Some things to check:
Make sure you have all necessary VC Version 8 runtimes installed. These can be downloaded from here: http://www.microsoft.com/downloads/details.aspx?familyid=200b2fd9- ae1a-4a14-984d-389c36f85647&displaylang=en The Application Log in the Event Viewer should have some "Cosign" events. See if there are any errors associated with Cosign! Parsing errors with the config file are usually reported here. Check the latest *.csl (CoSign Log) file in the \Program Files \IISCosign\Logs folder. Try running with the cosigndbg.dll instead of cosign.dll. This will generate more verbose output when IISCosign tries to run. If IISCosign is setup correctly, much of the output will be put into a Cosign log file. Use a debugger such as Debug View to catch the verbose output. http://www.microsoft.com/technet/sysinternals/ Miscellaneous/DebugView.mspx Open a web browser and attempt to load one of the Cosign-protected web pages to catch any error logging! IIS will not attempt to load the filter until it needs to. On Mar 20, 2008, at 12:23 PM, Beth Jones wrote: > We have version 2.0.3. Where do we get the newest download? But I > was hoping that'd be last resort... > http://weblogin.org/download.html But I'm curious, from where did you download 2.0.3? Also, was there a previous, working version of the IIS filter running on your server? If so, what version? --Jarod > I ran IISState and below is the output. As you can see from Thread > ID 8, cosign.dll is crashing. I posted to an IIS newgroup and was > told that it ( the filter) appears to be corrupting memory in the > process (e.g. overrunning allocations). > > Thanks for the help, > Beth > > Opened log file 'C:\iisstate\output\IISState-3816.log' > > *********************** > Starting new log output > IISState version 3.3.1 > > Mon Mar 17 16:43:02 2008 > > OS = Windows 2003 Server > Executable: inetinfo.exe > PID = 3816 > > Note: Thread times are formatted as HH:MM:SS.ms > > *********************** > > > IIS has crashed... > Beginning Analysis > DLL (!FunctionName) that failed: ntdll!RtlpCoalesceFreeBlocks > > > > > Thread ID: 8 > System Thread ID: 1380 > Kernel Time: 0:0:0.0 > User Time: 0:0:0.0 > *** ERROR: Symbol file could not be found. Defaulted to export > symbols for C:\Program Files\IISCosign\Cosign.dll - > Thread Type: Other > # ChildEBP RetAddr > 00 01a2a1b4 7c82a82b ntdll!RtlpCoalesceFreeBlocks+0x12a > 01 01a2a29c 10009fe5 ntdll!RtlFreeHeap+0x38e > WARNING: Stack unwind information not available. Following frames > may be wrong. > 02 01a2a2dc 10008740 Cosign!HttpFilterProc+0x2d95 > 03 025741f4 02572500 Cosign!HttpFilterProc+0x14f0 > 04 02574208 5aadba92 0x2572500 > 05 071a0002 00000000 0x5aadba92 > Closing open log file C:\iisstate\output\IISState-3816.log > Opened log file 'C:\iisstate\output\IISState-3816.log' > > *********************** > Starting new log output > IISState version 3.3.1 > > Mon Mar 17 16:43:03 2008 > > OS = Windows 2003 Server > Executable: inetinfo.exe > PID = 3816 > > Note: Thread times are formatted