Error in login connections during an automatic failover in a database mirroring session

We are experiencing error in login connections during an automatic failover
in a database mirroring session. Anyone who has had similar problem that can
send suggestions/ideas greatly appretiated!
Thank youHello Dev,
From your description, my understanding of this issue is: You setup a
database mirroring on SQL 2005 SP1. After a failover, the application could
not connect to the server and you get a login error. If I misunderstood
your concern, please feel free to let me know.
Based on my research, it was a by design issue in SQL Server 2005.
The main cause of this issue is because incorrect security settings on
mirror server prevents client from the connection. In this scenario new
login on mirror server should be created with the same SID as login on
primary server. Once it's done - everything should work as charm.
I would like to provide the following article to successfully transfer
Users including their SIDS
to the Mirror when setting up SQL:
918992 How to transfer the logins and the passwords between instances of
SQL Server
2005
http://support.microsoft.com/default.aspx?scid=kb;EN-US;918992
Sincerely,
Wei Lu
Microsoft Online Community Support
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.
Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================(This posting is provided "AS IS", with no warranties, and confers no
rights.)|||Hi,
Just want to say Hi, and I was wondering how everything is going. If
anything is unclear, please let me know. It is my pleasure to be of
assistance.
Sincerely yours,
Wei Lu
Microsoft Online Partner Support
=====================================================
PLEASE NOTE: The partner managed newsgroups are provided to assist with
break/fix
issues and simple how to questions.
We also love to hear your product feedback!
Let us know what you think by posting
- from the web interface: Partner Feedback
- from your newsreader: microsoft.private.directaccess.partnerfeedback.
We look forward to hearing from you!
======================================================When responding to posts, please "Reply to Group" via your newsreader so
that others
may learn and benefit from this issue.
======================================================This posting is provided "AS IS" with no warranties, and confers no rights.
======================================================|||Wei Lu:
This is not my original thread, but I am running into the same issue. I
have the same application login on my principal and mirror servers. When
failover to the mirror occurs, the login seems to lose its credentials. I
was thinking this was something to do with the SID. I am not that familiar
with SIDs. Can you point me in the right direction on how to make sure the
login has the same SID on both servers please?
Thank you in advance.
"Wei Lu [MSFT]" wrote:
> Hi,
> Just want to say Hi, and I was wondering how everything is going. If
> anything is unclear, please let me know. It is my pleasure to be of
> assistance.
> Sincerely yours,
> Wei Lu
> Microsoft Online Partner Support
> =====================================================> PLEASE NOTE: The partner managed newsgroups are provided to assist with
> break/fix
> issues and simple how to questions.
> We also love to hear your product feedback!
> Let us know what you think by posting
> - from the web interface: Partner Feedback
> - from your newsreader: microsoft.private.directaccess.partnerfeedback.
> We look forward to hearing from you!
> ======================================================> When responding to posts, please "Reply to Group" via your newsreader so
> that others
> may learn and benefit from this issue.
> ======================================================> This posting is provided "AS IS" with no warranties, and confers no rights.
> ======================================================>

Error in login connections during an automatic failover in a database mirroring session

We are experiencing error in login connections during an automatic failover
in a database mirroring session. Anyone who has had similar problem that can
send suggestions/ideas greatly appretiated!
Thank you
Hello Dev,
From your description, my understanding of this issue is: You setup a
database mirroring on SQL 2005 SP1. After a failover, the application could
not connect to the server and you get a login error. If I misunderstood
your concern, please feel free to let me know.
Based on my research, it was a by design issue in SQL Server 2005.
The main cause of this issue is because incorrect security settings on
mirror server prevents client from the connection. In this scenario new
login on mirror server should be created with the same SID as login on
primary server. Once it's done - everything should work as charm.
I would like to provide the following article to successfully transfer
Users including their SIDS
to the Mirror when setting up SQL:
918992How to transfer the logins and the passwords between instances of
SQL Server
2005
http://support.microsoft.com/default.aspx?scid=kb;EN-US;918992
Sincerely,
Wei Lu
Microsoft Online Community Support
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.
Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================
(This posting is provided "AS IS", with no warranties, and confers no
rights.)
|||Hi,
Just want to say Hi, and I was wondering how everything is going. If
anything is unclear, please let me know. It is my pleasure to be of
assistance.
Sincerely yours,
Wei Lu
Microsoft Online Partner Support
================================================== ===
PLEASE NOTE: The partner managed newsgroups are provided to assist with
break/fix
issues and simple how to questions.
We also love to hear your product feedback!
Let us know what you think by posting
- from the web interface: Partner Feedback
- from your newsreader: microsoft.private.directaccess.partnerfeedback.
We look forward to hearing from you!
================================================== ====
When responding to posts, please "Reply to Group" via your newsreader so
that others
may learn and benefit from this issue.
================================================== ====
This posting is provided "AS IS" with no warranties, and confers no rights.
================================================== ====
|||Wei Lu:
This is not my original thread, but I am running into the same issue. I
have the same application login on my principal and mirror servers. When
failover to the mirror occurs, the login seems to lose its credentials. I
was thinking this was something to do with the SID. I am not that familiar
with SIDs. Can you point me in the right direction on how to make sure the
login has the same SID on both servers please?
Thank you in advance.
"Wei Lu [MSFT]" wrote:

