Environment
Novell ZENworks Patch Management 6.4 - ZPM6.4
Situation
This article provides the default Directory Security settings for the Update Server in Internet Information Services (IIS). If problems arise as a result of changes to these settings, use this article to revert the Update Server Website to its original configuration.
Applies To: Update Server: 6.0 or higher
SYMPTOMS
Any of the following problems can be an indication that Internet Information Services is not configured properly:
Any of the following problems can be an indication that Internet Information Services is not configured properly:
- All agents appear offline.
- Access to the Update Server Website is denied.
- The Update Server Website returns an "Internal Server Error" message.
- The Update Server Website returns a "Service Unavailable" message.
- The Update Server Website appears garbled and missing images.
- "Detection results not found" appears in the Platform column of the Computers page.
CAUSE
Communication issues between the Update Server and the IIS Web server typically arise if the default settings in IIS have been altered by the administrators or if configuration settings are modified as the result of security policies instituted on the server or across the network.
Communication issues between the Update Server and the IIS Web server typically arise if the default settings in IIS have been altered by the administrators or if configuration settings are modified as the result of security policies instituted on the server or across the network.
Resolution
RESOLUTION
A) Make certain ASP.NET 1.1 is selected instead of ASP.NET 2.0 or higher:
A) Make certain ASP.NET 1.1 is selected instead of ASP.NET 2.0 or higher:
- On the IIS server, go to Start > Programs > Administrative Tools > Internet Information Services (IIS) Manager (in Windows 2000 Server, IIS is called Internet Services Manager).
- Expand Web Sites (Windows 2003) or the Server name (Windows 2000) then right-click and choose Properties on PLUS (PatchLink Update Server in 6.3 or above).
- Visit the ASP.NET tab and make certain ASP.NET 1.1 is chosen instead of ASP.NET 2.0 or higher.
B) Verify the Web Server Extensions are configured properly:
- On the IIS server, go to Start > Programs > Administrative Tools > Internet Information Services (IIS) Manager.
- Highlight Web Server Extensions.
- The following items need to be enabled:
Active Server Pages
ASP.NET v1.1.4322
PatchLink Update Server
C) Verify the account membership of the PLUS ADMINS group:
- Within Computer Management, drill into Local Users and Groups and then select Groups.
- Within the properties of the PLUS ADMINS group, verify the following accounts exist:
Administrator
ASPNET
IWAM_"SERVERNAME"
NT AUTHORITY\NETWORK SERVICE
PatchLink
PLUS ANONYMOUS
PLUS_AGENT
PLUS AGENT (does not exist in version 6.3 or higher)
D) Verify the permissions and directory settings for the web site:
- On the IIS server, go to Start > Programs > Administrative Tools > Internet Information Services (IIS) Manager (in Windows 2000 Server, IIS is called Internet Services Manager).
- Expand Web Sites (Windows 2003) or the Server name (Windows 2000) then expand PLUS.
- Use the following chart to ensure that the PLUS directories are appropriately configured. Pay special attention to the virtual directories.
To view and modify directory settings, right-click on the directory name > select Properties > switch to the Directory Security tab > click Edit in the Authentication and access control section.
For Update Server 6.4:
Directory Name | Virtual Directory | Application Name | Application Pool | Execute Permissions | Basic Authentication | Anonymous Access |
Root (PatchLink Update Server) | - | PatchLink Update Server | DefaultAppPool | Scripts Only | Yes | No |
AgentCenter | Yes | AgentCenter | PatchLink Update Server Services | Scripts Only | Yes | Yes |
DAgent | Yes | DAgent | PatchLink Update Server ISAPI | Scripts Only | No | Yes |
ERS_Client* | Yes | ERS_Client | DefaultAppPool | Scripts Only | Yes | No |
Gravitix | Yes | Gravitix | PatchLink Update Server Storage | Scripts Only | Yes | Yes |
Update | Yes | Update | PatchLink Update Server ISAPI | Scripts and Executables | Yes | No |
UpdateStorage | Yes | GravitixStorage | PatchLink Update Server Storage | Scripts Only | No | Yes |
Admin | No | - | - | Scripts Only | Yes | No |
aspnet_client | No | - | - | None | Yes | No |
bin | No | - | - | Scripts Only | Yes | No |
Components | No | - | - | Scripts Only | Yes | No |
Computers | No | - | - | Scripts Only | Yes | No |
Deploy | No | - | - | Scripts Only | Yes | No |
Download | No | - | - | Scripts Only | Yes | No |
ErrorMessages | No | - | - | Scripts Only | Yes | Yes |
Graphing | No | - | - | Scripts Only | Yes | No |