as HH:MM:SS.ms > > *********************** > > > > > Thread ID: 0 > System Thread ID: e70 > Kernel Time: 0:0:0.15 > User Time: 0:0:0.0 > Thread Type: Other > # ChildEBP RetAddr > 00 0006f99c 7c82776b ntdll!KiFastSystemCallRet > 01 0006f9a0 77e418b2 ntdll!NtReadFile+0xc > 02 0006fa08 77f65edb kernel32!ReadFile+0x16c > 03 0006fa34 77f65f82 ADVAPI32!ScGetPipeInput+0x2a > 04 0006faa8 77fb75af ADVAPI32!ScDispatcherLoop+0x51 > 05 0006fcec 010027be ADVAPI32!StartServiceCtrlDispatcherA+0x93 > 06 0006fe1c 01002969 inetinfo!StartDispatchTable+0x277 > 07 0006ff44 0100339d inetinfo!main+0x117 > 08 0006ffc0 77e6f23b inetinfo!mainCRTStartup+0x12f > 09 0006fff0 00000000 kernel32!BaseProcessStart+0x23 > > > > > Thread ID: 1 > System Thread ID: 1148 > Kernel Time: 0:0:0.187 > User Time: 0:0:0.0 > Thread Status: Thread is in a WAIT state. > Thread Type: HTTP Compression Thread > # ChildEBP RetAddr > 00 0097fb3c 7c827d0b ntdll!KiFastSystemCallRet > 01 0097fb40 77e61d1e ntdll!NtWaitForSingleObject+0xc > 02 0097fbb0 77e61c8d kernel32!WaitForSingleObjectEx+0xac > 03 0097fbc4 5a364662 kernel32!WaitForSingleObject+0x12 > 04 0097fbd4 5a366e3f w3dt!WP_CONTEXT::RunMainThreadLoop+0x10 > 05 0097fbdc 5a3af42d w3dt!UlAtqStartListen+0x2d > 06 0097fbec 5a3bc335 w3core!W3_SERVER::StartListen+0xbd > 07 0097fe40 01002c3c w3core!UlW3Start+0x26e > 08 0097fea4 01002ed7 inetinfo!LaunchWorkerProcess+0x159 > 09 0097ffb8 77e64829 inetinfo!W3SVCThreadEntry+0x55 > 0a 0097ffec 00000000 kernel32!BaseThreadStart+0x34 > > > > > Thread ID: 2 > System Thread ID: f14 > Kernel Time: 0:0:0.46 > User Time: 0:0:0.125 > Thread Status: Thread is in a WAIT state. > Thread Type: Other > # ChildEBP RetAddr > 00 009bfcb8 7c827d0b ntdll!KiFastSystemCallRet > 01 009bfcbc 77e61d1e ntdll!NtWaitForSingleObject+0xc > 02 009bfd2c 77e61c8d kernel32!WaitForSingleObjectEx+0xac > 03 009bfd40 649f2674 kernel32!WaitForSingleObject+0x12 > 04 009bfd68 010024b3 iisadmin!ServiceEntry+0x28a > 05 009bffa4 77f65e91 inetinfo!InetinfoStartService+0x2cc > 06 009bffb8 77e64829 ADVAPI32!ScSvcctrlThreadW+0x21 > 07 009bffec 00000000 kernel32!BaseThreadStart+0x34 > > > > > Thread ID: 3 > System Thread ID: 1098 > Kernel Time: 0:0:0.0 > User Time: 0:0:0.0 > Thread Type: Other > # ChildEBP RetAddr > 00 00bbff9c 7c826f4b ntdll!KiFastSystemCallRet > 01 00bbffa0 7c83d424 ntdll!NtDelayExecution+0xc > 02 00bbffb8 77e64829 ntdll!RtlpTimerThread+0x47 > 03 00bbffec 00000000 kernel32!BaseThreadStart+0x34 > > > > > Thread ID: 4 > System Thread ID: 1368 > Kernel Time: 0:0:0.0 > User Time: 0:0:0.0 > Thread Status: Thread is in a WAIT state. > Thread Type: Other > # ChildEBP RetAddr > 00 00f9feac 7c827cfb ntdll!KiFastSystemCallRet > 01 00f9feb0 77e6202c ntdll!NtWaitForMultipleObjects+0xc > 02 00f9ff58 77e62fbe kernel32!WaitForMultipleObjectsEx+0x11a > 03 00f9ff74 56f951df kernel32!WaitForMultipleObjects+0x18 > 04 00f9ffa0 56f969f6 COADMIN!NOTIFY_CONTEXT::GetNextContext+0x67 > 05 00f9ffb8 77e64829 COADMIN!NOTIFY_CONTEXT::NotifyThreadProc+0x5f > 06 00f9ffec 00000000 