none
Access is denied. GetAuthorizationCookie failure, error = 0x8024400E

    Frage

  • Hello!

    I have a problem with WSUS v.3 SP2 (KB2720211 applied), after installing it on Windows Server 2003 SP2.

    Here is the WindowsUpdate.log from the client:

    -------------- wuauclt /detectnow:

    2013-03-06 09:05:15:261 1784 18cc AU Triggering AU detection through DetectNow API
    2013-03-06 09:05:15:261 1784 18cc AU Triggering Online detection (non-interactive)
    2013-03-06 09:05:15:261 1784 fc8 AU #############
    2013-03-06 09:05:15:261 1784 fc8 AU ## START ##  AU: Search for updates
    2013-03-06 09:05:15:261 1784 fc8 AU #########
    2013-03-06 09:05:15:261 1784 fc8 AU <<## SUBMITTED ## AU: Search for updates [CallId = {CF4131D1-FC25-4084-8900-B194FD47D966}]
    2013-03-06 09:05:15:261 1784 1ba8 Agent *************
    2013-03-06 09:05:15:261 1784 1ba8 Agent ** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2013-03-06 09:05:15:261 1784 1ba8 Agent *********
    2013-03-06 09:05:15:261 1784 1ba8 Agent   * Online = Yes; Ignore download priority = No
    2013-03-06 09:05:15:261 1784 1ba8 Agent   * Criteria = "IsHidden=0 and IsInstalled=0 and DeploymentAction='Installation' and IsAssigned=1 or IsHidden=0 and IsPresent=1 and DeploymentAction='Uninstallation' and IsAssigned=1 or IsHidden=0 and IsInstalled=1 and DeploymentAction='Installation' and IsAssigned=1 and RebootRequired=1 or IsHidden=0 and IsInstalled=0 and DeploymentAction='Uninstallation' and IsAssigned=1 and RebootRequired=1"
    2013-03-06 09:05:15:261 1784 1ba8 Agent   * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
    2013-03-06 09:05:15:261 1784 1ba8 Agent   * Search Scope = {Machine}
    2013-03-06 09:05:15:355 1784 1ba8 Misc Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab:
    2013-03-06 09:05:15:386 1784 1ba8 Misc  Microsoft signed: Yes
    2013-03-06 09:05:15:402 1784 1ba8 Misc Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wsus3setup.cab:
    2013-03-06 09:05:15:402 1784 1ba8 Misc  Microsoft signed: Yes
    2013-03-06 09:05:15:417 1784 1ba8 Setup ***********  Setup: Checking whether self-update is required  ***********
    2013-03-06 09:05:15:417 1784 1ba8 Setup   * Inf file: C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wsus3setup.inf
    2013-03-06 09:05:15:449 1784 1ba8 Setup Update NOT required for C:\WINDOWS\system32\cdm.dll: target version = 7.6.7600.256, required version = 7.6.7600.256
    2013-03-06 09:05:15:464 1784 1ba8 Setup Update NOT required for C:\WINDOWS\system32\wuapi.dll: target version = 7.6.7600.256, required version = 7.6.7600.256
    2013-03-06 09:05:15:480 1784 1ba8 Setup Update NOT required for C:\WINDOWS\system32\wuapi.dll.mui: target version = 7.6.7600.256, required version = 7.6.7600.256
    2013-03-06 09:05:15:480 1784 1ba8 Setup Update NOT required for C:\WINDOWS\system32\wuauclt.exe: target version = 7.6.7600.256, required version = 7.6.7600.256
    2013-03-06 09:05:15:511 1784 1ba8 Setup Update NOT required for C:\WINDOWS\system32\wuaucpl.cpl: target version = 7.6.7600.256, required version = 7.6.7600.256
    2013-03-06 09:05:15:511 1784 1ba8 Setup Update NOT required for C:\WINDOWS\system32\wuaucpl.cpl.mui: target version = 7.6.7600.256, required version = 7.6.7600.256
    2013-03-06 09:05:15:527 1784 1ba8 Setup Update NOT required for C:\WINDOWS\system32\wuaueng.dll: target version = 7.6.7600.256, required version = 7.6.7600.256
    2013-03-06 09:05:15:542 1784 1ba8 Setup Update NOT required for C:\WINDOWS\system32\wuaueng.dll.mui: target version = 7.6.7600.256, required version = 7.6.7600.256
    2013-03-06 09:05:15:558 1784 1ba8 Setup Update NOT required for C:\WINDOWS\system32\wucltui.dll: target version = 7.6.7600.256, required version = 7.6.7600.256
    2013-03-06 09:05:15:558 1784 1ba8 Setup Update NOT required for C:\WINDOWS\system32\wucltui.dll.mui: target version = 7.6.7600.256, required version = 7.6.7600.256
    2013-03-06 09:05:15:574 1784 1ba8 Setup Update NOT required for C:\WINDOWS\system32\wups.dll: target version = 7.6.7600.256, required version = 7.6.7600.256
    2013-03-06 09:05:15:574 1784 1ba8 Setup Update NOT required for C:\WINDOWS\system32\wups2.dll: target version = 7.6.7600.256, required version = 7.6.7600.256
    2013-03-06 09:05:15:589 1784 1ba8 Setup Update NOT required for C:\WINDOWS\system32\wuweb.dll: target version = 7.6.7600.257, required version = 7.6.7600.256
    2013-03-06 09:05:15:589 1784 1ba8 Setup   * IsUpdateRequired = No

