Since installing patches on our BigFix server (W2K12 R2 with local SQL 2016) on 5/27, we have two cases where we loose authentication (can not login to web reports or web console). It looks like the issue takes place within 24 hours of a reboot (a reboot temporarily resolves the problem).
I uninstalled all the patches that were installed on 5/27 and rebooted, so we’ll see if the problem returns
I believe it is related to one or more of the .NET patches here:
.
I was getting errors like:
Application: SCNotification.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Faulting application name: SCNotification.exe, version: 5.0.8498.1000, time stamp: 0x58b693d2
Faulting module name: KERNELBASE.dll, version: 6.3.9600.18666, time stamp: 0x58f32841
Exception code: 0xe0434352
All the patches that were installed on 5/27 are listed below:
UPDATE: After looking at the logs more closely, this looks to start with these events in the Systems Event Log:
Log Name: System
Source: Microsoft-Windows-DNS-Client
Date: 5/30/2017 12:55:28 PM
Event ID: 8019
Task Category: (1028)
Level: Warning
Keywords:
User: NETWORK SERVICE
Computer: FQDN of BES
Description:
The system failed to register host (A or AAAA) resource records (RRs) for network adapter
with settings:
Log Name: System
Source: Tcpip
Date: 5/30/2017 1:32:37 PM
Event ID: 4227
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: FQDN of BES
Description:
TCP/IP failed to establish an outgoing connection because the selected local endpoint was recently used to connect to the same remote endpoint. This error typically occurs when outgoing connections are opened and closed at a high rate, causing all available local ports to be used and forcing TCP/IP to reuse a local port for an outgoing connection. To minimize the risk of data corruption, the TCP/IP standard requires a minimum time period to elapse between successive connections from a given local endpoint to a given remote endpoint.
Log Name: System
Source: Tcpip
Date: 5/30/2017 1:33:48 PM
Event ID: 4231
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: FQDN of BES
Description:
A request to allocate an ephemeral port number from the global TCP port space has failed due to all such ports being in use.
As mentioned, I removed the patches and the system may have this issue again after about 24 hours after the reboot. If this happens, by next step will be to downgrade the WebUI service, which is on another server, and was upgraded from 9.5.3 to 9.5.5 (is that even likely that this external service could be killing TCP/IP in the 9.5.5 version?