Can't Setup Replication: Encryption Error Using CryptProtectData?
Aug 14, 2006
I am trying to setup replication but am having the following issues
Publisher:
SQL 2005 SP1 Enterprise Cluster (Active, Passive)
Subscriber:
SQL 2005 SP1 Enterprise
When trying to create a publication or subsubscription running under a Windows Domain account the following error message appears:
Replication-Replication Distribution Subsystem: agent ECHOECHO-InsDB-INS_CMS_PUB-HARPO-58 failed. Unable to start execution of step 2 (reason: Error authenticating proxy DETINIsrvRep_user, system error: Logon failure: unknown user name or bad password.). The step failed.
Further in the SQL logs we find that the above message is due to:
[298] SQLServer Error: 22046, Encryption error using CryptProtectData. [SQLSTATE 42000]
It appears that when Credentials for the agent proxy are being created that this message occurs. So when the SP that tries to run the agent (snapshot or distrobution) is called it always returns incorrect password details.
The Credentials do appear to be created, they are visible via SQL Studio, but you can't see the password. Changing the password via SQL Studio does not work as the Credentials are recreated every time.
I have checked the following:
MSDTC is running correctly
The Domain Account has the correct privileges to run these services
Regenerated the Service Master Key
Created Master Keys in each database effected by replication
Ensure SQL Service accounts have access to decrypt the Service Master Key
I can create a Publication and Subscription using the local system account on the cluster
Does anyone have any idea ?
Chris
View 1 Replies
ADVERTISEMENT
Apr 10, 2008
Hello and thank you all in advance for any assistance provided. I have a two node SQL 2005 cluster running (1 node is failover). I have a job that I am trying to run using a proxy account. The credential account that is used within the proxy is a domain account and I have ensured that the passwords are all correct. The problem I am experiencing is that whenever I try to run a job, it fails with the following message:
Unable to start execution of step 1 (reason: Error authenticating proxy ROCHARR ("just an example"), system error: Logon failure: unknown user name or bad password.). The step failed.
This is also displayed in my SQLAGENT.OUT log file:
SQLServer Error: 22046, Encryption error using CryptProtectData. [SQLSTATE 42000]
In the event viewer, I also recieve failure audits when I run the job that look like this:
Logon Failure:
Reason: Unknown user name or bad password
User Name: ARR
Domain: ROC
Logon Type: 8
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: HOSTA
Caller User Name: ITUSER
Caller Domain: ROCH
Caller Logon ID: (0x0,0x22EF57C8)
Caller Process ID: 5780
Transited Services: -
Source Network Address: -
Source Port: -
Now I have made sure that the "ITUSER" is trusted for delegation since that is the account that is running the SQL Server Agent Service. I have all the proxy settings configured correct in the job itself, so it shouldn't be that. Any assistance is greatly appreciated as I am going crazy with this.
Thanks again,
Trevor
View 1 Replies
View Related
May 3, 2007
I created a ransactional publication.
Starting the LogReader Agent produce the error
'Unable to start execution of step 2 (reason: Error authenticating proxy NETRTLSRVSvcSQLLogReader, system error: Logon failure: unknown user name or bad password.). The step failed.'
This is the result of the SQL Agent Error
[298] SQLServer Error: 22046, Encryption error using CryptProtectData. [SQLSTATE 42000]
We are running SQL Server 2005 - 9.00.3042.00 (Intel X86) in a cluster environment.
If I change the Step 2 of the Agent Job (Type=Replication Transactional-Log Reader) to "Run AS" SQL Agent Service Account , everthing works fine.
There seems to be a problem with the access to the generated proxy/credential
Why it doesn't work with the special SvcSQLLogReader domain Login ?
View 6 Replies
View Related
Nov 1, 2006
Hi,
I have SQL2000 installed as the default instance, and now I'm trying to install SQL 2005 standard edition as a named instance.
I receive this error :
SQL Server could not connect to database service for server configuration.. [SQL Native client] Encryption not supported on the client. However I'm able to install client tools
The setup works fine on other box with the same config : SQL 2000/Windows XP, is there any work around for this issue ?
In my SQL 2000 client network utilty "Force proctocol encryption " is desabled and did not find the setting for SQL 2005 !
Thank you
View 1 Replies
View Related
Jun 29, 2004
When I tried to configure replication, the following error comes out.
