| Author |
Topic |
|
Page47
Master Smack Fu Yak Hacker
2878 Posts |
Posted - 2002-07-10 : 10:22:19
|
| So I arrive at the beige cube farm this morning to find that none of my daily load jobs ran. In fact, every scheduled sql task mission critical to the organization, had bombed.So I went to get a cup of coffee.Then investigated a bit.As it turns out, all the load processes load files based on UNC file paths. And the credentials for the sql agent process have been blocked from UNC access to things?So my gut reaction is, "Damn network admins changed my SQL domain account..."They said, "nope"So I retyped the existing password in the enterprise manager properties box for sql agent and bounce the sql server service. Now everything runs fine.Note: all my sql boxes authenticate to the domain with the same network credentials. and this retype and bounce fixed them all.So who can tell me what happend?<O> |
|
|
robvolk
Most Valuable Yak
15732 Posts |
Posted - 2002-07-10 : 10:27:35
|
| Network burp/hiccup probably happened overnight and FUBAR'd the existing connections. I used to see this a lot at my old job a few years ago. It seems to happen more if there's any Novell networking involved, but it can happen without it.See if your network admins know of any outages, and check your SQL error log, there might be a connection warning. |
 |
|
|
MakeYourDaddyProud
184 Posts |
Posted - 2002-07-10 : 10:31:53
|
| Do you have roaming IP enabled for your network?Daniel Small MIAPwww.danielsmall.com IT Factoring |
 |
|
|
Page47
Master Smack Fu Yak Hacker
2878 Posts |
Posted - 2002-07-10 : 10:35:21
|
| What is "Roaming IP"?<O> |
 |
|
|
MakeYourDaddyProud
184 Posts |
Posted - 2002-07-10 : 10:42:57
|
| It a long shot but DHCP features in a network can provide for allocation and deallocation of roaming IP addresses with has caused problems on some DB servers here which are taken offline and replaced at a later date (our test server is physically taken to a customers site). The roaming address might be on a different subnet than the other addresses in your department, which would cause servers, networked printers and databases connection pipes to fail to resolved to the network temporarily.Idea just allows for a dynamic network where physical servers can move around your internal network. Our netwrok guys have reporting this a lot with boxes taken 'out'Daniel Small MIAPwww.danielsmall.com IT Factoring |
 |
|
|
Page47
Master Smack Fu Yak Hacker
2878 Posts |
Posted - 2002-07-10 : 11:07:01
|
| Uhm, yeah, the problem is back.I'm now suspecting some local process is causing the domain account to lock based on multiple invalid password attempts....the plot thickens.<O> |
 |
|
|
MakeYourDaddyProud
184 Posts |
Posted - 2002-07-10 : 11:12:19
|
| i know its grannys and eggs, but have you audited login attempts, checked firewalls for breaches and so on?... I hope your not the subject of externally automated hack or denial-of-service opportunities.Daniel Small MIAPwww.danielsmall.com IT Factoring |
 |
|
|
Wanderer
Master Smack Fu Yak Hacker
1168 Posts |
Posted - 2002-07-11 : 06:11:42
|
| As a temp warning scenario, can you add a step one, ping box, or try an xp_cmdshell dir on the unc drive ? If it fails, error and alert, if it succeeds, continue ... |
 |
|
|
MakeYourDaddyProud
184 Posts |
Posted - 2002-07-13 : 02:42:34
|
| "Network problem ... looking for leads" Hmmm.... was pun intented?Daniel Small MIAPwww.danielsmall.com IT Factoring |
 |
|
|
aiken
Aged Yak Warrior
525 Posts |
Posted - 2002-07-15 : 14:30:28
|
| Auditing on the system that the SQL Server is connecting to is definitely a good idea.Wanderer's idea for testing the UNC path first is good; you might also schedule such tests throughout the day, say once an hour, so you could pinpoint when the UNC share is going bad.Cheers-b |
 |
|
|
|