v9 SR1 - Latest windows update (KB982168) seem to cause Metastorm Server failure [ Edited ]

[Sandeep Gupta]

Hello Everybody,

Please be cautious when applying windows update to Metastorm Servers.

I applied the most recent updates from Microsoft today and the engine refuses to start. I get the following error message in the event viewer.

The .NET database connector failed to initialize: System.TypeLoadException: Could not load type 'System.Security.Authentication.ExtendedProtection.ExtendedProtectionPolicy' from assembly 'System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'.

at System.ServiceModel.TcpTransportSecurity..ctor()

at System.ServiceModel.NetTcpSecurity..ctor()

at System.ServiceModel.NetTcpBinding..ctor()

at Metastorm.Engine.Authentication.AuthenticationHosting.LoadAuthenticationService()

at ManagedConfiguration.StartCoreServices(HStatus* ).

I suspect KB982168 and/or KB979909 the root cause of it.

Along with the engine I noticed following issues -

1) The designer fails to load a project that has a connection object of type "webservice" in it and throws following exception

System.Configuration.ConfigurationErrorsException was unhandled
  Message="An error occurred creating the configuration section handler for system.serviceModel/bindings: Could not load type 'System.Security.Authentication.ExtendedProtection.Configuration.ExtendedProtectionPolicyElement' from assembly 'System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'. (D:\\Program Files\\Metastorm\\BPM\\Designer\\Designer.exe.Config line 8)"
  Source="System.Configuration"
  BareMessage="An error occurred creating the configuration section handler for system.serviceModel/bindings: Could not load type 'System.Security.Authentication.ExtendedProtection.Configuration.ExtendedProtectionPolicyElement' from assembly 'System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'."
  Filename="D:\\Program Files\\Metastorm\\BPM\\Designer\\Designer.exe.Config"
  Line=8
  StackTrace:
       at System.Configuration.BaseConfigurationRecord.EvaluateOne(String[] keys, SectionInput input, Boolean isTrusted, FactoryRecord factoryRecord, SectionRecord sectionRecord, Object parentResult)
       at System.Configuration.BaseConfigurationRecord.Evaluate(FactoryRecord factoryRecord, SectionRecord sectionRecord, Object parentResult, Boolean getLkg, Boolean getRuntimeObject, Object& result, Object& resultRuntimeObject)
       at System.Configuration.BaseConfigurationRecord.GetSectionRecursive(String configKey, Boolean getLkg, Boolean checkPermission, Boolean getRuntimeObject, Boolean requestIsHere, Object& result, Object& resultRuntimeObject)
       at System.Configuration.BaseConfigurationRecord.GetSectionRecursive(String configKey, Boolean getLkg, Boolean checkPermission, Boolean getRuntimeObject, Boolean requestIsHere, Object& result, Object& resultRuntimeObject)
       at System.Configuration.BaseConfigurationRecord.GetSectionRecursive(String configKey, Boolean getLkg, Boolean checkPermission, Boolean getRuntimeObject, Boolean requestIsHere, Object& result, Object& resultRuntimeObject)
       at System.Configuration.BaseConfigurationRecord.GetSection(String configKey, Boolean getLkg, Boolean checkPermission)
       at System.Configuration.BaseConfigurationRecord.GetSection(String configKey)
       at System.Configuration.ClientConfigurationSystem.System.Configuration.Internal.IInternalConfigSystem.GetSection(String sectionName)
       at System.Configuration.ConfigurationManager.GetSection(String sectionName)
       at System.ServiceModel.Configuration.ConfigurationHelpers.UnsafeGetSectionFromConfigurationManager(String sectionPath)
       at System.ServiceModel.Configuration.ConfigurationHelpers.UnsafeGetAssociatedSection(ContextInformation evalContext, String sectionPath)
       at System.ServiceModel.Configuration.ClientSection.UnsafeGetSection()
       at System.ServiceModel.Description.MetadataImporter..ctor(IEnumerable`1 policyImportExtensions, MetadataImporterQuotas quotas)
       at System.ServiceModel.Description.WsdlImporter..ctor(MetadataSet metadata, IEnumerable`1 policyImportExtensions, IEnumerable`1 wsdlImportExtensions, MetadataImporterQuotas quotas)
       at System.ServiceModel.Description.WsdlImporter..ctor(MetadataSet metadata)
       at WcfSamples.DynamicProxy.DynamicProxyFactory.ImportMetadata()
       at WcfSamples.DynamicProxy.DynamicProxyFactory..ctor(ICollection documents, DynamicProxyFactoryOptions options)
       at Metastorm.Designer.Mbo.WCFConnectionCodeData..ctor(MboConnection connection, FormatModeOptions formatModeOption)
       at Metastorm.Designer.Mbo.MboConnectionCodeProvider.GetWebServiceMboConnectionClass(MboConnection connection)
