Large Handle counts on windows.

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

Description

Large handle count and 1053 error on windows 2003 server based policy server. They are seeing 1053 error for Source UserENV and during that time siteminder policy server is not able to connect to User Directory (LDAP) Servers it gives Error 91.

Solution

The cause for event id 1053 in the Event Viewer is the following:

The processing of Group Policy failed. Windows could not resolve the user name. This could be caused by one or more of the following:

1. Name Resolution failure on the current domain controller.
2. Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller) What MS might be saying is that because they have run out of handles that the call is failing and cannot complete. It might be that they cant open the connect to the domain controller. I can't say more as I would be guessing.
   Error 91 is we cant connect to the LDAP server, which could be the same as a) above. There are fixes in later releases of the policy server that were for leaking ldap handles.

Environment

Release:
Component: SMPLC