Microsoft KB Archive/265445

= IIS password notification stops responding handling multiple password expiration notifications =

Article ID: 265445

Article Last Modified on 11/21/2006

-

APPLIES TO


 * Microsoft Internet Information Server 4.0
 * Microsoft Internet Information Services 5.0

-



This article was previously published under Q265445



We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/prodtech/IIS.mspx



SYMPTOMS
IIS may stop responding when it is handling multiple, simultaneous password expiration notifications from the same client using the IISADMPWD virtual server.



CAUSE
IIS 4.0 and 5.0 use a password cache list to keep track of current users when processing password changes. The cache has a list traversing problem where it does not crawl the cache correctly after the first entry, and often crawls a series of invalid addresses when trying to find a user or password in the cache, which makes it appear to stop responding.



WORKAROUND
Use ADSI for password notification.



RESOLUTION
To resolve this problem, obtain the latest service pack for Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

260910 How to Obtain the Latest Windows 2000 Service Pack

The Internet Information Service 4.0 English version of this fix should have the following file attributes or later:

 Date    Time    Version          Size   File Name     Platform --- 08/03/2000 20:08 4.2.749.1     551,696  Asp.dll         Alpha 08/03/2000 20:06 4.2.749.1     304,912  Infocomm.dll    Alpha 08/03/2000 20:07 4.2.749.1      60,176  Ssinc.dll       Alpha 08/03/2000 20:07 4.2.749.1      39,696  Sspifilt.dll    Alpha 08/03/2000 20:07 4.2.749.1     384,272  W3svc.dll       Alpha 08/03/2000 20:06 4.2.749.1     330,080  Asp.dll         x86 08/03/2000 20:04 4.2.749.1     185,792  Infocomm.dll    x86 08/03/2000 20:05 4.2.749.1      38,256  Ssinc.dll       x86 08/03/2000 20:05 4.2.749.1      25,360  Sspifilt.dll    x86 08/03/2000 20:05 4.2.749.1     228,496  W3svc.dll       x86

The Internet Information Services 5.0 English version of this fix should have the following file attributes or later:

 Date       Time    Version         Size   File Name --- 10/18/2000 03:58p  5.0.2195.2517 244,496  Infocomm.dll



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.



MORE INFORMATION
Infocomm.dll has been modified to traverse the password cache list correctly.

Keywords: kbbug kbfix kbqfe kbhotfixserver KB265445

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.