Lost of permisions, IIS issues, console errors...

[Pablo Llorente]

Hello,

I hope someone here can help me (even Symantec has not found the root of issue yet).

Since last Friday when everything was working fine, maybe because any MS patch at server level has been installed (all MS updates have been already unnisntalled) a lot of issues are happening.

 

While the admin users we can access without problems to the console, the non adm useres cannot access to some of features: They cannot see filters or for example they cannot access to the menus that appera when you click in right botom over any computer (Manage Compuer). The menu windows appear but never stop to load. Is strange because sometimes it work once, but never more.

 

In Filter view, when they cloick on any, nothing is displayed:

 

 

Additionally, the "SMP Server AppPool" in IIS is getting down from time to time. It never happened before.

We have tried everything at permission level, givin read access to All Ittems, All data Classes and some users for testing, but the issue persists. The most strange thing is that the users in some particual moment, maybe just after restart IIS services or ALtiris services, they can access, ut as I said, just once.

Lets paste also some of the errors that we are getting more often:

 

HTTP Request failed:
 /Altiris/NS/Admin/Collections/NSResourceCollection.aspx?Guid=a1fb80a4-860c-4fff-9792-f53e55ed9aef&TreeGuid=1ce604a6-c897-493f-a090-0039563990be&ItemGuid=a1fb80a4-860c-4fff-9792-f53e55ed9aef&ParentGuid=00000000-0000-0000-0000-000000000000&Url=https%3a%2f%2femancmsappd01.ea.holcim.net%2faltiris%2fconsole%2ftree.aspx%3fTreeGuid%3d1ce604a6-c897-493f-a090-0039563990be%26%26ConsoleGuid%3d1b22db4e-a898-443f-9b99-855b1653d3f5&ConsoleGuid=1b22db4e-a898-443f-9b99-855b1653d3f5&CallbackPageId=d041f5d788824901839af5d9c5fb1e68


Request timed out.
   [System.Web.HttpException @ ]

Exception logged from:
   at Altiris.NS.UI.AltirisWebApplication.ReportApplicationError(System.Web.HttpContext)
   at Altiris.NS.UI.AltirisWebApplication.Application_Error(Object, EventArgs)
   at System.Web.HttpApplication.RaiseOnError()
   at System.Web.HttpApplication.RecordError(Exception)
   at System.Web.HttpApplication+PipelineStepManager.ResumeSteps(Exception)
   at System.Web.HttpApplication.BeginProcessRequestNotification(System.Web.HttpContext, AsyncCallback)
   at System.Web.HttpRuntime.ProcessRequestNotificationPrivate(System.Web.Hosting.IIS7WorkerRequest, System.Web.HttpContext)
   at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr, IntPtr, IntPtr, Int32)
   at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr, IntPtr, IntPtr, Int32)
   at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr, System.Web.RequestNotificationStatus&)
   at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr, System.Web.RequestNotificationStatus&)
   at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr, IntPtr, IntPtr, Int32)
   at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr, IntPtr, IntPtr, Int32)

User [EA\srv-EMEA-CMS], Auth [EA\Jorge del Barrio], AppDomain [/LM/W3SVC/1/ROOT/Altiris/NS-4-132132805131426207]

HTTP [GET]: https://emancmsappd01.ea.holcim.net/Altiris/NS/Admin/Collections/NSResourceCollection.aspx?Guid=a1fb80a4-860c-4fff-9792-f53e55ed9aef&TreeGuid=1ce604a6-c897-493f-a090-0039563990be&ItemGuid=a1fb80a4-860c-4fff-9792-f53e55ed9aef&ParentGuid=00000000-0000-0000-0000-000000000000&Url=https://emancmsappd01.ea.holcim.net/altiris/console/tree.aspx?TreeGuid=1ce604a6-c897-493f-a090-0039563990be&&ConsoleGuid=1b22db4e-a898-443f-9b99-855b1653d3f5&ConsoleGuid=1b22db4e-a898-443f-9b99-855b1653d3f5&CallbackPageId=d041f5d788824901839af5d9c5fb1e68
 ip: [10.16.212.31]; languages: [es-ES];
 response: [200 OK]; x-smp-nsversion: [8.1.4528.0];

Failed to process web request.

Exception of type 'System.Web.HttpUnhandledException' was thrown.
   [System.Web.HttpUnhandledException @ System.Web]
   at System.Web.UI.Page.HandleError(Exception e)
   at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
   at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
   at System.Web.UI.Page.ProcessRequest()
   at System.Web.UI.Page.ProcessRequest(HttpContext context)
   at Altiris.NS.UI.Controls.PageCachePage.ProcessRequest(HttpContext context)
   at Altiris.NS.UI.AltirisPage.ProcessRequest(HttpContext context)

