Corero

[MrMDStreet]

Hopefully, once again, someone can help.

 

We have the ever so wonderful Corero finance package from Civica. I have had on and off issues with it for the last year and all was running smoothly until today.

 

Today we have had a user booted from the software every 5 or so minutes due to an SQL issue. Every time.

 

The support desk are very slow in responding and I have very little understanding of how it all works and an even smaller understaning of SQL.

 

I managed to get our finance officer to screencap and error that she recieved and hoped it would help to shed some light.

 

I have check network connections, cables, event viewer notifications and the like with very little information to go on I was sorta hoping someone on here might be able to help...

 

 

Event Viewer Error 1 -

 

Level Date and Time Source Event ID Task CategoryError 16/06/2014 13:21:43 Application Error 1000 (100) "Faulting application name: R32000.exe, version: 1.8.5.8063, time stamp: 0x485a4d16

Faulting module name: KERNELBASE.dll, version: 6.1.7601.18409, time stamp: 0x531599f6

Exception code: 0xe06d7363

Fault offset: 0x0000812f

Faulting process id: 0x15f0

Faulting application start time: 0x01cf895cda9eb1df

Faulting application path: \\svr-corero\res32000\R32000.exe

Faulting module path: C:\WINDOWS\system32\KERNELBASE.dll

Report Id: c6305de1-f550-11e3-8198-0023ae759846"

 

Event Viewer Error 2 -

 

Level Date and Time Source Event ID Task Category

Error 16/06/2014 12:32:28 Application Error 1000 Application Crashing Events "Faulting application name: R32000.exe, version: 1.8.5.8063, time stamp: 0x485a4d16

Faulting module name: r5expr.dll, version: 0.0.0.0, time stamp: 0x483fd7d4

Exception code: 0xc0000005

Fault offset: 0x00036f37

Faulting process id: 0x12a0

Faulting application start time: 0x01cf8953b4119cb0

Faulting application path: \\svr-corero\res32000\R32000.exe

Faulting module path: \\svr-corero\res32000\r5expr.dll

Report Id: e5512468-f549-11e3-8198-0023ae759846"

[Michael]

I agree, it looks like SQL server configuration issue. Have you applied any SQL updates?

 

Modern versions of SQL (similar to Windows Server) are locked down, so only crucial components or services run. If you're accessing the finance system remotely, the likes of Named Pipes plays a crucial role.

 

Other basic things you can try are resetting SQL services, as this also can clear issues.

[MrMDStreet]

Just standard server updates this morning after the initial problem was logged. There were no specific SQL updates visible.

 

The use of Named Pipes was implemented for a connection to correctly work through our VPN method. This seemed to resolve a previous issue we had with the user who was directly connected to the domain. I have switched the user between the two available methods today to see whether it worked and it made little to no difference.

 

I will try resetting the services which I assume (and am likely wrong) is just stopping and starting on the server?

[Michael]

I will try resetting the services which I assume (and am likely wrong) is just stopping and starting on the server?

 

Yes that's correct.

[kearton]

Have you got Veeam (or similar) doing anything to the server which may cause the server to slow down or lock up for a short time? Our Corero doesn't work if I'm doing anything to the server...

[Paul_Fielder]

Hi, not sure if I had this one, but check if the SQL service is running, the password for the user running the service may have been changed or the permission to run as local service revoked. I know MS just changed a lot of security holes concerning stored passwords in services and GPO's

[MrMDStreet]

@Paul_Fielder , how exactly does one see if the 'run as a local service' has been revoked?

 

One of my main issues with dealing with the software is that it is difficult for me to replicate the issue. So I have to wait for it to occur again before knowing that it is still hapening. This is causing a lot of issues with the Finance team here because there is only so much I can do and only so much Civica are willing to do.