| Author |
Message |
Edgar Polanco
Guest
|
 Posted:
Fri Oct 28, 2005 8:51 pm Post subject:
Access denied on client-server.. |
|
|
I'm trying to connect a HIS Server 2004 with a HIS Client 2004 but I'm just
stuck with some errors,
On the client side,
Event ID: 705
Source: SNA APPC Application
Description: Logon Failed.
EXPLANATION
Access denied on client-server or Distributed Link Service connection
request.
Access denied --- Error Code : 43
ERROR #1003: "SnaBase could not open a sponsor connection to server
Servername"
On the server side,
Event ID: 705
Source: SNA Server
Description: Logon Failed.
EXPLANATION
Access denied on client-server or Distributed Link Service connection
request.
Unknown user name or bad password from client Client name --- Error Code :
4097
I tried checking this, http://support.microsoft.com/kb/888478 but my server
services aren't using Local System account. So, I guess this is not the same
problem.
It could be probably something really "easy", but I just can't find out what
is wrong with my configuration.
Does anybody can help??
Regards and Thanks in advance, |
|
| Back to top |
|
 |
Neil Pike
Guest
|
| Posted:
Sun Oct 30, 2005 9:50 pm Post subject:
Re: Access denied on client-server.. |
|
|
Edgar - are you logged onto the client pc with a user account in the same
domain (or a trusted domain of) the HIS/SNA Server itself? (Logging on as a
local account is no good).
That's assuming the client snabase is running as an EXE. If SNABase is running
on the client machine as a service, then the above question applies to the
SNABase service account.
Neil Pike. Protech Computing Ltd
Microsoft SNA/HIS MVP |
|
| Back to top |
|
|
Edgar Polanco
Guest
|
| Posted:
Mon Oct 31, 2005 5:51 pm Post subject:
Re: Access denied on client-server.. |
|
|
Neil,
Do you know if there is a doc reference that I can read about this
configuration?
I'm no using domain right now, I'm using Workgroup and they are the same
one(client and server). Did I misunderstood something? What else could I be
doing wrong?
I also tried adding a new user to the client and server (with same username
& passwd). I changed the SnaBase Service(on Client side) to start with this
user, but on Server side I'm getting the following message since those
changes.
EXPLANATION
Access denied on client-server or Distributed Link Service connection
request.
Unknown user name or bad password from client UNKNOWN --- Error Code : 4097
The main difference is the "UNKNOWN" word instead of the PCCLIENTNAME.
On client side, when I try to open the SNA Manager, I'm also getting the
next message:
"Unable to open the Primary Host Integration Server SNA Configuration file"
"Okay to attempt opening a Backup Host Integration Server configuration in
read-only mode? (Ok - Cancel)"
Whenever I click the Ok button, I keep getting the same message.
Regards,
"Neil Pike" <neilpike@compuserve.com> wrote in message
news:VA.00006362.12479db5@compuserve.com...
| Quote: | Edgar - are you logged onto the client pc with a user account in the same
domain (or a trusted domain of) the HIS/SNA Server itself? (Logging on as
a
local account is no good).
That's assuming the client snabase is running as an EXE. If SNABase is
running
on the client machine as a service, then the above question applies to the
SNABase service account.
Neil Pike. Protech Computing Ltd
Microsoft SNA/HIS MVP
|
|
|
| Back to top |
|
|
Edgar Polanco
Guest
|
| Posted:
Mon Oct 31, 2005 9:51 pm Post subject:
Re: Access denied on client-server.. |
|
|
I tried searching the W2K server (with Search for Computers from win) where
SNA Server is installed. After logging to the server, I finally can open the
SNA Manager on my SNA Client. My issue now is that whenever I try to do an
APPC test or APING I got this error:
Allocate Primary RC: F004H
Allocate Secondary RC: 10000F0H
And also the following event logs:
Access denied on client-server or Distributed Link Service connection
request.
