Download error: The requested URL does not pass this deployment's download whitelist

while deploying patch to ubuntu server i am getting this error Download error: The requested URL does not pass this deployment’s download whitelist.

1 Like

See http://www.ibm.com/support/knowledgecenter/SS2TKN_9.5.0/com.ibm.bigfix.doc/Platform/Action/c_dynamic_downloading.html for dynamic downloads information. There is a whitelist.txt which resides on the BigFix server, you’ll need to add security.ubuntu.com to the whitelist.

1 Like

Thanks jasonWalker, Now i am able to deploy patch on ubuntu server successfully .

Specific to Patches for Ubuntu sites, you can find Setup Download Whitelist Tasks for both Windows and Linux servers. Typically they are assigned Task ID 1 and 2. They pretty much do the same thing: appending the ubuntu repo hostname to the whitelist file.

1 Like

After following this link Release of Patches for Ubuntu 1204 Site. i was able to patch ubuntu server

The link seems to be invalid can you let me know the path where the whitelist.txt needs to be created in the BFXserver

https://www.ibm.com/support/knowledgecenter/SS6MER_9.5.0/com.ibm.bigfix.patch.doc/Patch/Patch_Windows/c_frequently_asked_questions.html

[root@BFXServer config]# cat DownloadWhitelist.txt
http://download4.boulder.ibm.com/.*
http://delivery04.dhe.ibm.com/.*
AIXProtocol://.*
http://iwm.dhe.ibm.com/.*
AIXProtocolR2://.*
http://software.bigfix.com/download/bes/dep/centos/.*
http://software.bigfix.com/download/bes/dep/pkgdeps/.*
CentOSR2Protocol://.*
http://software.bigfix.com/download/bes/dep/sle/.*
http://software.bigfix.com/.*
RHSMProtocol://.*
http://delivery04-mul.dhe.ibm.com/sar/.*^M

[root@BFXServer config]#

But still the same error

The DownloadWhiteList.txt should be on the BigFix Root Server, not the client. Check https://www.ibm.com/support/knowledgecenter/en/SSQL82_9.5.0/com.ibm.bigfix.doc/Platform/Config/c_dynamic_download_white_lists.html for the paths on Windows or Linux root servers. I believe there are also tasks associated with the DownloadPlugin to update the whitelist automatically for the various plugins (RHSMDownloadPlugin, CentosPlugin, AIXPlugin, etc.)

Thanks Jason … I have updated the DownloadWhitelist.txt in the root server

[root@BFXServer config]# pwd
/var/opt/BESServer/Mirror Server/config
[root@BFXServer config]# ls
DownloadCache.db DownloadPlugins.db DownloadState.db DownloadWhitelist.txt
[root@BFXServer config]#

But still not able to patch

[root@BFXServer config]# cat DownloadWhitelist.txt
http://download4.boulder.ibm.com/.*
http://delivery04.dhe.ibm.com/.*
AIXProtocol://.*
http://iwm.dhe.ibm.com/.*
AIXProtocolR2://.*
http://software.bigfix.com/download/bes/dep/centos/.*
http://software.bigfix.com/download/bes/dep/pkgdeps/.*
CentOSR2Protocol://.*
http://software.bigfix.com/download/bes/dep/sle/.*
http://software.bigfix.com/.*
RHSMProtocol://.*
http://delivery04-mul.dhe.ibm.com/sar/.*^M

[root@BFXServer config]#

That last line doesn’t look right…there’s the ^M character at the end of the line, I think that represents an embedded DOS carriage return maybe?
Also, the lines are regular expressions, where “.” has special meaning, so the line should look like

http://delivery04-mul\.dhe\.ibm\.com/sar/.*

Note the last “.” is not escaped, because there we do want to use its ‘wildcard’ meaning.

1 Like

Thanks Jason that fixed the issue … and now it says cached to the server complete.

How will it patch the server . because as per logs there is no error

1 Like

Old thread, info for those who are searching for a solution.

link is IBM, new HCL link
https://help.hcltechsw.com/bigfix/10.0/platform/Platform/Config/c_dynamic_download_white_lists.html?hl=dynamic%2Cdownload%2Cwhite-lists

1 Like