Re: IIS permissions error sporadically occurs

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 04/29/04 

Date: Wed, 28 Apr 2004 17:28:27 -0700

I am not so sure abont there being no error in their dll.
Security.dll is from MS in the system32 dir, as it the
System.Security.dll in the version in Microsoft.Net
directory. If an untrapped exception happens in IIS
it will trash that web - but with IIS 6 it should be possible
to intercept that and recycle that app. (does not help
much for the lost transaction of course).

Too bad this is so unpredictable, as it makes it hard for
you to turn on trace output and get the full call sequence
when this happens.

Have you checked that OS service levels, .Net Framework
versions, app versions are the same as on machine where
this is not seen? Are the machine.comfig and web.config
the same for this website/web as on good machine ??

I still think that the company will need to help you out here. 

-- 
Roger
"Rob" <rob@tconsult.com> wrote in message
news:eSB89UTLEHA.2736@TK2MSFTNGP11.phx.gbl...
> Hello Roger
>
> Man thanks for responding to me.  I appreciate it.  You sound like you
> are up on this stuff.  Anyway, when I go to the event viewer on the server
> I have three sections - Applications, Security, and System.  Under the
> security
> section I do see "Failure Audits" from the past so I would say failure
> auditing is on.
> BUT there are no failure audits for this problem.  In fact, I do not have
> any failure
> audits or errors listed in Application, Security, or System.  There is
> nothing being
> logged in the event viewer when this happens.  Not a thing.
>
> What I have been reading on this morning is EntryPoints and EntryPoints
fail
> as I have read when there is a name conflict with custom DLLs and System
> DLLs
> OR when a method of a DLL cannot be found.
>
> Well, the DLL is not mine.  It belongs to authorize.net.  AND I guarantee
> you, in fact I know,
> that their DLL does not have bugs.  I believe somehow permissions are
> getting distorted,
> blocked, garbled, confused, whatever and that is why re-starting IIS
solves
> the issue.
>
> Thanks again for at least answering me :)  I have posted this problem all
> over the place
> with little feedback.
>
> Rob
>
>
>
> "Roger Abell" <mvpNOSpam@asu.edu> wrote in message
> news:etDkhLTLEHA.3016@tk2msftngp13.phx.gbl...
> > "Rob" <rob@tconsult.com> wrote in message
> > news:%23G6QGrRLEHA.4080@TK2MSFTNGP12.phx.gbl...
> > > Thanks Roger.  It is hard to find people who are even willing to post
to
> > > this.
> > >
> > No problem - it looked like you were really wanting
> > some ideas or a sounding board.
> >
> > > Problem is if it were application related ten why would it not
> > > happen every time?
> > Very good point - import of which I did overlook in your post
> >
> > > That's one of the frustrating things - getting it to happen.  I have
> > > to wait until it happens before I can do anything.
> > >
> > Is anything at all being writting into the security event log
> > relating to the IIS backend accounts or ASPNET account ?
> > (assuming you have failure auditing enabled).
> >
> >
> > > Why does this exact same script work on other server?
> > >
> > ? The same codepath is not being triggered ?? but why ?
> >
> > > I may try to contact their support again (I did once and
> > > they were clueless).
> > >
> > I can find info EnumerateSecurityPackages (note not W form)
> > but am not dev in this area, but if true to form that would just
> > be Unicode version.
> > However, it seems that there is some errant call/marshalling
> > happening in the authorization negotiation for their .Net remoting.
> >
> > > Rob
> > >
> > > "Roger Abell" <mvpNOSpam@asu.edu> wrote in message
> > > news:OwaKODPLEHA.4052@TK2MSFTNGP11.phx.gbl...
> > > > You likely need to talk with the authorize.net people
> > > > as this appears due to some call they are making.
> > > > It may be such as which version of the Framework you
> > > > have installed on the IIS box, for example, but they will
> > > > likely be able to guide you.  Else, perhaps if you have
> > > > the trace so you could see what the caller is; or you could
> > > > try posting to the specific newsgroup for asp.net in the
> > > > inetserver newsgroups.
> > > >
> > > > -- 
> > > > Roger
> > > > "Rob" <rob@tconsult.com> wrote in message
> > > > news:eShWM7MLEHA.1312@TK2MSFTNGP12.phx.gbl...
> > > > > The error is
> > > > >
> > > > > Server Error in '/' Application.
> > > >
> > >
> >
>
> --------------------------------------------------------------------------
> > > > --
> > > > > ---- 
> > > > >
> > > > > Unable to find an entry point named EnumerateSecurityPackagesW in
> DLL
> > > > > security.dll.
> > > > >
> > > > > Description: An unhandled exception occurred during the execution
of
> > the
> > > > > current web request. Please review the stack trace for more
> > information
> > > > > about the error and where it originated in the code.
> > > > >
> > > > > Exception Details: System.EntryPointNotFoundException: Unable to
> find
> > an
> > > > > entry point named EnumerateSecurityPackagesW in DLL security.dll.
> > > > >
> > > > >
> > > > >
> > > > > "Rob" <rob@tconsult.com> wrote in message
> > > > > news:ezqY12MLEHA.2388@TK2MSFTNGP09.phx.gbl...
> > > > > > I have a .net page that connects to authorize.net to process
> cards.
> > > > > > When I put this page on this server I immediately got the error
> > below.
> > > > To
> > > > > > solve the problem, I added the ASPNET user group to the file and
> > gave
> > > it
> > > > > > modify permissions. I then re-started IIS. That fixed the
problem
> > and
> > > I
> > > > > was
> > > > > > able to process cards.
> > > > > >
> > > > > > However; every few days the problem returns. In this case, I
have
> > > > control
> > > > > > over the machine. I can easily fix the problem by re-starting
> IIS -
> > in
> > > > IIS
> > > > > > manager I right click on the machine name --> All Tasks -->
> re-start
> > > IIS
> > > > > > That fixes the problem for another day or two. Then it returns.
> > > > > >
> > > > > > *  There is not a custom DLL names security.dll
> > > > > > *  There is no custom DLL.
> > > > > >
> > > > > > The error occurs on this line in the script
> > > > > > myWriter = New StreamWriter(objRequest.GetRequestStream())
> > > > > > Which gets the request stream from authorize.net which would say
> > > > approved,
> > > > > > denied, etc...
> > > > > >
> > > > > > Thanks....Rob
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>

