| Groups | Blog | Home |
sql server notification services : SQLServer2000 SP4 & NS 2.0 SP1 & Windows 2000 SP4 & Windows Authentication problem
Hello!
I use subject. Windows 2000 machine is domain controller. There are installed MSSQL and NS. MSSQL service and NS service Log on As different DOMAIN\USERNAME accounts ('DOMAIN\sql_server' and 'DOMAIN\notification_services'). These accounts are members of 'Administrators' group. 'DOMAIN\notification_services' account was added to database logins and it has all needed grants. If event was fired then error appear in EventLog: <NotificationServicesEvent> <Description> An extended stored procedure did not connect with the data source object (DSO) using the supplied connection string. </Description> .... <SqlServerError> Source: .Net SqlClient Data Provider Number: 62002 State: 0 Class: 19 Server: Message: Login failed for user 'NT AUTHORITY\SYSTEM'. Error Parameters: Row # = 1 XP = xp_NSEndNotifications Procedure: Line Number: 0 </SqlServerError> If i use Windows 2003 Server instead of Windows 2000 then this problem doesn't exist! How i can fix this problem on Win2000? Thanks!
Hi Eagle - I hope you don't mind some general comments about the installation while troubleshooting this. [quoted text, click to view] >Windows 2000 machine is domain controller. There are installed MSSQL Generally not a good idea to install a production SQL Server instance>and NS. on a Domain Controller. Too much load for one machine. [quoted text, click to view] >MSSQL service and NS service Log on As different DOMAIN\USERNAME Good plan.>accounts ('DOMAIN\sql_server' and 'DOMAIN\notification_services'). [quoted text, click to view] >These accounts are members of 'Administrators' group. Generally considered a really bad idea to have the notificationservices login a member of the administrators group. It just doesn't need that level of permissions. Consider making it a low-privileged account for a more secure installation. [quoted text, click to view] >'DOMAIN\notification_services' account was added to database logins and What rights has it been granted? Is it a member of the NSRunService>it has all needed grants. database role? [quoted text, click to view] >If i use Windows 2003 Server instead of Windows 2000 then this problem Are these two different installations in a test environment? Are you>doesn't exist! taking the same ICF and ADF and compiling the on the 2 different boxes? Here are a couple of threads that may help. http://groups.google.com/group/microsoft.public.sqlserver.notificationsvcs/browse_thread/thread/ad0a2a0ae59696a0/e181137aa9db61e8?q=extended&rnum=30#e181137aa9db61e8 http://groups.google.com/group/microsoft.public.sqlserver.notificationsvcs/browse_thread/thread/583c5cb814fe80b2/a17444069ed40add?q=extended&rnum=7#a17444069ed40add HTH... -- Joe Webb SQL Server MVP http://www.sqlns.com ~~~ Get up to speed quickly with SQLNS http://www.amazon.com/exec/obidos/tg/detail/-/0972688811 I support PASS, the Professional Association for SQL Server. (www.sqlpass.org) [quoted text, click to view] On 21 Oct 2005 03:07:13 -0700, "Eagle" <madbummer@gmail.com> wrote:
>Hello! > >I use subject. > >Windows 2000 machine is domain controller. There are installed MSSQL >and NS. > >MSSQL service and NS service Log on As different DOMAIN\USERNAME >accounts ('DOMAIN\sql_server' and 'DOMAIN\notification_services'). >These accounts are members of 'Administrators' group. > >'DOMAIN\notification_services' account was added to database logins and >it has all needed grants. > >If event was fired then error appear in EventLog: > ><NotificationServicesEvent> ><Description> >An extended stored procedure did not connect with the data source >object (DSO) using the supplied connection string. ></Description> >... > ><SqlServerError> >Source: .Net SqlClient Data Provider >Number: 62002 >State: 0 >Class: 19 >Server: >Message: Login failed for user 'NT AUTHORITY\SYSTEM'. >Error Parameters: >Row # = 1 >XP = xp_NSEndNotifications > >Procedure: >Line Number: 0 ></SqlServerError> > >If i use Windows 2003 Server instead of Windows 2000 then this problem >doesn't exist! >How i can fix this problem on Win2000?
