Post reply

Snapshot will not fire

  • July 2, 2008 at 1:48 pm

    #190047

    I have replication on cluster using transactional....Using the SQL Server Account

    And the distribution part is working just the snapshot.

    Executed as user: DOMAIN\#SQLACCOUNT

    Replication-Replication Snapshot Subsystem: agent

    i found this thread - but i did not know what it means:

    we check that the SQL Agent account was trusted for delegation - how do you do this?

    --Thread

    We were rolling out a new database that is transactionally replicated to a few other nodes. In test and staging, everything worked fine, but in production, on a cluster, the distribution job failed. The snapshot runs as the SQL Agent account, but the distro runs as a separate account to distro just that database to the subscribers. The error is:

    Unable to start execution of step 2 (reason: Error authenticating proxy DOMAIN\SomeUserName, system error: Logon failure: unknown user name or bad password.). The step failed.

    We spent about an hour trying to figure out what was going wrong -- all the ACLs were right, the user was in the PAL. Everything was identical in permissions to the other environments.

    After a bit of time on the line with PSS, we noticed that if we ran everything as the SQL Agent Account (the cluster service), then it worked. But, this required adding the cluster's account to the subscriber DB, and that was not acceptable.

    Finally, our PSS rep suggested we check that the SQL Agent account was trusted for delegation. Bingo. On staging and test, the SQL Agent account is Network Service (or Local System). But in a cluster, it runs as a separate account, and that account is not trusted for delegation. Hence, the impersonation call failed. Simply going into ADUC and trusting it for Kerberos delegation, then restarting the SQL Agent, allowed us to use the proxy accounts without problem.

    It seems like this message comes up a lot in context of replication and clusters. Hope this helps someone else!

    Misc. Technology

    Wednesday, April 04, 2007 1:24:11 AM UTC Comments [0] | Trackback Tracked by:

    "http://sj1uiza.biz/tail-of-the-dragon.html" (http://sj1uiza.biz/tail-of-the-dra... [Pingback]

    "http://viuqnvu.biz/hotel-pool-nude.html" (http://viuqnvu.biz/hotel-pool-nude.ht... [Pingback]

  • July 2, 2008 at 1:55 pm

    #837476

    Thanks for sharing!


    * Noel

Viewing 2 posts - 1 through 1 (of 1 total)

You must be logged in to reply to this topic. Login to reply