       at Metastorm.Designer.Mbo.MboConnectionCodeProvider.GetCsCode(Type type, MboConnection connection)
       at Metastorm.Ide.Core.Apis.CodeObjectProvider`1.GetCodeObject(Type type, T source, String language)
       at Metastorm.Ide.Core.Apis.CodeObjectProvider`1.GetCodeObject(Type type, Object source, String language)
       at Metastorm.Ide.Core.Apis.CodeObjectProviderExtensions.GetCodeObject[T](ICodeObjectProvider provider, Object source, String language)
       at Metastorm.Designer.Projects.BaseProjectCodeObjectProvider`1.GetProjectUnit(String nameSpace, BaseProject project, String language)
       at Metastorm.Designer.Projects.BaseProjectCodeObjectProvider`1.GetCodeObjectGeneric(Type type, T project, String language, Boolean generateProjectUnit, String nameSpace)
       at Metastorm.Designer.Projects.BaseProjectCodeObjectProvider`1.<.ctor>b__0(Type t, T p)
       at Metastorm.Ide.Core.Apis.CodeObjectProvider`1.GetCodeObject(Type type, T source, String language)
       at Metastorm.Ide.Core.Apis.CodeObjectProvider`1.GetCodeObject(Type type, Object source, String language)
       at Metastorm.Ide.Core.Apis.CodeObjectProviderExtensions.GetCodeObject[T](ICodeObjectProvider provider, Object source, String language)
       at Metastorm.Ide.Core.Apis.CodeFactory.GetCodeCompileUnit(Object source, String language)
       at Metastorm.Designer.Projects.ApiModelProvider.Build(Object source, String basePath)
       at Metastorm.Ide.Core.Apis.BuildManager.ThreadedBuild()
       at Metastorm.Ide.Core.Apis.BuildManager.BuilderLoop()
       at System.Threading.ThreadHelper.ThreadStart_Context(Object state)
       at System.Threading.ExecutionContext.runTryCode(Object userData)
       at System.Runtime.CompilerServices.RuntimeHelpers.ExecuteCodeWithGuaranteedCleanup(TryCode code, CleanupCode backoutCode, Object userData)
       at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state)
       at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)
       at System.Threading.ThreadHelper.ThreadStart()
  InnerException: System.TypeLoadException
       Message="Could not load type 'System.Security.Authentication.ExtendedProtection.Configuration.ExtendedProtectionPolicyElement' from assembly 'System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'."
       Source="System.ServiceModel"
       TypeName="System.Security.Authentication.ExtendedProtection.Configuration.ExtendedProtectionPolicyElement"
       StackTrace:
            at System.ServiceModel.Configuration.WSHttpTransportSecurityElement.get_Properties()
            at System.Configuration.ConfigurationElement.DeserializeElement(XmlReader reader, Boolean serializeCollectionKey)
            at System.Configuration.ConfigurationElement.DeserializeElement(XmlReader reader, Boolean serializeCollectionKey)
            at System.Configuration.ConfigurationElement.DeserializeElement(XmlReader reader, Boolean serializeCollectionKey)
            at System.Configuration.ConfigurationElementCollection.OnDeserializeUnrecognizedElement(String elementName, XmlReader reader)
            at System.Configuration.ConfigurationElement.DeserializeElement(XmlReader reader, Boolean serializeCollectionKey)
            at System.Configuration.ConfigurationElement.DeserializeElement(XmlReader reader, Boolean serializeCollectionKey)
            at System.Configuration.ConfigurationSection.DeserializeSection(XmlReader reader)
            at System.Configuration.RuntimeConfigurationRecord.RuntimeConfigurationFactory.CreateSectionImpl(RuntimeConfigurationRecord configRecord, FactoryRecord factoryRecord, SectionRecord sectionRecord, Object parentConfig, ConfigXmlReader reader)
            at System.Configuration.RuntimeConfigurationRecord.RuntimeConfigurationFactory.CreateSectionWithRestrictedPermissions(RuntimeConfigurationRecord configRecord, FactoryRecord factoryRecord, SectionRecord sectionRecord, Object parentConfig, ConfigXmlReader reader)
            at System.Configuration.RuntimeConfigurationRecord.RuntimeConfigurationFactory.CreateSection(Boolean inputIsTrusted, RuntimeConfigurationRecord configRecord, FactoryRecord factoryRecord, SectionRecord sectionRecord, Object parentConfig, ConfigXmlReader reader)
            at System.Configuration.RuntimeConfigurationRecord.CreateSection(Boolean inputIsTrusted, FactoryRecord factoryRecord, SectionRecord sectionRecord, Object parentConfig, ConfigXmlReader reader)
            at System.Configuration.BaseConfigurationRecord.CallCreateSection(Boolean inputIsTrusted, FactoryRecord factoryRecord, SectionRecord sectionRecord, Object parentConfig, ConfigXmlReader reader, String filename, Int32 line)
       InnerException:

