About 2 weeks ago, we migrated all of our NS 6 clients (around 8k) to a new NS7 server (SMP SP4). We did not do any data import to the new server except for the SW packages. For a few days all was well, but we then started noticing odd, seemingly unrelated issues such as:
-
Any installs or repairs from the SIM failed with the logged error saying it could not access the URL https://NSName/Altiris/NS/Services/ServiceConfigurationWebService.asmx. This URL: comes up normally in a browser.
-
Mac Clients were unable to get a list of task servers, causing hundreds of requests a second which (literally) maxed out CPU trying to handle the requests.
-
When accessing the package editor, the Java piece started asking for authentication (it never had before). No matter what combination of credentials we tried, it failed.
-
Windows 7 clients cannot access the NS console at all; it simply will not load. I suspected it was an IE problem but that was not the case as it loaded fine in IE8 on Windows XP clients.
Looking through all of the client and server logs showed a common thread- all were marked by http 401 errors when trying to access parts of the console. This was confirmed by in some cases changing access on certain virtual directories to anonymous access, which helped fix some of the issues (most importantly the issue with the Mac clients).
I have an active call open with Symantec regarding this issue but was wondering if anyone else had seen this occur, where it seems IIS permissions were changed or messed up some how. We made no known changes last week that could have caused this, so it's a mystery at this point. i just wanted to see if anyone else had seen or heard of anything like this before.
Thanks,
Bryan