CoSign Team,
This same issue/error has unfortunately returned to plague the lsa-webapps2
(LSA) server. I see the same errors in the application log starting this a.m.
It looks like any CoSign enabled site ends up crashing the default app pool
after it calls on the CoSignModule.dll.
I tried the last fix that seemed to resolve the issue (see re-installing the
UMWeb CA cert to trusted root ...) but that is not working this time.
I have attached the associated application error logs for your viewing to see
if this can help in finding a permanent fix to this known IIS7/CoSign issue.
I have also found a few Microsoft forums regarding this type of module.dll
issue and IIS7. Unfortunately, their recommended fix is to have all apps to be
associated with an app pool that is running in 64-bit mode or wait for the next
SP release. This will not work for our situation where most ALL apps need to
be in 32-bit compatibility mode. The MS fix also recommends the
precondition="bitness64" entries into the applicationHost.config file, which we
actually have already done.
For whatever reason, this CoSignModule.dll/IIS7 issue randomly keeps coming
back without much rhyme or reason, but it has created an environment that is
not stable enough to trust in a production environment. Any assistance on this
is greatly appreciated and needed for LSAIT to continue to promote and use
CoSign as the premier secure authentication method.
Also... I thought about removing and then re-registering the CosignModule.dll
and IIS CoSignModule for the path: C:\Windows\SysWOW64\inetsrv\CosignModule.dll
for t to see if that helped, but did not want to risk making things worse
without passing it by your team first.
As of now, ALL CoSign authentication is down on lsa-webapps2.
Sincerely,
Louis Englund
Humility is not thinking less of yourself but thinking of yourself less. --C.S.
Lewis
Database Administrator Senior - LSA Information Technology
734 647 8345-W | [email protected]<mailto:[email protected]>
University of Michigan | College of Literature, Science & Arts | 500 South
State St | Ann Arbor, MI 48109
From: Lee, Brian
Sent: Tuesday, March 15, 2011 9:22 AM
To: Englund, Louis; [email protected]
Cc: Rolston, Timothy
Subject: RE: [Cosign-discuss] cosign module faulting
I haven't found a solution yet.
--Brian
From: Englund, Louis
Sent: Tuesday, March 15, 2011 8:56 AM
To: Lee, Brian; [email protected]
Cc: Rolston, Timothy
Subject: RE: [Cosign-discuss] cosign module faulting
I am also getting this now on our lsa-webapps2 (QA) server.
Was there a solution/resolution sent out that I may have missed?
Sincerely,
Louis Englund
Humility is not thinking less of yourself but thinking of yourself less. --C.S.
Lewis
Database Administrator Senior - LSA Information Technology
734 647 8345-W | [email protected]<mailto:[email protected]>
University of Michigan | College of Literature, Science & Arts | 500 South
State St | Ann Arbor, MI 48109
From: Lee, Brian [mailto:[email protected]]
Sent: Monday, March 14, 2011 12:11 PM
To: [email protected]
Subject: [Cosign-discuss] cosign module faulting
Hi,
I have an IIS7 server running a cosign protected website successfully, but now
I'm trying to add a second cosign protected website (veterans_test_separated)
to the same webserver.
The second site works fine (correct SSL cert) until I turn on cosign
protection. With cosign protected status="on",visiting
https://veterans.onsp.umich.edu/test.html brings up a weblogin screen. After
correctly providing credentials, I get "Internet Explorer cannot display the
webpage." I also get the following error in the webserver event log:
Faulting application name: w3wp.exe, version: 7.5.7600.16385, time stamp:
0x4a5bd0eb
Faulting module name: CosignModule.dll, version: 0.0.0.0, time stamp: 0x4ce43995
Exception code: 0xc0000417
Fault offset: 0x000000000001d7d4
Faulting process id: 0x8d0
Faulting application start time: 0x01cbe2618d55bff0
Faulting application path: c:\windows\system32\inetsrv\w3wp.exe
Faulting module path: c:\windows\system32\inetsrv\CosignModule.dll
Report Id: cb2ad3e8-4e54-11e0-8f8f-00155d73e80a
I've been banging my head on this for a while and would really appreciate any
help.
