Endpoint Protection

Hello,

I know this has been asked in the past, but the resouces I've located are not getting me to an answer.

What I need to do is add a second distribution center that contains only my SEP and SNAC updates. (I know how to select the specific products for this center already)

I'm running SEPM RU6a, LUA 2.2.2.9 on a Server 2008 SP2 box with IIS7.

IIS7 seems to be my issue. I think. I keep getting a connection failed.

Essentially what I did in the LUA console is copy the Distribution Center settings for my clu-prod folder (which works perfectly) and created a new distribution center for the new clu-sep folder. I matched the NTFS share permissions of the clu-prod folder, I'm just not sure how to configure IIS7 so that it "sees" the share. I'm guessing that is why I'm getting a connection failed message.

I've gone through this document: https://www-secure.symantec.com/connect/articles/configuring-distribution-center-lua without success, as it references IIS 6 which we are not running. I'm not a IIS guy so I can't translate IIS6 to IIS7.

Anyone have any thoughts, suggestions or links I could take a look at?

Thanks,

-Mike

P.S. If it matters, my LUA is on the same server as one of my Fail Over SEPM's. (Limited funds)

try this document and test it

http://msdn.microsoft.com/en-us/library/bb763173.aspx

once this is complete to Enable directory browsing using IIS Manager.

1. Open IIS Manager. select symantec web server, on the right,
2. In the Features view, double-click Directory Browsing.
3. On the Directory Browsing page, in the Actions pane, click Enable.( its on corner right )

open browser and check it.

Hello Mike,

Please pm me your e-mail and I will post you a document. The document is not mine so I cannot share it here. Is is again for IIS 6 but very detailed. You may probably apply it according to IIS7.

Yes, I can browse the web directory now, but sadly I'm still getting a connection failed within LUA when configuring the "Locations" section of my new Distribution Center. For grins I tried to execute a manual distribution to that "Center" and as you may have guessed, it failed.

whats the folder permisson you have mentioned?
give full access to everyone ( test purpose)
check if that connects

I gave "Everyone" and "System" full control, no change.

WHere are the Clu-Prod and Clu-Test directories configured? They both work perfectly. If I could see how they are configured (within IIS7) that may help.

Very frustrating. :-(

I PMed you my email address...if you already send the doc, my email server must have ate it. Nothing yet. :-(

You might try zip format.

Thanks again,

-Mike

I just sent it. Sorry for delay, I've been watching the world cup semi-final :D

I will give this and post back the results. Thanks!

Enjoy the cup!

-Mike

A small clarification.Are you telling you are having problem in your first LUA?In the first LUA it will use apache web server for hosting ,not IIS.For Distribution centers you may use IIS in the distributed servers....

No...the two default (Apache Tomcat) Distribution Centers work perfectly. clu-prod and clu-test are not my issue, it's the adding of an additional distribution center that is causing me grief. This brings up an interesting point, I wonder how hard it would be to add the additional site using Apache. Hummm.

modifying the Apache ConfigManager.class file may be a show stopper...guess it's back to the iis7 route.

For iuser give full permission to the folders which you are hosting the liveupdate distribution center and try....

If you want an addition distribution center you just need to copy one of the existing ones and then make a virtual directory for it. 

Copy the following folder: C:\Program FIles\Symantec\Liveupdate Administrator\tomcat\webapps\clu-test\
Paste it in the same webapps directory. 
Rename the folder to whatever you want.  (i.e. clu-test2)
Edit the clu.properties file in the following location: C:\Program Files\Symantec\Liveupdate Administrator\tomcat\webapps\clu-test2\WEB-INF\classes\
Change the referenced folder to clu-test2.  (i.e. CLU_DIR=C:\\Program Files\\Symantec\\Liveupdate Administrator\\clu-test2 )
Create the clu-test2 folder in the specified directory.  (C:\Program Files\Symantec\Liveupdate Administrator\)
Add the distribution center within LUA.  The address will be http://Server:7070/clu-test2

Have you tried this successfully?

I thought about the same thing this morning but then did a search and found the default distribution directories, clu-prod and clu-test, were also referenced in the file: ConfigManager.class located here: D:\Program Files (x86)\Symantec\LiveUpdate Administrator\tomcat\webapps\lua\WEB-INF\classes\com\symantec\lua\manager\config

Because I can't edit that class file, I assumed just modifying the other files you mentioned above would not be enough. Did I assume wrong?

Thanks,

-Mike

P.S. Until I have more time to monkey with IIS7, I have made my connections using UNC paths just so I could get the centers going. Using Apache get's me motivated again as I could script their creation in the future.