WSUS server synchronization failed

Discussion:

(too old to reply)

april

2008-11-13 15:34:35 UTC

Has anyone out there had the same problem as I have? We are running WSUS
3.0 on Windows 2003 server. The synchronization was working back to Nov
3 and stopped working since Nov 4. I checked the sync history and
noticed that the sync also stopped working on Oct 30 with the same
error. And then it started working by itself the next day until Nov 3.
As I do not have any problem in getting on Internet and microsoft
websites. All the settings should be correct since it was working
before. Here is the error:

WebException: The request failed with HTTP status 404: Not Found.
at
System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage
message, WebResponse response, Stream responseStream, Boolean asyncCall)
at
System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String
methodName, Object[] parameters)
at
Microsoft.UpdateServices.ServerSyncWebServices.ServerSync.ServerSyncProxy.GetAuthConfig()
at
Microsoft.UpdateServices.ServerSync.ServerSyncLib.InternetGetServerAuthConfig(ServerSyncProxy
proxy, WebServiceCommunicationHelper webServiceHelper)
at
Microsoft.UpdateServices.ServerSync.ServerSyncLib.Authenticate(AuthorizationManager
authorizationManager, Boolean checkExpiration, ServerSyncProxy proxy,
Cookie cookie, WebServiceCommunicationHelper webServiceHelper)
at
Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.SyncConfigUpdatesFromUSS()
at
Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.ExecuteSyncProtocol(Boolean
allowRedirect)

Can someone advise on this? Thank you very much!!!

Lawrence Garvin (MVP)

2008-11-14 03:07:49 UTC

Permalink

Is the WSUS Server configured to use a proxy server?

Did you possibly get any unsolicited help from the admin(s) responsible for
perimeter security? (Like disabling a proxy account, or blocking
port(s)/source(s) in the firewall ruleset.)

Post by april
WebException: The request failed with HTTP status 404: Not Found.

Another issue that can result in a '404' is that the IP Address(es) have
been hijacked, and you're requests are being sent to an invalid/incorrect IP
Address. If this is suspected, firewall logs would be a good resource (Can
you see HTTP sessions being requested from the WSUS Server?).

Also, running NetMon on the WSUS Server and capturing the packet traces can
give you some insight as to the intended destination of the sync packets.

--
Lawrence Garvin, M.S., MCITP(x2), MCTS(x5), MCP(x7), MCBMSP
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2009)

MS WSUS Website: http://www.microsoft.com/wsus
My Websites: http://www.onsitechsolutions.com;
http://wsusinfo.onsitechsolutions.com
My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin

april

2008-11-14 14:10:03 UTC

Permalink

Post by Lawrence Garvin (MVP)

Is the WSUS Server configured to use a proxy server?

Post by Lawrence Garvin (MVP)
Did you possibly get any unsolicited help from the admin(s) responsible
for perimeter security? (Like disabling a proxy account, or blocking
port(s)/source(s) in the firewall ruleset.)

Post by Lawrence Garvin (MVP)

Post by april
WebException: The request failed with HTTP status 404: Not Found.

Would you please advise where is firewall logs located? Thank you very much.

Post by Lawrence Garvin (MVP)
Also, running NetMon on the WSUS Server and capturing the packet traces
can give you some insight as to the intended destination of the sync
packets.

I appreciate your response. Thanks a lot!

Brandon I.T.

2008-11-14 03:23:27 UTC

Permalink

I am having this EXACT same error with the EXACT same dates. My server just
stopped sync'ing as well at 11:47 AM Central time on November 3rd.

Now, all manual or automatic synchronizations through the WSUS MMC result in
an error "unable to resolve the the upstream server name".

Post by april
Has anyone out there had the same problem as I have? We are running WSUS
3.0 on Windows 2003 server. The synchronization was working back to Nov
3 and stopped working since Nov 4. I checked the sync history and
noticed that the sync also stopped working on Oct 30 with the same
error. And then it started working by itself the next day until Nov 3.
As I do not have any problem in getting on Internet and microsoft
websites. All the settings should be correct since it was working
WebException: The request failed with HTTP status 404: Not Found.
at
System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage
message, WebResponse response, Stream responseStream, Boolean asyncCall)
at
System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String
methodName, Object[] parameters)
at
Microsoft.UpdateServices.ServerSyncWebServices.ServerSync.ServerSyncProxy.GetAuthConfig()
at
Microsoft.UpdateServices.ServerSync.ServerSyncLib.InternetGetServerAuthConfig(ServerSyncProxy
proxy, WebServiceCommunicationHelper webServiceHelper)
at
Microsoft.UpdateServices.ServerSync.ServerSyncLib.Authenticate(AuthorizationManager
authorizationManager, Boolean checkExpiration, ServerSyncProxy proxy,
Cookie cookie, WebServiceCommunicationHelper webServiceHelper)
at
Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.SyncConfigUpdatesFromUSS()
at
Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.ExecuteSyncProtocol(Boolean
allowRedirect)
Can someone advise on this? Thank you very much!!!

april

2008-11-14 13:59:16 UTC

Permalink

It is strange, isnt it? Have you got it fixed? I am still working on it.