--Brian
Here is my web.config file in the veterans_test directory:
<?xml version="1.0" encoding="UTF-8"?>
<configuration>
<system.web>
<sessionState mode="InProc" timeout="6000" />
<compilation debug="true">
<assemblies>
<add
assembly="System.DirectoryServices,Version=1.0.3300.0,
Culture=neutral,PublicKeyToken=b03f5f7f11d50a3a" />
</assemblies>
</compilation>
</system.web>
<system.webServer>
<cosign>
<webloginServer name="weblogin.umich.edu"
loginUrl="https://weblogin.umich.edu/?"; port="6663"
postErrorRedirectUrl="https://weblogin.umich.edu/post_error.html"; />
<crypto certificateCommonName="veterans.onsp.umich.edu" />
<cookieDb directory="C:\inetpub\temp\Cosign Cookie DB\"
expireTime="120" />
<proxyCookies directory="C:\inetpub\temp\Cosign Proxy DB" />
<validation validReference="https?://.*umich\.edu(/.*)?"
errorRedirectUrl="https://weblogin.umich.edu/cosign/validation_error.html"; />
<cookies secure="true" httpOnly="true" />
<service name="cosign-veterans.onsp" />
<protected status="on" />
</cosign>
<handlers>
<add name="Cosign Validation" path="/cosign/valid*" verb="*"
modules="Cosign" resourceType="Unspecified" />
</handlers>
<modules>
<add name="Cosign" />
</modules>
<httpErrors>
<error statusCode="503" path="/503.html" responseMode="ExecuteURL"
/>
</httpErrors>
<defaultDocument>
<files>
<add value="index.aspx" />
</files>
</defaultDocument>
</system.webServer>
<location path="veterans_test_separated/cosign/valid">
<system.webServer>
<cosign>
<protected
status="off" />
</cosign>
</system.webServer>
</location>
</configuration>
If it would be helpful, I can provide my applicationHost.config file as well.
--Brian
Log Name: Application
Source: Application Error
Date: 3/18/2011 10:46:31 AM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: LSA-WEBAPPS2.adsroot.itcs.umich.edu
Description:
Faulting application name: w3wp.exe, version: 7.5.7600.16385, time stamp:
0x4a5bcd2b
Faulting module name: CosignModule.dll, version: 0.0.0.0, time stamp: 0x4c62cc4f
Exception code: 0xc0000417
Fault offset: 0x0001ab99
Faulting process id: 0x13fc
Faulting application start time: 0x01cbe57a4e212c7c
Faulting application path: C:\Windows\SysWOW64\inetsrv\w3wp.exe
Faulting module path: C:\Windows\SysWOW64\inetsrv\CosignModule.dll
Report Id: 8298f4c8-516e-11e0-aace-00155d000c02
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event";>
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-03-18T14:46:31.000000000Z" />
<EventRecordID>10384</EventRecordID>
<Channel>Application</Channel>
<Computer>LSA-WEBAPPS2.adsroot.itcs.umich.edu</Computer>
<Security />
</System>
<EventData>
<Data>w3wp.exe</Data>
<Data>7.5.7600.16385</Data>
<Data>4a5bcd2b</Data>
<Data>CosignModule.dll</Data>
<Data>0.0.0.0</Data>
<Data>4c62cc4f</Data>
<Data>c0000417</Data>
<Data>0001ab99</Data>
<Data>13fc</Data>
<Data>01cbe57a4e212c7c</Data>
<Data>C:\Windows\SysWOW64\inetsrv\w3wp.exe</Data>
<Data>C:\Windows\SysWOW64\inetsrv\CosignModule.dll</Data>
<Data>8298f4c8-516e-11e0-aace-00155d000c02</Data>
</EventData>
</Event>Log Name: Application
