MS SQL Server OLAP - ADOMD.NET problem with Windows 2003 Server

Author

ADOMD.NET problem with Windows 2003 Server

Rolando Matarrita

2005-09-08, 9:24 am

Hello everyone!
I have an ASP.NET app that queries an olap cube via ADOMD.NET
Analysis Services and IIS are on the same machine. I have ADOMD.NET
installed, also have MSXML 4 SP2 Parser, and Analysis Services SP4. This
configuration has worked fine for me in the server running Windows 2003, and
it continues to work in Windows XP and Windows 2000 (other servers with the
same software configuration), but somehow it stopped working in the Win2K3
box. My application catches an exception when calling the ExecuteCellSet()
method, and returns the message "The cube 'Sales' does not exist, or it is
not processed" (and of course this is not true, I've checked the status in
AS Manager, queried the cube via MDX Sample application, MS Excel, OWC
PivotTable component and it answers perfectly).

Has anyone experienced the same problem? Is it a know issue? Is there a
workaround? Thanks in advance.

Rolando Matarrita

Dave Wickert [MSFT]

2005-09-08, 11:24 am

Within your ASP.NET application, what kind of security configuration do you
have on the virtual directory? IF you are using NTLM and there are 3
machines involved (client, IIS, and AS server) then you have ran into the NT
limitation of only allowing NT credentials to be delegated once (the
so-called one-hop problem). What is happening is that when you connection
comes into the Win2K3 machine, it drops down to NT Authority\Anonymous and
Win2K3 has a setting which tells it whether or not the anonymous account is
part of the "Everyone" group. The default changed from Win2K to Win2K3 -- it
was part of Everyone with Win2K but is not part of Everyone in Win2K3. Thus
by the time AS gets the request, it is correctly reporting that you don't
have access to that cube.
--
Dave Wickert [MSFT]
dwickert@online.microsoft.com
Program Manager
BI Systems Team
SQL BI Product Unit (Analysis Services)
--
This posting is provided "AS IS" with no warranties, and confers no rights.

"Rolando Matarrita" <rmatarrita@ic-itcr.ac.cr> wrote in message
news:%23YXRWDItFHA.2492@tk2msftngp13.phx.gbl...
> Hello everyone!
> I have an ASP.NET app that queries an olap cube via ADOMD.NET
> Analysis Services and IIS are on the same machine. I have ADOMD.NET
> installed, also have MSXML 4 SP2 Parser, and Analysis Services SP4. This
> configuration has worked fine for me in the server running Windows 2003,
> and
> it continues to work in Windows XP and Windows 2000 (other servers with
> the
> same software configuration), but somehow it stopped working in the Win2K3
> box. My application catches an exception when calling the ExecuteCellSet()
> method, and returns the message "The cube 'Sales' does not exist, or it is
> not processed" (and of course this is not true, I've checked the status in
> AS Manager, queried the cube via MDX Sample application, MS Excel, OWC
> PivotTable component and it answers perfectly).
>
> Has anyone experienced the same problem? Is it a know issue? Is there a
> workaround? Thanks in advance.
>
> Rolando Matarrita
>
>

Rolando Matarrita

2005-09-08, 1:25 pm

I have both Anonymous Access (with <machine name>\IUSR_<machine name> as the
account) and Windows Integrated Security enabled in the IIS application
folder.
I have only one machine involved that has IIS and AS, the client is out of
the question because the ASP.NET sends raw html with the query results.
ASPNET is member of the OLAP Administrators group, and as you mentioned, the
cube has a role for the "Everyone" group. The funny thing is that this had
been working fine, until some days ago.
I recently installed some hotfixes, but I cannot determine a cause-effect
relation between these hotfixes and the problem, and I can't uninstall them
since I have to stick to corporate security policies.
But here's the list anyway, in case someone knows anything:
Operating Sistem = WINDOWS SERVER 2003
========= MS05-039 for Windows Server 2003 (KB899588) has been Installed
=======
========= MS05-040 for Windows Server 2003 (KB893756) has been Installed
=======
========= MS05-041 for Windows Server 2003 (KB899591) has been Installed
=======
========= MS05-042 for Windows Server 2003 (KB899587) has been Installed
=======
========= MS05-043 for Windows Server 2003 (KB896423) has been Installed
=======
********* Internet Explorer 6.0 has been detected in this server. *******
========= MS05-038 for Windows Server 2003 (KB896727) has been Installed
=======