 2) The administration website fails to load and gives following error

Configuration Error
Description: An error occurred during the processing of a configuration file required to service this request. Please review the specific error details below and modify your configuration file appropriately.

Parser Error Message: An error occurred creating the configuration section handler for system.serviceModel/bindings: Could not load type 'System.Security.Authentication.ExtendedProtection.Configuration.ExtendedProtectionPolicyElement' from assembly 'System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'.

Source Error:

Line 169: </runtime>
Line 170: <system.serviceModel>
Line 171:  <bindings>
Line 172:   <netTcpBinding>
Line 173:    <binding name="NetTcpBinding_IAuthenticationOperations" closeTimeout="00:10:00" openTimeout="00:10:00" receiveTimeout="00:10:00" sendTimeout="00:10:00" transactionFlow="false" transferMode="Buffered" transactionProtocol="OleTransactions" hostNameComparisonMode="StrongWildcard" listenBacklog="10" maxBufferPoolSize="524288" maxBufferSize="65536" maxConnections="10" maxReceivedMessageSize="65536">
 

I have opened a ticket with support and also researching the issue.

Thanks & regards

Sandeep

[Sandeep Gupta]

I confirmed that installing the windows update (KB982168 -  Microsoft .NET Framework 3.5 SP1 Update for Windows Server 2003 and Windows XP x86) causes this issue

The issue can be resolved by uninstalling the update In Control Panel -- Add Remove Programs - it appears as

KB976769v2 under Microsoft .NET Framework 3.0 Service Pack 2

[pdenton]

Hi Sandeep,

Thanks for highlighting this issue for the community.  And a special thanks for finding a workaround.

We have replicated this internally will update this thread as soon as we have some news...

Paul...

[jcm]

Please note that Microsoft have released a hotfix for this problem which you can download from here...

http://code.msdn.microsoft.com/KB975954/Release/ProjectReleases.aspx?ReleaseId=3839

I think this is likely to be rolled into an ms update at some point.

[programmer2010]

Thanks guys for this thread,

I got same problem on "Vista SP1 x64", but I don't know which update causes this problem.

I visited hotfix page mentioned by "jcm",  but Microsoft mentions the hotfix is not for vista.

I tried to install .NET4 to solve the problem, but nothing.

I installed KB959209 update, where Microsoft mentioned that it provides compatibility roll-up updates for customer reported issues found after the release of Microsoft .NET Framework 3.5 SP1, but again nothing. 