The current user 'EA\Jorge del Barrio' does not have required permission 'read' to load item: bd77070c-d826-64a7-1e7b-0d65b4ab8ea6
   [Altiris.NS.Exceptions.AeXUnauthorizedAccessException @ Altiris.NS]
   at Altiris.NS.ItemManagement.Item.RaiseItemLoadFlagsSecurityException(String message)
   at Altiris.NS.ItemManagement.Item.CheckCanGetItem(IItem item, IEnumerable`1 accessPermissions, ItemLoadFlags itemLoadFlags)
   at Altiris.NS.ItemManagement.Item.GetItemInternal(Guid itemGuid, IEnumerable`1 accessPermissions, ItemLoadFlags itemLoadFlags, Boolean& cacheHit)
   at Altiris.NS.ItemManagement.Item.GetItemInternal(Guid itemGuid, IEnumerable`1 accessPermissions, ItemLoadFlags itemLoadFlags)
   at Altiris.CustomConsole.Web.Tree.get_CurrentItem()
   at Altiris.CustomConsole.Web.Tree.ResourceTypeCheck()
   at Altiris.CustomConsole.Web.Tree.OnLoad(EventArgs e)
   at System.Web.UI.Control.LoadRecursive()
   at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)

Exception logged from:
   at Altiris.NS.UI.AltirisPage.ProcessRequest(System.Web.HttpContext)
   at System.Web.HttpApplication+CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
   at System.Web.HttpApplication.ExecuteStepImpl(System.Web.HttpApplication+IExecutionStep)
   at System.Web.HttpApplication.ExecuteStep(System.Web.HttpApplication+IExecutionStep, Boolean&)
   at System.Web.HttpApplication+PipelineStepManager.ResumeSteps(Exception)
   at System.Web.HttpApplication.BeginProcessRequestNotification(System.Web.HttpContext, AsyncCallback)
   at System.Web.HttpRuntime.ProcessRequestNotificationPrivate(System.Web.Hosting.IIS7WorkerRequest, System.Web.HttpContext)
   at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr, IntPtr, IntPtr, Int32)
   at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr, IntPtr, IntPtr, Int32)
   at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr, System.Web.RequestNotificationStatus&)
   at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr, System.Web.RequestNotificationStatus&)
   at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr, IntPtr, IntPtr, Int32)
   at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr, IntPtr, IntPtr, Int32)

User [EA\srv-EMEA-CMS], Auth [EA\Jorge del Barrio], AppDomain [/LM/W3SVC/1/ROOT/Altiris/Console-15-132132782885715115]

HTTP [GET]: https://emancmsappd01.ea.holcim.net/altiris/console/tree.aspx?ItemGuid=bd77070c-d826-64a7-1e7b-0d65b4ab8ea6&TreeGuid=6d5850fb-33a4-4dcb-9087-be0e2c62c034&&ConsoleGuid=1b22db4e-a898-443f-9b99-855b1653d3f5
 ip: [10.11.220.246]; languages: [en-US,en;q=0.8,es-ES;q=0.5,es;q=0.3];
 response: [200 OK]; x-smp-nsversion: [8.1.4528.0];

 

An error occured while evaluating logic expression.

The current user 'EA\Jorge del Barrio' does not have required permission 'read' to load item: 37974fb9-e60e-4027-b72d-19e3f088a6a5
   [Altiris.NS.Exceptions.AeXUnauthorizedAccessException @ Altiris.NS]
   at Altiris.NS.ItemManagement.Item.RaiseItemLoadFlagsSecurityException(String message)
   at Altiris.NS.ItemManagement.Item.CheckCanGetItem(IItem item, IEnumerable`1 accessPermissions, ItemLoadFlags itemLoadFlags)
   at Altiris.NS.ItemManagement.Item.GetItemInternal(Guid itemGuid, IEnumerable`1 accessPermissions, ItemLoadFlags itemLoadFlags, Boolean& cacheHit)
   at Altiris.NS.ItemManagement.Item.GetItemInternal(Guid itemGuid, IEnumerable`1 accessPermissions, ItemLoadFlags itemLoadFlags)
   at Altiris.Connector.Common.ResourceAttribute.get_AttributeType()
   at Altiris.Connector.Common.InventoryLogicExpression.GenerateExpressionSqlParts(InventoryLogicExpression expression, Hashtable tablePrefixMap, SqlParameterCollection parameters, String& joinClauseResult, String& whereClauseResult)
   at Altiris.Connector.Common.InventoryLogicExpression.EvaluateExpression(GuidCollection resourceGuids, Guid resourceTypeGuid)

