IIS password notification stops responding handling multiple password expiration notifications (265445)



The information in this article applies to:

  • Microsoft Internet Information Server 4.0
  • Microsoft Internet Information Services 5.0

This article was previously published under Q265445
We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

SYMPTOMS

IIS may stop responding when it is handling multiple, simultaneous password expiration notifications from the same client using the IISADMPWD virtual server.

CAUSE

IIS 4.0 and 5.0 use a password cache list to keep track of current users when processing password changes. The cache has a list traversing problem where it does not crawl the cache correctly after the first entry, and often crawls a series of invalid addresses when trying to find a user or password in the cache, which makes it appear to stop responding.

WORKAROUND

Use ADSI for password notification.

RESOLUTION

To resolve this problem, obtain the latest service pack for Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

260910 How to Obtain the Latest Windows 2000 Service Pack

The Internet Information Service 4.0 English version of this fix should have the following file attributes or later:

 Date     Time    Version          Size   File Name     Platform
 ---------------------------------------------------------------
 08/03/2000 20:08  4.2.749.1     551,696  Asp.dll         Alpha 
 08/03/2000 20:06  4.2.749.1     304,912  Infocomm.dll    Alpha 
 08/03/2000 20:07  4.2.749.1      60,176  Ssinc.dll       Alpha 
 08/03/2000 20:07  4.2.749.1      39,696  Sspifilt.dll    Alpha 
 08/03/2000 20:07  4.2.749.1     384,272  W3svc.dll       Alpha 
 08/03/2000 20:06  4.2.749.1     330,080  Asp.dll         x86 
 08/03/2000 20:04  4.2.749.1     185,792  Infocomm.dll    x86 
 08/03/2000 20:05  4.2.749.1      38,256  Ssinc.dll       x86 
 08/03/2000 20:05  4.2.749.1      25,360  Sspifilt.dll    x86 
 08/03/2000 20:05  4.2.749.1     228,496  W3svc.dll       x86 
					

The Internet Information Services 5.0 English version of this fix should have the following file attributes or later:

 Date        Time    Version         Size   File Name    
 -------------------------------------------------------
 10/18/2000  03:58p  5.0.2195.2517 244,496  Infocomm.dll
					


STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

MORE INFORMATION

Infocomm.dll has been modified to traverse the password cache list correctly.

Modification Type:MinorLast Reviewed:6/22/2006
Keywords:kbHotfixServer kbbug kbfix kbQFE KB265445