x

SQL Replication on a cluster: Error authenticating proxy

I have been attempting to create a snapshot of a database (in SQL Server 2005 in cluster).

The snapshot appears to create ok, but when I view snapshot agent status I get the following error:

Unable to start execution of step 2 (reason: Error authenticating proxy MYDOMAIN\REPUSER, system error: Logon failure: unknown user name or bad password.). The step failed.

If we ran Snapshot Agent as the SQL Agent Account (the cluster service), then the snapshot created correctly. But when we ran Snapshot Agent with MYDOMAIN\REPUSER (this domain user is member of the db_owner fixed database role in the distribution database and have write permissions on the snapshot share) then the snapshot failed and we get the previous error.

I have can see some posible solution to my problem. The last was that trusting SQL Server Agent account for delegation i could solve the problem (configuring in Active Directory and trusting it for Kerberos delegation). But i don't know how i can add delegation for SQL Server Agent services only (i only can see or add SQL Services but not SQL Server Agent services).

Someone could help me? How i can configure Snapshot Agent account with a domain user? (i test it in a non cluster environment and there are not any problem. The problem are in a cluster environment. I can't find any document to do it.)

Many thanks.

more ▼

asked Nov 10, 2009 at 07:40 AM in Default

avatar image

ico
11 1 1 3

(comments are locked)
10|1200 characters needed characters left

5 answers: sort voted first

make sure that server account is member of windows group. I can't recall but when u install sql it creates local group account on that machine you can check in manage --> user / groups. its something like mssqluse.... ad it in browser and agent group also. can u log in to that machine using that account you used for replication. i am assuming u are using virtual server name, virtual ip address. that account should be in sql admin group. try it

more ▼

answered Jan 20, 2010 at 05:03 PM

avatar image

umar
36 2 1

(comments are locked)
10|1200 characters needed characters left

Have you tried setting the proxy permissions for the service account?

http://msdn.microsoft.com/en-us/library/ms187338.aspx

more ▼

answered Nov 10, 2009 at 07:37 PM

avatar image

sp_lock
10.8k 27 37 37

(comments are locked)
10|1200 characters needed characters left

In this moment the service account is a member of sysadmin server role (members of sysadmin server role are allowed to use any proxy).

Any other idea to solve my problem?

Many thanks in advance.

more ▼

answered Nov 11, 2009 at 04:37 AM

avatar image

DDBB_Admin
21

(comments are locked)
10|1200 characters needed characters left

A long shot but, can you log on interactively as the proxy account and see if you have write permissions to the replication folder? Perhaps the account does not have permissions to write the files out?

more ▼

answered Nov 11, 2009 at 07:30 AM

avatar image

Mark Allison
479 1 3 8

(comments are locked)
10|1200 characters needed characters left

Hi Mark,

I test with MYDOMAIN\REPUSER as Snapshot Agent account where this user is a domain admin but i get the same error.

Someone could help me?

Many thanks.

more ▼

answered Nov 11, 2009 at 02:03 PM

avatar image

DDBB_Admin
21

(comments are locked)
10|1200 characters needed characters left
Your answer
toggle preview:

Up to 2 attachments (including images) can be used with a maximum of 524.3 kB each and 1.0 MB total.

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

SQL Server Central

Need long-form SQL discussion? SQLserverCentral.com is the place.

Topics:

x378

asked: Nov 10, 2009 at 07:40 AM

Seen: 6031 times

Last Updated: Nov 10, 2009 at 07:40 AM

Copyright 2018 Redgate Software. Privacy Policy