dbTalk Databases Forums  

Local Groups and Failovers

microsoft.public.sqlserver.clustering microsoft.public.sqlserver.clustering


Discuss Local Groups and Failovers in the microsoft.public.sqlserver.clustering forum.



Reply
 
Thread Tools Display Modes
  #1  
Old   
Matt
 
Posts: n/a

Default Local Groups and Failovers - 01-20-2004 , 05:01 PM






Scenerio: I have an active/passive 2-node clustered SQL Server. I am connecting to the virtual machine via Computer Manager and creating a local group and then adding the appropriate global users/groups to this local group. I then grant database access to this group via SQL Enterprise Manager.

Question: If I moved (failed over) the SQL Server resource group to the second node would my users still have database access

Unfortunately, I do not have cluster available to test this scenerio and I appreciate any input!

Reply With Quote
  #2  
Old   
Linchi Shea
 
Posts: n/a

Default Re: Local Groups and Failovers - 01-21-2004 , 10:30 AM






You won't be able to grant login to the local group via a
virtual server. In other words, if your virtual server is
VServer and your local group is LGroup, you can execute
the following:

sp_grantlogin 'VServer\LGroup'

I would not recommend using the local group on the nodes
because they will have different SIDs and you most likely
would have to use the node server name followed by the
local group name. This doesn't work well with failover.

Linchi

Quote:
-----Original Message-----
Scenerio: I have an active/passive 2-node clustered SQL
Server. I am connecting to the virtual machine via
Computer Manager and creating a local group and then
adding the appropriate global users/groups to this local
group. I then grant database access to this group via SQL
Enterprise Manager.
Quote:
Question: If I moved (failed over) the SQL Server
resource group to the second node would my users still
have database access?
Quote:
Unfortunately, I do not have cluster available to test
this scenerio and I appreciate any input!
.


Reply With Quote
  #3  
Old   
Rand Boyd [MSFT]
 
Posts: n/a

Default RE: Local Groups and Failovers - 01-22-2004 , 11:23 AM



No.

I tested this with identical user names and passwords on both nodes. I
could access from one node but not the other. The user from node 1 was
granted acces to the SQL Server. The user from node 2 was not. You could
work around this by granting access to the users on both nodes and granting
separate permissions. However it would be eaiser to create a global group
and put the users in that group and grant that group access to SQL Server.

Rand
This posting is provided "as is" with no warranties and confers no rights.


Reply With Quote
Reply




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Powered by vBulletin Version 3.5.3
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.