Commerce Server General - Acces denied to the machine???

This is Interesting: Free IT Magazines  
Home > Archive > Commerce Server General > April 2005 > Acces denied to the machine???





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Acces denied to the machine???
hecgom@gmail.com

2005-03-18, 5:55 pm

Hi all.

Im having a trouble, because i want to start with a new Commerce Server
Project and I cannot test a very simple empty ASP .NET page in the
project.

I've been recieving the error of the ASPNET account access denied.

Searching for a while in this problem, and I found that the reason
could be that the ASPNET user needs permissions in the SQL Server DBs
of Commerce Server, and that's OK, now the error message is different,
is not the ASPNET account, now it's the machine: the error is as
follows:

System.Runtime.InteropServices.COMException: access denied for the user
'<myDomain>\<theCommerceServerMachine>$'.


[COMException (0x80040e4d): Error de inicio de sesi=F3n del usuario
<myDomain>\<theCommerceServerMachine>$'.]
ADODB.ConnectionClass.Open(String ConnectionString, String UserID,
String Password, Int32 Options) +0
SharedFns.ReadSQLDbLocale(String& strAdminConn) +98
SharedFns.SQLGetConnStr() +339

Microsoft.CommerceServer.Interop.Configuration.SiteConfigReadOnlyFreeThread=
ed.SQLGetConnection()
+168

Microsoft.CommerceServer.Interop.Configuration.SiteConfigReadOnlyFreeThread=
ed.Initialize(String
bstrSiteName) +291


This is the scenario is a fresh installation of 2 servers:

1 box with Windows 2003, AD and Commerce Server 2002 SP3
1 box with Windows 2003, SQL Server 2000 SP3

Many thanks in advanced to the one that answer this post!!!!!

Ravi Shankar

2005-03-21, 2:51 am

Have you included the ADODB Lib in your page ?
This error us typically received because the SiteConfigReadOnly Free
Threaded component requires ADODB reference.

So open you project add ADODB lib reference. Open you page add "Imports
ADODB" statement, recompile and execute.


"hecgom@gmail.com" wrote:

> Hi all.
>
> Im having a trouble, because i want to start with a new Commerce Server
> Project and I cannot test a very simple empty ASP .NET page in the
> project.
>
> I've been recieving the error of the ASPNET account access denied.
>
> Searching for a while in this problem, and I found that the reason
> could be that the ASPNET user needs permissions in the SQL Server DBs
> of Commerce Server, and that's OK, now the error message is different,
> is not the ASPNET account, now it's the machine: the error is as
> follows:
>
> System.Runtime.InteropServices.COMException: access denied for the user
> '<myDomain>\<theCommerceServerMachine>$'.
>
>
> [COMException (0x80040e4d): Error de inicio de sesión del usuario
> <myDomain>\<theCommerceServerMachine>$'.]
> ADODB.ConnectionClass.Open(String ConnectionString, String UserID,
> String Password, Int32 Options) +0
> SharedFns.ReadSQLDbLocale(String& strAdminConn) +98
> SharedFns.SQLGetConnStr() +339
>
> Microsoft.CommerceServer.Interop.Configuration.SiteConfigReadOnlyFreeThreaded.SQLGetConnection()
> +168
>
> Microsoft.CommerceServer.Interop.Configuration.SiteConfigReadOnlyFreeThreaded.Initialize(String
> bstrSiteName) +291
>
>
> This is the scenario is a fresh installation of 2 servers:
>
> 1 box with Windows 2003, AD and Commerce Server 2002 SP3
> 1 box with Windows 2003, SQL Server 2000 SP3
>
> Many thanks in advanced to the one that answer this post!!!!!
>
>

hecgom@gmail.com

2005-03-22, 6:03 pm

Many thanks for your answer Ravi.

I've been trying your solution and it doesn't works

In fact, I don't think the problem is in the ASP.NET webform, because
actually the execution doesn't arrive to that point. I think it's a
problem with the permissions or some kind of trust that the SQL servers
needs to let te Commerce Server access the DBs. The problem is that I
grant the ASPNET and the IIS user access to the Commerce Server
databases as many post suggest, and it doesn't work.

What else it could be?

Ravi Shankar

2005-03-23, 2:47 am

There are other things that you should check when deploying across 2 machines

1. Your web server service account is a domain account ?
2. Does this account have permissions on the SQL (Commerce Databases) ?
3. Do you use a domain account as the service account for Commerce Server ?
4. Does this service account have permissions on Commerce DBs
5. Does these domain accounts have permissions on the
\Windows\Microsoft.Net\Framework\v1.1.4322\Temporary ASP.NET Files directory ?
6. Have you enabled Remote DTC on both machines ?
7. Have you created a Domain Group called OLAP Administrators and made it
part of the local Group OLAP Administrators (I know this has nothing to do
with your current problem, but once you get to Reports et al in BizDesk it
would be )
8. Have you installed the site with Integrated Authentication or "sa" option.