Source: Windows Error Reporting
Date: 3/18/2011 10:46:31 AM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: LSA-WEBAPPS2.adsroot.itcs.umich.edu
Description:
Fault bucket , type 0
Event Name: BEX
Response: Not available
Cab Id: 0
Problem signature:
P1: w3wp.exe
P2: 7.5.7600.16385
P3: 4a5bcd2b
P4: CosignModule.dll
P5: 0.0.0.0
P6: 4c62cc4f
P7: 0001ab99
P8: c0000417
P9: 00000000
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_w3wp.exe_dcdbacc955ae568535d375ee8854cda28839bf7c_1c9941e9
Analysis symbol:
Rechecking for solution: 0
Report Id: 8298f4c8-516e-11e0-aace-00155d000c02
Report Status: 4
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event";>
<System>
<Provider Name="Windows Error Reporting" />
<EventID Qualifiers="0">1001</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-03-18T14:46:31.000000000Z" />
<EventRecordID>10385</EventRecordID>
<Channel>Application</Channel>
<Computer>LSA-WEBAPPS2.adsroot.itcs.umich.edu</Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Data>0</Data>
<Data>BEX</Data>
<Data>Not available</Data>
<Data>0</Data>
<Data>w3wp.exe</Data>
<Data>7.5.7600.16385</Data>
<Data>4a5bcd2b</Data>
<Data>CosignModule.dll</Data>
<Data>0.0.0.0</Data>
<Data>4c62cc4f</Data>
<Data>0001ab99</Data>
<Data>c0000417</Data>
<Data>00000000</Data>
<Data>
</Data>
<Data>
</Data>
<Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_w3wp.exe_dcdbacc955ae568535d375ee8854cda28839bf7c_1c9941e9</Data>
<Data>
</Data>
<Data>0</Data>
<Data>8298f4c8-516e-11e0-aace-00155d000c02</Data>
<Data>4</Data>
</EventData>
</Event>Version=1
EventType=BEX
EventTime=129449304586869659
ReportType=2
Consent=1
ReportIdentifier=25f55e1d-5168-11e0-aace-00155d000c02
IntegratorReportIdentifier=25f55e1c-5168-11e0-aace-00155d000c02
WOW64=1
Response.type=4
Sig[0].Name=Application Name
Sig[0].Value=w3wp.exe
Sig[1].Name=Application Version
Sig[1].Value=7.5.7600.16385
Sig[2].Name=Application Timestamp
Sig[2].Value=4a5bcd2b
Sig[3].Name=Fault Module Name
Sig[3].Value=CosignModule.dll
Sig[4].Name=Fault Module Version
Sig[4].Value=0.0.0.0
Sig[5].Name=Fault Module Timestamp
Sig[5].Value=4c62cc4f
Sig[6].Name=Exception Offset
Sig[6].Value=0001ab99
Sig[7].Name=Exception Code
Sig[7].Value=c0000417
Sig[8].Name=Exception Data
Sig[8].Value=00000000
DynamicSig[1].Name=OS Version
DynamicSig[1].Value=6.1.7600.2.0.0.272.7
DynamicSig[2].Name=Locale ID
DynamicSig[2].Value=1033
DynamicSig[22].Name=Additional Information 1
DynamicSig[22].Value=64cd
DynamicSig[23].Name=Additional Information 2
DynamicSig[23].Value=64cd1ef9c7215741ad2b7faba1c43a87
DynamicSig[24].Name=Additional Information 3
DynamicSig[24].Value=28eb
DynamicSig[25].Name=Additional Information 4
DynamicSig[25].Value=28ebbb3e33e7dfe4a11e7c18cbffb2a1
UI[2]=C:\Windows\SysWOW64\inetsrv\w3wp.exe
UI[5]=Check online for a solution (recommended)
UI[6]=Check for a solution later (recommended)
UI[7]=Close
UI[8]=IIS Worker Process stopped working and was closed
UI[9]=A problem caused the application to stop working correctly. Windows will
notify you if a solution is available.