What is that about and any idea?
View 1 Replies
View Related
Feb 4, 2004
I am trying to setup replication on my server, but was getting an error that said:
"The Distributor is not available Error 6. Specified SQL Server not found"
So, I did some searching and found a couple things to check and found
sp_helpserver....the server with id of 0 was a remote server, not the local server instance...and
select @@servername also returned the name of that remote server!!
I'm assuming this is my problem, but how did it get this way and how do I fix it?
Thanks
View 4 Replies
View Related
Jan 15, 2000
Hello:
We are working on mssql 6.5, sp 4 and are beginning to test replication between two servers containing the same databases.
In EM, we added a distribution database on the publisher machine and through EM added each server as a local on each separate server and installed mssql 65 and sp4 on each machine and created the same database on each repsective machine.
In EM , through replication configuration, we added a subscriber database on one machine. On the publisher machine ,in EM through replication configuration, we went to add a publisher and when we clicked on the subscriber and then clicked on the publisher database and then clicked 'O.K.", we got the following message:
'Error 21271 : the name 'xyz-01' is not a vlaid object identifier, oe is not a valid format for this proprty or method'
This error message is not in BOL.
Has any one received this message in this situation?
What do we do to resolve it?
Any assistance that can be provided will be greatly appreciated. THanks.
David Spaisman
View 1 Replies
View Related
Feb 19, 2004
Hello guys,
Have any ever seen this error before?
Steps I made:
1) Created Publications by script - using Manual Sync. (Transacat Repl)
2) Created Subscriptions by script
3) Started Distribution Agent
THEN THIS ERROR MSG:
Violation of PRIMARY KEY constraint 'PK__@snapshot_seqnos__24F8BF73'. Cannot insert duplicate key in object '#24049B3A'.
(Source: SYD242 (Data source); Error number: 2627)
---------------------------------------------------------------------------------------------------------------
****Lost, has any got any ideas?
View 2 Replies
View Related
Jan 5, 2006
I have XP Pro SP2 with MDAC 2.8.1022. It had a problem so I tried to reinstall MDAC and got a Fatal Setup Error. This setup does not support installing on this operating system. I downloaded MDAC 2.8 1177 and get the same error.
I thought of uninstalling/reinstalling SP2, but this is a 2 month old Dell Latitude 610 with factory installed XP. There is no Windows Service Pack 2 option listed in the Control Panel > Add/Remove Programs.
There's some other strange things, so I wonder if they are related.
1) I have Paul set up as an administrator account. Some folders like MSSQL show that account with no permissions. I grant all the permissions to Paul for that folder. I come back later and the permissions are gone.
2) I deleted 20 files in Explorer, but 7 of them did not go away. I deleted those 7 again and they instatnly reappeared. I deleted those 7 again and then they finally went away.
3) I get a slow reaction time for things like Windows Explorer and opening and closing programs. This is suprising since it has 2 gig of RAM and 2.3 Gig processor. Could it be a memory handling problem that's causing OS problems. Probably, the memory didn't handle the OS installation well and the whole system is compromised now.
View 12 Replies
View Related
Nov 23, 2015
I am using SQL server 2012 Management studio and I have some confidential data on publisher which is being replicated to subscriber and i want to revoke permission for decryption at publisher end which is only possible using Asymmetric key as it allows only private key to decry-pt the data. But problem which i am facing is,we can not take backup of asymmetric keys which i could restore at subscriber. I do not want to share the private key password with sender. Is there any way to achieve it?
View 9 Replies
View Related
Nov 15, 2015
I'm trying to install SQL Server Management studio 2012 on my Windows 7 (x64) standalone laptop. When I click "New SQL stand-alone installation..." it runs a Setup Support Rules check and always fails "Setup Account Privileges". I've looked into the error and I keep getting that I need to change security rules but I don't have that option in window 7. How do I get around this without having to resort to a computer running Windows Server?
I have Visual Studio 2013 premium installed along with Localdb v11. I just want to connect and manage my database engine through SSMS when developing any application.
View 2 Replies
View Related
Jun 7, 2000
I need to replicate a database which will be updated both sides.Table doesn't have the primary key,and already has data.Please advice which replication will suit and what are the limitations.URGENT!!
Thanks!
