Updated 25 September 2006
Linux Logo

Performing Patch Diagnostic for an Individual Server


Description:
  • This procedures describes how to perform a Patch Diagnotics for single server.
Prerequisites:
  • A valid "patchdiag.xref" file must exist in the q-Status/conf/ directory.
Note:
  • The Unix commands showrev -p or patchadd -p. are used to collect patch information.
  • The "qStatus.conf" file defines the location where patch lists are saved. The default location is q-Status/data_patch_lists.
  • The Sun "patchdiag.xref" is located in the q-Status/conf/ directory.

Step Action Description

1

In the "Basic" Icon set,
from Patches
Icon select patchdiag

Move mouse cursor over the Patches Icon till "patchdiag" title is enlarged, then click. The single host selection page will be displayed with a "PatchDiag Selection" Title.

Note: Rollover text in blue in any GUI Icon indicates a single server selection dialog for reporting.
2 Optionally Sort and Filter

The "PatchDiag Selection" report is initially sorted sorted by Hostname. This can be accending or decending using the up and down arrows () in the sortable column headers. Sortable columns are "Hostname", "System Type" and "OS".

The Group: drop down filter will display only those servers assigned to that group.

3 Select Servers

Move mouse cursor over magifying icon () in a row for that Hostname till it enlarges, then click. The "Current Patch Diagnostics Listing" report will be display.

4 Breakdown of Report Tables

The "Current Patch Diagnostics Listing" consist of three tables:

  • Patchdiag Summary Table
    • Selected Patch Release Date Filter.
    • Selected Patch Type(s).
    • Total Number of Installed Patches of this type.
    • Number of Withdrawn patches (under percentage bar if applicable).
    • Percent bar of Patches whose revision are compliant with Sun "patchdiag.xref" file.
    • Current OS Revision.
    • System Type.
    • Date of collection data.
    • Hostid.
    • Date of cross reference "patcxhdiag.xref" file.
  • Patch Type Key (used to decode entires in "Patch Type" column.
  • Installled Patches
    • Patch Number.
    • Installed Patch Revision.
    • "patcxhdiag.xref" "Latest Revision.
    • Patch Type (can consist on multiple entries):
      • Patch Type 'R' are recommended patches that are considered the most important and highly recommended patches that avoid the most critical system, user, or security related bugs.
      • Patch Type 'S' are Security patches.
      • Patch Type 'Y' are Y2K patches.
      • Patch Type 'W' are WITHDRAWN patches. A later recommened patch revision will remove a WITHDRAWN Patch.
      • Patch Type 'B' are Bad patches to be WITHDRAWN.
      • Patch Type 'O' are Other Patch that are not listed in the recommended or security patch lists. Other patches also include patches that are special patch releases from Sun Microsystems that are not documented in the patchdiag.xref file.
    • Patch Synopsis. if no synopsis is defined in Sun "patchdiag.xref" file, the entries "No cross reference info available" wiil be displayed with a light blue background.

In the "INSTALLLED PATCHES" table, the row color keys are assigned as shown in the following table:

Background
Color
Synopsis
Background
Definition Text
Style
None Gray No Discrepancy none
Pink Yellow Patch Revision Discrepancy bold
Pink Yellow WITHDRAWN Patch bold Red
Pink Green New Patch Requirement none
Light Blue Light Blue No cross reference info available none

Note: New Patch Requirements are calculated with in the q-Status™ Patch Diagnostic program by cross-referencing current patches to patchdiag.xref and noting patches that are obsoleted by installation of another patch. If the new patch which obsoletes an existing patch is new and never been installed, it is noted in the report with a green highlight of its synopsis.

5 Check for any WITHDRAWN patch
Requirements
Check the first table in the "Current Patch Diagnostics Listing" Report to see is any of the patches installed on the server need to be WITHDRAWN.

Number of WITHDRAWN patches count appear in red with the word "withdrawn:" under the percent bargraph in the first table (Patchdiag Summary Table).

Check the "INSTALLED PATCHES" listing to locate the WITHDRAWN patch which will appears a bold text in red.

