| Ravi Shankar 2005-09-28, 7:50 am |
| Hi Stacy,
Can you add the ASPNET Account on the web service machine to the group with
"Launch" & "Edit" permissions to COM+/DCOM Commerce Server Objects.
IF however, the WebServices are called by a set of users then make a
security group with these users as members and provide permissions at
COM+/DCOM & SQL for this group to Commerce Server objects/databases (similar
to Commerce Service A/c)
--
Ravi Shankar
"stacy.hass@gmail.com" wrote:
> In order to properly use CS Interop API to obtain profile data is it
> required to run under the Commerce Server Service Account that was used
> to configure / install CS to begin with? I want to stop the following
> errors from occurring (see Technical Details). They are not preventing
> profile data from being returned successfully but it is an annoyance
> and may or may not be a cause for greater concern?
>
> SCENARIO
> ----------------------------------------
> There is a web service running on Server A (internal to the network)
> uses CS Interop API to obtain Profile data from Server B (Database
> Server - no Commerce Server 2002 FP 1 installation) in the DMZ. It
> needs to be Interop API code since this code is executed without having
> runtime commerce server context.
>
>
> TROUBLESHOOTING
> ----------------------------------------
> 1) I've tried connection strings that use local SQL accounts on Server
> B with the same db rights and access as
> [DMZCOMAINNAME]\[CommerceServerServiceAccount] and
> [SERVERNAME]\[CommerceServerServiceAccount] to no avail (the errors
> keep occurring).
>
> 2) I've tried this connection string: "Data Source=[IP Address of DB
> server];Initial Catalog=msib21_commerce;Integrated Security=SSPI" which
> then uses ASPNET to connect to the db (permissions for ASPNET are
> slightly different than [SERVERNAME]\[CommerceServerServiceAccount] /
> [DMZCOMAINNAME]\[CommerceServerServiceAccount] however the same errors
> appear in the logs.
>
> 3) I noticed there are Component Services for Commerce Server that run
> under the account of [DMZDOMAINNAME]\[CommerceServerServiceAccount].
> Which is why I pose the question above "In order to properly use CS
> Interop API to obtain profile data is it required to run under the
> Commerce Server Service Account that was used to configure / install CS
> to begin with?".
>
> 4) A Google search indicated it could be related to the MDAC version.
> I installed and ran a MDAC checker and v 2.8 is on Server A. So I
> don't believe this is the issue.
>
> Apologies for the long post but I wanted to include all the details.
> Many thanks for any assistance.
>
> Kind regards,
> -Stacy
>
>
>
> TECHNICAL DETAILS
> ----------------------------------------
> a) Environment: MSIB v2.1 / Commerce Server 2002 FP 1 / Content
> Management Server 2002 SP 1a
>
> Server A (BizTalk / Web Services) - Internal
> O/S : Windows 2000 Advanced Server
> Commerce Server 2002 FP 1
>
> Server B (SQL Server 2000) - DMZ
> O/S : Windows 2000 Advanced Server
> Used only for the databases that power CS / CMS / MSIB
>
> Server C (Administration Server) - DMZ
> O/S : Windows 2003
> Commerce Server 2002 FP 1 installed
> * where I noticed the Component Services (mentioned above)
>
> b) Errors seen in the Application Log of the Event Viewer:
>
> Event Type: Error
> Event Source: Commerce Server 2002
> Event Category: None
> Event ID: 36865
> Date: 8/28/2005
> Time: 6:16:02 PM
> User: N/A
> Computer: Server A
> Description:
> Error in Commerce Administration Object : Description -
> 'GlobalConfig:Initialize : Login failed for user '(null)'. Reason: Not
> associated with a trusted SQL Server connection.'
>
> ----------------------------------------------------------
>
> Event Type: Information
> Event Source: Commerce Server 2002
> Event Category: None
> Event ID: 28676
> Date: 8/28/2005
> Time: 6:16:02 PM
> User: N/A
> Computer: Server A
> Description:
> CSPerfCounters Component : Error - 'Calling GetSites'
> ------------------------------------------------------------
>
> Event Type: Error
> Event Source: Commerce Server 2002
> Event Category: None
> Event ID: 28673
> Date: 8/28/2005
> Time: 6:16:02 PM
> User: N/A
> Computer: Server A
> Description:
> CSPerfCounters Component : Failed to create - 'Init from registry.'
>
>
|