|
Home > Archive > Application Center Usage > August 2005 > Unable to get the private bytes memory limit for the W3WP process
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Unable to get the private bytes memory limit for the W3WP process
|
|
| Anthony 2005-01-21, 5:50 pm |
| I am running two clustered 2003 web servers and receive the following error
message on only the second node when starting a web application.
"Unable to get the private bytes memory limit for the W3WP process. The
ASP.NET cache will be unable to limit its memory use, which may lead to a
process restart. Error: 0x80070005"
This problem is caused when the IIS_WPG group doesn't have
enough permission to read from IIS://Localhost/W3SVC/AppPools metabase key.
I used the metaacl.vbs script to view the permissions with the following
results:
WEB01
BUILTIN\Administrators
Access: RWSUED
XXXXXXXXXWEB01\IIS_WPG
Access: U
NT AUTHORITY\LOCAL SERVICE
Access: U
NT AUTHORITY\NETWORK SERVICE
Access: U
WEB02:
BUILTIN\Administrators
Access: RWSUED
S-1-5-21-360279526-3778756112-971611681-1005
Access: U
NT AUTHORITY\LOCAL SERVICE
Access: U
NT AUTHORITY\NETWORK SERVICE
Access: U
The sid on WEB02 is that of the IIS_WPG from WEB01. I ran metaacl.vbs on
WEB02 to add the IIS_WPG group to the permissions on the
IIS://Localhost/W3SVC/AppPools metabase key and get this.
WEB02:
BUILTIN\Administrators
Access: RWSUED
NT AUTHORITY\LOCAL SERVICE
Access: U
NT AUTHORITY\NETWORK SERVICE
Access: U
XXXXXXXXXWEB02\IIS_WPG
Access: U
The error goes away; until a metabase change is made on WEB01 and replicated
to WEB02. Then I'm back where I started from. Is there a fix or workaround to
resolve this problem?
| |
| pj_servadmin 2005-08-15, 4:30 pm |
| Anthony, I do not know if you found the solution to your problem yet, but I can share with you what we did.
We have an IIS 6.0 Win2k3 NLB cluster setup and we are also using that same iiscnfg.vbs /copy command to keep the two servers sync'd.
As you found out, the copy command copies the permissions of local IIS_WPG group of the first computer to the second computer's IIS metabase, where the error message is generated.
The solution is to leave the unresolved sid (which is actually NLBhostA\IIS_WPG) and add the NLBhostB\IIS_WPG with identical permissions. Then to complete the loop, sync the metabases in reverse from NLBhostB to NLBhostA, so each has 1 unresolved sid, the other hosts's IIS_WPG group.
I found this was necessary to perform the same task on the Filters key, as well as the AppPools key, and it would be worth the while to check that no other keys miss a local group permission.
Take note that if you add Domain users to run the application pools, that the domain users are members of the local IIS_WPG on each machine. (that was an extra step that we had to take)
I hope this helped,
pj_servadmin
quote:
Originally posted by Anthony
I am running two clustered 2003 web servers and receive the following error
message on only the second node when starting a web application.
"Unable to get the private bytes memory limit for the W3WP process. The
ASP.NET cache will be unable to limit its memory use, which may lead to a
process restart. Error: 0x80070005"
This problem is caused when the IIS_WPG group doesn't have
enough permission to read from IIS://Localhost/W3SVC/AppPools metabase key.
I used the metaacl.vbs script to view the permissions with the following
results:
WEB01
BUILTIN\Administrators
Access: RWSUED
XXXXXXXXXWEB01\IIS_WPG
Access: U
NT AUTHORITY\LOCAL SERVICE
Access: U
NT AUTHORITY\NETWORK SERVICE
Access: U
WEB02:
BUILTIN\Administrators
Access: RWSUED
S-1-5-21-360279526-3778756112-971611681-1005
Access: U
NT AUTHORITY\LOCAL SERVICE
Access: U
NT AUTHORITY\NETWORK SERVICE
Access: U
The sid on WEB02 is that of the IIS_WPG from WEB01. I ran metaacl.vbs on
WEB02 to add the IIS_WPG group to the permissions on the
IIS://Localhost/W3SVC/AppPools metabase key and get this.
WEB02:
BUILTIN\Administrators
Access: RWSUED
NT AUTHORITY\LOCAL SERVICE
Access: U
NT AUTHORITY\NETWORK SERVICE
Access: U
XXXXXXXXXWEB02\IIS_WPG
Access: U
The error goes away; until a metabase change is made on WEB01 and replicated
to WEB02. Then I'm back where I started from. Is there a fix or workaround to
resolve this problem?
| |
| George Cheng [MSFT] 2005-08-16, 5:57 pm |
| There is a fix for this
890475 FIX: Unrecognized users and groups may appear in the Internet
http://support.microsoft.com/?id=890475
Thank You
George Cheng
Application Center2000/Index Server/Commerce Server Support
Application Center 2000 SP2 and Windows 2003 SP1
891330 You may experience problems after you install Windows Server 2003
Service Pack 1 on a server that is running Application Center 2000
http://support.microsoft.com/?id=891330
Note: This article has no warranties implicit or explicit.
