Out of process OLEDB provider and windows authentication

  • I'm not at the office today, but I'll check it tomorrow.

    It has been a setting where you'd have to add users to a windows db2 group ( it created that one during install ).

    Nowadays there is a setting in the db2 registry to disable this "db2 extended security" setting

    ( db2set -all shows it all )

    We're on DB2 udb9.7 (pure as gateway to DB2 Z/os)

    Johan

    Learn to play, play to learn !

    Dont drive faster than your guardian angel can fly ...
    but keeping both feet on the ground wont get you anywhere :w00t:

    - How to post Performance Problems
    - How to post data/code to get the best help[/url]

    - How to prevent a sore throat after hours of presenting ppt

    press F1 for solution, press shift+F1 for urgent solution 😀

    Need a bit of Powershell? How about this

    Who am I ? Sometimes this is me but most of the time this is me

  • Thank you Johan, I must have missed your last post. :blush:

    We're still working on the issue with MS support.

    Now they're trying to reproduce the problem on their own, as the provider manufacturer allowed them to activate a temporary license for troubleshooting.

    Pernsonally, I hate this kind of situation: it's MS fault, no, it's the provider's fault... and me in the middle. You know what I mean.:sick:

    -- Gianluca Sartori

  • Gianluca Sartori (3/3/2011)


    Thank you Johan, I must have missed your last post. :blush:

    We're still working on the issue with MS support.

    Now they're trying to reproduce the problem on their own, as the provider manufacturer allowed them to activate a temporary license for troubleshooting.

    Pernsonally, I hate this kind of situation: it's MS fault, no, it's the provider's fault... and me in the middle. You know what I mean.:sick:

    Nothing worse than being in the middle of that kind of finger pointing.

    Exactly why we are trying to keep our BI stack partitioned from the transational SQL.

    Hard enough to troubleshoot, we don't want to add more variables.

    Greg E

  • Gianluca Sartori (3/3/2011)


    Thank you Johan, I must have missed your last post. :blush:

    We're still working on the issue with MS support.

    Now they're trying to reproduce the problem on their own, as the provider manufacturer allowed them to activate a temporary license for troubleshooting.

    Pernsonally, I hate this kind of situation: it's MS fault, no, it's the provider's fault... and me in the middle. You know what I mean.:sick:

    I hope they can fix your problem.

    Being in the middle of clashes is always a pain.:(

    Johan

    Learn to play, play to learn !

    Dont drive faster than your guardian angel can fly ...
    but keeping both feet on the ground wont get you anywhere :w00t:

    - How to post Performance Problems
    - How to post data/code to get the best help[/url]

    - How to prevent a sore throat after hours of presenting ppt

    press F1 for solution, press shift+F1 for urgent solution 😀

    Need a bit of Powershell? How about this

    Who am I ? Sometimes this is me but most of the time this is me

  • Solved! MS Support found the permissions we were missing.

    The launching user had to be granted these Local Security Policies:

    Create Global Objects (SeCreateGlobalPrivilege)

    Impersonate a client after authentication (SeImpersonatePrivilege)

    I'm setting up a blog post, hope it will help other people.

    Actually, the information is out there, but highly fragmented and contradictory. I was not able to find any complete reference on this topic.

    -- Gianluca Sartori

  • Great to hear your issue has been solved.

    Looking forward to the blog post.

    Johan

    Johan

    Learn to play, play to learn !

    Dont drive faster than your guardian angel can fly ...
    but keeping both feet on the ground wont get you anywhere :w00t:

    - How to post Performance Problems
    - How to post data/code to get the best help[/url]

    - How to prevent a sore throat after hours of presenting ppt

    press F1 for solution, press shift+F1 for urgent solution 😀

    Need a bit of Powershell? How about this

    Who am I ? Sometimes this is me but most of the time this is me

  • Crap! I'm afraid I spoke too soon.

    Now it refuses to participate distributed transactions.

    #@#@€!!??#@!!! :angry:

    -- Gianluca Sartori

  • same player shoot again, hit ball when lights are on 😉

    I would doublecheck the msdtc settings and stop/start it once more.

    Johan

    Learn to play, play to learn !

    Dont drive faster than your guardian angel can fly ...
    but keeping both feet on the ground wont get you anywhere :w00t:

    - How to post Performance Problems
    - How to post data/code to get the best help[/url]

    - How to prevent a sore throat after hours of presenting ppt

    press F1 for solution, press shift+F1 for urgent solution 😀

    Need a bit of Powershell? How about this

    Who am I ? Sometimes this is me but most of the time this is me

  • Sure, I will check MSDTC settings once again.

    It's not that easy tracing DTC errors, it's going to be a pain.

    I'm afraid you will have to wait some days for that blog post... 😉

    -- Gianluca Sartori

  • also keep in mind MSDTC needs some authentication settings shut off when connecting from or to Windows 2000 !

    Johan

    Learn to play, play to learn !

    Dont drive faster than your guardian angel can fly ...
    but keeping both feet on the ground wont get you anywhere :w00t:

    - How to post Performance Problems
    - How to post data/code to get the best help[/url]

    - How to prevent a sore throat after hours of presenting ppt

    press F1 for solution, press shift+F1 for urgent solution 😀

    Need a bit of Powershell? How about this

    Who am I ? Sometimes this is me but most of the time this is me

  • Thanks for that pointer. Currently DTC security settings are wide open (no authentication). I'm afraid there's something inside the provider code that requires additional privileges to join the distributed transaction.

    I opened a new case with MS support, let's see what they come up with.

    -- Gianluca Sartori

  • OK, now it definitely works.

    I got it working after a long fight with permissions, policies, and registry keys.

    ...and I thought that a DBA didn't need to be a Windows sysadmin!!!

    Now, I need some volounteer to help me reviewing the blog post I set up to share my findings. Anyone interested?

    -- Gianluca Sartori

  • Gianluca Sartori (5/3/2011)


    OK, now it definitely works.

    I got it working after a long fight with permissions, policies, and registry keys.

    ...and I thought that a DBA didn't need to be a Windows sysadmin!!!

    Now, I need some volounteer to help me reviewing the blog post I set up to share my findings. Anyone interested?

    I want to give it a try, but I'll not be able to start reading/testing if until next monday.

    (I'll be on a trip that is stuffed 100% from wake up to go to bed time)

    Check the pm I sent you with my contact address.

    Johan

    Johan

    Learn to play, play to learn !

    Dont drive faster than your guardian angel can fly ...
    but keeping both feet on the ground wont get you anywhere :w00t:

    - How to post Performance Problems
    - How to post data/code to get the best help[/url]

    - How to prevent a sore throat after hours of presenting ppt

    press F1 for solution, press shift+F1 for urgent solution 😀

    Need a bit of Powershell? How about this

    Who am I ? Sometimes this is me but most of the time this is me

Viewing 13 posts - 16 through 27 (of 27 total)

You must be logged in to reply to this topic. Login to reply