Groups | No | - | - | Scripts Only | Yes | No |
Help | No | - | - | Scripts Only | Yes | No |
images | No | - | - | Scripts Only | No | Yes |
includes | No | - | - | Scripts Only | Yes | No |
Inventory | No | - | - | Scripts Only | Yes | No |
Logs | No | - | - | Scripts Only | Yes | No |
Packages | No | - | - | Scripts Only | Yes | No |
Reports | No | - | - | Scripts Only | Yes | No |
StyleSheets | No | - | - | Scripts Only | No | Yes |
Support | No | - | - | Scripts Only | Yes | No |
Users | No | - | - | Scripts Only | Yes | No |
Vulnerability | No | - | - | Scripts Only | Yes | No |
Welcome | No | - | - | Scripts Only | Yes | No |
*If ERS Client is installed | ||||||
For Update Server 6.3:
Directory Name | Virtual Directory | Application Name | Application Pool | Execute Permissions | Basic Authentication | Anonymous Access |
Root (PatchLink Update Server) | - | PatchLink Update Server | DefaultAppPool | Scripts Only | Yes | No |
AgentCenter | Yes | AgentCenter | PatchLink Update Server Services | Scripts Only | Yes | Yes |
DAgent | Yes | DAgent | PatchLink Update Server ISAPI | Scripts Only | No | Yes |
ERS_Client* | Yes | ERS_Client | DefaultAppPool | Scripts Only | Yes | No |
Gravitix | Yes | Gravitix | PatchLink Update Server Storage | Scripts Only | Yes | Yes |
Update | Yes | Update | PatchLink Update Server ISAPI | Scripts and Executables | Yes | No |
UpdateStorage | Yes | GravitixStorage | PatchLink Update Server Storage | Scripts Only | No | Yes |
Admin | No | - | - | Scripts Only | Yes | No |
aspnet_client | No | - | - | None | Yes | No |
bin | No | - | - | Scripts Only | Yes | No |
Components | No | - | - | Scripts Only | Yes | No |
Computers | No | - | - | Scripts Only | Yes | No |
Deploy | No | - | - | Scripts Only | Yes | No |
Download | No | - | - | Scripts Only | Yes | No |
ErrorMessages | No | - | - | Scripts Only | Yes | Yes |
Groups | No | - | - | Scripts Only | Yes | No |
Help | No | - | - | Scripts Only | Yes | No |
images | No | - | - | Scripts Only | No | Yes |
includes | No | - | - | Scripts Only | Yes | No |
Inventory | No | - | - | Scripts Only | Yes | No |
Logs | No | - | - | Scripts Only | Yes | No |
Packages | No | - | - | Scripts Only | Yes | No |
PLGraphImager | No | - | - | Scripts Only | Yes | No |
Reports | No | - | - | Scripts Only | Yes | No |
StyleSheets | No | - | - | Scripts Only | No | Yes |
Support | No | - | - | Scripts Only | Yes | No |
Users | No | - | - | Scripts Only | Yes | No |
Vulnerability | No | - | - | Scripts Only | Yes | No |
Welcome | No | - | - | Scripts Only | Yes | No |
*If ERS Client is installed | ||||||
For Update Server 6.2 or lower:
Directory Name | Virtual Directory | Application Name | Application Pool | Execute Permissions | Basic Authentication | Anonymous Access |
Root (PLUS) | - | PLUS | DefaultAppPool | Scripts Only | Yes | No |
AgentCenter | Yes | AgentCenter | DefaultAppPool | Scripts Only | Yes | Yes |
ERS_Client* | Yes | ERS_Client | DefaultAppPool | Scripts Only | Yes | No |
Gravitix | Yes | Gravitix | DefaultAppPool | Scripts Only | Yes | Yes |
Update | Yes | Update | DefaultAppPool | Scripts and Executables | Yes | No |
UpdateStorage | Yes | GravitixStorage | DefaultAppPool | Scripts Only | Yes | No |
Admin | No | - | - | Scripts Only | Yes | No |
aspnet_client | No | - | - | None | Yes | No |
bin | No | - | - | Scripts Only | Yes | No |
Components | No | - | - | Scripts Only | Yes | No |
Computers | No | - | - | Scripts Only | Yes | No |
DAgent | No | - | - | Scripts Only | No | Yes |
Deploy | No | - | - | Scripts Only | Yes | No |
Download | No | - | - | Scripts Only | Yes | No |
ErrorMessages | No | - | - | Scripts Only | Yes | Yes |
Groups | No | - | - | Scripts Only | Yes | No |
Help | No | - | - | Scripts Only | Yes | No |
images | No | - | - | Scripts Only | Yes | No |
includes | No | - | - | Scripts Only | Yes | No |
Inventory | No | - | - | Scripts Only | Yes | No |
Logs | No | - | - | Scripts Only | Yes | No |
Packages | No | - | - | Scripts Only | Yes | No |
PLGraphImager | No | - | - | Scripts Only | Yes | No |
Reports | No | - | - | Scripts Only | Yes | No |
ScanData | No | - | - | Scripts Only | Yes | No |
Start | No | - | - | Scripts Only | No | Yes |
StyleSheets | No | - | - | Scripts Only | Yes | No |
Support | No | - | - | Scripts Only | Yes | No |
Users | No | - | - | Scripts Only | Yes | No |
Web References | No | - | - | Scripts Only | Yes | No |
Welcome | No | - | - | Scripts Only | Yes | No |
*If ERS Client is installed | ||||||
4. Reset the IIS server using one of the following options:
- Open a command prompt and type iisreset .
- In the Windows Start menu, click Run, type iisreset in the Open field and click OK.
5. In IIS Manager, check one of the directories you made changes to and verify that the changes have been saved.