View 1 Replies
View Related
Oct 12, 1999
I did setup to have a Desktop SQL Server running on Windows NT workstation in a different domain across the internet create a pull subscription to a transaction publication that is immediate updating that I have published on my NT SERVER in my domain. It never got any further than creating the subscription -- I got the following error on the pull:shared agent job history:
The job failed unable to determine if the owner (domainusername) of job
SQLServername-databasename-pubname-SQLServername2-databasename2 - 0 has server access (reason: Could not obtain information about Windows NT group/user 'othernameIdon'tunderstand'(SQLState 4200000) (Error 8198)
View 6 Replies
View Related
Sep 14, 1999
I have a question:
I want to be able to do bi-directional transaction based replication
between a 7.0 SQL server running on Windows NT 4.0 server SP5 and an NT Workstation 4.0 SP5. Can this be done or would it require that both
machines to be NT Server based? The reason I asked is because previously under 6.5 I was able to install the SQL operating system on Windows NT Workstation and now it looks like I can only install the Desktop version under 7.0. Will this give me the type of replication I am looking for?
View 1 Replies
View Related
Dec 14, 2006
Hello, I'm newbie in replication field. At the moment, I am able to setup replication on LAN (1 distributor to few subcribers). However, I found some difficulties on setting-up the replication on WAN. Is there any guidelines, setup documents or examples (like print screen) for me to refer to ? Hope able to get any assistance at here.
Best Regards,
Hans
View 6 Replies
View Related
Jan 19, 2007
I am setting up 2005 Transacational Replication on a database that was created on SQL 2000. There are 1400 articles (tables, views, sp and functions). It takes 2.5 hours to create the snapshot. Then, once the distribution errors gets its first error, it keeps retrying and getting the same error. Q1: Can I tell it to record the error but keep going? Q2: How do I stop the distribution agent once it gets in the this state? I have been deleting the publication but that seems like overkill.
I am trying to figure out a more efficient way to identify all the articles that are going to get errors. Is there any way to test the articles to see which ones will get an error? My current process takes a long time just to identify one error (since I have to create the snapshot each time).
Linda
View 7 Replies
View Related
Mar 14, 2007
I am trying to create a new transactional publication between two Sql 2005 servers. This is my first attempt with replication in 2005, so i have obviously missed something in the setup. Each time i try to create the new puplication i receive the following error.
Any help is greatly appreciated
TITLE: New Publication Wizard
------------------------------
SQL Server could not configure 'DTS-70P40LT2Y0A' as a Distributor.
------------------------------
ADDITIONAL INFORMATION:
Property LoginSecure cannot be changed or read after a connection string has been set. (Microsoft.SqlServer.ConnectionInfo)
------------------------------
BUTTONS:
OK
------------------------------
View 2 Replies
View Related
Sep 20, 1999
Sorry for the previous mail.. Didnt mean to send it like that..
I have a question about replication. I have created the destination machine as the subscriber, where I created a pull subscribtion and tried to replicate I got this error.
"Subscriber must be running in perseat license moe to use this."
The cd I used to install MSSQL 7.0 is the msdn back office test platform. Where am I going wrong??/ because I never got to specify the per seat license anywhere..
The documentation says that If I can have it installed on a 95/98 box then it means I have a perseat licesne, which I was able to do..
Any any help is appreciated!!
TIA
JOsh
View 5 Replies
View Related
Jun 12, 2007
I have a Windows Mobile aplication that uses merge replication to synchronize between sql compact and full sql Enterprise edition and It works great. Instantiating the SqlCeReplication object setting it's properties and calling Synchronize on it is pretty simple assuming everything is setup properly at the publisher.
For the life of me I can't figure out how to do this on the desktop (Programatically setup a subscription and create a database using objects in the System.Replication Namespace and hopefully call Synchronize on it).
Someone please point me in the right direction.
Thanks,
Patrick
View 2 Replies
View Related
Dec 4, 2004
We have a setup with one Publisher Server and 15 Subscribers with merge replication configured for all subscribers. The current Database size is approximately 3 GB expected to grow to 10 GB in next 1 year. We wanted to know what benefits would we incur if we add an additional seperate distributor server (hardware box). Also, what is the approx. size of a database where a seperate distributor server (hardware box) is recommended.