The following updates is later installed on my Vista since 01/Jun/2010:

Microsoft .NET Framework 3.5 Family Update (KB959209) x64
Update to .NET Framework 3.5 Service Pack 1 for the .NET Framework Assistant 1.0 x64 (KB963707)
Microsoft .NET Framework 1.1 SP1 Security Update for Windows Vista and Windows Server 2008 (KB979906)
Microsoft .NET Framework 3.5 SP1 Update for Windows Vista SP1 and Windows Server 2008 for x64-based Systems (KB982535)
Microsoft .NET Framework 1.1 SP1 Security Update for Windows Vista and Windows Server 2008 (KB979906)
Microsoft .NET Framework 1.1 Service Pack 1 Security Update for Windows 2000, Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 (KB953297)
Microsoft .NET Framework 3.5 Family Update (KB959209) x64

Any help or advice?

[programmer2010]

Hi guys,

After long time of try and error I found a resolution, it is to install Vista Service Pack 2, where, I noticed that Microsoft annonced it will not support Vista without SP2. By searching, I found x64 version of SP2, it takes an hour or more to install but finally web-services is back to work again. 

Service Pack 2 (KB948465):

It is 745MB size and can be downloaded from this link: http://www.microsoft.com/downloads/details.aspx?FamilyID=8ad69826-03d4-488c-8f26-074800c55bc3&amp;di... .

Thanks again for this helpful thread.

[ericam]

The official KB article for this issue has been posted at the following location: http://support.microsoft.com/kb/2262911 .

If you are still hitting this issue, please follow the steps listed in the KB article which will resolve the installation issue and also install Updates 982167 or 982168 (selected depending on the operating system installed on the machine). As well, if you have uninstalled this update, please do follow the KB article to keep your machine up-to-date with all WIndows Update releases.

The patch provided in the KB article has been validated to resolve the installation issue as well as safe for production environments. We will also be publishing in the KB article a Fix-It patch to seamlessly resolve this issue without needing to go through the workaround steps. Given that we have identified the root cause of this issue, all previous hotfixes which cause the installation failure will be updated appropriately.

It is important that WCF applications are unblocked and able to successfully install Windows Update KB # 982167 and/or 982168 on all machines. If you have any further issues with this, please post on the WCF forum here: http://social.msdn.microsoft.com/Forums/en/wcf/threads/ with a title of “ExtendedProtectionPolicy”.

Sorry for this inconvenience.

Thanks,

Erica

Microsoft Program Manager

[Mark Beverley]

I had a similar problem where upon upgrading, first of all I got the message below when trying to start the engine

The .NET database connector failed to initialize: System.TypeLoadException: Could not load type 'System.Security.Authentication.ExtendedProtection.ExtendedProtectionPolicy' from assembly 'System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'.

   at System.ServiceModel.TcpTransportSecurity..ctor()

   at System.ServiceModel.NetTcpSecurity..ctor()

   at System.ServiceModel.NetTcpBinding..ctor()

   at Metastorm.Engine.Authentication.AuthenticationHosting.LoadAuthenticationService()

I uninstalled .net 3.5, .net 3.0, .net 2.0 and then resinstalled everything

i then got the issue below when trying to open up the browser.

Failed to access IIS metabase.
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.Web.Hosting.HostingEnvironmentException: Failed to access IIS metabase.

The process account used to run ASP.NET must have read access to the IIS metabase (e.g. IIS://servername/W3SVC). For information on modifying metabase permissions, please see http://support.microsoft.com/?kbid=267904.

Source Error:
An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.

Stack Trace:

I couldnt even run the aspnet_regiis command because I kept getting a failed to initialise error

however running the KB above and a couple of reboots allowed me to run the aspnet_regiis command and the engine starts fine and i'm able to connect through the web client.

Thank you it worked a treat.

[Mark Beverley]

hmmm. spoke too soon,

the eror has returned from a reboot.

This time the engine starts but cannot start the web browser.

I think it's due to Symantec blocking asp.net as per the link below.

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2010012709305848

Mark

[Mark Beverley]

After upgrading symantec from version 11.0.5002.333 to Version 11.0.6005.562 ASP.NET works again and I can now access metastorm via the web client.

Mark