IC SunsetThe developerWorks Connections platform will be sunset on December 31, 2019. On January 1, 2020, this forum will no longer be available. More details available on our FAQ.
Topic
  • 9 replies
  • Latest Post - ‏2014-07-15T13:30:36Z by Niraj Kumar Mishra
jpeppers91
jpeppers91
155 Posts

Pinned topic Use Windows session credentials failing

‏2013-11-11T20:49:53Z |

Receive an error when trying to connect using this option.  Here is the error message....

 

 

Failed to connect to https://server:24439: Windows Error 80090303: The specified target is unknown or unreachable.  Any ideas?

 

jp

 

 

  • NoahSalzman
    NoahSalzman
    217 Posts

    Re: Use Windows session credentials failing

    ‏2013-11-11T22:14:42Z  

    What OS and service pack is the Console running on (Win7, 2003, 2008, etc.)? Does it fail on all machines? What version of IEM server and console

    And, from the manual, is all of this correct in your environment:

     

    The server must be joined to a domain (Active Directory only) and have validated write to service principal name (SPN) for SELF set to Allow. If other users will be running the service, the server must also have write permissions for them. The service must be run as the Local System or domain user that has Administrative rights on the computer.

  • jpeppers91
    jpeppers91
    155 Posts

    Re: Use Windows session credentials failing

    ‏2013-11-12T12:33:02Z  

    What OS and service pack is the Console running on (Win7, 2003, 2008, etc.)? Does it fail on all machines? What version of IEM server and console

    And, from the manual, is all of this correct in your environment:

     

    The server must be joined to a domain (Active Directory only) and have validated write to service principal name (SPN) for SELF set to Allow. If other users will be running the service, the server must also have write permissions for them. The service must be run as the Local System or domain user that has Administrative rights on the computer.

    Console is Win7 Sp1 and running 9.0.787 IEM on server and console.  Can you provide a link to the manual where this is located?

  • NoahSalzman
    NoahSalzman
    217 Posts

    Re: Use Windows session credentials failing

    ‏2013-11-12T15:45:07Z  

    Console is Win7 Sp1 and running 9.0.787 IEM on server and console.  Can you provide a link to the manual where this is located?

    http://pic.dhe.ibm.com/infocenter/tivihelp/v26r1/index.jsp?topic=%2Fcom.ibm.tem.doc_9.0%2FPlatform%2FConsole%2FConsoleAuthenticationUsingWindowsSessionCredentials.html

  • jpeppers91
    jpeppers91
    155 Posts

    Re: Use Windows session credentials failing

    ‏2014-07-14T14:02:53Z  

    I'm not understanding this fully.  Where do I check the service principal name for SELF?  Do I check the computer account for the server or the user accounts that are trying to login?  What is the service that should be run as Local System or domain user with admin rights.

     

     

     

     

  • Niraj Kumar Mishra
    Niraj Kumar Mishra
    16 Posts

    Re: Use Windows session credentials failing

    ‏2014-07-15T08:19:36Z  

    I'm not understanding this fully.  Where do I check the service principal name for SELF?  Do I check the computer account for the server or the user accounts that are trying to login?  What is the service that should be run as Local System or domain user with admin rights.

     

     

     

     

    Hi,

    Can you please share the screenshot of services.msc from your IEM server ? Seems either your besroot service is running under some domain id or some other id? If it is domain id then it should must be the member of local administrator group else services should run under the Local System.

     

    Thanks

    Niraj

  • jpeppers91
    jpeppers91
    155 Posts

    Re: Use Windows session credentials failing

    ‏2014-07-15T11:02:33Z  

    Hi,

    Can you please share the screenshot of services.msc from your IEM server ? Seems either your besroot service is running under some domain id or some other id? If it is domain id then it should must be the member of local administrator group else services should run under the Local System.

     

    Thanks

    Niraj

    The account that is running the BESROOT service and  is a domain account and the account is in the administrators group of the box.

  • jpeppers91
    jpeppers91
    155 Posts

    Re: Use Windows session credentials failing

    ‏2014-07-15T12:54:00Z  

    The account that is running the BESROOT service and  is a domain account and the account is in the administrators group of the box.

    Does it matter if I'm running DSA?

     

  • Niraj Kumar Mishra
    Niraj Kumar Mishra
    16 Posts

    Re: Use Windows session credentials failing

    ‏2014-07-15T13:19:23Z  

    Does it matter if I'm running DSA?

     

    Yes... Only FillDB should run under account that has SA privilege. Rest all other service needs to be run under local system account specially besroot service.

     

    Thanks

    Niraj

  • Niraj Kumar Mishra
    Niraj Kumar Mishra
    16 Posts

    Re: Use Windows session credentials failing

    ‏2014-07-15T13:30:36Z  

    Yes... Only FillDB should run under account that has SA privilege. Rest all other service needs to be run under local system account specially besroot service.

     

    Thanks

    Niraj

    Note: You have done similar setting on all DSA servers.