    -------------- wuauclt /reportnow:

    2013-03-06 09:05:21:496 1784 1ba8 PT +++++++++++  PT: Synchronizing server updates  +++++++++++
    2013-03-06 09:05:21:496 1784 1ba8 PT   + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =
    http://DELTA:8530/ClientWebService/client.asmx
    2013-03-06 09:05:21:589 1784 1ba8 PT WARNING: Cached cookie has expired or new PID is available
    2013-03-06 09:05:21:589 1784 1ba8 PT Initializing simple targeting cookie, clientId = bb5aebd1-2d5b-4842-815c-20df06de8320, target group = , DNS name = valerych.domain.com
    2013-03-06 09:05:21:589 1784 1ba8 PT   Server URL = http://DELTA:8530/SimpleAuthWebService/SimpleAuth.asmx
    2013-03-06 09:05:21:605 1784 1ba8 PT WARNING: GetAuthorizationCookie failure, error = 0x8024400E, soap client error = 7, soap error code = 400, HTTP status code = 200
    2013-03-06 09:05:21:605 1784 1ba8 PT WARNING: SOAP Fault: 0x000190
    2013-03-06 09:05:21:605 1784 1ba8 PT WARNING:     faultstring:Server was unable to process request. ---> Access is denied
    2013-03-06 09:05:21:605 1784 1ba8 PT WARNING:     ErrorCode:(null)(0)
    2013-03-06 09:05:21:605 1784 1ba8 PT WARNING:     Message:(null)
    2013-03-06 09:05:21:605 1784 1ba8 PT WARNING:     Method:(null)
    2013-03-06 09:05:21:605 1784 1ba8 PT WARNING:     ID:(null)
    2013-03-06 09:05:21:605 1784 1ba8 PT WARNING: Failed to initialize Simple Targeting Cookie: 0x8024400e
    2013-03-06 09:05:21:605 1784 1ba8 PT WARNING: PopulateAuthCookies failed: 0x8024400e
    2013-03-06 09:05:21:605 1784 1ba8 PT WARNING: RefreshCookie failed: 0x8024400e
    2013-03-06 09:05:21:605 1784 1ba8 PT WARNING: RefreshPTState failed: 0x8024400e
    2013-03-06 09:05:21:605 1784 1ba8 PT WARNING: Sync of Updates: 0x8024400e
    2013-03-06 09:05:21:605 1784 1ba8 PT WARNING: SyncServerUpdatesInternal failed: 0x8024400e
    2013-03-06 09:05:21:605 1784 1ba8 Agent   * WARNING: Failed to synchronize, error = 0x8024400E
    2013-03-06 09:05:21:652 1784 1ba8 Agent   * WARNING: Exit code = 0x8024400E
    2013-03-06 09:05:21:652 1784 1ba8 Agent *********
    2013-03-06 09:05:21:652 1784 1ba8 Agent **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2013-03-06 09:05:21:652 1784 1ba8 Agent *************
    2013-03-06 09:05:21:652 1784 1ba8 Agent WARNING: WU client failed Searching for update with error 0x8024400e
    2013-03-06 09:05:21:667 1784 d80 AU >>##  RESUMED  ## AU: Search for updates [CallId = {CF4131D1-FC25-4084-8900-B194FD47D966}]
    2013-03-06 09:05:21:667 1784 d80 AU   # WARNING: Search callback failed, result = 0x8024400E
    2013-03-06 09:05:21:667 1784 d80 AU   # WARNING: Failed to find updates with error code 8024400E
    2013-03-06 09:05:21:667 1784 d80 AU #########
    2013-03-06 09:05:21:667 1784 d80 AU ##  END  ##  AU: Search for updates [CallId = {CF4131D1-FC25-4084-8900-B194FD47D966}]
    2013-03-06 09:05:21:667 1784 d80 AU #############
    2013-03-06 09:05:21:667 1784 d80 AU AU setting next detection timeout to 2013-03-06 12:05:21
    2013-03-06 09:05:21:667 1784 d80 AU Setting AU scheduled install time to 2013-03-06 10:00:00

    Goup Targeting through Group Policy didn't help.