Thanks in advance
View 4 Replies
View Related
Mar 20, 2007
Hello,
I setup the transactional replication to replicate remote database that has 50 tables.
Two of the tables with huge columns.
I splitted the columns by creating several views before running the initial snapshot.
Questions:
1. Can the database replication copy the views.?
2. Where the view will be stored at the subscriber database?
Thank you.
Edwin
View 3 Replies
View Related
Sep 28, 2004
I am using two windows 2000(SP4) server box for Sql server 2000(SP3a) replication wit following methods-
1.ISDN Dialup line with NT1 terminator at both end.
2.Create Dialup from one computer.
3.Create RAS with static IP Address at second computer (Dial in) for acceptance of dialing.
4.Dialing from one place to another computer and get connection by dialup.
5.I can ping only Remote IP (RAS STATIC) Address at both end.
Try to registered SQL Server 2000 from dial place or dial in place got following errors-
Specify Sql server not found, Connection Open Connected()
What I am missing in setup of windows or Sql server 2000 or any hard component, let me help. Is the any need of physical router.
Thanking You
R.Mall
View 1 Replies
View Related
Sep 30, 2004
I am using two windows 2000(SP4) server box for Sql server 2000(SP3a) replication wit following methods-
1. ISDN Dialup line with NT1 terminator at both end.
2. Create Dialup from one computer.
3. Create RAS with static IP Address at second computer (Dial in) for acceptance of dialing.
4. Dialing from one place to another computer and get connection by dialup.
5. I can ping only Remote IP (RAS STATIC) Address at both end.
Try to registered SQL Server 2000 from dial place or dial in place got following errors-
Specify Sql server not found, Connection Open Connected()
What I am missing in setup of windows or Sql server 2000 or any hard component, let me help. Is the any need of physical router.
Dear Pat Phelan Sir
Resident Curmudgeon
Lot of thanks to you for your valuable suggesion, I did do whatever you suggested prior to his emal but not yet got solution
I am using port 1430 for a server and 1440 for b server.
How I can open my case with MS-PSS (Microsoft Professional Support Services), I didn't find any rool for unregistered users.
Thanking You
R.Mall
View 10 Replies
View Related
Jan 3, 2007
Not sure if this is the right place, but ill give it a try.. Everytime i try to make a websync for my replications i get this error and then it rolls back everything:
===================================
The operation completed successfully. (Exception from HRESULT: 0x80070000) (mscorlib)
------------------------------
Program Location:
at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode, IntPtr errorInfo)
at Microsoft.Win32.Security.Win32Helpers.UnsafeSetNamedSecurityInfo(String objectName, SE_OBJECT_TYPE objectType, SECURITY_INFORMATION securityInfo, Sid sidOwner, Sid sidGroup, Dacl dacl, Sacl sacl)
at Microsoft.Win32.Security.Win32Helpers.AddEveryoneToShare(String share)
at Microsoft.Win32.Security.Win32Helpers.GetNamedSecurityInfo(String objectName, SE_OBJECT_TYPE objectType, SECURITY_INFORMATION securityInfo, Sid& sidOwner, Sid& sidGroup, Dacl& dacl, Sacl& sacl, SecurityDescriptor& secDesc)
at Microsoft.Win32.Security.SecurityDescriptor.GetNamedSecurityInfo(String objectName, SE_OBJECT_TYPE objectType, SECURITY_INFORMATION securityInfo)
at Microsoft.SqlServerCe.ConnWiz.ConnWiz.SetNTFSPermissions(String userName, String path, AccessType permissions, SE_OBJECT_TYPE objectType, AceFlags inheritance, NamedObjectType namedObjectType, Boolean isExplicit, Int32 actionNumber)
As far as i can see it says "successfully" but it comes up as an error.. Anyone seen this before?
View 1 Replies
View Related
Oct 7, 2015
I have created two user defined functions for encryption and decryption using passphrase mechanism. When I call encryption function, each time I am getting the different values for the same input. While I searching a particular value, it takes long time to retrieve due to calling decryption function for each row.
best way to encrypt and decrypt using user defined functions.Below is the query which is taking long time.
SELECT ID FROM table WITH (NOLOCK)
WHERE dbo.DecodeFunction(column) = 'value'
When I try to use symetric or asymetric encryption, I am not able to put "OPEN SYMETRIC KEY" code in a function. So, I am using PassPhrase mechanism.
