search

jephthai / OpenPasswordFilter

An open source custom password filter DLL and userspace service to better protect / control Active Directory domain passwords.
GNU General Public License v2.0
388 stars 102 forks source link

Service/DLL stops working #28

Open tedbear opened 5 years ago

tedbear commented 5 years ago

Hi,

We are using this service on a high traffic DC. We are noticing that after a while (a few hours), although the service is still running, the password filter stops working (simply allows all passwords). When that happens we can verify that by the fact that we can write to the opfcont.txt, as the file is no longer locked. It is locked when the service is working. Have anyone been experiencing this issue? I don't see any system events in the log

tedbear commented 5 years ago

Here are the event log. Starts with an event 623: NTDS (748) NTDSA: The version store for this instance (0) has reached its maximum size of 418Mb. It is likely that a long-running transaction is preventing cleanup of the version store and causing it to build up in size. Updates will be rejected until the long-running transaction has been completely committed or rolled back. Possible long-running transaction: SessionId: 0x0000006CB91B2CC0 Session-context: 0x00000000 Session-context ThreadId: 0x00000000000006F8 Cleanup: 1 Session-trace: 57573@14:29:51

Then ALOT of 1519 events: Internal Error: Active Directory Domain Services could not perform an operation because the database has run out of version storage.

Additional Data Internal ID: 20807ef

Seems like the DLL/service is somehow preventing garbage collection. Any ideas?