    From client in Internet Explorer I can open http://DELTA:8530/SimpleAuthWebService/SimpleAuth.asmx and I see this:

    SimpleAuth

    The following operations are supported. For a formal definition, please review the Service Description.

    • GetAuthorizationCookie
    • Ping

    Here is the last entry from the SoftwareDistribution.log from the server:

    2013-03-06 07:25:20.320 UTC Error WsusService.8 HmtWebServices.CheckDssAuthWebService DssAuth WebService SoapException:System.Web.Services.Protocols.SoapException: System.Web.Services.Protocols.SoapException: Server was unable to process request. ---> System.ComponentModel.Win32Exception: Access is denied
       at System.Diagnostics.ProcessManager.OpenProcess(Int32 processId, Int32 access, Boolean throwIfExited)
       at System.Diagnostics.Process.GetProcessHandle(Int32 access, Boolean throwIfExited)
       at System.Diagnostics.Process.GetProcessTimes()
       at System.Diagnostics.Process.get_StartTime()
       at Microsoft.UpdateServices.WebServices.DssAuth.DssAuthWebServiceImplementation..ctor()
       at Microsoft.UpdateServices.WebServices.DssAuth.DssAuthWebService..ctor()
       --- End of inner exception stack trace ---
       at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
       at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
       at Microsoft.UpdateServices.Internal.DssAuthWebService.DssAuthWebService.Ping(Int32 pingLevel)
       at Microsoft.UpdateServices.Internal.HealthMonitoring.HmtWebServices.CheckDssAuthWebService(EventLoggingType type, HealthEventLogger logger)
       at Microsoft.UpdateServices.Internal.HealthMonitoring.HmtWebServices.CheckDssAuthWebService(EventLoggingType type, HealthEventLogger logger)
       at Microsoft.UpdateServices.Internal.HealthMonitoring.HealthMonitoringTasks.ExecuteSubtask(HealthMonitoringSubtask subtask, EventLoggingType type, HealthEventLogger logger)
       at Microsoft.UpdateServices.Internal.HealthMonitoring.HmtWebServices.Execute(EventLoggingType type)
       at Microsoft.UpdateServices.Internal.HealthMonitoring.HealthMonitoringTasks.Execute(EventLoggingType type)
       at Microsoft.UpdateServices.Internal.HealthMonitoring.HealthMonitoringThreadManager.Execute(Boolean waitIfNecessary, EventLoggingType loggingType)
       at Microsoft.UpdateServices.Internal.HealthMonitoring.HealthMonitoringThreadManager.PeriodicTask()
       at Microsoft.UpdateServices.Internal.HealthMonitoring.PeriodicTaskExecuter.ThreadStart()
       at System.Threading.ThreadHelper.ThreadStart_Context(Object state)
       at System.Threading.ExecutionContext.runTryCode(Object userData)
       at System.Runtime.CompilerServices.RuntimeHelpers.ExecuteCodeWithGuaranteedCleanup(TryCode code, CleanupCode backoutCode, Object userData)
       at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state)
       at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)
       at System.Threading.ThreadHelper.ThreadStart()

     

    Please help...!
    Mittwoch, 6. März 2013 07:42

Antworten

Alle Antworten

  • Any ideas...?
    Mittwoch, 6. März 2013 11:37
  • 2013-03-06 09:05:15:589 1784 1ba8 Setup   * IsUpdateRequired = No

    -------------- wuauclt /reportnow:

    2013-03-06 09:05:21:496 1784 1ba8 PT +++++++++++  PT: Synchronizing server updates  +++++++++++

    Just as a general note.. this invocation of wuauclt /reportnow was ignored because the WUAgent was busy doing the detection. As a matter of importance, the /reportnow option can only be used when:

    • The WUAgent is idle.
    • The WUAgent has pending events to upload to the WSUS server.