View 3 Replies
View Related
May 29, 2001
Hi,
I have created a DTS package on my SQL 7.0 SP3 server which simply reads a table on another SQL 7.0 server and populates a local table with the information that has been read.
Whenever I try to execute the DTS package (via Run or scheduling it) I get the following error:
-------------------------------------------------------------------------
... DTSRun: Executing... DTSRun OnStart: Delete from Table [AfterSalesAccessories].[dbo].[model_derivative] Step DTSRun OnError: Delete from Table [AfterSalesAccessories].[dbo].[model_derivative] Step, Error = -2147217887 (80040E21) Error string: The property 'Use Encryption for Data' is not supported. Error source: Microsoft Data Transformation Services (DTS) Package
-------------------------------------------------------------------------
I have not selected the encryption option and can't see what I'm doing wrong.
Has anybone else seen this ? I've looked on Technet but no joy.
Thanks,
Tim
View 2 Replies
View Related
Feb 23, 2001
Hi,
I've recently started to get the following error on DTS packages that have been newly written and have been scheduled to run:
DTSRun: Loading... DTSRun: Executing... DTSRun OnStart: DTSStep_DTSExecuteSQLTask_1 DTSRun OnError: DTSStep_DTSExecuteSQLTask_1, Error = -2147217887 (80040E21) Error string: The property 'Use Encryption for Data' is not supported.
No passwords have been used to save the paskages nor am I aware of setting any encryption options.
I'm running SQL server 7.0 Sp3.
Any ideas
Thanks
Rob Walker
View 2 Replies
View Related
Jul 7, 2004
Hi
I am new to Sql server and had just finished the MErge Replication setup on one of the PRoduction server. Today I got the request to change one of the Datatype of one the Published Article. Please help as what are the correct step to make it happen. Is there any production downtime required and if yes , then how much.
Thanks in Advance
Sanjay
View 1 Replies
View Related
Jul 9, 2014
We have a vendor that is exposing our database via a High Availability replica. They are geographically far away from us though so we would like to extract portions of the database over to our side for our reporting /warehousing purposes. I was curious if it is possible to setup snapshot replication on a high availability group?
View 0 Replies
View Related
Jul 30, 2014
I have a setup of transaction replication between one publisher and subscriber in the Same server.Now, I need to add a new subscriber to the existing publisher. So publisher database name is DB_A and Subscriber 1 name is DB_B. So the new subscriber will be DB_C. Is this kind of setup possible on one server?
If yes then at the time of reinitialization is it going to apply the snapshot on DB_B as well as DB_C?Also let say if due to disk error DB_B gets corrupted then will data be still replicated between DB_A and DB_C? (Assuming publisher, subscriber 1 and 2 are sitting on individual disks).
View 1 Replies
View Related
Aug 12, 2014
Is there any method to setup table replication between you sql server express?
View 3 Replies
View Related
Dec 4, 2006
Hi all,
I am setting up the replication with the scripts which used to setup in MSSQL2005 (non-cluster server). After I run the script and start the snapshot agent, log agent or distributed agent, it prompts,
Unable to start execution of step 2 (reason: Error authenticating proxy abc.comadmin9, system error: Logon failure: unknown user name or bad password.). The step failed.
abc.comadmin9 is the administrator for all cluster, mssql service and I am sure that the username and password is correct.
Any advise? Thanks in advance.
View 4 Replies
View Related
Jul 17, 2007
Hello
I have server "123456" SQL 2005 On clustered environment. I added permissions to snapshot folder, it is on sharing for both nodes.
I got error during the set up as:
Microsoft.SqlServer.ConnectionInfo
Additional Information:
An exception occurred while executing a TSQL or Batch(
Microsoft.SqlServer.ConnectionInfo)
An error occurred during the execution of xp_cmdshell. A call to "Create Process" failed with error code 5
Destination path d:Microsoft SQL ServerMSSQL.1MSSQLData is not Valid. Unable to list directory contents. Specify a valid destination path
Changed database context to 'master' (Microsoft SQL Server, Error 15121)
The datafolder exists, sql cluster service account from domain added in to snapshot folder, administrators access also on this folder.
Please advice how to troubleshoot this issues. Thanks, Jay
View 1 Replies
View Related
