473,839 Members | 1,454 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

Cannot escalate to MSDTC when using CommitableTrans action class on

In short: I have an application using the CommittableTran saction class that
works fine when run locally, but does not escalate to MSDTC when deployed to
a Windows 2003 R2 server.

More Specifically:

I have a web service that saves data to a database. This service uses a
CommittableTran saction to decide when to Commit or Abort the underlying
transaction. When this service is run locally, or by someone in the "User"
group on the web server it works fine.

But if the service has been deployed to the web server, the following
happens:

1) If the user is in the "User" group on the web server, it still works fine
(this is not allowed in a production situation).

2) If a transaction does not need to be escallated to MSDTC, then it works
fine.

3) BUT - as soon as a transaction needs to be escalated to MSDTC and the
user is not in the "User" group on the server, the transaction fails

a) A trace on the database revealed that the first stored procedure call
succeeded, but each additional stored procedure call failed with an "Access
Denied to xyz stored procedure" (this is running the exact same stored
procedure that just succeeded)

b) Monitoring the MSDTC logs on the server shows that the transaction is
never actually escalated to MSDTC (no aborts, etc were logged) on the web
server unless the user is in the "User" group on the web server, then it
escalates (and works) as expected.

c) In the security logs, I am seeing Audit Failure's for the user trying
to run the app, there are 2 types: EventID 560, Category "Object Access",
Object Name: MSDTC, Object Type: "Service Object"; the second type is the
same except the Object Name: "ServicesActive ". From looking into these, it
looks more like they may be a side effect of the transaction not escalating
to MSDTC rather than the cause.

Does anyone know what permissions (or otherwise) may be preventing
transactions from escalating to MSDTC???

I am using Delegation from a Windows front-end through a web service on a
Windows 2003 server back to a SQL Server 2005 DB.

Any help would be greatly appreciated.

Jun 25 '07 #1
3 2935

"abayer" <ab****@discuss ions.microsoft. comwrote in message
news:3F******** *************** ***********@mic rosoft.com...
In short: I have an application using the CommittableTran saction class
that
works fine when run locally, but does not escalate to MSDTC when deployed
to
a Windows 2003 R2 server.

More Specifically:

I have a web service that saves data to a database. This service uses a
CommittableTran saction to decide when to Commit or Abort the underlying
transaction. When this service is run locally, or by someone in the
"User"
group on the web server it works fine.

But if the service has been deployed to the web server, the following
happens:

1) If the user is in the "User" group on the web server, it still works
fine
(this is not allowed in a production situation).

2) If a transaction does not need to be escallated to MSDTC, then it works
fine.

3) BUT - as soon as a transaction needs to be escalated to MSDTC and the
user is not in the "User" group on the server, the transaction fails

a) A trace on the database revealed that the first stored procedure call
succeeded, but each additional stored procedure call failed with an
"Access
Denied to xyz stored procedure" (this is running the exact same stored
procedure that just succeeded)

b) Monitoring the MSDTC logs on the server shows that the transaction is
never actually escalated to MSDTC (no aborts, etc were logged) on the web
server unless the user is in the "User" group on the web server, then it
escalates (and works) as expected.

c) In the security logs, I am seeing Audit Failure's for the user trying
to run the app, there are 2 types: EventID 560, Category "Object Access",
Object Name: MSDTC, Object Type: "Service Object"; the second type is the
same except the Object Name: "ServicesActive ". From looking into these,
it
looks more like they may be a side effect of the transaction not
escalating
to MSDTC rather than the cause.

Does anyone know what permissions (or otherwise) may be preventing
transactions from escalating to MSDTC???

I am using Delegation from a Windows front-end through a web service on a
Windows 2003 server back to a SQL Server 2005 DB.

Any help would be greatly appreciated.
So why can't you use a generic user-id and psw in your application that has
the power, instead of using User groups and Windows authentication in both
cases the Web server and SQL server?

Jun 25 '07 #2
That would be nice, but I was given the requirement from high above to use
Windows Integrated security all the way through to the SQL Server.

Andy
"Mr. Arnold" wrote:
>
"abayer" <ab****@discuss ions.microsoft. comwrote in message
news:3F******** *************** ***********@mic rosoft.com...
In short: I have an application using the CommittableTran saction class
that
works fine when run locally, but does not escalate to MSDTC when deployed
to
a Windows 2003 R2 server.

More Specifically:

I have a web service that saves data to a database. This service uses a
CommittableTran saction to decide when to Commit or Abort the underlying
transaction. When this service is run locally, or by someone in the
"User"
group on the web server it works fine.

But if the service has been deployed to the web server, the following
happens:

1) If the user is in the "User" group on the web server, it still works
fine
(this is not allowed in a production situation).

2) If a transaction does not need to be escallated to MSDTC, then it works
fine.

