SQL Offload to other machine and permissions

[TheScarfedOne]

Hi Nick

 

Im having one of those days! Ive got SQL on a Cluster elsewhere on the system - so remind me how I would go about adding the IISAppPool permissions for accessing the HAP database?

[nickbro]

Ok scratch that, it wont work in a cluster.

 

In that case you would use a different SQL Connection string

 

Server=myServerAddress;Database=myDataBase;User Id=myUsername;Password=myPassword;

 

Create a SQL User in the cluster for HAP and tell HAP to use it

[TheScarfedOne]

Thanks Nick! Got that all in but im getting an odd error (once I got past the not being able to type!)

 

See the end of this message for details on invoking

just-in-time (JIT) debugging instead of this dialog box.

 

************** Exception Text **************

System.ArgumentException: Source Home Access Plus+ already exists on the local computer.

at System.Diagnostics.EventLog.CreateEventSource(EventSourceCreationData sourceData)

at System.Diagnostics.EventLog.CreateEventSource(String source, String logName)

at HAP.Logon.Tracker.Loading.api_ClearCompleted(Object sender, AsyncCompletedEventArgs e)

at HAP.Logon.Tracker.api.api.OnClearOperationCompleted(Object arg)

 

 

************** Loaded Assemblies **************

mscorlib

Assembly Version: 2.0.0.0

Win32 Version: 2.0.50727.5466 (Win7SP1GDR.050727-5400)

CodeBase: file:///C:/Windows/Microsoft.NET/Framework/v2.0.50727/mscorlib.dll

----------------------------------------

HAP Logon Tracker

Assembly Version: 4.0.0.0

Win32 Version: 4.0.0

CodeBase: file:///C:/Windows/System32/HAP%20Logon%20Tracker.exe

----------------------------------------

System.Windows.Forms

Assembly Version: 2.0.0.0

Win32 Version: 2.0.50727.5460 (Win7SP1GDR.050727-5400)

CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Windows.Forms/2.0.0.0__b77a5c561934e089/System.Windows.Forms.dll

----------------------------------------

System

Assembly Version: 2.0.0.0

Win32 Version: 2.0.50727.5466 (Win7SP1GDR.050727-5400)

CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System/2.0.0.0__b77a5c561934e089/System.dll

----------------------------------------

System.Drawing

Assembly Version: 2.0.0.0

Win32 Version: 2.0.50727.5462 (Win7SP1GDR.050727-5400)

CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Drawing/2.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll

----------------------------------------

System.Web.Services

Assembly Version: 2.0.0.0

Win32 Version: 2.0.50727.5420 (Win7SP1.050727-5400)

CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Web.Services/2.0.0.0__b03f5f7f11d50a3a/System.Web.Services.dll

----------------------------------------

System.Xml

Assembly Version: 2.0.0.0

Win32 Version: 2.0.50727.5420 (Win7SP1.050727-5400)

CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Xml/2.0.0.0__b77a5c561934e089/System.Xml.dll

----------------------------------------

System.Configuration

Assembly Version: 2.0.0.0

Win32 Version: 2.0.50727.5420 (Win7SP1.050727-5400)

CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Configuration/2.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll

----------------------------------------

iqjqpfwc

Assembly Version: 4.0.0.0

Win32 Version: 2.0.50727.5466 (Win7SP1GDR.050727-5400)

CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System/2.0.0.0__b77a5c561934e089/System.dll

----------------------------------------

Accessibility

Assembly Version: 2.0.0.0

Win32 Version: 2.0.50727.4927 (NetFXspW7.050727-4900)

CodeBase: file:///C:/Windows/assembly/GAC_MSIL/Accessibility/2.0.0.0__b03f5f7f11d50a3a/Accessibility.dll

----------------------------------------

 

************** JIT Debugging **************

To enable just-in-time (JIT) debugging, the .config file for this

application or computer (machine.config) must have the

jitDebugging value set in the system.windows.forms section.

The application must also be compiled with debugging

enabled.

 

For example:

 

 

When JIT debugging is enabled, any unhandled exception

will be sent to the JIT debugger registered on the computer

rather than be handled by this dialog box.

[nickbro]

Ok, that's an odd error message. Looks like the logon tracker is having issues on the client side. Make sure you run the exe with parameters not raw

[TheScarfedOne]

Hmmm.... was running "hap logon tracker.exe" logon https://servername:port/hap8 (running on port 444 as already got something on 443). The odd bit ofg the message is "Source Home Access Plus+ already exists on the local computer".... eh?!?!!?

[nickbro]

it may not like having the port defined

[TheScarfedOne]

If I drop the port reference out (which shouldnt work anyway - as the server isnt listening on that port) - it still throws the same .net framework error

[nickbro]

for some reason it doesn't like it at all, and I can't think why, apart from the port reference. I'll be because it can't find HAP+ to get the right info

[TheScarfedOne]

Hmmm. Could it be the whole basic auth thing that we did to get it to work behind tmg/isa rather than use the built in FBA? I vaguely remember we may have done some iis perms changes when we got it working on v7....

[TheScarfedOne]

Any ideas Nick what to do with basic auth, which we are using because HAP sits behind ISA for external access?

[nickbro]

It should work regardless of auth method if you are using a custom SQL Connection String with a user defined in it.

 

 

You may need to delete the Home Access Plus+ Event Source from the registry:

 

HKLM\System\CurrentControlSet\Services\EventLog

 

Delete any reference to Home Access Plus+ and try again

[TheScarfedOne]

Ahh.. found an entry hiding in there, and deleted it. It then ran ok, but didnt add anything to the database Running it again causes the same error too; as does running the logoff event. Ideas?

[nickbro]

None, it's very bizar

[TheScarfedOne]

A little bit more progress, I reset the permissions on the AppData folder and put the authentication to Anon (with using the AppPool identity) in IIS. The data doesnt make it into the XML file (ive gone back to XML while we troubleshoot)...

 

Anything or anywhere i can look? The registry entries get created each time on a logon command, which then causes the .net error above. Is there any way it can accept the port number?

 

Stuart

[nickbro]

I don't know it should be able to pick it up off the url that's used. Check the hapConfig.xml file that it's set to XML (in caps)

[TheScarfedOne]

Yep - thats in there correctly. Hmmm

[nickbro]

Odd, it must be doing some odd with the permissions. Can you try adding everyone to the hap folder, and everyone with write access to the app_data folder (not ideal)

[TheScarfedOne]

Progress...

 

An error occurred in the Logon Tracker

 

Error: The request failed with HTTP status 401: Unauthorized.

 

Is shown in the Windows Event log... eh??!!

[TheScarfedOne]

So, if the client is getting a 401 unauth, where do i need to be looking for the issue...?

[nickbro]

~/tracker/api.ashx/asmx

[TheScarfedOne]

Permissions to it need to be? I'm going to replace the files from the latest download too...

[TheScarfedOne]

Hmmm, no change on 8.7. Cant see where its getting upset; but still getting the 401 on the client.