Resolution
How do I prevent the NetIQ Administration service from terminating unexpectedly?
goal
Why does the NetIQ Administration service terminate unexpectedly?
goal
How do I prevent the unnecessary creation of open Pipe\SAMR connections?
goal
What happens when too many Pipe\SAMR connections are opened?
goal
How can Microsoft Security patch KB828035 affect my DRA environment?
fact
Directory and Resource Administrator 6.x
fact
Directory and Resource Administrator 7.x
symptom
The NetIQ Administration Service Terminates Unexpectedly
symptom
Error: "insufficient system resources"
symptom
Domain Controllers in the managed domain go into a hung state
cause
A Microsoft Security patch for NT 4 workstations (KB828035) causes Pipe\SAMR connections to remain open to the Domain Controllers.
fix
If there are Windows NT 4 workstations in the environment and the Microsoft Security patch KB828035 is applied, applying the patch may cause Pipe\SAMR connections to remain open.
Typically, fewer than 20 Pipe\SAMR connections should be open to a Domain Controller. Whenever the workstation accesses a network resource, this creates new pipes. If the number of open Pipe\SAMR connections reaches 2048 (per Microsoft article), the Domain Controller runs out of resources and returns an insufficient system resources error.
The NetIQ Administration Server crashes during the cache refresh for the domain that is having the problem. The DRA server receives the insufficient system resources error when contacting the DC. This error causes some internal data structures to not have the values that DRA expects them to have. DRA makes some assumptions about these data structures that cause it to read an invalid memory address. This invalid memory address causes the process to crash.
The client computers may display various symptoms, which are described in the following Microsoft article. This article also includes the resolution to the Pipe\SAMR connections problem.
For more information, see the following Microsoft KB article:
http://support.microsoft.com/default.aspx?scid=kb;en-us;831579
This problem will be addressed in a future release. However,you should resolve the root cause of the Pipe\SAMR connections remaining open. Otherwise, this issue will cause other network problems.
note
The error is occurring during the cache refresh for the domain that is having the problem. The DRA server receives the "insufficient system resources error" when contacting the DC in the RB domain. This particular error causes some internal data structures to not have the values that DRA expects them to have. DRA makes some assumptions about these data structures that cause it to read an invalid memory address which crashes the process to crash.