[c-nsp] 1142 keeps downloading same IOS from WLC

[garry at mlfwd.de]

Hi,

I'm out of ideas and options ... on a system that already has several
APs of different models, and to which I have (remotely) already
connected another 1142 successfully, I tried to migrate another 1142
from standalone to CAPWAP. After putting an appropriate starter image on
it (c1140-k9w8-tar.152-4.JA1.tar), it connected to the WLC (2504 w/
8.3.133.0) and downloaded a newer image (15.3.3) ... all was fine up to
here ... anyway, after reloading the AP, it once again started
downloading the same image again. And again. And again.

Here's a partial dump of the console messages:

*Dec 12 14:23:37.032: Currently running a Release Image
validate_sha2_block: Failed to get certificate chain
*Dec 12 14:23:37.049: Using SHA-1 signed certificate for image signing
validation.%Default route without gateway, if not a point-to-point
interface, may impact performance
*Dec 12 14:23:41.760: AP image integrity check PASSED

*Dec 12 14:23:41.843:  validate_sha2_block:No SHA2 Block present on this AP.

*Dec 12 14:23:41.879: %LINK-5-CHANGED: Interface Dot11Radio0, changed
state to reset
*Dec 12 14:23:41.879: %LINK-5-CHANGED: Interface Dot11Radio1, changed
state to reset
*Dec 12 14:23:51.912: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host
255.255.255.255 port 0 CLI Request Triggered
Translating "CISCO-CAPWAP-CONTROLLER"...domain server (192.168.11.15)

examining image...
extracting info (289 bytes)
Image info:
    Version Suffix: k9w8-.153-3.JBB6
    Image Name: c1140-k9w8-mx.153-3.JBB6
    Version Directory: c1140-k9w8-mx.153-3.JBB6
    Ios Image Size: 8468992
    Total Image Size: 8765952
    Image Feature: WIRELESS LAN|LWAPP
    Image Family: C1140
    Wireless Switch Management Version: 8.1.131.0
MwarVersion:08018300.First AP Supported Version:05020200.

Image version check passed

Extracting files...
c1140-k9w8-mx.153-3.JBB6/ (directory) 0 (bytes)
extracting c1140-k9w8-mx.153-3.JBB6/info (289 bytes)
extracting c1140-k9w8-mx.153-3.JBB6/T5.bin (23836 bytes)
*Dec 12 14:50:55.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request
sent peer_ip: 172.30.1.100 peer_port: 5246
*Dec 12 14:50:55.504: %CAPWAP-5-DTLSREQSUCC: DTLS connection created
sucessfully peer_ip: 172.30.1.100 peer_port: 5246
*Dec 12 14:50:55.505: %CAPWAP-5-SENDJOIN: sending Join Request to
172.30.1.100perform archive download capwap:/c1140 tar file
extracting c1140-k9w8-mx.153-3.JBB6/c1140-k9w8-xx.153-3.JBB6 (8307214 bytes)
*Dec 12 14:50:55.559: %CAPWAP-6-AP_IMG_DWNLD: Required image not found
on AP. Downloading image from Controller.
*Dec 12 14:51:05.980: %CDP_PD-4-POWER_OK: Full power - NEGOTIATED inline
power source

I found documents on expired certificates (which do not seem to be the
cause here ... added the "allow expired certs" option on the WLC, but
that didn't change). From what I can tell, the AP connects just fine ...
just don't understand what image it is looking for that is "not found on
AP".

On the other 1142 that is working, I noticed it is running a different
image (that it also got from the controller) - it has
c1140-k9w8-mx.153-3.JD11, while the one not working keeps downloading
c1140-k9w8-mx.153-3.JBB6 ...

Can anybody give me a hint as what is going wrong here, and how to fix it?

Thanks in advance!

-garry