Hotfix 35: Recovery Agents cannot see the Recovery Server because ''AeXRSVault'' ISAPI of IIS is under heavy load

Article:TECH39363  |  Created: 2008-02-19  |  Updated: 2008-02-21  |  Article URL http://www.symantec.com/docs/TECH39363
NOTE: If you are experiencing this particular known issue, we recommend that you Subscribe to receive email notification each time this article is updated. Subscribers will be the first to learn about any releases, status changes, workarounds or decisions made.
Article Type
Technical Solution

Issue



Recovery Solution Agents installed on the client computers are unable to connect to the Recovery Solution Server inspite of the Recovery Solution Server Service is running. The client computers can see the Recovery Server via ping and telnet to port 443.  

Rebooting the Recovery Server or restarting IIS are the ways to restore the connection once this occurs.


Environment



Recovery Solution 6.2.2332 (6.2 SP1)
Recovery Solution Agents communicate via HTTP(S)

Cause



Heavy load on "AeXRSVault" ISAPI of IIS, totally unexpected re-entrance of a HTTP method, has been observed. As a result of re-entrance, there was incorrect reset of "in use" flag of an interface entry item. So the next run of the periodic "DoCleanUp" task tries to release the item, which is actually in use. As a result, a C++ exception (and probably memory corruption) may occur. The C++ exception leads to unfunctional clean up and then to a resource leakage. All of these cause the IIS application pool to hang after awhile.

Solution



This issue is resolved by introducing correct interlocked reference counting, so an interface entry item will be released only if there is no references to it. In this scenario, it will work correctly regardless of any assumption of re-entrance and multithreading.

This hotfix can be applied the following way:

  1. Stop the Recovery Solution Server Service on the Recovery Server.
  2. Stop Internet Information Services (IIS) Manager.
  3. Browse to %Program Files%\Altiris\Recovery Solution\Server\HTTPVault directory on the Recovery Solution Server.
  4. Replace the old RsHttpVault.dll with a new one from attachments*.
  5. Start Internet Information Services (IIS) Manager.
  6. Restart the Recovery Solution Server Service.

Note: You may need to grant the local Administrators group full control permissions to the \HTTPVault directory prior to replacing the updated dll.


Attachments

RsHttpVault.zip (266 kBytes)

Supplemental Materials

SourceDEFECT
ValueTLN 25552
DescriptionLogged in tlndev (Altiris - Talinn) database


Legacy ID



40498


Article URL http://www.symantec.com/docs/TECH39363


Terms of use for this information are found in Legal Notices