Unknown user name or bad password from client USERNAME --- Error Code : 4097
I tried enabling the Win2K Guest account on my Server but I'm still getting
the same error. I read about this in the link:
http://support.microsoft.com/default.aspx?scid=kb;en-us;148359
Regards, |
|
| Back to top |
|
|
Neil Pike
Guest
|
| Posted:
Mon Oct 31, 2005 9:51 pm Post subject:
Re: Access denied on client-server.. |
|
|
Edgar,
MS put a LOT of security effort into HIS2004 to lock it down and make it
secure by default. Possibly something has happened to make working in a
workgroup broken by default.
In the first instance, assuming you're testing at the moment, if you're going
to be in a domain in production, then I'd strongly recommend you to do the
testing in a domain as well.
Anyway, the account you're using at the moment, is it a member of HIS Client
users or HIS Admin users? (These groups should have been setup as part of the
install)? Make it a member of both and see if that helps.
| Quote: | I'm no using domain right now, I'm using Workgroup and they are the same
one(client and server). Did I misunderstood something? What else could I be
doing wrong?
I also tried adding a new user to the client and server (with same username
& passwd). I changed the SnaBase Service(on Client side) to start with this
user, but on Server side I'm getting the following message since those
changes.
EXPLANATION
Access denied on client-server or Distributed Link Service connection
request.
Unknown user name or bad password from client UNKNOWN --- Error Code : 4097
The main difference is the "UNKNOWN" word instead of the PCCLIENTNAME.
On client side, when I try to open the SNA Manager, I'm also getting the
next message:
"Unable to open the Primary Host Integration Server SNA Configuration file"
"Okay to attempt opening a Backup Host Integration Server configuration in
read-only mode? (Ok - Cancel)"
Whenever I click the Ok button, I keep getting the same message.
|
Neil Pike. Protech Computing Ltd
Microsoft SNA/HIS MVP |
|
| Back to top |
|
|
Edgar Polanco
Guest
|
| Posted:
Thu Nov 03, 2005 5:51 pm Post subject:
Re: Access denied on client-server.. |
|
|
Neil,
I already installed HIS 2004 server on a Win2000 Advanced Server with a
domain configured.
I logon with a HIS Client and HIS Admin user account. By now, I'm not
getting any event log errors on client or server.
Unfortanetly, whenever I try to use an APPC or CPIC application on the HIS
Client, I got always this on the ALLOCATE,
APPC ALLOCATE response, result = COMMS_SUBSYSTEM_NOT_LOADED
APPC Type:Sync VerbID:00014000
APPC ---- Verb Parameter Block at address 0006A248 ----
APPC 01000000 F0040000 010000F0 00000000 <....0......0....>
APPC 28972300 20982300 00010000 00000000 <(p#. q#.........>
................
Allocate Primary RC: F004H
Allocate Secondary RC: 10000F0H
My only possible clue is an information event log on the server,
Event ID:710
Enable Client/Server security.
Explanation:
Client "DOMAIN/user" connection is secured by data encryption.
Could this be the reason? What do you think?
Regards,
"Neil Pike" <neilpike@compuserve.com> wrote in message
news:VA.00006366.178a136f@compuserve.com...
| Quote: | Edgar,
MS put a LOT of security effort into HIS2004 to lock it down and make it
secure by default. Possibly something has happened to make working in a
workgroup broken by default.
In the first instance, assuming you're testing at the moment, if you're
going
to be in a domain in production, then I'd strongly recommend you to do the
testing in a domain as well.
Anyway, the account you're using at the moment, is it a member of HIS
Client
users or HIS Admin users? (These groups should have been setup as part of
the
install)? Make it a member of both and see if that helps.
I'm no using domain right now, I'm using Workgroup and they are the same
one(client and server). Did I misunderstood something? What else could I
be
doing wrong?
I also tried adding a new user to the client and server (with same
username
& passwd). I changed the SnaBase Service(on Client side) to start with
this
user, but on Server side I'm getting the following message since those
changes.
EXPLANATION
Access denied on client-server or Distributed Link Service connection
request.
