dbTalk Databases Forums  

Sql Server Job security problem

microsoft.public.sqlserver.dts microsoft.public.sqlserver.dts


Discuss Sql Server Job security problem in the microsoft.public.sqlserver.dts forum.



Reply
 
Thread Tools Display Modes
  #1  
Old   
GC
 
Posts: n/a

Default Sql Server Job security problem - 03-02-2009 , 10:54 AM






Hi,

I have a job that run a SSIS package
When I run the SSIS package manually it works fine and I am login as the
user da on the computer and also da on Sql Server Studio Managment

da is a domaine admistrator user.
I also include this user in Sql Server 2005 as a login user with sysadmin
right
I also use this user to run SqlAgent services

I create a proxy with a credential that log as da with his password
In my job I select run as Sql Server Proxy which is the proxy account that
I create with the credential.

I also give thos Security Local Policy to the user da
Log on as a service (SeServiceLogonRight)
Log on as a batch job (SeBatchLogonRight)
Replace a process-level token (SeAssignPrimaryTokenPrivilege)
Bypass traverse checking (SeChangeNotifyPrivilege)
Adjust memory quotas for a process (SeIncreaseQuotaPrivilege)

When I start the job I received this error
Unable to start execution of step 1 (reason: Error authenticating proxy
FN\da, system error: ConnGetProxyPassword). The step failed.

In the SSIS Package I have somme string connection with Integrity security,
not a user and password.

Example :
Data Source=FNTEST04;Initial
Catalog=AMC_AccPac_Import;Provider=SQLOLEDB.1;Inte grated Security=SSPI;

I am working on this security issue for 3 days now and it is getting to be
frustrating
I read a lot of documentation and it seems that I miss something that I dont
understand.

Do you have any idea!

Thank in advance!













Reply With Quote
  #2  
Old   
Todd C
 
Posts: n/a

Default RE: Sql Server Job security problem - 03-03-2009 , 07:56 AM






I would focus your time on the error:

Quote:
Unable to start execution of step 1 (reason: Error authenticating proxy
FN\da, system error: ConnGetProxyPassword). The step failed.
Did the password of your FN\da account change?

Try logging in as different users to the same machine and executing via the
SSIS instance inside SSMS.
What happens when you try to set up the job to run under the Service account?

FYI: Running an SSIS package (or any process, for that matter) under the
priveledges of a Domain Administrator is NOT recommended. You are better off
creating a 'least priveledged account' for getting the job(s) done, and
granting only those security rights as are required.
--
Todd C

[If this response was helpful, please indicate by clicking the appropriate
answer at the bottom]




Reply With Quote
Reply




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Powered by vBulletin Version 3.5.3
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.