Perhaps the simplest way would be to deploy the Retail2002 Site across your
configuration and see it that works properly before starting on a fresh
development.


"hecgom@gmail.com" wrote:

> Many thanks for your answer Ravi.
>
> I've been trying your solution and it doesn't works
>
> In fact, I don't think the problem is in the ASP.NET webform, because
> actually the execution doesn't arrive to that point. I think it's a
> problem with the permissions or some kind of trust that the SQL servers
> needs to let te Commerce Server access the DBs. The problem is that I
> grant the ASPNET and the IIS user access to the Commerce Server
> databases as many post suggest, and it doesn't work.
>
> What else it could be?
>
>

hecgom@gmail.com

2005-03-24, 2:50 am

Thanks again Ravi. The problem was in the DB connection of the Commerce
Server installation, de main databases, but it's a very strange
behavior. I installed the Commerce Server and in the point of the DB
configuration I chose Windows Authentication. Here is where the problem
was, i change the connectionstring to a SQL login and it works, i know
it's not the best, but i can work now.

Many thanks again Ravi

Ravi Shankar

2005-03-24, 7:51 am

If you use Windows Authentication, Commerce Server should have been installed
under a service account (eg: CS2K2Svc). On the SQL Server machine, this
account should have permissions for create databases in SQL. On the CS
machine, this user should be part of the IIS_WPG group (and have similar
permissions to ASPNET account).... In IIS you should create an Application
Pool that uses this account as the Identity account and for the site enable
Anonymous Authentication...

All this and more is documented as part of the multi-server installation
guide for MSIB ....

"hecgom@gmail.com" wrote:

> Thanks again Ravi. The problem was in the DB connection of the Commerce
> Server installation, de main databases, but it's a very strange
> behavior. I installed the Commerce Server and in the point of the DB
> configuration I chose Windows Authentication. Here is where the problem
> was, i change the connectionstring to a SQL login and it works, i know
> it's not the best, but i can work now.
>
> Many thanks again Ravi
>
>

Suman Chakrabarti [MCP]

2005-04-21, 5:49 pm

So, if I have set this up in a virtual machine, and when I set my application
pool to my service account and my application pool is dying. I have granted
access to all the Microsoft.NET and temporary ASP.NET files directories, but
no luck. I get a "Server Unavailable" and my AppPool locks up.

Help.

"Ravi Shankar" wrote:
[vbcol=seagreen]
> If you use Windows Authentication, Commerce Server should have been installed
> under a service account (eg: CS2K2Svc). On the SQL Server machine, this
> account should have permissions for create databases in SQL. On the CS
> machine, this user should be part of the IIS_WPG group (and have similar
> permissions to ASPNET account).... In IIS you should create an Application
> Pool that uses this account as the Identity account and for the site enable
> Anonymous Authentication...
>
> All this and more is documented as part of the multi-server installation
> guide for MSIB ....
>
> "hecgom@gmail.com" wrote:
>
Ravi Shankar

2005-04-22, 5:58 pm

Is your accout part of the IIS_WPG group ?
I've seen "Service Unavailable" errors when this is not the case. Another
directory that you need to give "Full Control" permissions for this a/c is
the C:\Windows\temp.


"Suman Chakrabarti [MCP]" wrote:
[vbcol=seagreen]
> So, if I have set this up in a virtual machine, and when I set my application
> pool to my service account and my application pool is dying. I have granted
> access to all the Microsoft.NET and temporary ASP.NET files directories, but
> no luck. I get a "Server Unavailable" and my AppPool locks up.
>
> Help.
>
> "Ravi Shankar" wrote:
>
Suman Chakrabarti [MCP]

2005-04-22, 8:46 pm

I just figured out that it is a requirement to have DirectMailer installed in
order to use Campaigns. I installed it, and had to uninstall/reinstall CS
SP3.

Lather. Rinse. Reboot. All is well again. ;)
Thanks

"Ravi Shankar" wrote:
[vbcol=seagreen]
> Is your accout part of the IIS_WPG group ?
> I've seen "Service Unavailable" errors when this is not the case. Another
> directory that you need to give "Full Control" permissions for this a/c is
> the C:\Windows\temp.
>
>
> "Suman Chakrabarti [MCP]" wrote:
>
Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com