Post by Brandon I.T.
I am having this EXACT same error with the EXACT same dates. My server just
stopped sync'ing as well at 11:47 AM Central time on November 3rd.
Now, all manual or automatic synchronizations through the WSUS MMC result in
an error "unable to resolve the the upstream server name".

Brandon I.T.

2008-11-14 14:20:01 UTC

Permalink

I have opened an additional thread entitled "WSUS stopped syncing on Nov. 3"
in order to track my own troubleshooting steps and to not interfere with
yours. I answered Lawrence Garvin's questions in my own thread for my own
server.

Basically though my WSUS server stopped syncing on October 30th just like
yours then began syncing for a few days then stopped again on November 3rd
and has not been able to sync since.

I verified it's not a firewall issue. In fact, my firewall admin says he
sees no traffic making it to the firewall from the WSUS server during the
synchronization process. It's almost like the hard-coded address for
Microsoft Update inside WSUS is incorrect or expired. I've tried re-running
the WSUS Server Configuration Wizard just to try and manually define a
Windows Update site but that doesn't work.

I believe WSUS is hard-coded to connect to "update.microsoft.com" for
updates. A ping request to that address from my WSUS server returned a
response from "update.microsoft.com.nsatc.com" [207.46.17.61]. I get no
reply.

Here's hoping Lawrence has some ideas on how to get this fixed. I still
don't have the patches from Patch Tuesday to release.

Post by april
It is strange, isnt it? Have you got it fixed? I am still working on it.

Lawrence Garvin (MVP)

2008-11-14 15:12:31 UTC

Permalink

Post by Brandon I.T.
I verified it's not a firewall issue. In fact, my firewall admin says he
sees no traffic making it to the firewall from the WSUS server during the
synchronization process.

*NO* traffic -- including DNS requests?

If there's no request to resolve the DNS name coming from the server,
then that suggest the problem is at the server.

Post by Brandon I.T.
It's almost like the hard-coded address for

There is *NO* "hard-coded address" for Microsoft Update inside WSUS.

WSUS references a URL that's been in use for eons, and I assure you it's
still working.

Try running 'ipconfig /flushdns' on the WSUS Server to flush the DNS cache,
and then force a manual synchronization and observe what happens.

Post by Brandon I.T.
I've tried re-running
the WSUS Server Configuration Wizard just to try and manually define a
Windows Update site but that doesn't work.

Nope. :-)

Post by Brandon I.T.
I believe WSUS is hard-coded to connect to "update.microsoft.com" for
updates. A ping request to that address from my WSUS server returned a
response from "update.microsoft.com.nsatc.com" [207.46.17.61]. I get no
reply.

Getting no reply to a ping from inside a corporate firewall is not
conclusive.

FYI.. I have 179 synchronzations (2x daily) from 8/16 through this morning
(an hour ago),
and not a single one shows a failure. I pulled down 55 new updates Tuesday
evening.

j***@gmail.com

2008-12-19 03:51:54 UTC

Permalink

I'm experiencing the same thing... I suspect that is it because I'm
running the release candidate version. Is that the version you're
running?

Lawrence Garvin (MVP)

2008-11-14 17:11:29 UTC

Permalink

April, based on conversations in the new thread that Brandon created,
there appears to be a likely cause for this issue.

Can you please confirm the server version that you are using.

The "Server Version" can be obtained from the WSUS UI Admin Console,
on the server page, center pane, lower left corner in the group titled
"Connection".

The version number *should* be 6.1.6001.65 indicating WSUS 3.0 Service Pack
1.

Based on something we're tracking down with Brandon, I have reason to
believe you may still be running the =Release Candidate= version of WSUS
3.0, and Microsoft finally got around to pulling the plug on the RC server
DNS entries, which would explain the '404' errors encountered by you and
Brandon on exactly the same dates.

v***@gmail.com

2013-04-12 11:38:19 UTC

Permalink

run in shell

wsusutil configuressl
restart wsusservice
restart bits
iisreset