kernel32!BaseThreadStart+0x34 > > > > > Thread ID: 5 > System Thread ID: 11c8 > Kernel Time: 0:0:0.0 > User Time: 0:0:0.46 > Thread Type: Possible ASP page. Possible DCOM activity > Executing Page: ASP.dll symbols not found. Unable to locate ASP page. > Continuing with other analysis. > > No remote call being made > > # ChildEBP RetAddr > 00 0192fe18 7c82783b ntdll!KiFastSystemCallRet > 01 0192fe1c 77c885ac ntdll!NtReplyWaitReceivePortEx+0xc > 02 0192ff84 77c88792 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198 > 03 0192ff8c 77c8872d RPCRT4!RecvLotsaCallsWrapper+0xd > 04 0192ffac 77c7b110 RPCRT4!BaseCachedThreadRoutine+0x9d > 05 0192ffb8 77e64829 RPCRT4!ThreadStartRoutine+0x1b > 06 0192ffec 00000000 kernel32!BaseThreadStart+0x34 > > > > > Thread ID: 6 > System Thread ID: e00 > Kernel Time: 0:0:0.31 > User Time: 0:0:0.46 > Thread Type: Possible ASP page. Possible DCOM activity > Executing Page: ASP.dll symbols not found. Unable to locate ASP page. > Continuing with other analysis. > > No remote call being made > > # ChildEBP RetAddr > 00 019afe18 7c82783b ntdll!KiFastSystemCallRet > 01 019afe1c 77c885ac ntdll!NtReplyWaitReceivePortEx+0xc > 02 019aff84 77c88792 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198 > 03 019aff8c 77c8872d RPCRT4!RecvLotsaCallsWrapper+0xd > 04 019affac 77c7b110 RPCRT4!BaseCachedThreadRoutine+0x9d > 05 019affb8 77e64829 RPCRT4!ThreadStartRoutine+0x1b > 06 019affec 00000000 kernel32!BaseThreadStart+0x34 > > > > > Thread ID: 7 > System Thread ID: 1384 > Kernel Time: 0:0:0.0 > User Time: 0:0:0.0 > Thread Status: Thread is in a WAIT state. > Thread Type: Other > # ChildEBP RetAddr > 00 019efcec 7c827cfb ntdll!KiFastSystemCallRet > 01 019efcf0 7c83c78e ntdll!NtWaitForMultipleObjects+0xc > 02 019effb8 77e64829 ntdll!RtlpWaitThread+0x161 > 03 019effec 00000000 kernel32!BaseThreadStart+0x34 > > > > > Thread ID: 8 > System Thread ID: 1380 > Kernel Time: 0:0:0.0 > User Time: 0:0:0.0 > Thread Type: Other > # ChildEBP RetAddr > 00 01a2a1b4 7c82a82b ntdll!RtlpCoalesceFreeBlocks+0x12a > 01 01a2a29c 10009fe5 ntdll!RtlFreeHeap+0x38e > WARNING: Stack unwind information not available. Following frames > may be wrong. > 02 01a2a2dc 10008740 Cosign!HttpFilterProc+0x2d95 > 03 025741f4 02572500 Cosign!HttpFilterProc+0x14f0 > 04 02574208 5aadba92 0x2572500 > 05 071a0002 00000000 0x5aadba92 > > > > > Thread ID: 9 > System Thread ID: 1378 > Kernel Time: 0:0:0.0 > User Time: 0:0:0.0 > Thread Type: HTTP Listener > # ChildEBP RetAddr > 00 01a6ff24 7c8277db ntdll!KiFastSystemCallRet > 01 01a6ff28 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc > 02 01a6ff54 5a30248e kernel32!GetQueuedCompletionStatus+0x29 > 03 01a6ff8c 5a3026ac W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 > 04 01a6ffa0 5a301da9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 > 05 01a6ffb8 77e64829 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 > 06 01a6ffec 00000000 kernel32!BaseThreadStart+0x34 > > > > > Thread ID: 10 > System Thread ID: 102c > Kernel Time: 0:0:0.0 > User Time: 