Microsoft KB Archive/250375

= Host Security Events 1322 & 1002 after adding backup database =

Article ID: 250375

Article Last Modified on 4/27/2005

-

APPLIES TO


 * Microsoft SNA Server 4.0
 * Microsoft SNA Server 3.0 Service Pack 2
 * Microsoft SNA Server 3.0 Service Pack 3
 * Microsoft SNA Server 3.0 Service Pack 4
 * Microsoft SNA Server 4.0
 * Microsoft SNA Server 4.0 Service Pack 1
 * Microsoft SNA Server 4.0 Service Pack 2
 * Microsoft SNA Server 4.0 Service Pack 3

-



This article was previously published under Q250375



SYMPTOMS
When installing the SNA Host Account Cache Service, also known as the SNADATABASE Service, to be used in a secondary (backup) role, the following event may be observed multiple times in the application log of the event viewer where the primary (master) Host Account Cache Service is running:

Event 1322 - Type:Error

A backup database was denied access to the master database. Supplied code 0x0

Once the backup SNA Host Account Cache (HAC) Service has started, a request is sent to contact the primary HAC Service. If successful, a copy of the HAC user database (DBase.DBS) is copied down locally. If the request fails, the following event is recorded in the application log of the event viewer on that (backup) computer:

Event 1002 - Type:Error

A message could not be sent. Supplied code



CAUSE
The Windows NT service account being used on the backup HAC is not the same service account as the primary HAC Service. For more information on Host Security Service Accounts, please see the following knowledge base article:

235472 All Host Security Services must run in same Windows NT account



RESOLUTION
Change the backup SNA Host Account Cache Service to use the same Windows NT account credentials that the primary SNA Host Account Cache Service is using.



MORE INFORMATION
Having additional backup HAC Services may help in eliminating network traffic when Single Sign-On (SSO) lookups are being performed. For more information on the algorithm used, please see the following knowledge base article:

248479 Host account database location for Single Sign-On

Since the PDC must contain the primary Host Account Cache, all other installations of this Service will be considered backups. If only the HAC component was selected during the installation process (from the \HOSTSEC directory on the SNA Server CD), you will never be prompted for the role (either primary or backup) during the setup process. The primary Host Account Cache always resides on the PDC of the domain.

Keywords: KB250375

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.