OSD Task Sequence - Package download fails half way through (HTTP 401)
Hi,
I'm running an OSD TS which has failed part way through downloading the files for an install software package.
I get this error in the SMSTS.log: WinHttpQueryHeaders() returns status code 401 (Unauthorized)
Seems strange that it would fail with this erro part way through a download?
Here is part of the log with the errors:
Downloaded file from
http://CRWNAPP1.STAFF.STAFFS.AC.UK:80/SMS_DP_SMSPKGE%24/SU10002D/Bas.cab to C:\_SMSTaskSequence\Packages\SU10002D\Bas.cab InstallSoftware 30/06/2011 11:38:58 1872 (0x0750)
Downloaded file from
http://CRWNAPP1.STAFF.STAFFS.AC.UK:80/SMS_DP_SMSPKGE%24/SU10002D/Client.cab to C:\_SMSTaskSequence\Packages\SU10002D\Client.cab InstallSoftware 30/06/2011 11:39:08 1872 (0x0750)
dwStatusCode>=200 && dwStatusCode<=299, HRESULT=80004005 (e:\nts_sms_fre\sms\framework\tscore\downloadcontent.cpp,1090) InstallSoftware 30/06/2011 11:39:08 1872 (0x0750)
WinHttpQueryHeaders() returns status code 401 (Unauthorized) InstallSoftware 30/06/2011 11:39:08 1872 (0x0750)
Download() failed with 0x80004005 InstallSoftware 30/06/2011 11:39:08 1872 (0x0750)
DownloadFile(sSourceFile, sDestinationFile, ulTotalSizeRequired, ulDownLoaded), HRESULT=80004005 (e:\nts_sms_fre\sms\framework\tscore\downloadcontent.cpp,1175) InstallSoftware 30/06/2011 11:39:08 1872 (0x0750)
Error downloading file from
http://CRWNAPP1.STAFF.STAFFS.AC.UK:80/SMS_DP_SMSPKGE%24/SU10002D/ClientAc.cab to C:\_SMSTaskSequence\Packages\SU10002D\ClientAc.cab InstallSoftware 30/06/2011 11:39:08 1872 (0x0750)
DownloadFiles(sSource, setDirs, setFiles, sDestination), HRESULT=80004005 (e:\nts_sms_fre\sms\framework\tscore\resolvesource.cpp,2434) InstallSoftware 30/06/2011 11:39:08 1872 (0x0750)
Retrying download... InstallSoftware 30/06/2011 11:39:08 1872 (0x0750)
GetDirectoryListing() entered InstallSoftware 30/06/2011 11:39:11 1872 (0x0750)
Initializing HTTP transport. InstallSoftware 30/06/2011 11:39:11 1872 (0x0750)
Setting URL =
http://CRWNAPP1.STAFF.STAFFS.AC.UK/SMS_DP_SMSPKGE$/SU10002D/. InstallSoftware 30/06/2011 11:39:11 1872 (0x0750)
Address = CRWNAPP1.STAFF.STAFFS.AC.UK, Object = /SMS_DP_SMSPKGE$/SU10002D/, Port = 80. InstallSoftware 30/06/2011 11:39:11 1872 (0x0750)
WinHttp credentials set InstallSoftware 30/06/2011 11:39:11 1872 (0x0750)
CLibSMSMessageWinHttpTransport::Send: URL: CRWNAPP1.STAFF.STAFFS.AC.UK:80 PROPFIND /SMS_DP_SMSPKGE$/SU10002D/ InstallSoftware 30/06/2011 11:39:11 1872 (0x0750)
The request requires user authentication. 401 Unauthorized InstallSoftware 30/06/2011 11:39:11 1872 (0x0750)
dwHttpResultCode>=200 && dwHttpResultCode<=299, HRESULT=80004005 (e:\nts_sms_fre\sms\framework\tscore\downloadcontent.cpp,590) InstallSoftware 30/06/2011 11:39:11 1872 (0x0750)
Http result: 401 InstallSoftware 30/06/2011 11:39:11 1872 (0x0750)
SendResourceRequest() failed with 0x80004005 InstallSoftware 30/06/2011 11:39:11 1872 (0x0750)
SendResourceRequest(), HRESULT=80004005 (e:\nts_sms_fre\sms\framework\tscore\downloadcontent.cpp,371) InstallSoftware 30/06/2011 11:39:11 1872 (0x0750)
oDavRequest.GetDirectoryListing(setDirs, setFiles), HRESULT=80004005 (e:\nts_sms_fre\sms\framework\tscore\resolvesource.cpp,2421) InstallSoftware 30/06/2011 11:39:11 1872 (0x0750)
Any ideas?
Thanks,
Jay
June 30th, 2011 2:04pm
See
http://blogs.technet.com/b/configmgrteam/archive/2010/01/14/troubleshooting-client-content-download-in-configuration-manager-2007.aspx.
Particularily Step 6. IIS blocks many things by default; you often have to relax this security on your DP depedning on the content you are distributing.Jason | http://myitforum.com/cs2/blogs/jsandys | Twitter @JasonSandys
Free Windows Admin Tool Kit Click here and download it now
June 30th, 2011 3:26pm
See
http://blogs.technet.com/b/configmgrteam/archive/2010/01/14/troubleshooting-client-content-download-in-configuration-manager-2007.aspx.
