Symptoms
Assume that you install update 2816845 on a Microsoft HPC Pack 2008 R2 cluster that contains High Availability (HA) broker nodes. When you run HPC Service-Oriented Architecture (SOA) jobs on the cluster, the HPC SOA jobs fail, and you receive an "Access Denied" error message.
Cause
This issue occurs because the broker service on the HA broker nodes impersonates the logical broker identity. This occurs when the broker service dispatches requests to the SOAServiceHost service on the compute nodes. However, when the Windows Communication Foundation (WCF) stack establishes a connection to the compute nodes, the stack ignores the broker service. Therefore, the SOAServiceHost service rejects requests that come though the connection because the SOAServiceHost service cannot determine whether the requests are from trusted broker services.
Resolution
Update information
We recommend that all customers who use an HPC Pack 2008 R2 cluster that contains HA broker nodes apply this hotfix.
Microsoft Download Center
The following file is available for download from the Microsoft Download Center:
For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591 How to obtain Microsoft support files from online services Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.
Follow the instructions in this Microsoft Knowledge Base (KB) article to apply the update on every HA broker node in the cluster.
Prerequisites
You must have Microsoft HPC Pack 2008 R2 Service Pack 4 (SP4) installed to apply this hotfix. For more information about HPC Pack 2008 R2 SP4, go to the following Microsoft Download Center website:
Restart requirement
You must restart the computer after you apply this hotfix.
Replacement information
This hotfix does not replace a previously released hotfix.
Installation instructions
Before you apply the hotfix
Take all compute nodes (including Microsoft Azure nodes), workstation nodes, and unmanaged server nodes offline. Then, wait for all current jobs to finish before you apply this hotfix.
When you apply the hotfix
Install this hotfix on a passive broker node. Then, start a failover to change the updated passive broker node to active and to change an active broker node to passive.
Note You must repeat these steps until you have applied the hotfix on all the broker nodes.
Before you uninstall the hotfix
Take all compute nodes (include Microsoft Azure nodes), workstation nodes, and unmanaged server nodes offline. Then, wait for all current jobs to finish before you uninstall this hotfix.
When you uninstall the hotfix
Uninstall this hotfix from every HA broker node.
The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
|
File Name |
File Version |
File Size |
Date |
Time |
Platform |
|---|---|---|---|---|---|
|
HpcBroker.exe |
3.4.4231.0 |
176,128 |
23-May-2013 |
12:07:50 PM |
Not Applicable |
|
Microsoft.Hpc.SvcBroker.dll |
3.4.4231.0 |
372,736 |
23-May-2013 |
12:07:48 PM |
Not Applicable |
Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
More Information
For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates
