|
Home > Archive > BizTalk Server Administration > March 2005 > Unable to enable trusted authentication
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Unable to enable trusted authentication
|
|
|
| I'm new to Biztalk and working my way through the tutorials. For tutorial 3,
I need to enable trusted authentication and receive the following error:
"This service account logon is already used by another BizTalk Host instance
with a different authentication trusted setting. The same logon cannot be
used by both trusted and non-trusted BizTalk Hosts. Specify a different
logon."
There is only one account for the test machine and I have checked through
the IIS and SQL Server databases and have verified that this account is
listed within all the relevant groups, permissions etc.
What am I doing wrong to receive this error?
| |
| Matt Milner 2005-03-07, 8:46 pm |
| Most likely you have the same account configured for the isolated host and
in process host. Since an account can be either trusted or not, you cannot
use it for both a trusted and untrusted host. You'll need to configure one
of the hosts (in biztalk server administration tool) to use a different
account, then set the one you want to authentication trusted.
Matt
"Aisha" <Aisha@discussions.microsoft.com> wrote in message
news:F5367DEB-7B97-417E-BED0-8C63E6811367@microsoft.com...
> I'm new to Biztalk and working my way through the tutorials. For tutorial
> 3,
> I need to enable trusted authentication and receive the following error:
>
> "This service account logon is already used by another BizTalk Host
> instance
> with a different authentication trusted setting. The same logon cannot be
> used by both trusted and non-trusted BizTalk Hosts. Specify a different
> logon."
>
> There is only one account for the test machine and I have checked through
> the IIS and SQL Server databases and have verified that this account is
> listed within all the relevant groups, permissions etc.
>
> What am I doing wrong to receive this error?
| |
|
| Thank-you so much for a prompt reply. I tried what you had suggested and was
unable to get a trusted host in that the new error is that the application
does not exist.
Could this be a SSO issue? That perhaps something is not looking at the
right DB? The reason I ask is that I cannot access the TPM admin on the BAS
site. Insufficient priveldges, which again, is not possible in that all the
user accounts are configured correctly for permissions.
Thank-you in advance
"Matt Milner" wrote:
> Most likely you have the same account configured for the isolated host and
> in process host. Since an account can be either trusted or not, you cannot
> use it for both a trusted and untrusted host. You'll need to configure one
> of the hosts (in biztalk server administration tool) to use a different
> account, then set the one you want to authentication trusted.
>
> Matt
>
>
> "Aisha" <Aisha@discussions.microsoft.com> wrote in message
> news:F5367DEB-7B97-417E-BED0-8C63E6811367@microsoft.com...
>
>
>
| |
| Matt Milner 2005-03-08, 5:49 pm |
| I'm not exactly sure what the nature of your current problem is. If you
cannot get into the BAS site, then you need to look to make sure the user
you are logging in with is in one of the BAS groups, likely BAS admins or
managers for what you are trying to do.
If you are getting SSO errors, could you include those in your post to help
diagnose the problem. You will want the user that is part of the host to
only be in the groups it needs to, not give it full access. So you'll need
to put it in the right Windows group that you setup for your host (which
should be different for each host), and make sure you configure the service
to use the the right user.
Matt
"Aisha" <Aisha@discussions.microsoft.com> wrote in message
news:1282A57C-E3E9-4633-848E-64711A4AB5AC@microsoft.com...[vbcol=seagreen]
> Thank-you so much for a prompt reply. I tried what you had suggested and
> was
> unable to get a trusted host in that the new error is that the application
> does not exist.
>
> Could this be a SSO issue? That perhaps something is not looking at the
> right DB? The reason I ask is that I cannot access the TPM admin on the
> BAS
> site. Insufficient priveldges, which again, is not possible in that all
> the
> user accounts are configured correctly for permissions.
>
> Thank-you in advance
>
>
> "Matt Milner" wrote:
>
| |
|
| Thank-you for the reply.
