Blog of "Brian Murphy-Booth" a.k.a. "Brian Booth" - All Comments

re: How to troubleshoot an IIS "Event ID: 1009" error.

brian-murphy-booth — Fri, 25 Jul 2008 16:36:21 GMT

Dan

The 0xe0434f4d exception is a generic code that .NET uses to notify the OS that an "exception" occurred. I think technically a .NET exception isn't really an exception so .NET calls kernel32!RaiseException and passes that generic code. The real goal is to allow debuggers to hear that exception and will pause the host process if applicable so we can figure out what's going on and fix the problem. With that in mind... if your process is exiting with 0xe0434f4d that means .NET called RaiseException but also decided that the underlying exception type is was serious enough to warrant closing the process. In ASP.NET this usually only happens when there is a stack overflow. Or... if you are using .NET 2.0 and an exception occurred on a thread not directly under the control of ASP.NET, instead of doing "ExitThread" (v1.1 behavior) after the exception, it does "ExitProcess". Regardless of the actual root of the problem, you will want to get a crash dump using DebugDiag. And you will need to add the kernel32!ExitProcess breakpoint.

re: The object identifier does not represent a valid object.

jamie — Tue, 08 Jul 2008 22:36:56 GMT

helped me! thanks tons

re: The object identifier does not represent a valid object.

Tanmay Kanade — Fri, 20 Jun 2008 06:41:58 GMT

Thanks. after 2 days of headache came across this.Thanks for detailed explanation . this solved my problem.

re: How to troubleshoot an IIS "Event ID: 1009" error.

Dan — Fri, 06 Jun 2008 11:41:02 GMT

Getting tons of W3SVC 1009 errors all with exit code of "0xe0434f4d", along with some W3SVC 1013 errors.

Our users are experiencing unresponsive page loads, but is sporadic per user (since we are on a 2-server load balanced cluster) and it only seems to affect one server at a time. The unresponsiveness will last 20min to 2hrs...most of the time we are recycling the "problem server" to correct the problem.

Is troubleshooting these 1009 and 1013 errors the right track?

Does anyone have info on the exit code of "0xe0434f4d"?

re: How to troubleshoot an IIS "Event ID: 1009" error.

brian-murphy-booth — Tue, 27 May 2008 13:13:31 GMT

Steven,

In my experience, I have encountered an exit code 0x0 when a debugger was attaching to w3wp.exe, then exiting. Typically a debugger exiting will terminate the host process as well. As the debugger exited on my machine, an exit code of 0 was being logged.

re: Static variable, Shared variable... does it matter?

brian-murphy-booth — Tue, 27 May 2008 13:04:30 GMT

A static variable is not "page" specific. It is "AppDomain" specific. The only relation to the "page" would be the path (so to speak) of the variable (MyProject.MyPage.MyVariable for example). Because all users of your application are running in the same AppDomain (i.e. same IIS application folder), then they will all use the same static variable. So... eventually your users are going to see each other's information since they are all sharing that one single static variable.

re: The biggest mistake: ServicePrincipalName’s

brian-murphy-booth — Tue, 27 May 2008 12:59:35 GMT

When it comes to Kerberos, name resolution is very important. In particular, name resolution on the "client" is important. That is because the SPN that the client requests is based on the name that the client determines during a reverse DNS lookup. So to make DelegConfig more accurate I wrote a C# assembly that runs inside IE. It simply does that reverse lookup then appends "resolvedName=whatever" to the URL. That way the server-side code of DelegConfig understands what the client came up with on the reverse lookup. Unfortunately, IE security more often than not, blocks the loading of that C# "activeX control". So you have to manually determine the name that the client comes up with. In regards to you being redirected from the FQDN back to the NetBIOS name... that sounds like a bug in my redirect logic.

re: How to troubleshoot an IIS "Event ID: 1009" error.

Steven — Fri, 16 May 2008 14:52:28 GMT

I am having the same issue but with an exit code of 0x0. Any thoughts?

re: Static variable, Shared variable... does it matter?