Exception logged from:
   at Altiris.Connector.Common.InventoryLogicExpression.EvaluateExpression(Altiris.Common.GuidCollection, System.Guid)
   at Altiris.NS.EditableItemAction.EditableResourceItemAction.DoesItemActionApply(Altiris.Common.GuidCollection)
   at Altiris.NS.ItemManagement.ItemAction.GetApplicableActionsForItemsExact(Altiris.NS.ItemManagement.ItemActionData, Altiris.NS.ItemManagement.ItemLoadFlags, Boolean, Altiris.Profiling.CodeProfiling.CodeProfiler)
   at Altiris.NS.ItemManagement.ItemAction.GetActionsForItemsExact(Altiris.NS.ItemManagement.ItemActionData, Altiris.NS.ItemManagement.ItemLoadFlags)
   at Altiris.NS.ItemManagement.Item.BuildContextMenuForItemActions(Altiris.Common.GuidCollection, Altiris.NS.ItemManagement.ContextMenu, System.Guid)
   at Altiris.Resource.ResourceItem.GetContextMenuForItemActions(Altiris.NS.ItemManagement.ContextMenu)
   at Altiris.Resource.ResourceItem.GetCurrentContextMenu(System.Collections.Hashtable)
   at Altiris.NS.Services.CoreServices.ResourceService.GetItemActions(Altiris.Common.GuidCollection, String)
   at .SyncInvokeGetItemActions(Object, Object[], Object[])
   at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object, Object[], Object[]&)
   at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(System.ServiceModel.Dispatcher.MessageRpc&)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(System.ServiceModel.Dispatcher.MessageRpc&)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage11(System.ServiceModel.Dispatcher.MessageRpc&)
   at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean)
   at System.ServiceModel.Dispatcher.ChannelHandler.DispatchAndReleasePump(System.ServiceModel.Channels.RequestContext, Boolean, System.ServiceModel.OperationContext)
   at System.ServiceModel.Dispatcher.ChannelHandler.HandleRequest(System.ServiceModel.Channels.RequestContext, System.ServiceModel.OperationContext)
   at System.ServiceModel.Dispatcher.ChannelHandler.AsyncMessagePump(IAsyncResult)
   at System.ServiceModel.Dispatcher.ChannelHandler.OnAsyncReceiveComplete(IAsyncResult)
   at System.Runtime.Fx+AsyncThunk.UnhandledExceptionFrame(IAsyncResult)
   at System.Runtime.AsyncResult.Complete(Boolean)
   at System.Runtime.AsyncQueueReader<T>.Set(System.Runtime.Item<T>)
   at System.Runtime.InputQueue<T>.EnqueueAndDispatch(System.Runtime.Item<T>, Boolean)
   at System.Runtime.InputQueue<T>.EnqueueAndDispatch(T, Action, Boolean)
   at System.ServiceModel.Channels.SingletonChannelAcceptor<ChannelInterfaceType,TChannel,QueueItemType>.Enqueue(QueueItemType, Action, Boolean)
   at System.ServiceModel.Channels.HttpPipeline+EnqueueMessageAsyncResult.CompleteParseAndEnqueue(IAsyncResult)
   at System.ServiceModel.Channels.HttpPipeline+EnqueueMessageAsyncResult.HandleParseIncomingMessage(IAsyncResult)
   at System.Runtime.AsyncResult.SyncContinue(IAsyncResult)
   at System.ServiceModel.Channels.HttpPipeline+EmptyHttpPipeline.BeginProcessInboundRequest(System.ServiceModel.Channels.ReplyChannelAcceptor, Action, AsyncCallback, Object)
   at System.ServiceModel.Channels.HttpContextReceivedAsyncResult<TChannel,TListenerChannel>.ProcessHttpContextAsync()
   at System.ServiceModel.Channels.HttpChannelListener<TChannel>.BeginHttpContextReceived(System.ServiceModel.Channels.HttpRequestContext, Action, AsyncCallback, Object)
   at System.ServiceModel.Activation.HostedHttpTransportManager.HttpContextReceived(System.ServiceModel.Activation.HostedHttpRequestAsyncResult)
   at System.ServiceModel.Activation.HostedHttpRequestAsyncResult.HandleRequest()
   at System.ServiceModel.Activation.HostedHttpRequestAsyncResult.BeginRequest()
   at System.ServiceModel.Activation.HostedHttpRequestAsyncResult.OnBeginRequest(Object)
   at System.ServiceModel.AspNetPartialTrustHelpers.PartialTrustInvoke(System.Threading.ContextCallback, Object)
   at System.ServiceModel.Activation.HostedHttpRequestAsyncResult.OnBeginRequestWithFlow(Object)
   at System.Runtime.IOThreadScheduler+ScheduledOverlapped.IOCallback(UInt32, UInt32, System.Threading.NativeOverlapped*)
   at System.Runtime.Fx+IOCompletionThunk.UnhandledExceptionFrame(UInt32, UInt32, System.Threading.NativeOverlapped*)
   at System.Threading._IOCompletionCallback.PerformIOCompletionCallback(UInt32, UInt32, System.Threading.NativeOverlapped*)

User [EA\srv-EMEA-CMS], Auth [EA\Jorge del Barrio], AppDomain [/LM/W3SVC/1/ROOT/Altiris/ActivityCenter/Service-6-132132749484341767]

HTTP [POST]: https://emancmsappd01.ea.holcim.net/Altiris/ActivityCenter/Service/ResourceService.svc
 ip: [10.16.212.31]; languages: [es-ES]; content-length: [782];
 response: [200 OK];