Thanks for reply, Joe!
[quoted text, click to view] >>Windows 2000 machine is domain controller. There are installed MSSQL >>and NS. >Generally not a good idea to install a production SQL Server instance >on a Domain Controller. Too much load for one machine. It's only test server ... Product server is stand-alone. [quoted text, click to view] >>'DOMAIN\notification_services' account was added to database logins and >>it has all needed grants. >What rights has it been granted? Is it a member of the NSRunService >database role? I used "GrantXpExec.cmd" from \bin NS's directory and "GrantPermissions.cmd" from Samples. Accordingly, 'DOMAIN\notification_services' account is member of the NSRunService role in "...InstanceApp" and "...InstanceNSMain" databases. [quoted text, click to view] >>If i use Windows 2003 Server instead of Windows 2000 then this problem Yes. Yes.>>doesn't exist! >Are these two different installations in a test environment? Are you >taking the same ICF and ADF and compiling the on the 2 different >boxes?
Are you using a hosted event provider or a custom, non-hosted event
provider? -- Joe Webb SQL Server MVP http://www.sqlns.com ~~~ Get up to speed quickly with SQLNS http://www.amazon.com/exec/obidos/tg/detail/-/0972688811 I support PASS, the Professional Association for SQL Server. (www.sqlpass.org) [quoted text, click to view] On 26 Oct 2005 03:45:08 -0700, "Eagle" <madbummer@gmail.com> wrote:
>Thanks for reply, Joe! > >>>Windows 2000 machine is domain controller. There are installed MSSQL >>>and NS. >>Generally not a good idea to install a production SQL Server instance >>on a Domain Controller. Too much load for one machine. > >It's only test server ... Product server is stand-alone. > >>>'DOMAIN\notification_services' account was added to database logins and >>>it has all needed grants. >>What rights has it been granted? Is it a member of the NSRunService >>database role? > >I used "GrantXpExec.cmd" from \bin NS's directory and >"GrantPermissions.cmd" from Samples. Accordingly, >'DOMAIN\notification_services' account is member of the NSRunService >role in "...InstanceApp" and "...InstanceNSMain" databases. > >>>If i use Windows 2003 Server instead of Windows 2000 then this problem >>>doesn't exist! >>Are these two different installations in a test environment? Are you >>taking the same ICF and ADF and compiling the on the 2 different >>boxes?
I use non-hosted event provider and generate event from stored
procedure.
Are you using Window Authentication?
Sounds like the non-hosted event provider running as 'NT AUTHORITY\SYSTEM'? HTH... -- Joe Webb SQL Server MVP http://www.sqlns.com ~~~ Get up to speed quickly with SQLNS http://www.amazon.com/exec/obidos/tg/detail/-/0972688811 I support PASS, the Professional Association for SQL Server. (www.sqlpass.org) [quoted text, click to view] On 3 Nov 2005 01:31:36 -0800, "Eagle" <madbummer@gmail.com> wrote:
>I use non-hosted event provider and generate event from stored
Thank you very much, Joe!
Yes, i use Windows Authentication for Notification Services and my non-hosted event provider (MSSQL$DB service) running as 'LocalSystem' account. I was sure that my DB-service running as 'DOMAIN\sql_server' account .... Simply an overlook on my part... Everything works perfect now!!!! :)
Great!
Happy Notifying! :) -- Joe Webb SQL Server MVP http://www.sqlns.com ~~~ Get up to speed quickly with SQLNS http://www.amazon.com/exec/obidos/tg/detail/-/0972688811 I support PASS, the Professional Association for SQL Server. (www.sqlpass.org) [quoted text, click to view] On 16 Nov 2005 08:50:14 -0800, "Eagle" <madbummer@gmail.com> wrote:
>Thank you very much, Joe! > >Yes, i use Windows Authentication for Notification Services and my >non-hosted event provider (MSSQL$DB service) running as 'LocalSystem' >account. >I was sure that my DB-service running as 'DOMAIN\sql_server' account >... Simply an overlook on my part... >
Don't see what you're looking for? Try a search.
|
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
| home · blog · groups | Questions? Comments? Contact the dn |