> Hi,
> Just want to say Hi, and I was wondering how everything is going. If
> anything is unclear, please let me know. It is my pleasure to be of
> assistance.
> Sincerely yours,
> Wei Lu
> Microsoft Online Partner Support
> ================================================== ===
> PLEASE NOTE: The partner managed newsgroups are provided to assist with
> break/fix
> issues and simple how to questions.
> We also love to hear your product feedback!
> Let us know what you think by posting
> - from the web interface: Partner Feedback
> - from your newsreader: microsoft.private.directaccess.partnerfeedback.
> We look forward to hearing from you!
> ================================================== ====
> When responding to posts, please "Reply to Group" via your newsreader so
> that others
> may learn and benefit from this issue.
> ================================================== ====
> This posting is provided "AS IS" with no warranties, and confers no rights.
> ================================================== ====
>

Error in creating a simple asp.net app similar to sample.net (as2000 samples)

Hi,

I am new to MS Analysis server technologies.
I environment consists of:
Server: windows 2003 server, Sql server 2005, analysis server 2005
client: windows xp

As given by Microsoft, I configured the server for HTTP access. When I try to browse to msmdpump.dll by giving the path "http://ServerName/olap/msmdpump.dll" both in server and client systems I get the HTTP 500 Internal server error.
I also did a right-click->browse from the inetmgr in the server. still I am getting the same error.

Should I not be getting some response when i browse to the msmdpump.dll?

Please do help me.
Is there something else that I have to do.

Regards
Vijay R

You cannot use IE. You should try and use client side application: One like MDXSample app shipped with AS2000 to browse AS2005 cubes.

Edward.
--
This posting is provided "AS IS" with no warranties, and confers no rights.

|||

Hi,

Thanks for the reply. I did that and with a bith of tweaking and minor re-coding I am able to run the sample.net windows application.

Next I tried to create a simple asp.net application similar to the code in the sample.net .The sample was in vb.net and I have coded in c#.

I now get the following error when I run and try to send a simple "Discover" request. The error i get is:

<code>

SoapException: The Session element at line 1, column 547 (namespace urn:schemas-microsoft-com:xml-analysis) cannot appear under Envelope/Body.]
System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall) +1503
System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters) +218
OlapApp.XMLA.MsXmlAnalysis.Discover(Discover Discover1, Session& Session, BeginSession BeginSession, EndSession EndSession) in z:\olapapp\web references\xmla\reference.cs:47
OlapApp.TestForm1.btnRequest_Click(Object sender, EventArgs e) in z:\olapapp\testform1.aspx.cs:130
System.Web.UI.WebControls.Button.OnClick(EventArgs e) +108
System.Web.UI.WebControls.Button.System.Web.UI.IPostBackEventHandler.RaisePostBackEvent(String eventArgument) +57
System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument) +18
System.Web.UI.Page.RaisePostBackEvent(NameValueCollection postData) +33
System.Web.UI.Page.ProcessRequestMain() +1292

</code>

In my code I am doing the following:

I created a web reference to the msmdpump.dll (discover, execute - webservice) using the vs.wsdl in visual studio.

My page has a button and a drop down list, the drop down list enables the user to select the "RequestType" for the discover request. like catalog, cube, dimension....etc

on click, I set the properties of the discovery object and pass it to the webservice with the other parameters.

Here is my code:

<code>

private void btnRequest_Click(object sender, System.EventArgs e){

if(RequestType.Equals("DISCOVER_DATASOURCES"))

{Restrictions = "";

Properties = "<Format>Tabular</Format>";}

if(Restrictions != "")

{ string strRestrictionXml = "<RestrictionList xmlns=" + '"' + "urn:schemas-microsoft-com:xml-analysis" + '"' + ">" + Restrictions + "</RestrictionList>";

RestrictionsXml.LoadXml(strRestrictionXml);}

if(Properties != "")

{string strPropertiesXml = "<PropertyList xmlns=" + '"' + "urn:schemas-microsoft-com:xml-analysis" + '"' + ">" + Properties + "</PropertyList>";

PropertiesXml.LoadXml(strPropertiesXml);}

//main code is here--

XMLA.Discover XMLAdiscRequest = new OlapApp.XMLA.Discover();

XMLAdiscRequest.RequestType = RequestType;