WCF [TO]: https://emancmsappd01.ea.holcim.net/Altiris/ActivityCenter/Service/ResourceService.svc
 state: [Read]; result: [ok]; version: [Soap11 (http://schemas.xmlsoap.org/soap/envelope/) AddressingNone (http://schemas.microsoft.com/ws/2005/05/addressing/none)];
<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/">
  <s:Header>
    <International xmlns:i="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://www.w3.org/2005/09/ws-i18n">
      <Locale>en-US</Locale>
      <Preferences xmlns:d4p1="http://schemas.datacontract.org/2004/07/Altiris.NS.Silverlight.Common.Services.Contracts" i:nil="true" />
      <Tz>(UTC+01:00) Brussels, Copenhagen, Madrid, Paris</Tz>
    </International>
    <To s:mustUnderstand="1" xmlns="http://schemas.microsoft.com/ws/2005/05/addressing/none">https://emancmsappd01.ea.holcim.net/Altiris/ActivityCenter/Service/ResourceService.svc</To>
    <Action s:mustUnderstand="1" xmlns="http://schemas.microsoft.com/ws/2005/05/addressing/none">http://schemas.datacontract.org/2004/07/Altiris.NS.Services.CoreServices.Contracts/IResourceService/GetItemActions</Action>
  </s:Header>
  <s:Body>
    <GetItemActions xmlns="http://schemas.datacontract.org/2004/07/Altiris.NS.Services.CoreServices.Contracts">
      <gc xmlns:d4p1="http://schemas.microsoft.com/2003/10/Serialization/Arrays" xmlns:i="http://www.w3.org/2001/XMLSchema-instance">
        <d4p1:guid>4a360c15-0dfa-400f-b378-48d8236eb4ad</d4p1:guid>
      </gc>
      <context>
      </context>
    </GetItemActions>
  </s:Body>
</s:Envelope>

Failed to check ItemAction: 086ef3b5-66c7-4956-9726-38d0f3aa85e8

Array dimensions exceeded supported range.
   [System.OutOfMemoryException @ mscorlib]
   at System.Collections.Generic.List`1.set_Capacity(Int32 value)
   at System.Collections.Generic.List`1.EnsureCapacity(Int32 min)
   at System.Collections.Generic.List`1.InsertRange(Int32 index, IEnumerable`1 collection)
   at Altiris.NS.Security.SecurityCache.Demand(ICollection`1 entityGuids, ISet`1 requiredPermissions, ISet`1 membership)
   at Altiris.NS.Security.SecurityCache.DemandForItems(IEnumerable`1 itemGuids, IEnumerable`1 permissions, Boolean includeResources)
   at Altiris.NS.StandardItems.ItemActions.GenericItemAction.CheckPermissions(GuidCollection itemGuids)
   at Altiris.NS.ItemManagement.ItemAction.GetApplicableActionsForItemsExact(ItemActionData data, ItemLoadFlags itemLoadFlags, Boolean skipSecurityFailures, CodeProfiler cp)

Exception logged from:
   at Altiris.NS.ItemManagement.ItemAction.GetApplicableActionsForItemsExact(Altiris.NS.ItemManagement.ItemActionData, Altiris.NS.ItemManagement.ItemLoadFlags, Boolean, Altiris.Profiling.CodeProfiling.CodeProfiler)
   at Altiris.NS.ItemManagement.ItemAction.GetActionsForItemsExact(Altiris.NS.ItemManagement.ItemActionData, Altiris.NS.ItemManagement.ItemLoadFlags)
   at Altiris.NS.ItemManagement.Item.BuildContextMenuForItemActions(Altiris.Common.GuidCollection, Altiris.NS.ItemManagement.ContextMenu, System.Guid)
   at Altiris.Resource.ResourceItem.GetContextMenuForItemActions(Altiris.NS.ItemManagement.ContextMenu)
   at Altiris.Resource.ResourceItem.GetCurrentContextMenu(System.Collections.Hashtable)
   at Altiris.NS.Services.CoreServices.ResourceService.GetItemActions(Altiris.Common.GuidCollection, String)
   at .SyncInvokeGetItemActions(Object, Object[], Object[])
   at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object, Object[], Object[]&)
   at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(System.ServiceModel.Dispatcher.MessageRpc&)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(System.ServiceModel.Dispatcher.MessageRpc&)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage11(System.ServiceModel.Dispatcher.MessageRpc&)
   at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean)
   at System.ServiceModel.Dispatcher.ChannelHandler.DispatchAndReleasePump(System.ServiceModel.Channels.RequestContext, Boolean, System.ServiceModel.OperationContext)
   at System.ServiceModel.Dispatcher.ChannelHandler.HandleRequest(System.ServiceModel.Channels.RequestContext, System.ServiceModel.OperationContext)
   at System.ServiceModel.Dispatcher.ChannelHandler.AsyncMessagePump(IAsyncResult)
   at System.ServiceModel.Dispatcher.ChannelHandler.OnAsyncReceiveComplete(IAsyncResult)
   at System.Runtime.Fx+AsyncThunk.UnhandledExceptionFrame(IAsyncResult)
   at System.Runtime.AsyncResult.Complete(Boolean)
   at System.Runtime.AsyncQueueReader<T>.Set(System.Runtime.Item<T>)
   at System.Runtime.InputQueue<T>.EnqueueAndDispatch(System.Runtime.Item<T>, Boolean)
   at System.Runtime.InputQueue<T>.EnqueueAndDispatch(T, Action, Boolean)
   at System.ServiceModel.Channels.SingletonChannelAcceptor<ChannelInterfaceType,TChannel,QueueItemType>.Enqueue(QueueItemType, Action, Boolean)
   at System.ServiceModel.Channels.HttpPipeline+EnqueueMessageAsyncResult.CompleteParseAndEnqueue(IAsyncResult)
   at System.ServiceModel.Channels.HttpPipeline+EnqueueMessageAsyncResult.HandleParseIncomingMessage(IAsyncResult)
   at System.Runtime.AsyncResult.SyncContinue(IAsyncResult)
   at System.ServiceModel.Channels.HttpPipeline+EmptyHttpPipeline.BeginProcessInboundRequest(System.ServiceModel.Channels.ReplyChannelAcceptor, Action, AsyncCallback, Object)
   at System.ServiceModel.Channels.HttpContextReceivedAsyncResult<TChannel,TListenerChannel>.ProcessHttpContextAsync()
   at System.ServiceModel.Channels.HttpChannelListener<TChannel>.BeginHttpContextReceived(System.ServiceModel.Channels.HttpRequestContext, Action, AsyncCallback, Object)
   at System.ServiceModel.Activation.HostedHttpTransportManager.HttpContextReceived(System.ServiceModel.Activation.HostedHttpRequestAsyncResult)
   at System.ServiceModel.Activation.HostedHttpRequestAsyncResult.HandleRequest()
   at System.ServiceModel.Activation.HostedHttpRequestAsyncResult.BeginRequest()
   at System.ServiceModel.Activation.HostedHttpRequestAsyncResult.OnBeginRequest(Object)
   at System.ServiceModel.AspNetPartialTrustHelpers.PartialTrustInvoke(System.Threading.ContextCallback, Object)
   at System.ServiceModel.Activation.HostedHttpRequestAsyncResult.OnBeginRequestWithFlow(Object)
   at System.Runtime.IOThreadScheduler+ScheduledOverlapped.IOCallback(UInt32, UInt32, System.Threading.NativeOverlapped*)
   at System.Runtime.Fx+IOCompletionThunk.UnhandledExceptionFrame(UInt32, UInt32, System.Threading.NativeOverlapped*)
   at System.Threading._IOCompletionCallback.PerformIOCompletionCallback(UInt32, UInt32, System.Threading.NativeOverlapped*)

