Microsoft KB Archive/230515

From BetaArchive Wiki
< Microsoft KB Archive
Revision as of 13:45, 21 July 2020 by X010 (talk | contribs) (Text replacement - """ to """)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Knowledge Base


Article ID: 230515

Article Last Modified on 3/10/2004



APPLIES TO

  • Microsoft COM Transaction Integrator for CICS and IMS 4.0 SP2



This article was previously published under Q230515


SYMPTOMS

A COM Transaction Integrator (COMTI) method may fail to invoke properly when all of the following conditions are true:

  • The Authenticate with User Credentials check box is enabled in the Remote Environment (RE).
  • The Windows NT domain name derived from the invoking user/process is 15 characters in length.
  • The application is not using explicit security credentials (application override feature).

The following error message may be posted to the Windows NT application event log if this problem occurs:

(102) COM Transaction Integrator reported the following exception to the client:

Component: COMTI Component Name
Method: COMTI Method

Exception description: (1426) Could not derive object creator's domain and user name from MTS context SID. System error 8004ff05.

EXPLANATION: An Automation exception representing an error condition was returned to a COM Transaction Integrator client. The description shown above contains more information about the exception that was reported.

ACTION: The exception may be caused by communication problems or errors in your host application. See the exception description for corrective actions

NOTE: This problem does not occur when the Authenticate with Package Credentials check box is enabled in the RE for the COMTI component.

CAUSE

COMTI fails to allocate a memory buffer large enough to handle Windows NT domain names that are 15 characters in length.

RESOLUTION

To resolve this problem, obtain the latest service pack for SNA Server version 4.0. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

215838 How to Obtain the Latest SNA Server Version 4.0 Service Pack




STATUS

Microsoft has confirmed that this is a problem in Microsoft SNA Server version 4.0 SP2. This problem was first corrected in SNA Server version 4.0 Service Pack 3.

MORE INFORMATION

When user-level security is enabled in the RE and the end-user application is not taking advantage of explicit security callbacks, COMTI must extract the domain and user account name of the base client that initiated the MTS activity and (indirectly) forward this along to the host account cache. If, for example, the COMTI component uses an RE configured for LU6.2 transport, the domain and user name extracted from the calling process are passed in the MC_ALLOCATE verb along with a flag indicating "privileged proxy" is specified for the account. If the RE is configured to use TCP/IP, COMTI will pass the extracted information directly to host account cache. If everything is configured correctly, the appropriate mainframe credentials are sent to the host.

When this particular problem occurs, COMTI is unable to properly build the domain name, which results in a failed method invocation.

Keywords: kbbug kbfix kbsna400sp3fix kbqfe KB230515