UI[10]=&Close
LoadedModule[0]=C:\Windows\SysWOW64\inetsrv\w3wp.exe
LoadedModule[1]=C:\Windows\SysWOW64\ntdll.dll
LoadedModule[2]=C:\Windows\syswow64\kernel32.dll
LoadedModule[3]=C:\Windows\syswow64\KERNELBASE.dll
LoadedModule[4]=C:\Windows\syswow64\ADVAPI32.DLL
LoadedModule[5]=C:\Windows\syswow64\msvcrt.dll
LoadedModule[6]=C:\Windows\SysWOW64\sechost.dll
LoadedModule[7]=C:\Windows\syswow64\RPCRT4.dll
LoadedModule[8]=C:\Windows\syswow64\SspiCli.dll
LoadedModule[9]=C:\Windows\syswow64\CRYPTBASE.dll
LoadedModule[10]=C:\Windows\system32\pcwum.DLL
LoadedModule[11]=C:\Windows\syswow64\USER32.dll
LoadedModule[12]=C:\Windows\syswow64\GDI32.dll
LoadedModule[13]=C:\Windows\syswow64\LPK.dll
LoadedModule[14]=C:\Windows\syswow64\USP10.dll
LoadedModule[15]=C:\Windows\syswow64\ole32.dll
LoadedModule[16]=C:\Windows\SysWOW64\inetsrv\IISUTIL.dll
LoadedModule[17]=C:\Windows\system32\IMM32.DLL
LoadedModule[18]=C:\Windows\syswow64\MSCTF.dll
LoadedModule[19]=C:\Windows\system32\ntmarta.dll
LoadedModule[20]=C:\Windows\syswow64\WLDAP32.dll
LoadedModule[21]=C:\Windows\SysWOW64\inetsrv\w3wphost.dll
LoadedModule[22]=C:\Windows\syswow64\OLEAUT32.dll
LoadedModule[23]=C:\Windows\SysWOW64\inetsrv\nativerd.dll
LoadedModule[24]=C:\Windows\syswow64\CRYPT32.dll
LoadedModule[25]=C:\Windows\syswow64\MSASN1.dll
LoadedModule[26]=C:\Windows\system32\XmlLite.dll
LoadedModule[27]=C:\Windows\system32\ktmw32.dll
LoadedModule[28]=C:\Windows\SysWOW64\inetsrv\IISRES.DLL
LoadedModule[29]=C:\Windows\system32\CRYPTSP.dll
LoadedModule[30]=C:\Windows\system32\rsaenh.dll
LoadedModule[31]=C:\Windows\system32\mscoree.dll
LoadedModule[32]=C:\Windows\syswow64\CLBCatQ.DLL
LoadedModule[33]=C:\Windows\system32\mlang.dll
LoadedModule[34]=C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
LoadedModule[35]=C:\Windows\syswow64\SHLWAPI.dll
LoadedModule[36]=C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
LoadedModule[37]=C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5\MSVCR80.dll
LoadedModule[38]=C:\Windows\syswow64\SHELL32.dll
LoadedModule[39]=C:\Windows\system32\profapi.dll
LoadedModule[40]=C:\Windows\system32\inetsrv\iiscore.dll
LoadedModule[41]=C:\Windows\SysWOW64\inetsrv\W3TP.dll
LoadedModule[42]=C:\Windows\SysWOW64\inetsrv\w3dt.dll
LoadedModule[43]=C:\Windows\system32\HTTPAPI.dll
LoadedModule[44]=C:\Windows\system32\slc.dll
LoadedModule[45]=C:\Windows\syswow64\WS2_32.dll
LoadedModule[46]=C:\Windows\syswow64\NSI.dll
LoadedModule[47]=C:\Windows\syswow64\Normaliz.dll
LoadedModule[48]=C:\Windows\system32\faultrep.dll
LoadedModule[49]=C:\Windows\system32\Secur32.dll
LoadedModule[50]=C:\Windows\system32\NLAapi.dll
LoadedModule[51]=C:\Windows\System32\mswsock.dll
LoadedModule[52]=C:\Windows\system32\mpr.dll
LoadedModule[53]=C:\Windows\system32\DNSAPI.dll
LoadedModule[54]=C:\Windows\System32\winrnr.dll
LoadedModule[55]=C:\Windows\system32\napinsp.dll
LoadedModule[56]=C:\Windows\System32\wshtcpip.dll
LoadedModule[57]=C:\Windows\System32\wship6.dll