User [EA\srv-EMEA-CMS], Auth [EA\Jorge del Barrio], AppDomain [/LM/W3SVC/1/ROOT/Altiris/ActivityCenter/Service-6-132132893102498675]

HTTP [POST]: https://emancmsappd01.ea.holcim.net/Altiris/ActivityCenter/Service/ResourceService.svc
 ip: [10.16.212.31]; languages: [es-ES]; content-length: [818];
 response: [200 OK];

WCF [TO]: https://emancmsappd01.ea.holcim.net/Altiris/ActivityCenter/Service/ResourceService.svc
 state: [Read]; result: [ok]; version: [Soap11 (http://schemas.xmlsoap.org/soap/envelope/) AddressingNone (http://schemas.microsoft.com/ws/2005/05/addressing/none)];
<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/">
  <s:Header>
    <International xmlns:i="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://www.w3.org/2005/09/ws-i18n">
      <Locale>en-US</Locale>
      <Preferences xmlns:d4p1="http://schemas.datacontract.org/2004/07/Altiris.NS.Silverlight.Common.Services.Contracts" i:nil="true" />
      <Tz>(UTC+01:00) Brussels, Copenhagen, Madrid, Paris</Tz>
    </International>
    <To s:mustUnderstand="1" xmlns="http://schemas.microsoft.com/ws/2005/05/addressing/none">https://emancmsappd01.ea.holcim.net/Altiris/ActivityCenter/Service/ResourceService.svc</To>
    <Action s:mustUnderstand="1" xmlns="http://schemas.microsoft.com/ws/2005/05/addressing/none">http://schemas.datacontract.org/2004/07/Altiris.NS.Services.CoreServices.Contracts/IResourceService/GetItemActions</Action>
  </s:Header>
  <s:Body>
    <GetItemActions xmlns="http://schemas.datacontract.org/2004/07/Altiris.NS.Services.CoreServices.Contracts">
      <gc xmlns:d4p1="http://schemas.microsoft.com/2003/10/Serialization/Arrays" xmlns:i="http://www.w3.org/2001/XMLSchema-instance">
        <d4p1:guid>2418fe5b-0748-4cda-a067-7b29484596d1</d4p1:guid>
      </gc>
      <context>da713c37-d04b-4069-bec0-649079a78646</context>
    </GetItemActions>
  </s:Body>
</s:Envelope>

 

 

#############################################

 

Please let me know what alese you could need to may help us, because the only chance that we have now is to restore the database and the app server,

 

Thanks in advance for your help!!!