3) BUT - as soon as a transaction needs to be escalated to MSDTC and the
user is not in the "User" group on the server, the transaction fails

a) A trace on the database revealed that the first stored procedure call
succeeded, but each additional stored procedure call failed with an
"Access
Denied to xyz stored procedure" (this is running the exact same stored
procedure that just succeeded)

b) Monitoring the MSDTC logs on the server shows that the transaction is
never actually escalated to MSDTC (no aborts, etc were logged) on the web
server unless the user is in the "User" group on the web server, then it
escalates (and works) as expected.

c) In the security logs, I am seeing Audit Failure's for the user trying
to run the app, there are 2 types: EventID 560, Category "Object Access",
Object Name: MSDTC, Object Type: "Service Object"; the second type is the
same except the Object Name: "ServicesActive ". From looking into these,
it
looks more like they may be a side effect of the transaction not
escalating
to MSDTC rather than the cause.

Does anyone know what permissions (or otherwise) may be preventing
transactions from escalating to MSDTC???

I am using Delegation from a Windows front-end through a web service on a
Windows 2003 server back to a SQL Server 2005 DB.

Any help would be greatly appreciated.

So why can't you use a generic user-id and psw in your application that has
the power, instead of using User groups and Windows authentication in both
cases the Web server and SQL server?

Jun 26 '07 #3

"abayer" <ab****@discuss ions.microsoft. comwrote in message
news:9A******** *************** ***********@mic rosoft.com...
That would be nice, but I was given the requirement from high above to use
Windows Integrated security all the way through to the SQL Server.
And high above don't seem to know how things work.

3) BUT - as soon as a transaction needs to be escalated to MSDTC and the
user is not in the "User" group on the server, the transaction fails

You're not coming around that. Either the userid of the Windows user has to
be authenticated or you implement a generic userid that can be used by your
application.

Jun 26 '07 #4

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

1
8192
by: KO | last post by:
SQL Server Enterprise Manager could not start the service 'MSDTC' on server 'NTAS21'. 1722 - (The RPC server is unavailable) I Setup A publication on a server called NTAS4D, then Pushed The Subscription to another server called NTAS21. If I configure so that the changes at the subscriber are not replicated to the publisher, all works ok, I make a change at the publisher, it is replicated to the subscriber.
0
3742
by: Gary | last post by:
All, I am experiencing an error using MSDTC with SQL Server 2000 on Windows 2003 server. The code in question is a stored procedure that does a query within a transaction using linked servers. The code worked perfectly well on NT 4 w/ SQL Server 2000. Running the same code on Windows 2003 produces the following error: The operation could not be performed because the OLE DB provider 'SQLOLEDB' was unable to begin a distributed...
1
1822
by: JIMMIE WHITAKER | last post by:
I'm using msde. On the little icon in task tray, you have under current service, a choice of mssqlserver, and another choice is msdtc. What is msdtc? And what is sqlserver agent?
2
15860
by: Vencz Istv?n | last post by:
I have a web application installed on Windows 2003 Standard Edition with SP1, it accesses a SQL Servet 2000 database installed on Windows 2000 Server, the two computers are not in the same domain. The web application uses ASP pages and COM+ components written in VB6. After the installation of SP1 for Windows 2003 the application does not work anymore (before the installation of SP1 it worked without problems). The following error occurs:...
1
2195
by: MarcoB | last post by:
I am trying to use Microsoft Distributed Processing and I am getting the following error. "There is no MTS objectcontext " I have SQL MSDTC loaded on my PC. I have added the code below: Any ideas ?? Tks. ------------------------------------ Imports System.EnterpriseServices
6
3049
by: =?Utf-8?B?ZXhl?= | last post by:
Hi, I'm using TransactionScope to do a serie Insert, Update, Delete operations with the ExecuteNonQuery and some Selects with ExecuteScalar everything works fine with multiple connections in the same scope. Problem is that when i do two Selects with ExecuteReader (to fill datasets) it shows the folowing error: Network access for Distributed Transaction Manager (MSDTC) has been disabled. Please enable DTC for network access in the...
6
2013
by: =?Utf-8?B?UGF1bCBQcmV3ZXR0?= | last post by:
Hi - I have 4 webservers in my webfarm. All Win2k3 web edition. Before yesterday, none of them were service packed. I have now applied SP2 to two of them, and I'm getting a very weird MSDTC error on them now. The error occurs when I attempt a series of SQL statements wrapped in a TransactionScope(). It's executing against a different server, so this is where it's elevated to a distributed transaction.
5
2019
by: =?Utf-8?B?QmlsbHkgWmhhbmc=?= | last post by:
I have two web server, one DB server with two Database. I used MS enterprise transaction with transfaction scope. How to config MSDTC between the web server and DB to make it work? any document? Thanks, -Billy
1
2170
by: =?Utf-8?B?QmlsbHkgWmhhbmc=?= | last post by:
I have a web server 32 bit and SQL server 2005 64bit . Does msdtc support SQL server 2005 64bit with web server 32 bit?
0
9855
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, weíll explore What is ONU, What Is Router, ONU & Routerís main usage, and What is the difference between ONU and Router. Letís take a closer look ! Part I. Meaning of...
0
9697
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
0
10908
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
0
10586
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
0
10293
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
0
7017
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
5866
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
1
4484
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
3
3134
bsmnconsultancy
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.