LoadedModule[58]=C:\Windows\system32\IPHLPAPI.DLL
LoadedModule[59]=C:\Windows\system32\WINNSI.DLL
LoadedModule[60]=C:\Windows\system32\rasadhlp.dll
LoadedModule[61]=C:\Windows\System32\fwpuclnt.dll
LoadedModule[62]=C:\Windows\System32\inetsrv\cachuri.dll
LoadedModule[63]=C:\Windows\System32\inetsrv\cachfile.dll
LoadedModule[64]=C:\Windows\System32\inetsrv\cachtokn.dll
LoadedModule[65]=C:\Windows\System32\inetsrv\cachhttp.dll
LoadedModule[66]=C:\Windows\System32\inetsrv\compstat.dll
LoadedModule[67]=C:\Windows\System32\inetsrv\defdoc.dll
LoadedModule[68]=C:\Windows\System32\inetsrv\dirlist.dll
LoadedModule[69]=C:\Windows\System32\inetsrv\protsup.dll
LoadedModule[70]=C:\Windows\System32\inetsrv\redirect.dll
LoadedModule[71]=C:\Windows\System32\inetsrv\iis_ssi.dll
LoadedModule[72]=C:\Windows\System32\inetsrv\static.dll
LoadedModule[73]=C:\Windows\System32\inetsrv\authanon.dll
LoadedModule[74]=C:\Windows\System32\inetsrv\urlauthz.dll
LoadedModule[75]=C:\Windows\System32\inetsrv\authbas.dll
LoadedModule[76]=C:\Windows\System32\inetsrv\authsspi.dll
LoadedModule[77]=C:\Windows\system32\NETAPI32.dll
LoadedModule[78]=C:\Windows\system32\netutils.dll
LoadedModule[79]=C:\Windows\system32\srvcli.dll
LoadedModule[80]=C:\Windows\system32\wkscli.dll
LoadedModule[81]=C:\Windows\System32\inetsrv\authmd5.dll
LoadedModule[82]=C:\Windows\System32\inetsrv\authmap.dll
LoadedModule[83]=C:\Windows\System32\inetsrv\iprestr.dll
LoadedModule[84]=C:\Windows\System32\inetsrv\modrqflt.dll
LoadedModule[85]=C:\Windows\System32\inetsrv\custerr.dll
LoadedModule[86]=C:\Windows\System32\inetsrv\loghttp.dll
LoadedModule[87]=C:\Windows\System32\inetsrv\iisetw.dll
LoadedModule[88]=C:\Windows\System32\inetsrv\iisfreb.dll
LoadedModule[89]=C:\Windows\System32\inetsrv\iisreqs.dll
LoadedModule[90]=C:\Windows\system32\WSOCK32.dll
LoadedModule[91]=C:\Windows\System32\inetsrv\isapi.dll
LoadedModule[92]=C:\Windows\System32\inetsrv\filter.dll
LoadedModule[93]=C:\Windows\System32\inetsrv\cgi.dll
LoadedModule[94]=C:\Windows\System32\inetsrv\iisfcgi.dll
LoadedModule[95]=C:\Windows\System32\inetsrv\webdav.dll
LoadedModule[96]=C:\Windows\System32\inetsrv\validcfg.dll
LoadedModule[97]=C:\Windows\SysWOW64\inetsrv\CosignModule.dll
LoadedModule[98]=C:\Windows\system32\bcrypt.dll
LoadedModule[99]=C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
LoadedModule[100]=C:\Windows\SysWOW64\bcryptprimitives.dll
LoadedModule[101]=C:\Windows\system32\inetsrv\gzip.dll
FriendlyEventName=Stopped working
ConsentKey=BEX
AppName=IIS Worker Process
AppPath=C:\Windows\SysWOW64\inetsrv\w3wp.exe
------------------------------------------------------------------------------
Colocation vs. Managed Hosting
A question and answer guide to determining the best fit
for your organization - today and in the future.
http://p.sf.net/sfu/internap-sfd2d
_______________________________________________
Cosign-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/cosign-discuss