[Igor Perevozchikov]

According to log output where few GUIDs are mentioned, I see that current account "EA\Jorge del Barrio" doesn't have permissions for:

 

1) 'AeX AC TCPIP' Data Class

Name:	AeX AC TCPIP
Description:
Product Name:	'SMP 8.1 RU7' (d0e33520-c160-11d2-8612-00104b74a9df)
Folder:	\SMP 8.1 RU7\Settings\Notification Server\Resource and Data Class Settings\Data Classes\Inventory\Basic Inventory
Attributes:	NoClone, Readonly
Creation Date:	Thursday, October 11, 2018, 9:20 PM
Modification Date:	Thursday, April 11, 2019, 9:34 AM
Guid:	{37974fb9-e60e-4027-b72d-19e3f088a6a5}

 

2) 'Interfaces' action from right click context menu on selected resource

Name:	Interfaces
Description:	Able use as Interface.
Product Name:	'Altiris Deployment Solution 8.1' (2c9a27a0-a5b4-4d9e-9d5b-b2e0a3fa99e5)
Folder:	\SMP 8.1 RU7\Settings\Notification Server\Right Click Menu\iLO Power Management
Attributes:	NoClone, Readonly
Creation Date:	Thursday, October 11, 2018, 9:47 PM
Modification Date:	Thursday, October 11, 2018, 9:47 PM
Guid:	{086ef3b5-66c7-4956-9726-38d0f3aa85e8}

• Try to open "Security Role Manager" using logged in NS AppIdentity account and give permissions for mentioned above Items to account "EA\Jorge del Barrio"
• Also check in which "Security Roles' is added account "EA\Jorge del Barrio" on 'Security Roles' page of SMP Console. Maybe "AD Import' moves it to other roles according to changes in your Active Directory.

 

Other things to check:

1. Open Task Manager on this Server and check for CPU/Memory Usage/Memory Commit for Altiris processes as well as W3WP processes
2. Check NT Events on this Server "Application, System, Security" (Maybe there are errors/warning regarding ASP NET of App Pools, etc)

According to logs, there was a request timeout which probably may be caused due Server overload.

You can check how much connections are established right now to your 'Symantec_CMDB" database using SQL Query below

SELECT
host_name AS [Used By HostName], count(*) AS [Amount of current Connections]
from sys.dm_exec_sessions
group by host_name

By default Database max connections pool is 400 in CoreSettings.config
<customSetting key="DBMaxPoolSize" type="local" value="400" upgradeIf="lt" />

3. More detailly analyze NS Logs from Altiris Log Viewer to review warning/error messages there.

 

Thanks,

IP.

[Pablo Llorente]

Hello,

First of all, thanks for your comments and for your help. 

In our NS we have created different roles, one per country of our organization. All of them are identical, except because each one is pointing to their own folders in "Resource Management/Organizational Views" in order to prevent that one country can see the computers belonging to a different country.

All roles are within the "Everyone" role as is defined by the system. 

We have already tried to give more permissions to one particualr user, and we are seeing that doing that ie. givin more permissions,  finally the user can work but iseeing all resources for all the countries, reports that shoundt see, filters etc because at the end we are giving more rights that are needed.

Something has happened at top level, maybe at "Everyone" role (because is common to all accounts and roles) that has caused the issue. Maybe it has been at AD level because we also have detected that in the roles for the countries, we had configured such roles to see:

1.- Reports/country_reports --> Read,Write,Creaste children

2.- Resource Management

• Filter/country_filters --> Clone, Read, Run reports
• Organizational Views/country --> Read, Read resource Data

3.- Settings --> Read

And all of them have lost the Point 2, so now the roles only have Reports and Settings. 

In any case, when we add REsource Management, they can see computers but not enter into Resource Manager as I exaplined in my first comment.

(I dont know I cannot paste screenshots here now, so I will paste a Docx with some images)

 

 

 

 

 

 

 

 

[Igor Perevozchikov]

Well, looks very strange and I don't believe that ITMS 8.1 itself unexpectedly done this. Seems like something went wrong but what exactly....

Please check your AppPools whether they have same settings like i have on my 8.1 RU7 Server below:

 

• So nothing useful in "NT Events" logs on this NS Server as well as in NS log from Altiris Log Viewer?
• Check when any appropriate AD Import rule executed last time from SMP Console (Actions -> Discover -> Import Microsoft Active Directory) to compare dates from when this behavior started.

 

Please open "Symantec Installation Manager" and check state of installed products below there (Is there any product with state 'not properly configured') ?

[Pablo Llorente]

• Nothing strange in our Pools (attached)

• In Microsoft Active Directory Import we only have enabled the Import of computers from OUs, but not Roles, accounts etc

In Event logs Im seeing lot of errors, let me paste some of them:

Event code: 3005 
Event message: An unhandled exception has occurred. 
Event time: 9/20/2019 7:32:40 AM 
Event time (UTC): 9/20/2019 7:32:40 AM 
Event ID: bda02bf75f0e47fd845545012a4b90ed 
Event sequence: 1882 
Event occurrence: 8 
Event detail code: 0 
 
Application information: 
    Application domain: /LM/W3SVC/1/ROOT/Altiris/NS-2-132134375641468555 
    Trust level: Full 
    Application Virtual Path: /Altiris/NS 
    Application Path: D:\Program Files\Altiris\Notification Server\Web\ 
    Machine name: EMANCMSAPPD01 
 
Process information: 
    Process ID: 1812 
    Process name: w3wp.exe 
    Account name: IIS APPPOOL\SMP Server AppPool 
 
