Christopher,
What are the errors in arerror.log, what symptoms should we look out for
other than armonitor not starting?

-----Original Message-----
From: Action Request System discussion list(ARSList)
[mailto:arslist@ARSLIST.ORG] On Behalf Of strauss
Sent: Thursday, April 14, 2011 9:49 AM
To: arslist@ARSLIST.ORG
Subject: WARNING on Microsoft MS11-030 KB2509553

After applying this patch to my Reference Server for the 7.6.04 upgrade:
Windows 2003 R2 x64 with ARS 7.1.00.003 CMDB 2.1.00.02 and ITSM 7.0.03.009
etc., SQL Server 2005 on remote server), the AR Service immediately and
absolutely refuses to start.  On reboot from the security patches (there
were 15 total) the AR Server would not start automatically, and all
subsequent attempts to start it manually saw the armonitor start, then
crash.  While troubleshooting with BMC support, it could not even be started
from the command line.

Removing the KB2509553 security update and rebooting solved the problem
immediately, with the ARS service starting normally.  The only other AR
server that I had applied this patch (and all of the others) to was the
Staging Server (Windows 2003 R2 x64 with ARS 7.6.04 CMDB 2.1.00.02 and ITSM
7.0.03.009 etc.), and it has a local SQL Server hosting the db so it was not
affected.  Note that on the problem AR Server, it was still possible to run
the SQL Server Management Studio client (2008) and connect to the remote db
normally, even though the ARS service could not.

Security Bulletin MS11-030 KB2509553 is a Critical patch for a vulnerability
in DNS resolution that could allow remote code execution; it slammed the
door shut on something that ARS depends on.  Until BMC comes up with a
solution for this, I will not be applying this patch to any other AR Server,
especially my 7.1 production system with a remote db.

Christopher Strauss, Ph.D.
Call Tracking Administration Manager
University of North Texas Computing & IT Center
http://itsm.unt.edu/

____________________________________________________________________________
___
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
attend wwrug11 www.wwrug.com ARSList: "Where the Answers Are"

_______________________________________________________________________________
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
attend wwrug11 www.wwrug.com ARSList: "Where the Answers Are"

Reply via email to