BizTalk Server General - Promoting a new SSO to master

This is Interesting: Free IT Magazines  
Home > Archive > BizTalk Server General > December 2004 > Promoting a new SSO to master





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Promoting a new SSO to master
Filipe Pinto

2004-11-16, 2:28 pm

Hi,

Has any of you ever promoted a new SSO server to be the master secret?

These are the steps that i performed up until now:

1 - I backup the the master secret using the command sssoconfig
-backupsecret <backup file>

2 - I stopped the master secret server (I'm trying to simulate what happens
when the master secret server crashes)

3 - I create the XML file as indicated by the documentation

<sso>
<globalInfo>
<secretServer>BTTSTSRV02</secretServer>
</globalInfo>
</sso>

4 - I execute the command ssomanage -updatedb SSO.xml

With the service running:

ERROR: 0x80070005 : Access is denied

With the service stopped:

ERROR: 0xC0002A0F : Could not contact the SSO server 'BTTSTSRV02'. Check
that the SSO service is running on that server.

ISSUE:

1 - Why is the command Microsoft failing?

2 - Does this service need all DB connections to be closed? I have noticed
in SQL Enterprise Manager that there's a process that is accessing SSODB -
ssox_spGetApplications and that even after killied is restarted.

Running out of answers...

Thank you,

Filipe Pinto
Bill Ticehurst [MSFT]

2004-12-01, 8:46 pm

Hi Filipe,

Have you ensured the account you are logged on with when running this
command is a member of the local Administrator and SSO Administrators group?
The master secret needs to be written using the LSA using specific
credentials, which makes the account you're running under highly important.

Regards,

- Bill Ticehurst [MSFT]

This posting is provided "AS IS" with no warranties, and confers no rights

"Filipe Pinto" <FilipePinto@discussions.microsoft.com> wrote in message
news:AD8E6D3C-B727-4BD6-8AC3-495F6458C846@microsoft.com...
> Hi,
>
> Has any of you ever promoted a new SSO server to be the master secret?
>
> These are the steps that i performed up until now:
>
> 1 - I backup the the master secret using the command sssoconfig
> -backupsecret <backup file>
>
> 2 - I stopped the master secret server (I'm trying to simulate what
> happens
> when the master secret server crashes)
>
> 3 - I create the XML file as indicated by the documentation
>
> <sso>
> <globalInfo>
> <secretServer>BTTSTSRV02</secretServer>
> </globalInfo>
> </sso>
>
> 4 - I execute the command ssomanage -updatedb SSO.xml
>
> With the service running:
>
> ERROR: 0x80070005 : Access is denied
>
> With the service stopped:
>
> ERROR: 0xC0002A0F : Could not contact the SSO server 'BTTSTSRV02'. Check
> that the SSO service is running on that server.
>
> ISSUE:
>
> 1 - Why is the command Microsoft failing?
>
> 2 - Does this service need all DB connections to be closed? I have noticed
> in SQL Enterprise Manager that there's a process that is accessing SSODB -
> ssox_spGetApplications and that even after killied is restarted.
>
> Running out of answers...
>
> Thank you,
>
> Filipe Pinto



Filipe Pinto

2004-12-01, 8:46 pm

Thank you Bill. Besides the SSO Admin group issue there was a little other
issue that i was able to resolve. Thanks!

"Bill Ticehurst [MSFT]" wrote:

> Hi Filipe,
>
> Have you ensured the account you are logged on with when running this
> command is a member of the local Administrator and SSO Administrators group?
> The master secret needs to be written using the LSA using specific
> credentials, which makes the account you're running under highly important.
>
> Regards,
>
> - Bill Ticehurst [MSFT]
>
> This posting is provided "AS IS" with no warranties, and confers no rights
>
> "Filipe Pinto" <FilipePinto@discussions.microsoft.com> wrote in message
> news:AD8E6D3C-B727-4BD6-8AC3-495F6458C846@microsoft.com...
>
>
>

Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com