Particularily Step 6. IIS blocks many things by default; you often have to relax this security on your DP depedning on the content you are distributing.
Jason | http://myitforum.com/cs2/blogs/jsandys | Twitter @JasonSandys
Thank you for the reply but none of the symptoms mentioned in the article seem to be relevant or refer to a 401 error.
There is nothing unusual about the content that is being downloaded. This 401 error seems to have cropped up all of a sudden since yesterday afternoon and I can't seem to troubleshoot why it is happening.
I have re-tried the OSD TS and it has failed on a different file from a different package but with the same error.
This also seems to happen when I advertise a package to a PC and specify to download the content locally.
June 30th, 2011 6:02pm
Given that this is an HTTP error code, have you reviewed the IIS logs on the DP?Jason | http://myitforum.com/cs2/blogs/jsandys | Twitter @JasonSandys
Free Windows Admin Tool Kit Click here and download it now
June 30th, 2011 6:35pm
Given that this is an HTTP error code, have you reviewed the IIS logs on the DP?
Jason | http://myitforum.com/cs2/blogs/jsandys | Twitter @JasonSandys
Yes - details a 401 2 5 0 error?
2011-06-30 14:35:16 10.15.26.242 GET /SMS_DP_SMSPKGE$/SU100029/Amos19Shortcuts.mst - 80 - 10.54.1.77 SMS+TS 401 2 5 0
June 30th, 2011 6:38pm
Is that only happening for this one file? Is that the only file in this package? Have you tried recreating the package and the source folder copying a new instance of the file?
Here's a general guide for troubleshooting 401 errors in IIS:
http://support.microsoft.com/kb/907273.Jason | http://myitforum.com/cs2/blogs/jsandys | Twitter @JasonSandys
Free Windows Admin Tool Kit Click here and download it now
June 30th, 2011 6:57pm
Is that only happening for this one file? Is that the only file in this package? Have you tried recreating the package and the source folder copying a new instance of the file?
Here's a general guide for troubleshooting 401 errors in IIS:
http://support.microsoft.com/kb/907273.
Jason | http://myitforum.com/cs2/blogs/jsandys | Twitter @JasonSandys
No. There are lots of files and lots of packages. This seems to be happening completely randomly on different files from different packages.
June 30th, 2011 6:59pm
See
http://blogs.technet.com/b/configmgrteam/archive/2010/01/14/troubleshooting-client-content-download-in-configuration-manager-2007.aspx.
Particularily Step 6. IIS blocks many things by default; you often have to relax this security on your DP depedning on the content you are distributing.
Jason | http://myitforum.com/cs2/blogs/jsandys | Twitter @JasonSandys
Hi Jason,
I've been examining the IIS Logs in more detail and it turns out that I have 2 seperate problem - one was an IIS error 404.8 when advertising a package to a client. By following your link I was able to identify that this was due to the package having a BIN
folder which was being filtered by the applicationHost.config file. I have now been able to resolve this issue.
But... I still have the same problem with 2 seperate packages which fail within my OSD Task Sequence - althought they DO succeed when advertised individually to clients. They will be downloading files fine during the OSD TS but then both fail on one particular
file with a 401 2 5 0 error.
2011-06-30 10:39:08 10.15.26.242 GET /SMS_DP_SMSPKGE$/SU10002D/ClientAc.cab - 80 - 10.54.1.77 SMS+TS 401 2 5 0
2011-06-30 14:35:16 10.15.26.242 GET /SMS_DP_SMSPKGE$/SU100029/Amos19Shortcuts.mst - 80 - 10.54.1.77 SMS+TS 401 2 5 0
Any more ideas how I can troubleshoot this?
Kind regards,
Jay
Free Windows Admin Tool Kit Click here and download it now
July 1st, 2011 12:41pm
Hi Jay,
You may see the information about the HTTP 401.2 error in the following KB article:
Troubleshooting HTTP 401 errors in IIS
HTTP 401.2: Denied by server configuration
Description
The client browser and IIS could not agree on an authentication protocol.
Common reasons
No authentication protocol (including anonymous) is selected in IIS. At least one authentication type must be selected. For more information,
click the following article number to view the article in the Microsoft Knowledge Base:
253667
(http://support.microsoft.com/kb/253667/ ) Error message: HTTP 401.2 - Unauthorized: Logon failed due to server configuration with no authentication
Only Integrated authentication is enabled, and an older, non-Internet Explorer client browser tries to access the site. This happens because
the client browser cannot perform Integrated authentication. To resolve this problem, use one of the following methods:
Configure IIS to accept Basic authentication. This should only occur over SSL for security purposes.
Use a client browser that can perform Integrated authentication. Internet Explorer and new versions of Netscape Navigator and Mozilla Firefox
can perform Integrated authentication.
Integrated authentication is through a proxy. This happens because the proxy doesn't maintain the NTLM-authenticated connection and thus
sends an anonymous request from the client to the server. Options to resolve this problem are as follows:
Configure IIS to accept Basic authentication. This should only occur over SSL for security purposes.
Don't use a proxy.
Please go to the following suggestions to troubleshoot:
a. check the permission for the folder and the specific file.
b. Follow the Error message when you try to visit a Web page that is hosted on IIS 7.0: "HTTP Error 401.2 - Unauthorized" for a checking.
Regards,
Sabrina
This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question.
This can be beneficial to other community members reading the thread.
July 5th, 2011 12:14pm