Community
Vault Forum
Welcome to Autodesk’s Vault Forums. Share your knowledge, ask questions, and explore popular Vault topics.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

remote SQL - Backup Error

11 REPLIES 11
Reply
Message 1 of 12
dbarroco
3319 Views, 11 Replies

remote SQL - Backup Error

Hi,



when performing a backup i can't get trough.



It pop's the error attached.



I have in the required network share permissions for the user running sql (domain user) and the user running ADMS (a local). The network share exists on the host holding ADMS.



The error is about not being able to access the backup device due to security reasons.



Here's the last lines of the log if it would help.



(...)

25-02-2009 12:56:11 Connectivity.Application.VaultManager.ServiceException: Cannot open backup device '\\2k3-ps-01\autodeskvaultshare$\14a729f7-ad22-4586-8221-a65e86209cef\Teste_dbbak'. Operating system error 1265(The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you.).

BACKUP DATABASE is terminating abnormally. ---> System.Data.SqlClient.SqlException: Cannot open backup device '\\2k3-ps-01\autodeskvaultshare$\14a729f7-ad22-4586-8221-a65e86209cef\Teste_dbbak'. Operating system error 1265(The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you.).

BACKUP DATABASE is terminating abnormally.

(...)



(i gave full permissions on Everyone so i could eliminate this issue of the equation for now)



Thanks,

David
11 REPLIES 11
Message 2 of 12
dbarroco
in reply to: dbarroco

I changed the shared folder to one sitting in SQL Server. Went ok.

I'm still trying to figure this out, as it would be much preferrable if this shared folder could sit on ADMS seerver host and not on SQL host.


While i'm added to the backup/restore issues, is it mandatory to restore in order from the last full backup and the subsequent incrementals? I remember reading something about this, but i'm not sure where.

Thanks,

David
Message 3 of 12
Anonymous
in reply to: dbarroco


Hi David,

 

The issue was that the SQL server user lacked
access to the share [both the SQL user and the AutodeskVault user need access to
the share]. By moving the share to the SQL machine, access was given as a side
effect. If you want to host the share elsewhere, you will probably need to
change the SQL service user to one where you control the password [by default
SQL server runs as NetworkService which is a local machine account]. I don't
think 'everyone' access was enough since the sql server account is not on the
domain.

 

Regarding restore, you can point to the latest
incremental backup and [assuming the full backup and other increments were saved
in the same folder] ADMS will automatically locate the dependencies and restore
the backups in the correct order.

 

Hope this helps,

 

Paul Gunn
Message 4 of 12
dbarroco
in reply to: dbarroco

Hello Paul,

As for the backup restore order, thanks for the confirmation.

Regarding the permissions on the transaction folder, i indicated a domain user for the service account during set up (who's actually running the sql$autodesk service).

I understand exactly your explanation why this should work when pointin to a share in the sql server, but shouldn't my settings be working? (apparently not!!)

David

(PS: as for that impersonation matter we've spoked about earlier last week, can't say what it was, but's normal now)
Message 5 of 12
Anonymous
in reply to: dbarroco


Hi David,

 

Glad to hear the other issue fixed
itself.

 

I googled around for the error
face="Times New Roman" size=3>1265 (The system detected a possible attempt to
compromise security...) It is a pretty strange error. Sounds like it has
something to do with DNS / domain server settings. Here was one thread I ran
across:

 


 

It sounds like there may also be more information
in the Windows event log.

 

Paul
Message 6 of 12
dbarroco
in reply to: dbarroco

Hello Paul,

Thanks for the heads up. Appreciatte it.

I haven't had the time yet to take it from your link and explore it, but i will.

thanks

David
Message 7 of 12
dbarroco
in reply to: dbarroco

Would you by any chance have an idea why trying to restore to a specific location for the db's, i get an 'invalid folder name' for this value "D:\SQL_DATA" ?

The log just shouts this line.

Regards,

David
Message 8 of 12
Anonymous
in reply to: dbarroco


Not sure.. could you post the actual log
entry?
Message 9 of 12
dbarroco
in reply to: dbarroco

Hi Paul,

I don't have access to the log right now, but i can tell you it was as plain as i wrote; one single line:

"Invalid folder name: D:\SQL_DATA".

What i did was to restore to the default location, dettach the Vault, relocate to the desired folder and re-attach it.

Not conclusive, but worked ok for what i wanted to do.

Thanks,

David
Message 10 of 12
Anonymous
in reply to: dbarroco


Hi David,

 

I'm not sure why the folder wouldn't be recognized.
Is it possible that SQL server did not have permissions to the directory?

 

It sounds like you found a workaround so that is
good. I'll put an entry in the development pipeline to test out this scenario
and ensure it works correctly moving forward.

 

Paul
Message 11 of 12
Anonymous
in reply to: dbarroco


Just to follow up on this:

 

In a test I was able to generate a permissions
error by changing the folder ACLs, but it was pretty clearly a permissions
issue. Not 'invalid folder' or anything like that. So still not sure what the
cause of your issue might have been.

 

Paul

 

 
Message 12 of 12
dbarroco
in reply to: dbarroco

Hi,

I guessed that it could be a permissions issue, but the error message pointed to another way.

I'm not really sure what the permissions were, but since the instance (remote) was running as system, i guess that at least this user is contemplated in the permissions.

I'm guessing that wether you select a custom folder from the restore wizard, or when you're attaching directly, you're accessing the remote server with the sa credentials (sa?? probably the sa credentials grants you to access the remote folder tree with the user that's running the sql instance) that are the same in either case.

I'd have to test it, but in this situation as it was on a costumer, that's one of those things that probably will pass by 😉

Thanks for the replies though.

Have a good weekend

David

Can't find what you're looking for? Ask the community or share your knowledge.

Post to forums  

Autodesk Design & Make Report