XMLAdiscRequest.Properties = (System.Xml.XmlElement)PropertiesXml.FirstChild;

XMLAdiscRequest.Restrictions = (System.Xml.XmlElement)RestrictionsXml.FirstChild;

XMLA.Session XMLARequestSession = new OlapApp.XMLA.Session();

XMLA.MsXmlAnalysis DiscoverWS = new OlapApp.XMLA.MsXmlAnalysis();

DiscoverWS.Url = ServerURL;

DiscoverWS.Credentials = CredentialCache.DefaultCredentials;

ResponseXml = DiscoverWS.Discover(XMLAdiscRequest,ref XMLARequestSession,null,null).@.return;

lblResultant.Visible = true;

lblResultant.Text = ResponseXml.OuterXml;

<\code>

sorry for the lengthy code. can anybody tell me where I am doing wrong? if not can anybody give some sample code?

thanks and regards

Vijay R

|||

The error indicates that your request is not constructed correctly.

Try and run SQL Profiler connect to Analysis Services and see how well-formed requests look like when connecting from MDXSample app or SQL Management studio.

Edward.
--
This posting is provided "AS IS" with no warranties, and confers no rights.

|||

Hi,

Thanks I found out the error. I was creating an object of the session.

Now it is returning a response for the "DISCOVER_DATASOURCES" discover request.

but when I am trying to discover the catalogs in the datasource, It is only returning the schema but no catalog rows.

It is the same code used for discover of datasources, except I changed the RequestType to "DBSCHEMA_CATALOGS" and the Properties to :

<DataSourceInfo>myDataSourceName</DataSourceInfo>
<Format>Tabular</Format>

Please tell me what is the reason for this?

Also, The above error is in an asp.net application. I then created a small windows application in C# .net. there it is returning me the correct response for the Dbschema_catalogs request.

What is the error? what should I be doing?

Thanks and Regards

Vijay R

|||

Hi,

wanetd to tell one more thing that I noticed. I had the sql profiler for ssas 2005 open.

All requests made by me (both win app and asp.net app) have a "0" (zero) in the error column for the event subclass "Server state Discover End".

what is this error? how do i solve it?

Thanks and Regards

Vijay R

|||

Try and see what is the user your asp application is running under. This could be just matter of access permission.

Error = 0 means the operation completed successfully.

Edward.
--
This posting is provided "AS IS" with no warranties, and confers no rights.

|||

Hi ,

Thanks,

That helped. I just added the Impersonate user in the web.config of the file.

I have another problem today.

