Windows Server

Guest

In order to properly use CS Interop API to obtain profile data is it
required to run under the Commerce Server Service Account that was used
to configure / install CS to begin with? I want to stop the following
errors from occurring (see Technical Details). They are not preventing
profile data from being returned successfully but it is an annoyance
and may or may not be a cause for greater concern?

SCENARIO
----------------------------------------
There is a web service running on Server A (internal to the network)
uses CS Interop API to obtain Profile data from Server B (Database
Server - no Commerce Server 2002 FP 1 installation) in the DMZ. It
needs to be Interop API code since this code is executed without having
runtime commerce server context.

TROUBLESHOOTING
----------------------------------------
1) I've tried connection strings that use local SQL accounts on Server
B with the same db rights and access as
[DMZCOMAINNAME]\[CommerceServerServiceAccount] and
[SERVERNAME]\[CommerceServerServiceAccount] to no avail (the errors
keep occurring).

2) I've tried this connection string: "Data Source=[IP Address of DB
server];Initial Catalog=msib21_commerce;Integrated Security=SSPI" which
then uses ASPNET to connect to the db (permissions for ASPNET are
slightly different than [SERVERNAME]\[CommerceServerServiceAccount] /
[DMZCOMAINNAME]\[CommerceServerServiceAccount] however the same errors
appear in the logs.

3) I noticed there are Component Services for Commerce Server that run
under the account of [DMZDOMAINNAME]\[CommerceServerServiceAccount].
Which is why I pose the question above "In order to properly use CS
Interop API to obtain profile data is it required to run under the
Commerce Server Service Account that was used to configure / install CS
to begin with?".

4) A Google search indicated it could be related to the MDAC version.
I installed and ran a MDAC checker and v 2.8 is on Server A. So I
don't believe this is the issue.

Apologies for the long post but I wanted to include all the details.
Many thanks for any assistance.

Kind regards,
-Stacy

TECHNICAL DETAILS
----------------------------------------
a) Environment: MSIB v2.1 / Commerce Server 2002 FP 1 / Content
Management Server 2002 SP 1a

Server A (BizTalk / Web Services) - Internal
O/S : Windows 2000 Advanced Server
Commerce Server 2002 FP 1

Server B (SQL Server 2000) - DMZ
O/S : Windows 2000 Advanced Server
Used only for the databases that power CS / CMS / MSIB

Server C (Administration Server) - DMZ
O/S : Windows 2003
Commerce Server 2002 FP 1 installed
* where I noticed the Component Services (mentioned above)

b) Errors seen in the Application Log of the Event Viewer:

Event Type: Error
Event Source: Commerce Server 2002
Event Category: None
Event ID: 36865
Date: 8/28/2005
Time: 6:16:02 PM
User: N/A
Computer: Server A
Description:
Error in Commerce Administration Object : Description -
'GlobalConfig:Initialize : Login failed for user '(null)'. Reason: Not
associated with a trusted SQL Server connection.'

----------------------------------------------------------

Event Type: Information
Event Source: Commerce Server 2002
Event Category: None
Event ID: 28676
Date: 8/28/2005
Time: 6:16:02 PM
User: N/A
Computer: Server A
Description:
CSPerfCounters Component : Error - 'Calling GetSites'
------------------------------------------------------------

Event Type: Error
Event Source: Commerce Server 2002
Event Category: None
Event ID: 28673
Date: 8/28/2005
Time: 6:16:02 PM
User: N/A
Computer: Server A
Description:
CSPerfCounters Component : Failed to create - 'Init from registry.'

Ravi Shankar · Guest

Hi Stacy,

Can you add the ASPNET Account on the web service machine to the group with
"Launch" & "Edit" permissions to COM+/DCOM Commerce Server Objects.

IF however, the WebServices are called by a set of users then make a
security group with these users as members and provide permissions at
COM+/DCOM & SQL for this group to Commerce Server objects/databases (similar
to Commerce Service A/c)
--
Ravi Shankar

"stacy.hass@gmail.com" wrote:

Guest

Hi Ravi - thanks for the reply. I'm cautious to add ASPNET with those
permissions to the COM+/DCOM CS Objects. It seems like it might be a
bit of a security concern? Your thoughts?
-Stacy

Ravi Shankar · Guest

Hi Stacy,

In that case you should host your web services in a separate Application
Pool, the identity of which is your Commerce Service A/c.

I remember something about permissions and Commerce Server COM/DCOM objects
in the post-SP2 Installation/post-FP1 installation documents and one of those
posints was about the CS Logging & Reporting objects.
--
Ravi Shankar

"stacy.hass@gmail.com" wrote:

Interop API calls causing errors (e.g. CSPerfCounters Compon

	Windows Server Forum Index -> Commerce Server	All times are GMT
Page 1 of 1