DTS package from Domain vs. Workgroup

Question

DTS package from Domain vs. Workgroup

DanFoxley

SSC Veteran

Points: 206
More actions
November 22, 2003 at 11:33 pm

#107107

I have an ASP page that calls a DTS package. It runs fine when run from a member server on the AD domain. When I run it from a Workgroup Web Server it does not run, I get the following:
===================
Event Type:Failure Audit
Event Source:Security
Event Category:Account Logon
Event ID:681
Date:11/23/2003
Time:9:37:38 AM
User:NT AUTHORITY\SYSTEM
Computer:DEV1
Description:
The logon to account: WWW2DEV$
by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
from workstation: WWW2DEV
failed. The error code was: 3221225572
======================================
Event Type:Failure Audit
Event Source:Security
Event Category:Logon/Logoff
Event ID:529
Date:11/23/2003
Time:9:37:38 AM
User:NT AUTHORITY\SYSTEM
Computer:DEV1
Description:
Logon Failure:
Reason:Unknown user name or bad password
User Name:WWW2DEV$
Domain:WORKGROUP
Logon Type:3
Logon Process:NtLmSsp
Authentication Package:NTLM
Workstation Name:WWW2DEV
=======================================
and from the DTS package
----------------------
Step Error Source: Microsoft Data Transformation Services Flat File Rowset Provider
Step Error Description:Error opening datafile: Logon failure: unknown user name or bad password.
Step Error code: 80004005
Step Error Help File:DTSFFile.hlp
Step Error Help Context ID:0
----------
TIA,
Dan Foxley
Edited by - gdtrfb on 11/23/2003 10:44:57 AM

Viewing 7 posts - 1 through 6 (of 6 total)

You must be logged in to reply to this topic. Login to reply

philcart SSC-Forever Points: 47796 More actions · Answer 1

Basically the package must be referring to a resource on the AD Domain. Given that, it needs to provide appropriate login details to access that resource.

How does the ASP page run the package? What does the package do?

Hope this helps

Phill Carter

--------------------

Colt 45 - the original point and click interface

--------------------
Colt 45 - the original point and click interface

DanFoxley SSC Veteran Points: 206 More actions · Answer 2

The package gets a .txt and inserts it in the DB. I resolved the problem by joing the WWWServers to the Domain, but that is all I had to do, so there is some sort of Workgroup/Domain issue when the DTS package is being run from .asp on a Workgroup IIS box, that I don't understand. Any insight?

Code below

==============================

Set oPKG = server.CreateObject("DTS.Package")

oPKG.LoadFromSQLServer "dev1", "", "",256,,,,"Package Name"

oPKG.Execute

oPKG.Uninitialize()

Set oPKG = Nothing

Response.Write("Package successfully executed <br>")

Edited by - gdtrfb on 11/24/2003 3:10:56 PM

philcart SSC-Forever Points: 47796 More actions · Answer 3

So is either the txt file or the DB on the domain? If so then your package will need domain privelages to access that resource.

Hope this helps

Phill Carter

--------------------

Colt 45 - the original point and click interface

--------------------
Colt 45 - the original point and click interface

DanFoxley SSC Veteran Points: 206 More actions · Answer 4

Phil,

The error below was the make or break of my problem. The workgroup IIS box was able to drop the .txt file, and intiate the DTS package, the DTS was going back to the IIS box....and generating the error below in trying to do it. I made IUSR a local admin & sysadmin so I think something is missing in this scenario of Workgroup IIS server to Domain SQL Server.

======================================

Event Type: Failure Audit

Event Source: Security

Event Category: Logon/Logoff

Event ID: 529

Date: 11/23/2003

Time: 9:37:38 AM

User: NT AUTHORITY\SYSTEM

Computer: DEV1 (SQL Server On Domain)

Description:

Logon Failure:

Reason: Unknown user name or bad password

User Name: WWW2DEV$

Domain: WORKGROUP

Logon Type: 3

Logon Process: NtLmSsp

Authentication Package: NTLM

Workstation Name: WWW2DEV (IIS Server on Workgroup)

=======================================

philcart SSC-Forever Points: 47796 More actions · Answer 5

When a DTS package is run, uses the security credentials of the process that executes it.

In this instance it would be using the security credentials of the Workgroup Web Server.

Have a look at the following articles,

Execute a SQL Server DTS Package from Active Server Pages

http://support.microsoft.com/default.aspx?scid=kb;EN-US;252987

Handling DTS Package Security

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dtssql/dts_pkgmng_sec_09dl.asp

Hope this helps

Phill Carter

--------------------

Colt 45 - the original point and click interface

--------------------
Colt 45 - the original point and click interface

DanFoxley SSC Veteran Points: 206 More actions · Answer 6

DanFoxley

SSC Veteran

Points: 206

November 25, 2003 at 11:12 am

#483596

Thanks, that's very helpful.