Exception information: 
    Exception type: ArgumentOutOfRangeException 
    Exception message: Index was out of range. Must be non-negative and less than the size of the collection.
Parameter name: index
   at System.ThrowHelper.ThrowArgumentOutOfRangeException(ExceptionArgument argument, ExceptionResource resource)
   at Altiris.NS.Security.SecurityCache.Demand(ICollection`1 entityGuids, ISet`1 requiredPermissions, ISet`1 membership)
   at Altiris.NS.Security.SecurityCache.DemandForItems(IEnumerable`1 itemGuids, IEnumerable`1 permissions, Boolean includeResources)
   at Altiris.NS.UI.Controls.SelectorWrappers.SelectorWrapperBase.SelectItems(ICollection`1 itemGuids)
   at Altiris.NS.UI.Controls.SelectorWrappers.GenericItemPicker`1.SetSelectedItems(IEnumerable`1 itemGuids)
   at Altiris.NS.UI.Admin.Collections.NSResourceCollection.LoadData(Boolean bForce)
   at Altiris.NS.UI.Admin.Collections.NSResourceCollection.OnLoad(EventArgs e)
   at System.Web.UI.Control.LoadRecursive()
   at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)

 
 
Request information: 
    Request URL: https://emancmsappd01.ea.holcim.net:443/Altiris/NS/Admin/Collections/NSResourceCollection.aspx?Guid=0612b8c6-01ec-44b8-b920-5f755fad4658&TreeGuid=1ce604a6-c897-493f-a090-0039563990be&ItemGuid=0612b8c6-01ec-44b8-b920-5f755fad4658&ParentGuid=00000000-0000-0000-0000-000000000000&Url=https://emancmsappd01.ea.holcim.net/altiris/console/tree.aspx?TreeGuid=1ce604a6-c897-493f-a090-0039563990be&&ConsoleGuid=1b22db4e-a898-443f-9b99-855b1653d3f5&ConsoleGuid=1b22db4e-a898-443f-9b99-855b1653d3f5&CallbackPageId=3c50fbcc332a4cbab5b23c71a31d48d2 
    Request path: /Altiris/NS/Admin/Collections/NSResourceCollection.aspx 
    User host address: 192.168.20.183 
    User: EA\pllorent 
    Is authenticated: True 
    Authentication Type: Negotiate 
    Thread account name: EA\srv-EMEA-CMS 
 
Thread information: 
    Thread ID: 337 
    Thread account name: EA\srv-EMEA-CMS 
    Is impersonating: False 
    Stack trace:    at System.ThrowHelper.ThrowArgumentOutOfRangeException(ExceptionArgument argument, ExceptionResource resource)
   at Altiris.NS.Security.SecurityCache.Demand(ICollection`1 entityGuids, ISet`1 requiredPermissions, ISet`1 membership)
   at Altiris.NS.Security.SecurityCache.DemandForItems(IEnumerable`1 itemGuids, IEnumerable`1 permissions, Boolean includeResources)
   at Altiris.NS.UI.Controls.SelectorWrappers.SelectorWrapperBase.SelectItems(ICollection`1 itemGuids)
   at Altiris.NS.UI.Controls.SelectorWrappers.GenericItemPicker`1.SetSelectedItems(IEnumerable`1 itemGuids)
   at Altiris.NS.UI.Admin.Collections.NSResourceCollection.LoadData(Boolean bForce)
   at Altiris.NS.UI.Admin.Collections.NSResourceCollection.OnLoad(EventArgs e)
   at System.Web.UI.Control.LoadRecursive()
   at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
 
 
Custom event details: 
 

+ System 

  - Provider 

   [ Name]  ASP.NET 4.0.30319.0 
 
  - EventID 1309 

   [ Qualifiers]  32768 
 
   Level 3 
 
   Task 3 
 
   Keywords 0x80000000000000 
 
  - TimeCreated 

   [ SystemTime]  2019-09-20T07:32:40.000000000Z 
 
   EventRecordID 1093744 
 
   Channel Application 
 
   Computer EMANCMSAPPD01.EA.HOLCIM.NET 
 
   Security 
 

- EventData 

   3005 
   An unhandled exception has occurred. 
   9/20/2019 7:32:40 AM 
   9/20/2019 7:32:40 AM 
   bda02bf75f0e47fd845545012a4b90ed 
   1882 
   8 
   0 
   /LM/W3SVC/1/ROOT/Altiris/NS-2-132134375641468555 
   Full 
   /Altiris/NS 
   D:\Program Files\Altiris\Notification Server\Web\ 
   EMANCMSAPPD01 
    