    2013-03-06 07:25:20.320 UTC Error WsusService.8 HmtWebServices.CheckDssAuthWebService DssAuth WebService SoapException:System.Web.Services.Protocols.SoapException: System.Web.Services.Protocols.SoapException: Server was unable to process request. ---> System.ComponentModel.Win32Exception: Access is denied

    This is interesting. The DSSAuthWebService is typically invoked by a downstream WSUS server that has been configured to make an authenticated/SSL connection to an upstream server. Typically DSS->USS connections are anonymous. But that may be my misunderstanding of the log entry.

    What's significant here is the message: "Server was unable to process request."

    This may or may not be related to the 0x8024400E received by the client.

    2013-03-06 09:05:21:605 1784 1ba8 PT WARNING: GetAuthorizationCookie failure, error = 0x8024400E, soap client error = 7, soap error code = 400, HTTP status code = 200

    0x8024400E -2145107954 SUS_E_PT_SOAP_SERVER The message was OK but server couldn't process at the moment. Same message *may* succeed at a later time.

    Tell me about your WSUS environment. Configuration of the WSUS server, other apps/services running on the WSUS server, number of clients, number of groups, number of updates, number of approved updates, last time you ran the Server Cleanup Wizard.


    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    SolarWinds Head Geek
    Microsoft MVP - Software Distribution (2005-2013)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    Donnerstag, 7. März 2013 02:13
    Moderator
  • Hello!

     

    Thanks  you for yuor reply.

     

    First of all this is a fresh WSUS install (ver: 3.2.7600.226).

    About my WSUS environment:

      • WSUS configuration:

             Database: Windows Internal Database (ver: 9.3.4035.00)

             Synchronization: from Microsoft Update; no Proxy; schedule 05:00 (GMT +2) 1 per day. But something strange with synchronization:

      2013.03.05 20:19 - Manual - Succeeded - 8118 New Updates;

      2013.03.06 05:19 - Scheduled - Succeeded - 4 New Updates;

      2013.03.07 05:24 - Scheduled - Failed;

      2013.03.07 05:39 - Scheduled - Failed;

      2013.03.07 05:54 - Scheduled - Failed;

      2013.03.07 06:10 - Scheduled - Failed;

      2013.03.07 08:20 - Manual - Succeeded - 8 New Updates;

       

      Failed schedule error detail:

      --------------- An HTTP error occured details:

      WebException: The request failed with the error message:
      --
      <html><head><title>Object moved</title></head><body>
      <h2>Object moved to <a href="%2fmicrosoftupdate%2fv6%2ferrorinformation.aspx%3ferror%3d15">here</a>.</h2>
      </body></html>

      --.
      at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
         at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
         at Microsoft.UpdateServices.ServerSyncWebServices.ServerSync.ServerSyncProxy.GetAuthConfig()
         at Microsoft.UpdateServices.ServerSync.ServerSyncLib.InternetGetServerAuthConfig(ServerSyncProxy proxy, WebServiceCommunicationHelper webServiceHelper)
         at Microsoft.UpdateServices.ServerSync.ServerSyncLib.Authenticate(AuthorizationManager authorizationManager, Boolean checkExpiration, ServerSyncProxy proxy, Cookie cookie, WebServiceCommunicationHelper webServiceHelper)
         at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.SyncConfigUpdatesFromUSS()
         at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.ExecuteSyncProtocol(Boolean allowRedirect)

       

      • Other apps/serveices: simple intranet home page (without DB); Windows SharePoint Services 2.0 (ver: 11.0.8173.0) + MS SQL DE (ver: 8.00.2055);
      • Number of clients targeted on WSUS at this time through Group Policy is ~100;
      • No group;
      • I haven't approved any update, because I don't see any client in Computer -> All Computer -> Unassigned Computer.
      • I haven't run the Server Cleanup Wizard, because it is a new WSUS installation.

    • Brgs,
    • Valery

    Donnerstag, 7. März 2013 07:45
  • The question is still actual...
    Freitag, 8. März 2013 11:57
  • Still waiting for some reply...
    Montag, 11. März 2013 06:18
  • Still no answers...
    Mittwoch, 13. März 2013 11:50
  • WebException: The request failed with the error message:
    --
    <html><head><title>Object moved</title></head><body>
    <h2>Object moved to <a href="%2fmicrosoftupdate%2fv6%2ferrorinformation.aspx%3ferror%3d15">here</a>.</h2>
    </body></html>

    This is a known issue, and discussed elsewhere in the forum several times. You need to install KB2734608 to your WSUS server.

    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2013)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.


    Samstag, 25. Mai 2013 16:53
    Moderator