We have a Windows 2003 R2 Enterprise x32 server running SSH Tectia Server version 188.8.131.52. which up unitll now has been running fine, but has not started rebooting itself. Every time the server reboots i see two system events; the first is a error 5000 event stating "The security package SSHDAP generated an exception. The exception information is the data." this is generated by LSaSrv the second is an information event we see immediatly after stating that "Reason Code: 0x50006 Shutdown Type: restart Comment: The system process 'C:WINDOWSsystem32lsass.exe' terminated unexpectedly with status code 128. The system will now shut down and restart.".
I have checked online and any hotfix applicable related to lsass is either been superseeded as the srever is patched or not applicable. I understand the version we are using is old but cannot seem to find anywhere what the cuase could be. we left the server running with the SSH SERVER stopped and no reboots take place. but when a user is connected then we see random reboots.
asked Nov 21 '11 at 02:05
We believe this is a Microsoft problem. Fortunately, Microsoft recognized the problem in: http://support.microsoft.com/kb/2539164
The article says they provide a hotfix for it.
To summarize: The problem can occur in this scenario:
When the Lasss.exe process initializes, it creates some heaps to improve heap handling performance. If the number of processors is 32 or more, and if one or more third-party authentication packages are installed, the Lsass.exe process needs more locked pages. Therefore, the issue that is mentioned in the "Symptoms" section occurs when the minimum working set size is reached.
answered Nov 22 '11 at 02:37
Joe - Tectia Support ♦♦