My issue at present is the BizTalk Service BizTalk Group :
BizTalkServerApplication service refuses to start. I have checked the SSO is
running correctly, the permissions are valid and correct, that all the other
required services are started. I checked the knowledge base article
associate with the specific error.
Please help.
I am providing the error log message below:
Failed while executing a Windows service request.
Service request: Start
BizTalk host name: BizTalkServerApplication
Windows service name: BTSSvc{B5AA0720-6018-4F81-821C-FD5F3B40AEC4}
Additional error information:
Error code: c0c0153a
Error source: BizTalk Server 2004
Error description: A BizTalk subservice has failed while executing a service
request.
Subservice: MSMQT
Service request: Start
Additional error information:
Error code: 8000ffff
Error source: BizTalk Server 2004
Error description: Catastrophic failure
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
"Matt Milner" wrote:
> I'm not exactly sure what the nature of your current problem is. If you
> cannot get into the BAS site, then you need to look to make sure the user
> you are logging in with is in one of the BAS groups, likely BAS admins or
> managers for what you are trying to do.
>
> If you are getting SSO errors, could you include those in your post to help
> diagnose the problem. You will want the user that is part of the host to
> only be in the groups it needs to, not give it full access. So you'll need
> to put it in the right Windows group that you setup for your host (which
> should be different for each host), and make sure you configure the service
> to use the the right user.
>
> Matt
>
>
> "Aisha" <Aisha@discussions.microsoft.com> wrote in message
> news:1282A57C-E3E9-4633-848E-64711A4AB5AC@microsoft.com...
>
>
>
| |
| Matt Milner 2005-03-10, 2:47 am |
| Sounds like you had MSMQT configured in that host and it now cannot get
access to its configuration in the SSO database. I'd change that host back
to the user/group you were using and change the other host to a different
user. MSMQT does not like to be moved between hosts.
If you are not using MSMQT, then it gets a little more difficult.
Matt
"Aisha" <Aisha@discussions.microsoft.com> wrote in message
news:9A73540C-FFB3-4EB7-9A42-3DBBD48C3141@microsoft.com...[vbcol=seagreen]
> Thank-you for the reply.
>
> My issue at present is the BizTalk Service BizTalk Group :
> BizTalkServerApplication service refuses to start. I have checked the SSO
> is
> running correctly, the permissions are valid and correct, that all the
> other
> required services are started. I checked the knowledge base article
> associate with the specific error.
>
> Please help.
>
> I am providing the error log message below:
>
> Failed while executing a Windows service request.
> Service request: Start
>
> BizTalk host name: BizTalkServerApplication
> Windows service name: BTSSvc{B5AA0720-6018-4F81-821C-FD5F3B40AEC4}
>
> Additional error information:
> Error code: c0c0153a
> Error source: BizTalk Server 2004
> Error description: A BizTalk subservice has failed while executing a
> service
> request.
> Subservice: MSMQT
> Service request: Start
>
> Additional error information:
> Error code: 8000ffff
> Error source: BizTalk Server 2004
> Error description: Catastrophic failure
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
> "Matt Milner" wrote:
>
| |
|
| I resolved the issue by reconfiguring the current Biztalk installation and
replacing the current databases. Not sure what the issue was in the first
place, but it is resolved now and working well.
Thank-you for all your help
"Matt Milner" wrote:
> Sounds like you had MSMQT configured in that host and it now cannot get
> access to its configuration in the SSO database. I'd change that host back
> to the user/group you were using and change the other host to a different
> user. MSMQT does not like to be moved between hosts.
>
> If you are not using MSMQT, then it gets a little more difficult.
>
> Matt
>
>
> "Aisha" <Aisha@discussions.microsoft.com> wrote in message
> news:9A73540C-FFB3-4EB7-9A42-3DBBD48C3141@microsoft.com...
>
>
>
|
|
|
|
|