Please do see my other post

thanks again

regards

Vijay R

Error in Application log

Windows XP Pro and SQL Server Personal 2000 with sp3
I get three errors that are very similar
I would appreciate some guidance
Unprotection of auditable protected data.
Data Description: SQL Server Registration
Key Identifier: 96b4b79c-9197-4c12-a733-d773753fedd8
Protected Data Flags: 0x0
Protection Algorithms: 3DES-168 , SHA1-160
Failure Reason: 0x8009000B
For more information, see Help and Support Center atHi Mark,
The problem seems to be related to Protected Storage and password, OS
security feature. Have you performed an administrative password reset or
change password?
On Windows XP, Protected Storage uses the user's password exclusively to
encrypt user data, such as RSA private keys for current user key container.
Whenever the user password is changed, Protected Storage subsystem is
automatically notified of
this event, and is supplied with both the old and new passwords. This
allows Protected Storage to decrypt all of its master keys with the old
password, and re-encrypt them using the new password.
Prior to Windows XP, a machine secret was used by Protected Storage to
encrypt the master RSA keys rather than the user password exclusively.
Using a machine secret made Protected Storage more robust, but the user
data could be accessed by anyone with local administrative access to the
machine.
If you use the standard change password mechanism by entering the old and
new passwords, everything will work fine. If you performed an
administrative password reset, the old password is not available, and so
access to the master keys is lost. This is by design in Windows XP. In this
scenario, CryptAcquireContext() API will fail with NTE_BAD_KEYSET
(80090016), even if the key container already exists and the caller has
permissions to open the key container.
You will also get a "Failure Audit" 599 Event ID in the Security Log with
the following description
Unprotection of auditable protected data.
Data Description: Export Flag
Key Identifier: 38fb8fc8-7c1e-40bc-aa8f-00d94ef0056e
Protected Data Flags: 0x0
Protection Algorithms: 3DES-168 , SHA1-160
Failure Reason: 0x8009000B
It is best to post in Windows-specific newsgroups for accurate information.
I am providing the information based on my research.
1. One could use Password Recovery Disk as explained in Q290260, if the
customer already made one and if this is a Windows XP-based computer that
is member of a workgroup.
2. If the user puts their password back to what it was originally when the
key container/RSA key pair was initially created, then everything will work
fine thereafter.
290260 EFS, Credentials, and Private Keys from Certificates Are Unavailable
http://support.microsoft.com/?id=290260
Bill Cheng
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
This posting is provided "as is" with no warranties and confers no rights.
--
| From: "Mark A Gregory" <mgregory@.gt.com.au>
| Subject: Error in Application log
| Date: Fri, 1 Aug 2003 22:13:48 +1000
| Lines: 23
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| Message-ID: <u8JveZCWDHA.1480@.tk2msftngp13.phx.gbl>
| Newsgroups: microsoft.public.sqlserver.server
| NNTP-Posting-Host: 203.34.248.5
| Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
| Xref: cpmsftngxa06.phx.gbl microsoft.public.sqlserver.server:299038
| X-Tomcat-NG: microsoft.public.sqlserver.server
|
| Windows XP Pro and SQL Server Personal 2000 with sp3
|
| I get three errors that are very similar
| I would appreciate some guidance
|
|
| Unprotection of auditable protected data.
|
| Data Description: SQL Server Registration
|
| Key Identifier: 96b4b79c-9197-4c12-a733-d773753fedd8
|
| Protected Data Flags: 0x0
|
| Protection Algorithms: 3DES-168 , SHA1-160
|
| Failure Reason: 0x8009000B
|
|
|
| For more information, see Help and Support Center at
|
|
||||Hi Mark,
The problem seems to be related to Protected Storage and password, OS
security feature. Have you performed an administrative password reset or
change password?
It is best to re-post this issue in Windows-specific newsgroups for
accurate information since this newsgroup focuses on SQL Server specific
issues only.
I've included some information for your reference based on my research.
1. One could use Password Recovery Disk as explained in Q290260, if the
customer already made one and if this is a Windows XP-based computer that
is member of a workgroup.
2. If the user puts their password back to what it was originally when the
key container/RSA key pair was initially created, then everything will work
fine thereafter.
290260 EFS, Credentials, and Private Keys from Certificates Are Unavailable
http://support.microsoft.com/?id=290260
If the information does not help, please re-post in the
microsoft.public.windowsxp.security_admin or
microsoft.public.windowsxp.general for a better response. The reason why we
recommend posting appropriately is you will get the most qualified pool of
respondents, and other customers who use the newsgroups regularly can
either share their knowledge or learn from your interaction with us.
On Windows XP, Protected Storage uses the user's password exclusively to
encrypt user data, such as RSA private keys for current user key container.
Whenever the user password is changed, Protected Storage subsystem is
automatically notified of this event, and is supplied with both the old and
new passwords. This allows Protected Storage to decrypt all of its master
keys with the old password, and re-encrypt them using the new password.
Prior to Windows XP, a machine secret was used by Protected Storage to
encrypt the master RSA keys rather than the user password exclusively.
Using a machine secret made Protected Storage more robust, but the user
data could be accessed by anyone with local administrative access to the
machine.
If you use the standard change password mechanism by entering the old and
new passwords, everything will work fine. If you performed an
administrative password reset, the old password is not available, and so
access to the master keys is lost. This is by design in Windows XP. In this
scenario, CryptAcquireContext() API will fail with NTE_BAD_KEYSET
(80090016), even if the key container already exists and the caller has
permissions to open the key container.
You will also get a "Failure Audit" 599 Event ID in the Security Log with
the following description
Unprotection of auditable protected data.
Data Description: Export Flag
Key Identifier: 38fb8fc8-7c1e-40bc-aa8f-00d94ef0056e
Protected Data Flags: 0x0
Protection Algorithms: 3DES-168 , SHA1-160
Failure Reason: 0x8009000B
Bill Cheng
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
This posting is provided "as is" with no warranties and confers no rights.
--
| From: "Mark A Gregory" <mgregory@.gt.com.au>
| Subject: Error in Application log
| Date: Fri, 1 Aug 2003 22:13:48 +1000
| Lines: 23
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| Message-ID: <u8JveZCWDHA.1480@.tk2msftngp13.phx.gbl>
| Newsgroups: microsoft.public.sqlserver.server
| NNTP-Posting-Host: 203.34.248.5
| Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
| Xref: cpmsftngxa06.phx.gbl microsoft.public.sqlserver.server:299038
| X-Tomcat-NG: microsoft.public.sqlserver.server
|
| Windows XP Pro and SQL Server Personal 2000 with sp3
|
| I get three errors that are very similar
| I would appreciate some guidance
|
|
| Unprotection of auditable protected data.
|
| Data Description: SQL Server Registration
|
| Key Identifier: 96b4b79c-9197-4c12-a733-d773753fedd8
|
| Protected Data Flags: 0x0
|
| Protection Algorithms: 3DES-168 , SHA1-160
|
| Failure Reason: 0x8009000B
|
|
|
| For more information, see Help and Support Center at
|
|
|