Thanks

Rolando

"Dave Wickert [MSFT]" <dwickert@online.microsoft.com> wrote in message
news:eZTX%233ItFHA.1444@TK2MSFTNGP10.phx.gbl...
> Within your ASP.NET application, what kind of security configuration do
you
> have on the virtual directory? IF you are using NTLM and there are 3
> machines involved (client, IIS, and AS server) then you have ran into the
NT
> limitation of only allowing NT credentials to be delegated once (the
> so-called one-hop problem). What is happening is that when you connection
> comes into the Win2K3 machine, it drops down to NT Authority\Anonymous and
> Win2K3 has a setting which tells it whether or not the anonymous account
is
> part of the "Everyone" group. The default changed from Win2K to Win2K3 --
it
> was part of Everyone with Win2K but is not part of Everyone in Win2K3.
Thus
> by the time AS gets the request, it is correctly reporting that you don't
> have access to that cube.
> --
> Dave Wickert [MSFT]
> dwickert@online.microsoft.com
> Program Manager
> BI Systems Team
> SQL BI Product Unit (Analysis Services)
> --
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
>
> "Rolando Matarrita" <rmatarrita@ic-itcr.ac.cr> wrote in message
> news:%23YXRWDItFHA.2492@tk2msftngp13.phx.gbl...
Win2K3[color=darkred
]
ExecuteCellSet()[col
or=darkred]
is[color=darkred]
in[color=darkred]
>
>

Rolando Matarrita

2005-09-20, 1:24 pm

Hello.

I know I shouldn't post without testing what it is the mos probable cause of
the problem, but I have limited hardware and software resources as for
installing a new server and testing the patches one by one to see which one
caused the reports to cease working. But maybe, just maybe, someone has had
the same problem and can help me find the solution. After installing these
patches, my ADOMD.NET app started to fail:

MS05-039 for Windows Server 2003 (KB899588) has been Installed

MS05-040 for Windows Server 2003 (KB893756) has been Installed

MS05-041 for Windows Server 2003 (KB899591) has been Installed

MS05-042 for Windows Server 2003 (KB899587) has been Installed

MS05-043 for Windows Server 2003 (KB896423) has been Installed

********* Internet Explorer 6.0 has been detected in this server. *******

MS05-038 for Windows Server 2003 (KB896727) has been Installed

Any help is greatly appreciated, since the only available solution right now
is a re-write of the application.

Regards

Rolando

"Rolando Matarrita" <rmatarrita@hotmail.com> wrote in message
news:eedBeCKtFHA.2212@TK2MSFTNGP15.phx.gbl...
> I have both Anonymous Access (with <machine name>\IUSR_<machine name> as
the
> account) and Windows Integrated Security enabled in the IIS application
> folder.
> I have only one machine involved that has IIS and AS, the client is out of
> the question because the ASP.NET sends raw html with the query results.
> ASPNET is member of the OLAP Administrators group, and as you mentioned,
the
> cube has a role for the "Everyone" group. The funny thing is that this had
> been working fine, until some days ago.
> I recently installed some hotfixes, but I cannot determine a cause-effect
> relation between these hotfixes and the problem, and I can't uninstall
them
> since I have to stick to corporate security policies.
> But here's the list anyway, in case someone knows anything:
> Operating Sistem = WINDOWS SERVER 2003
> ========= MS05-039 for Windows Server 2003 (KB899588) has been Installed
> =======
> ========= MS05-040 for Windows Server 2003 (KB893756) has been Installed
> =======
> ========= MS05-041 for Windows Server 2003 (KB899591) has been Installed
> =======
> ========= MS05-042 for Windows Server 2003 (KB899587) has been Installed
> =======
> ========= MS05-043 for Windows Server 2003 (KB896423) has been Installed
> =======
> ********* Internet Explorer 6.0 has been detected in this server.
*******
> ========= MS05-038 for Windows Server 2003 (KB896727) has been Installed
> =======
>
> Thanks
>
> Rolando
>
> "Dave Wickert [MSFT]" <dwickert@online.microsoft.com> wrote in message
> news:eZTX%233ItFHA.1444@TK2MSFTNGP10.phx.gbl...
> you
the[color=darkred]
> NT
connection[color=dar
kred]
and[color=darkred]
> is
Win2K3 --[color=darkred]
> it
> Thus
don't[color=darkred]

> rights.
This[color=darkred]
2003,[color=darkred]

with[color=darkred]
> Win2K3
> ExecuteCellSet()
it[color=darkred]
> is
status[color=darkred
]
> in
a[color=darkred]
>
>

Sponsored Links