   1812 
   w3wp.exe 
   IIS APPPOOL\SMP Server AppPool 
   ArgumentOutOfRangeException 
   Index was out of range. Must be non-negative and less than the size of the collection. Parameter name: index at System.ThrowHelper.ThrowArgumentOutOfRangeException(ExceptionArgument argument, ExceptionResource resource) at Altiris.NS.Security.SecurityCache.Demand(ICollection`1 entityGuids, ISet`1 requiredPermissions, ISet`1 membership) at Altiris.NS.Security.SecurityCache.DemandForItems(IEnumerable`1 itemGuids, IEnumerable`1 permissions, Boolean includeResources) at Altiris.NS.UI.Controls.SelectorWrappers.SelectorWrapperBase.SelectItems(ICollection`1 itemGuids) at Altiris.NS.UI.Controls.SelectorWrappers.GenericItemPicker`1.SetSelectedItems(IEnumerable`1 itemGuids) at Altiris.NS.UI.Admin.Collections.NSResourceCollection.LoadData(Boolean bForce) at Altiris.NS.UI.Admin.Collections.NSResourceCollection.OnLoad(EventArgs e) at System.Web.UI.Control.LoadRecursive() at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)  
   https://emancmsappd01.ea.holcim.net:443/Altiris/NS/Admin/Collections/NSResourceCollection.aspx?Guid=0612b8c6-01ec-44b8-b920-5f755fad4658&TreeGuid=1ce604a6-c897-493f-a090-0039563990be&ItemGuid=0612b8c6-01ec-44b8-b920-5f755fad4658&ParentGuid=00000000-0000-0000-0000-000000000000&Url=https://emancmsappd01.ea.holcim.net/altiris/console/tree.aspx?TreeGuid=1ce604a6-c897-493f-a090-0039563990be&&ConsoleGuid=1b22db4e-a898-443f-9b99-855b1653d3f5&ConsoleGuid=1b22db4e-a898-443f-9b99-855b1653d3f5&CallbackPageId=3c50fbcc332a4cbab5b23c71a31d48d2 
   /Altiris/NS/Admin/Collections/NSResourceCollection.aspx 
   192.168.20.183 
   EA\pllorent 
   True 
   Negotiate 
   EA\srv-EMEA-CMS 
   337 
   EA\srv-EMEA-CMS 
   False 
   at System.ThrowHelper.ThrowArgumentOutOfRangeException(ExceptionArgument argument, ExceptionResource resource) at Altiris.NS.Security.SecurityCache.Demand(ICollection`1 entityGuids, ISet`1 requiredPermissions, ISet`1 membership) at Altiris.NS.Security.SecurityCache.DemandForItems(IEnumerable`1 itemGuids, IEnumerable`1 permissions, Boolean includeResources) at Altiris.NS.UI.Controls.SelectorWrappers.SelectorWrapperBase.SelectItems(ICollection`1 itemGuids) at Altiris.NS.UI.Controls.SelectorWrappers.GenericItemPicker`1.SetSelectedItems(IEnumerable`1 itemGuids) at Altiris.NS.UI.Admin.Collections.NSResourceCollection.LoadData(Boolean bForce) at Altiris.NS.UI.Admin.Collections.NSResourceCollection.OnLoad(EventArgs e) at System.Web.UI.Control.LoadRecursive() at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)  
 

 

And this one many times:

 

Unloading the performance counter strings for service task server - client engine (task server - client engine) failed. The first DWORD in the Data section contains the error code.

 

- System 

  - Provider 

   [ Name]  Microsoft-Windows-LoadPerf 
   [ Guid]  {122EE297-BB47-41AE-B265-1CA8D1886D40} 
 
   EventID 3011 
 
   Version 0 
 
   Level 2 
 
   Task 0 
 
   Opcode 0 
 
   Keywords 0x8000000000000000 
 
  - TimeCreated 

   [ SystemTime]  2019-09-20T06:43:19.238093000Z 
 
   EventRecordID 1093367 
 
   Correlation 
 
  - Execution 

   [ ProcessID]  34772 
   [ ThreadID]  14892 
 
   Channel Application 
 
   Computer EMANCMSAPPD01.EA.HOLCIM.NET 
 
  - Security 

   [ UserID]  S-1-5-18 
 

- UserData 

  - EventXML 

   param1 task server - client engine 
 
   param2 task server - client engine 
 
   binaryDataSize 8 
 
   binaryData F2030000E5050000 
 
 
 

and at IIS level, the following warning:

 

A process serving application pool 'SMP Server AppPool' suffered a fatal communication error with the Windows Process Activation Service. The process id was '33616'. The data field contains the error number.

 

and this error whenever the Pool is getting down:

 

A process serving application pool 'SMP Server AppPool' suffered a fatal communication error with the Windows Process Activation Service. The process id was '33616'. The data field contains the error number.

 

Thanks Igor again!

[Igor Perevozchikov]

Looks like MS Patches uninstallation (about you mentioned in the beginning of this discussion) on NS machine caused incorrect working of AppPool

Events mentioned above exactly saying that SMP Server AppPool becomes unavailable (You already mentioned that this AppPool becomes stopped/unavailable time to time. Does only SMP Server AppPool becomes stopped or there are other AppPools with same sympthoms?)

A process serving application pool 'SMP Server AppPool' suffered a fatal communication error with the Windows Process Activation Service. The process id was '33616'. The data field contains the error number.

 And Microsoft provides information in case of such NT Events appearing on Server OS

• https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc735271(v=ws.10)?redirectedfrom=MSDN

 

Other things:

1. Did you try to restart Altiris Services, "IIS Admin", "W3WP" & "Windows Process Activation Service (WAS)" services on this affected NS machine?
2. Did you manual 'Recycle' action from IIS manager for SMP Server AppPool and others?
3. Did you reboot this server where NS has problem now with SMP Server AppPool? (Suspect that this is a prod environment and reboot action isn't an easy procedure)
4. Did you compare settings of AppPools that I've mentioned above on attached picture?