0:0:0.0 > Thread Type: HTTP Listener > # ChildEBP RetAddr > 00 01aaff24 7c8277db ntdll!KiFastSystemCallRet > 01 01aaff28 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc > 02 01aaff54 5a30248e kernel32!GetQueuedCompletionStatus+0x29 > 03 01aaff8c 5a3026ac W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 > 04 01aaffa0 5a301da9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 > 05 01aaffb8 77e64829 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 > 06 01aaffec 00000000 kernel32!BaseThreadStart+0x34 > > > > > Thread ID: 11 > System Thread ID: 1470 > Kernel Time: 0:0:0.312 > User Time: 0:0:0.796 > Thread Type: HTTP Listener > # ChildEBP RetAddr > 00 01aeff24 7c8277db ntdll!KiFastSystemCallRet > 01 01aeff28 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc > 02 01aeff54 5a30248e kernel32!GetQueuedCompletionStatus+0x29 > 03 01aeff8c 5a3026ac W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 > 04 01aeffa0 5a301da9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 > 05 01aeffb8 77e64829 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 > 06 01aeffec 00000000 kernel32!BaseThreadStart+0x34 > > > > > Thread ID: 12 > System Thread ID: 1340 > Kernel Time: 0:0:0.62 > User Time: 0:0:0.15 > Thread Type: Possible ASP page. Possible DCOM activity > Executing Page: ASP.dll symbols not found. Unable to locate ASP page. > Continuing with other analysis. > > No remote call being made > > # ChildEBP RetAddr > 00 01fefe18 7c82783b ntdll!KiFastSystemCallRet > 01 01fefe1c 77c885ac ntdll!NtReplyWaitReceivePortEx+0xc > 02 01feff84 77c88792 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198 > 03 01feff8c 77c8872d RPCRT4!RecvLotsaCallsWrapper+0xd > 04 01feffac 77c7b110 RPCRT4!BaseCachedThreadRoutine+0x9d > 05 01feffb8 77e64829 RPCRT4!ThreadStartRoutine+0x1b > 06 01feffec 00000000 kernel32!BaseThreadStart+0x34 > > > > > Thread ID: 13 > System Thread ID: a28 > Kernel Time: 0:0:0.0 > User Time: 0:0:0.0 > Thread Status: Thread is in a WAIT state. > Thread Type: HTTP Compression Thread > # ChildEBP RetAddr > 00 0241fa84 7c827d0b ntdll!KiFastSystemCallRet > 01 0241fa88 77e61d1e ntdll!NtWaitForSingleObject+0xc > 02 0241faf8 77e61c8d kernel32!WaitForSingleObjectEx+0xac > 03 0241fb0c 5a3b820f kernel32!WaitForSingleObject+0x12 > 04 0241ffb8 77e64829 w3core!HTTP_COMPRESSION::CompressionThread+0x126 > 05 0241ffec 00000000 kernel32!BaseThreadStart+0x34 > > > > > Thread ID: 14 > System Thread ID: d68 > Kernel Time: 0:0:0.0 > User Time: 0:0:0.0 > Thread Type: Other > # ChildEBP RetAddr > 00 02d1ff70 7c8277db ntdll!KiFastSystemCallRet > 01 02d1ff74 7c839f38 ntdll!ZwRemoveIoCompletion+0xc > 02 02d1ffb8 77e64829 ntdll!RtlpWorkerThread+0x3d > 03 02d1ffec 00000000 kernel32!BaseThreadStart+0x34 > > > > > Thread ID: 15 > System Thread ID: e14 > Kernel Time: 0:0:0.0 > User Time: 0:0:0.0 > Thread Type: Other > # ChildEBP RetAddr > 00 00bfff70 7c8277db ntdll!KiFastSystemCallRet > 01 00bfff74 7c839f38 ntdll!ZwRemoveIoCompletion+0xc > 02 00bfffb8 77e64829 ntdll!RtlpWorkerThread+0x3d > 03 