Unknown user name or bad password from client UNKNOWN --- Error Code :
4097
The main difference is the "UNKNOWN" word instead of the PCCLIENTNAME.
On client side, when I try to open the SNA Manager, I'm also getting the
next message:
"Unable to open the Primary Host Integration Server SNA Configuration
file"
"Okay to attempt opening a Backup Host Integration Server configuration
in
read-only mode? (Ok - Cancel)"
Whenever I click the Ok button, I keep getting the same message.
Neil Pike. Protech Computing Ltd
Microsoft SNA/HIS MVP
|
|
|
| Back to top |
|
|
Charles Ezzell (MSFT)
Guest
|
| Posted:
Thu Nov 03, 2005 9:51 pm Post subject:
Re: Access denied on client-server.. |
|
|
Edgar,
Can you post your com.cfg file?
--
HTH,
Charles Ezzell
Microsoft
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of any included samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
"Edgar Polanco" <poledg@hotmail.com> wrote in message
news:eijmm%23I4FHA.252@TK2MSFTNGP15.phx.gbl...
| Quote: | Neil,
I already installed HIS 2004 server on a Win2000 Advanced Server with a
domain configured.
I logon with a HIS Client and HIS Admin user account. By now, I'm not
getting any event log errors on client or server.
Unfortanetly, whenever I try to use an APPC or CPIC application on the HIS
Client, I got always this on the ALLOCATE,
APPC ALLOCATE response, result = COMMS_SUBSYSTEM_NOT_LOADED
APPC Type:Sync VerbID:00014000
APPC ---- Verb Parameter Block at address 0006A248 ----
APPC 01000000 F0040000 010000F0 00000000 <....0......0....
APPC 28972300 20982300 00010000 00000000 <(p#. q#.........
...............
Allocate Primary RC: F004H
Allocate Secondary RC: 10000F0H
My only possible clue is an information event log on the server,
Event ID:710
Enable Client/Server security.
Explanation:
Client "DOMAIN/user" connection is secured by data encryption.
Could this be the reason? What do you think?
Regards,
"Neil Pike" <neilpike@compuserve.com> wrote in message
news:VA.00006366.178a136f@compuserve.com...
Edgar,
MS put a LOT of security effort into HIS2004 to lock it down and make it
secure by default. Possibly something has happened to make working in a
workgroup broken by default.
In the first instance, assuming you're testing at the moment, if you're
going
to be in a domain in production, then I'd strongly recommend you to do
the
testing in a domain as well.
Anyway, the account you're using at the moment, is it a member of HIS
Client
users or HIS Admin users? (These groups should have been setup as part
of
the
install)? Make it a member of both and see if that helps.
I'm no using domain right now, I'm using Workgroup and they are the
same
one(client and server). Did I misunderstood something? What else could
I
be
doing wrong?
I also tried adding a new user to the client and server (with same
username
& passwd). I changed the SnaBase Service(on Client side) to start with
this
user, but on Server side I'm getting the following message since those
changes.
EXPLANATION
Access denied on client-server or Distributed Link Service connection
request.
Unknown user name or bad password from client UNKNOWN --- Error Code :
4097
The main difference is the "UNKNOWN" word instead of the PCCLIENTNAME.
On client side, when I try to open the SNA Manager, I'm also getting
the
next message:
"Unable to open the Primary Host Integration Server SNA Configuration
file"
"Okay to attempt opening a Backup Host Integration Server configuration
in
read-only mode? (Ok - Cancel)"
Whenever I click the Ok button, I keep getting the same message.
Neil Pike. Protech Computing Ltd
Microsoft SNA/HIS MVP
|
|
|
| Back to top |
|
|
Edgar Polanco
Guest
|
| Posted:
Thu Nov 03, 2005 9:51 pm Post subject:
Re: Access denied on client-server.. |
|
|
Charles,
I restarted my PC client and tried to reproduce the problem with some traces
on. My very nice surprise was that everything is working now!!
I had tried with some of the options showed on the following link:
http://support.microsoft.com/default.aspx?scid=kb;en-us;148359
I'm guessing maybe one of those configuration issues was needing a restart.