Relevant Pages

  • Re: IIS permissions error sporadically occurs
    ... when I go to the event viewer on the server ... I have three sections - Applications, Security, and System. ... section I do see "Failure Audits" from the past so I would say failure ... OR when a method of a DLL cannot be found. ...
    (microsoft.public.windows.server.security)
  • Re: Accessing 32 bit COM components in 64 bit IIS
    ... we will be introducing the ability to configure IIS to run under ... and under the 32bit command line no error is thrown. ... the problem must be to do with how the dll is registered. ... > You should be able to reproduce your situation outside of ASP by creating ...
    (microsoft.public.inetserver.iis)
  • Re: Calling unmanaged code from ASP.NET in IIS7
    ... Did you restart IIS after making changes to the security settings. ... Without the actual DLL, ... It works on my dev box if I run the website through Visual Studio using ... Strange thing is if I try to reference a system dll, ...
    (microsoft.public.inetserver.iis)
  • Re: IIS application pool identities and ASP.NET
    ... This is not really a question for IIS. ... IIS has handed control to ASP.Net when your ASP.Net code executes, ... DLL from managed code, it does so using process identity. ... the identity switch it reports the identity as that of the anonymous ...
    (microsoft.public.inetserver.iis)
  • RE: Preventing OS Detection
    ... Server: Dummy Server 1.0! ... I believe the reason some people can't get IIS to start afterward is byte misalignment. ... Also, remember WFP will replace your new DLL, with one from DLLCache, so delete the cached DLL before trying to save your modified version. ... If the reader of this message is not the intended recipient, you are hereby notified that your access is unauthorized, and any review, dissemination, distribution or copying of this message including any attachments is strictly prohibited. ...
    (Security-Basics)