Solutions to the removal of the patch may be as simple as installing a later revision of that same patch. A red hyperlink will be present to provide more detail of the patch update or replacement. Clicking this link will display more information on this update.

Note: The Sun "patchdiag.xref" cross-reference files contains not only the current rev of a patch, but a listing of the same patch if a prior revision was WITHDRAWN. If a server has this prior WITHDRAWN version installed, q-Status™ Solaris Patch Diagnostic Listing will highlight in Bold red lettering the WITHDRAWN patch number and revision installed. WITHDRAWN patch versions should be removed, updated to the latest version or superseded. Leaving a WITHDRAWN patch on a system can cause issues.
6 Optionally filter by "Discrepancy Only"
This "Discrepancies Only" filter will display only patches and their synopsis where the "Installed Revision" does not match the "Latest Revision". "Full Display" will display all patches and their synopsis.

Toggle the "Discrepancy Only/Full Display" button to show only the patch diagnostic discrepancies or the entire patch diagnostic list.

A five second or greater alert window will appear. Click "OK" to contine and the filtered report will be displayed.

7 Optionally filter patch report by patch
type.
Patch Diagnostic provides patch filtering display based on classification embedded in the patchdiag.xref. These classifications are:
  • Recommended - Patches that are highly recommended to be installed (default)
  • Security - Patches specifically to support Solaris security issues
  • Y2K - patches that are specifically for Y2K issues.
  • Other

The "Withdrawn" classification is always selected and cannot be de-selected.

Select or de-selected the "Patch Type" using a check box (). To display the results, click the "Re-Calculate" button.

A five second or greater alert window will appear. Click "OK" to contine and the filtered report will be displayed.

8 Optionally filter patch diagnotic
report by patch release dates.
Use the "Patch Release Date Filter" pulldown for filter the discrepancy report by age.

Selecting from the pulldown will automatically generate a five second or greater alert window will appear.

Click "OK" to contine and the filtered report will be displayed.

The "patchdiag.xref" files contains the release date of each patch. This can be used to exclude patches that have been updated recently from the comparison through a pulldown ("Patch Release Date Filter") by the number of days. The options are:

  • None - no date filter is applied (default).
  • 30 days - consider only patches released prior to 30 days
  • 60 days - consider only patches released prior to 60 days
  • 120 days - consider only patches released prior to 120 days
  • Six Months - consider only patches released prior to six months
  • 1 Year - consider only patches released prior to one year

The default is "None". Selecting any other of the "Patch Release Date Filters" exclude any recent patches defined by the age filter. The age filter is ignored for any WITHDRAWN patches and new patches that are required for obsolete patches that are superseded.

Warning: Excluding a newer patch number by the age filter, excludes these newer patch numbers from any comparison even though there might be a previous version of the patch. The patchdiag.xref contains only a list of the most recent patch revisions and not the previous versions, therefore the aged recommmendations are questionable in their answers.
9 Optionally save patch list Use the "Save List" function of this report generates a patch discrepancy report and a withdrawn patch report as as two text. These files are created in the data_patch_lists/ directory whose location is defined by the "qStatus.conf" file. The default location is q-Status/data_patch_lists

Click on the "Save List" link at the top of page on the far right hand side to generate a patch discrepancy report and a withdrawn patch report as a text files. A five second or greater alert window will appear.

Click "OK" to contine. A "Patch Diagnostics Listing" window will be displayed which represent both a patch discrepancy report file and if required a patch withdrawn list.

.... .... .... .... ....

.... .... .... .... ....

.... .... .... .... ....

The "Save List" function will generate the discrepancy patch text file list in the data_patch_lists/ directory of q-Status™. This text file is called "<hostname>.patchlist".

If WITHDRAWN patches are also required, a WITHDRAWN report "<hostname>.withdrawn" text file will also be generated in the same location.

Both reports consist of patch number, current patch revision, latest patch revision and synopsis.

10 Help for the "Current Patch
Diagnostics Listing
" report
Explanations of the "Current Patch Diagnostics Listing" filters and options are described in a help windows accessed from the "Help" link at the top of page on the right hand side.

Click the "Help" link to display help windows