Thanks a lot anyway!!
Regards,
"Charles Ezzell (MSFT)" <charliee@online.microsoft.com> wrote in message
news:%23yLRb9K4FHA.3636@TK2MSFTNGP09.phx.gbl...
| Quote: | Edgar,
Can you post your com.cfg file?
--
HTH,
Charles Ezzell
Microsoft
This posting is provided "AS IS" with no warranties, and confers no
rights.
Use of any included samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
"Edgar Polanco" <poledg@hotmail.com> wrote in message
news:eijmm%23I4FHA.252@TK2MSFTNGP15.phx.gbl...
Neil,
I already installed HIS 2004 server on a Win2000 Advanced Server with a
domain configured.
I logon with a HIS Client and HIS Admin user account. By now, I'm not
getting any event log errors on client or server.
Unfortanetly, whenever I try to use an APPC or CPIC application on the
HIS
Client, I got always this on the ALLOCATE,
APPC ALLOCATE response, result = COMMS_SUBSYSTEM_NOT_LOADED
APPC Type:Sync VerbID:00014000
APPC ---- Verb Parameter Block at address 0006A248 ----
APPC 01000000 F0040000 010000F0 00000000 <....0......0....
APPC 28972300 20982300 00010000 00000000 <(p#. q#.........
...............
Allocate Primary RC: F004H
Allocate Secondary RC: 10000F0H
My only possible clue is an information event log on the server,
Event ID:710
Enable Client/Server security.
Explanation:
Client "DOMAIN/user" connection is secured by data encryption.
Could this be the reason? What do you think?
Regards,
"Neil Pike" <neilpike@compuserve.com> wrote in message
news:VA.00006366.178a136f@compuserve.com...
Edgar,
MS put a LOT of security effort into HIS2004 to lock it down and make
it
secure by default. Possibly something has happened to make working in
a
workgroup broken by default.
In the first instance, assuming you're testing at the moment, if
you're
going
to be in a domain in production, then I'd strongly recommend you to do
the
testing in a domain as well.
Anyway, the account you're using at the moment, is it a member of HIS
Client
users or HIS Admin users? (These groups should have been setup as part
of
the
install)? Make it a member of both and see if that helps.
I'm no using domain right now, I'm using Workgroup and they are the
same
one(client and server). Did I misunderstood something? What else
could
I
be
doing wrong?
I also tried adding a new user to the client and server (with same
username
& passwd). I changed the SnaBase Service(on Client side) to start
with
this
user, but on Server side I'm getting the following message since
those
changes.
EXPLANATION
Access denied on client-server or Distributed Link Service connection
request.
Unknown user name or bad password from client UNKNOWN --- Error Code
:
4097
The main difference is the "UNKNOWN" word instead of the
PCCLIENTNAME.
On client side, when I try to open the SNA Manager, I'm also getting
the
next message:
"Unable to open the Primary Host Integration Server SNA Configuration
file"
"Okay to attempt opening a Backup Host Integration Server
configuration
in
read-only mode? (Ok - Cancel)"
Whenever I click the Ok button, I keep getting the same message.
Neil Pike. Protech Computing Ltd
Microsoft SNA/HIS MVP
|
|
|
| Back to top |
|
|
Neil Pike
Guest
|
| Posted:
Thu Nov 03, 2005 9:51 pm Post subject:
Re: Access denied on client-server.. |
|
|
Edgar - that error means it can't seem to find an SNA Server - possibly
because encryption is required to connect and it can't encrypt for some reason
- you only need to be in a trusted domain for the encryption to work as Windows
does it for you.
Anyway, can you connect to ANY SNA resources from that HIS client? i.e. Can
you get a 3270/5250 session on the host? I always like to prove all the
client<>server and server<>host comms is working first with a display session
before I move on to anything more complex - like APPC. There's enough you can
get wrong with an APPC connection without something lower level/more
fundamental getting you confused.
Neil Pike. Protech Computing Ltd
Microsoft SNA/HIS MVP |
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in