All the content is given on the "as is" basis and the user
takes full responsibility for its use and assumption.
Microsoft Corporation Copyright 2004
All Rights Reserved
--------------------
| From: pj_servadmin <pj_servadmin.1ttux2@mail.webservertalk.com>
| Subject: Re: Unable to get the private bytes memory limit for the W3WP
process
| Date: Mon, 15 Aug 2005 16:30:43 -0500
| Message-ID: <pj_servadmin.1ttux2@mail.webservertalk.com>
| Organization: Web Servers forum
| User-Agent: www.webservertalk.com news gateway
| X-Newsreader: www.webservertalk.com news gateway
| X-Originating-IP: 128.104.19.92
| References: <AFF71D3F-2B32-491C-8F52-DE60CEC21E5F@microsoft.com>
| Newsgroups: microsoft.public.applicationcenter.usage
| NNTP-Posting-Host: mcse.ms 66.98.192.98
| Lines: 1
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP12.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.applicationcenter.usage:831
| X-Tomcat-NG: microsoft.public.applicationcenter.usage
|
|
Anthony, I do not know if you found the solution to your problem yet,
but I can share with you what we did.
|
| We have an IIS 6.0 Win2k3 NLB cluster setup and we are also using that
same iiscnfg.vbs /copy command to keep the two servers sync'd.
|
| As you found out, the copy command copies the permissions of local
IIS_WPG group of the first computer to the second computer's IIS
metabase, where the error message is generated.
|
| The solution is to leave the unresolved sid (which is actually
NLBhostA\IIS_WPG) and add the NLBhostB\IIS_WPG with identical
permissions. Then to complete the loop, sync the metabases in reverse
from NLBhostB to NLBhostA, so each has 1 unresolved sid, the other
hosts's IIS_WPG group.
|
| I found this was necessary to perform the same task on the Filters key,
as well as the AppPools key, and it would be worth the while to check
that no other keys miss a local group permission.
|
| Take note that if you add Domain users to run the application pools,
that the domain users are members of the local IIS_WPG on each machine.
(that was an extra step that we had to take)
|
| I hope this helped,
|
| pj_servadmin
|
|
|
|
| Anthony wrote:
| > *I am running two clustered 2003 web servers and receive the
> following error
| > message on only the second node when starting a web application.
| >
| > "Unable to get the private bytes memory limit for the W3WP process.
> The
| > ASP.NET cache will be unable to limit its memory use, which may lead
> to a
| > process restart. Error: 0x80070005"
| >
| > This problem is caused when the IIS_WPG group doesn't have
| > enough permission to read from IIS://Localhost/W3SVC/AppPools
> metabase key.
| >
| > I used the metaacl.vbs script to view the permissions with the
> following
| > results:
| >
| > WEB01
| > BUILTIN\Administrators
| > Access: RWSUED
| > XXXXXXXXXWEB01\IIS_WPG
| > Access: U
| > NT AUTHORITY\LOCAL SERVICE
| > Access: U
| > NT AUTHORITY\NETWORK SERVICE
| > Access: U
| >
| > WEB02:
| > BUILTIN\Administrators
| > Access: RWSUED
| > S-1-5-21-360279526-3778756112-971611681-1005
| > Access: U
| > NT AUTHORITY\LOCAL SERVICE
| > Access: U
| > NT AUTHORITY\NETWORK SERVICE
| > Access: U
| >
| > The sid on WEB02 is that of the IIS_WPG from WEB01. I ran metaacl.vbs
> on
| > WEB02 to add the IIS_WPG group to the permissions on the
| > IIS://Localhost/W3SVC/AppPools metabase key and get this.
| >
| > WEB02:
| > BUILTIN\Administrators
| > Access: RWSUED
| > NT AUTHORITY\LOCAL SERVICE
| > Access: U
| > NT AUTHORITY\NETWORK SERVICE
| > Access: U
| > XXXXXXXXXWEB02\IIS_WPG
| > Access: U
| >
| > The error goes away; until a metabase change is made on WEB01 and
> replicated
| > to WEB02. Then I'm back where I started from. Is there a fix or
> workaround to
| > resolve this problem? *
--
pj_servadmin
------------------------------------------------------------------------
Posted via http://www.webservertalk.com
------------------------------------------------------------------------
View this thread: http://www.webservertalk.com/message888948.html
|
|
|
|
|
|