00bfffec 00000000 kernel32!BaseThreadStart+0x34 > > > > > Thread ID: 16 > System Thread ID: 15f8 > Kernel Time: 0:0:0.0 > User Time: 0:0:0.0 > Thread Type: Other > # ChildEBP RetAddr > 00 0063ff70 7c8277db ntdll!KiFastSystemCallRet > 01 0063ff74 7c839f38 ntdll!ZwRemoveIoCompletion+0xc > 02 0063ffb8 77e64829 ntdll!RtlpWorkerThread+0x3d > 03 0063ffec 00000000 kernel32!BaseThreadStart+0x34 > > > > > Thread ID: 17 > System Thread ID: 15f8 > Kernel Time: 0:0:0.0 > User Time: 0:0:0.0 > Thread Type: Other > # ChildEBP RetAddr > 00 0063ff70 7c8277db ntdll!KiFastSystemCallRet > 01 0063ff74 7c839f38 ntdll!ZwRemoveIoCompletion+0xc > 02 0063ffb8 77e64829 ntdll!RtlpWorkerThread+0x3d > 03 0063ffec 00000000 kernel32!BaseThreadStart+0x34 > > Closing open log file C:\iisstate\output\IISState-3816.log > > Jarod Malestein wrote the following on 3/19/2008 5:10 PM: >> >> >> What version of the IIS filter and IIS are you using? >> >> If you haven't already, try the 2.1.0 rc1 filter and see if the >> issue persists. >> >> --Jarod >> >> On Mar 19, 2008, at 5:00 PM, Beth Jones wrote: >> >>> Hello, >>> >>> We are receiving this error in our event log: faulting >>> application w3wp.exe , version 6.0.3790.3959, faulting module >>> ntdll.dll, version 5.2.3790.3959, fault address 0x0002b65d. >>> >>> We re-installed IIS, re-installed Cosign, re-registered >>> msxml4.dll. Does anyone else have any suggestions? We saw similar >>> posts about this error dealing with Cosign. Googling the error >>> most times points to ISAPI filter issues. But we can not figure >>> out what is going on. Our web sites work except for sites that >>> need to authenticate with Cosign first. >>> >>> Thanks, >>> Beth Jones >>> ~~~~~~~~~~~~~~~~~~~~~~~~~~ Beth Jones Systems Administrator >>> Bursar/Student Loans & Scholarships Pennsylvania State University >>> Phone: (814) 863-2600 Fax: (814) 865-6535 Email: [EMAIL PROTECTED] >>> -------------------------------------------------------------------- >>> ----- >>> This SF.net email is sponsored by: Microsoft >>> Defy all challenges. Microsoft(R) Visual Studio 2008. >>> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ >>> _______________________________________________ >>> Cosign-discuss mailing list >>> [email protected] >>> https://lists.sourceforge.net/lists/listinfo/cosign-discuss >> >> >> > > -- ~~~~~~~~~~~~~~~~~~~~~~~~~~ Beth Jones Systems Administrator > Bursar/Student Loans & Scholarships Pennsylvania State University > Phone: (814) 863-2600 Fax: (814) 865-6535 Email: [EMAIL PROTECTED] > ---------------------------------------------------------------------- > --- > This SF.net email is sponsored by: Microsoft > Defy all challenges. Microsoft(R) Visual Studio 2008. > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ > _______________________________________________ > Cosign-discuss mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/cosign-discuss ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Cosign-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/cosign-discuss
