Database Mirroring - 'NT AUTHORITY\ANONYMOUS LOGON.' failed

Hello,

I have set up 3 servers - Primary, Mirror and Witness. When I run the database mirroring wizard all my endpoints are configured, but when i start the mirroring service i get a 1418 error - in the logs in says -

Database Mirroring login attempt by user 'NT AUTHORITY\ANONYMOUS LOGON.' failed with error: 'Connection handshake failed. The login 'NT AUTHORITY\ANONYMOUS LOGON' does not have CONNECT permission on the endpoint. State 84.'. [CLIENT: 10.20.1.5]

I have looked through the BOL and can't find anything helpful. - I'm pretty new to SQL server, so any help is very much appreciated!

Thanks

Kerpoise

This is not a SQL problem but an authentication issue. The right approach is to follow the guidance of the authentication troubleshooting whitepaper: http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/tkerberr.mspx

HTH,
~ Remus

|||But why is my Primary server trying to logon as NT AUTHORITY/ANONYMOUS LOGON? When I have defined my logon through the Mirroring Wizard as a sysadmin account, with enabled Connect privileges on all servers.

I can't find a simple solution in the white paper. Isn't there a simple way to either - authenticate as a sysadmin account, or to allow NT AUTHORITY/ANONYMOUS to have CONNECT privileges to all servers?

It seems like this should be a very quick thing to do, but I really can't figure it out.

Please help!|||

Do not grant connect permission to ANONYMOUS LOGON.

When connecting the two instances what gets authenticated is the 'service account', the Windows account that runs the SQL Server instance. Depending on how you insnstalled the instances, the appropiate action is:
- if installed as 'LOCAL SERVICE': you must change the service account, it will never work. The SQL Management console in mmc has an option to change the service account, selecta different account.
- if installed as 'NETWORK SERVICE' or 'LocalSystem': you have to register the service SPN for Kerberos authentication to succeed. Use a tool like setspn.exe (available at microsoft download center) and register the SPN. Mirroring will use an SPN on the format 'MSSQLSvc/<partnername>:<partnerport>'. Also, make sure the AUTHENTICATION option on the mirroring endpoint is WINDOWS, WINDOWS NEGOTIATE or WINDOWS KERBEROS (in other words NTLM will not work). After registering the two SPNs (both for mirror and principal!), the authentication will resolve to the machine account ('DOMAIN\MachineName$'), you must create a login for this account and grant connect permission to it.
- if installed as a local account ('PrincipalMachine\LocalAccount' and/or 'MirrorMachine\LocalAccount'): it will not work, you must change the service account(s).
- if installed as domain account ('DOMAIN\UserName'), then it should work as long as both the mirror and the principal are in the same domain, or there is a trust relationship between their domains.

An alternative is to use certificate based authentication, then the whole domain/user/SPNs issue vanishes as the authentication will use a diferent protocol (SChannel's TLS).

HTH,
~ Remus

Database logon request

Hi,

I am using CrystalReport from MS Visual Studio .Net. The report was created by the designer. It accesses a MySQL DB by the MyODBC 2.5 driver. Everything works fine on my development machine. I call the form which implements the crystalreportview and the report is displayed. Hoever, if I create an installation and run it on the deployment machine, a dialog is displayed requesting for server name, database, user name and password. Whatever I type in the login fails ("login fails. please retry"). I tried the MyODBC DSN and the MySQL user - without success.

Was anyone facing the same problem? I don't know how to proceed, it is really a strange issue, because the application runs on my development machine...

Thanks in advance.

gbrOkay. Please ignore my posting. I found out that different user accounts were created...

Database Logon problem Crystal Report

I am using following code in form load.
it works fine on one PC but when i run the same application on other pc with different version of Windows Xp it is asking for database logon for report.

I did tried using my provided login info using code but it is executing front end query as well as query in the report.

Any Suggestions will be appreciated.
Thanks in advance



ConnStr = "PROVIDER=MSDAORA.1;PERSIST SECURITY INFO=FALSE;USER ID=scott;PASSWORD=tiger;DATA SOURCE=orcl"
conObj = New OleDbConnection(ConnStr)

strsql = "select * from emp"

cmdObj.Connection = conObj

cmdObj.CommandText = strsql

daObj.SelectCommand = cmdObj

daObj.Fill(dsObj, "test")

rptDoc.Load("\\server\reports\abc.rpt")

srcCr = rptDoc

srcCr.SetDataSource(dsObj)

CRV.ReportSource = rptDoc

CRV.Show()i used CR viewer of CR XI ,it solved the problem. other system had cr viewer 9.5

Database Logon Failed SSRS

Hi All,

My Report Server works find but after apply SQL Server 2005 Service Pack2. I can't connect to ReportServer Database. When Trying to connect from SQL Server Management Studio i get following Page.

TITLE: Connect to Server

Cannot connect to VISTA.

