedblob(byte[] buffer, int32 count, asyncprotocolrequest asyncrequest)
@ system.net.security.sslstate.startreceiveblob(byte[] buffer, asyncprotocolrequest asyncrequest)
@ system.net.security.sslstate.processreceivedblob(byte[] buffer, int32 count, asyncprotocolrequest asyncrequest)
@ system.net.security.sslstate.startreceiveblob(byte[] buffer, asyncprotocolrequest asyncrequest)
@ system.net.security.sslstate.forceauthentication(boolean receivefirst, byte[] buffer, asyncprotocolrequest asyncrequest)
@ system.net.security.sslstate.processauthentication(lazyasyncresult lazyresult)
@ system.threading.executioncontext.runinternal(executioncontext executioncontext, contextcallback callback, object state, boolean preservesyncctx)
@ system.threading.executioncontext.run(executioncontext executioncontext, contextcallback callback, object state, boolean preservesyncctx)
@ system.threading.executioncontext.run(executioncontext executioncontext, contextcallback callback, object state)
@ system.net.tlsstream.processauthentication(lazyasyncresult result)
@ system.net.tlsstream.write(byte[] buffer, int32 offset, int32 size)
@ system.net.connectstream.writeheaders(boolean async)
--- end of inner exception stack trace ---
the stack trace head scratching...i have no idea talking regards ssl , certs.
thanks
matt
hi argodzilla,
please upgrade wsus servers latest version , check result.
for upstream server 2012, please install kb3095113
https://support.microsoft.com/en-sg/kb/3095113
for downstream server 2008 r2, please install kb2938066 upgrade 3.2.7600.274
https://support.microsoft.com/en-sg/kb/2938066
on wsus clients, please reset windows update component:
https://support.microsoft.com/en-us/kb/971058
best regards,
please remember mark replies answers if , unmark them if provide no help. if have feedback technet support, contact tnmff@microsoft.com.
Windows Server > WSUS
Comments
Post a Comment