Pranay — Thu, 15 May 2008 13:40:30 GMT

Thanks Brian! We recently wrote a big web application for one of our clients, and after everything was done, during a review.. I was shocked..!! almost all the variables had a keyword "static".. across all the pages!! This explaination is too good to convince my team that we are not going the correct way!!

re: Static variable, Shared variable... does it matter?

Ron Henderson — Tue, 29 Apr 2008 14:08:55 GMT

I am using static variables in my aspx.cs to maintain variables between pageloads of the aspx. Won't each browser get a separate instance of the aspx/aspx.cs so that static variables won't be shared between sessions?

DelegConfig - A Tool To help resolve Kerberos authentication and delegation issues

Useful IIS/ASP.NET Information provided by Microsoft Support Teams — Wed, 23 Apr 2008 17:15:57 GMT

Overview I wanted to create this blog to address one of the IIS Support teams top support issues. The

re: The biggest mistake: ServicePrincipalName’s

AndyIIS — Fri, 11 Apr 2008 11:07:13 GMT

Thank you for the tool - it definitely helped me to diagnose my problem.

However (isn't there always...), I have found some interesting issues with authentication/Kerberos in my domain. The problem exhibits itself on all websites running on the webserver, including your DelegConfig tool.

[Background: the webserver is Server 2003 running IIS6; client browser is IE7 running on XP Professional SP2; all clients, workstations and servers are members of the same domain, a Windows 2003 domain running in Windows 2000 native mode. The website is set to Integrated Windows Authentication only, and NTAuthenticationProviders is set to "Negotiate".]

To summarise: I can start a new browser session, go to http://MyServer/Kerberos/ and the page loads, but DelegConfig complains "This tool is unable to verify that the proper SPNs are set because the WrkstaInfo.dll C# ActiveX control failed to load in Internet Explorer". If I add "resolvedName=MyServer", everything works fine. Any idea why adding "MyServer" to the resolvedName helps, when I am already browsing to the exact same server name?

If I start a new browser session and go to myserver.mydomain.com/Kerberos I get a username/password login box. Without authenticating, I go to http://MyServer/Kerberos/ and the page loads (but with same ActiveX error); I then go back to the FQDN page and everything works, including the SPN lookup!

As an attempted fix, I have created 2 new SPNs for NT AUTHORITY\NETWORK SERVICE, called HTTP/MyServer and HTTP/MyServer.MyDomain.com, but the strange behaviour remains. There were already 2 "HOST" SPNs, and the Application Pool Identity is NETWORK SERVICE, so this probably hasn't made any difference.

I fully accept that there might be some strange DNS happenings, but I cannot fathom why when first going to the FQDN I am refused all access, then going to just the ServerName gets me some access, and then returning to the FQDN gets me full access (all without entering any usernames/passwords).

Any ideas?

DelegConfig - A Tool To help resolve Kerberos authentication and delegation issues

Bret Bentzinger's Blog — Mon, 07 Apr 2008 22:00:49 GMT

Overview I wanted to create this blog to address one of the IIS Support teams top support issues. The

re: The biggest mistake: ServicePrincipalName’s

brian-murphy-booth — Mon, 10 Mar 2008 19:46:09 GMT

I'm not really sure how you can have a CIFS service on a domain user so I would start by deleting that one. CIFS is a built in service for the OS. Or if the front-end service is IIS then you can try running my DelegConfig tool that I have mentioned at the top of this blog.

re: The biggest mistake: ServicePrincipalName’s

Marco D'Amico — Mon, 10 Mar 2008 17:37:00 GMT

Hi, thanks for the this nice "documentation"! I have a related question: I found out that I have a duplicated SPN. The problem I have is that I don't know which one I have to delete. Everything began with these 2 errors:

"There are multiple accounts with name cifs/ipl-sbs.ipl.lan of type DS_SERVICE_PRINCIPAL_NAME." and

"There are multiple accounts with name cifs/IPL-SBS of type DS_SERVICE_PRINCIPAL_NAME."

After searching the duplicates using ldp, I found 2 enries: one is the HOST named IPL-SBS that is our domaincontroler and the second is the our DomainAdmin user. Which SPN can I remove? It's perhaps a stupid question, but I'm novice in this area... THANK, Marco