ADDITIONAL INFORMATION:

Client found response content type of 'text/html; charset=utf-8', but expected 'text/xml'.
The request failed with the error message:
--
<html>
<head>
<title>
SQL Server Reporting Services
</title><meta name="Generator" content="Microsoft SQL Server Reporting Services 9.00.3054.00" />
<meta name="HTTP Status" content="500" />
<meta name="ProductLocaleID" content="9" />
<meta name="CountryLocaleID" content="1033" />
<style>
BODY {FONT-FAMILY:Verdana; FONT-WEIGHT:normal; FONT-SIZE: 8pt; COLOR:black}
H1 {FONT-FAMILY:Verdana; FONT-WEIGHT:700; FONT-SIZE:15pt}
LI {FONT-FAMILY:Verdana; FONT-WEIGHT:normal; FONT-SIZE:8pt; DISPLAY:inline}
.ProductInfo {FONT-FAMILY:Verdana; FONT-WEIGHT:bold; FONT-SIZE: 8pt; COLOR:gray}
A:link {FONT-SIZE: 8pt; FONT-FAMILY:Verdana; COLOR3366CC; TEXT-DECORATION:none}
A:hover {FONT-SIZE: 8pt; FONT-FAMILY:Verdana; COLORFF3300; TEXT-DECORATION:underline}
A:visited {FONT-SIZE: 8pt; FONT-FAMILY:Verdana; COLOR3366CC; TEXT-DECORATION:none}
A:visited:hover {FONT-SIZE: 8pt; FONT-FAMILY:Verdana; colorFF3300; TEXT-DECORATION:underline}

</style>
</head><body bgcolor="white">
<h1>
Reporting Services Error<hr width="100%" size="1" color="silver" />
</h1><ul>
<li>The report server cannot open a connection to the report server database. The logon failed. (rsReportServerDatabaseLogonFailed) <a href="http://go.microsoft.com/fwlink/?LinkId=20476&EvtSrc=Microsoft.ReportingServices.Diagnostics.Utilities.ErrorStrings&EvtID=rsReportServerDatabaseLogonFailed&ProdName=Microsoft%20SQL%20Server%20Reporting%20Services&ProdVer=9.00.3054.00" target="_blank">Get Online Help</a></li><ul>
<li>For more information about this error navigate to the report server on the local server machine, or enable remote errors</li>
</ul><hr width="100%" size="1" color="silver" /><span class="ProductInfo">SQL Server Reporting Services</span>
</ul>
</body>
--. (Microsoft.SqlServer.Management.UI.RSClient)

BUTTONS:

OK

Colud anyone help me to resolve this issue please?

Thank you very much.

Regards,

Balwant Patel

Try using the Reporting Services Configuration Utility (Database tab) to generate a database script and apply this script manually to your ReportServer database.|||

Did you just put on SP2? I had the same error very shortly after I put either SP2 or a hotfix (can't remember which), and it was fixed after a complete system restart and hasn't returned.

|||Make sure that the Service Accoutn the Reporting Server is running under has appropiate permissions to access the Report Server Database.

Jens K. Suessmeyer.

http://www.sqlserver2005.de
|||

Hi Teo,

Thank you very much for your response... I tried with Database script but it doesn't work.

Regards,

Balwant Patel.

|||

Hi gnieboer,

Thank you very much for response...I also restarted my system after apply SQL Server 2005 SP2 but I can't get rid of the problem.

Regards,

Balwant Patel

|||

Hi Suessmeyer,

I check permission on Report Server Database...It is fine

Regards,

Balwant Patel

|||Which account has been granted access to the Report Server database, the ReportService Account (Windows Service) or the ASP_Net Worker process ?

Jens K. Suessmeyer.

http://www.sqlserver2005.de

|||

Hi suessmeyer,

I m using Windows Service Account

Regards,

Balwant Patel

|||Make sure that the the ASPNET account is a member of the SQLServer2005ReportingServicesWebServiceUser$<computername> $MSSQLSERVER Windows group and NT Authority\System is a member of the SQLServer2005ReportServerUser$<computername>$MSSQLSERVER group.|||

Hi Teo,

Yes, ASPNET Account & Authority\System are members of above groups...

I dont know what's the problem with it...

Regards,

Balwant Patel.

Database Login fails

Hi

I can logon to my Sql server using the SSMS management tool, I am using Windows Authentication to logon to SSMS. Create a database OK, with all the necessary tables.

However when I start a VB Express app and try to connect to this database I get an error that login filed for user AMD\Larry, AMD is my PC name and my login (Larry) is the computer Administrator logon. The PC is a standalone ie not part of a domain etc.

Can anyone help?

Regards.

Larry.

Hi Larry,

to solve you problem: in SSMS, connect to your database, go to Security, Logins, New Login, Add new login as AMD\Larry and give it right to access your database.

good luck

mario

|||Are you also using integrated Authentication in VB Express. Make sure that you don′t really *type* in the user as this will be recognized as a SQL Server login. Integrated login is done in the background and don′t have be typed in somewhere (I also mention that becasue many people are always confused about that)

HTH, Jens Suessmeyer.

http://www.sqlserver2005.de

|||Thanks for these I wil try them and get back.