We have a custom .net webb app front end that uses the SOAP methods for rs.
For reasons that are not important to explain, we have several different
types of parameters..we have a couple that we would like to have the user do
an external search (there are too many values to set the parameter up to run
an sp to display allowable values) so we want to create a 'search' page for
them to narrow down / search and pick an appropriate value. The SP that
supplies the report(s) needs to have a value passed to run the report (we
can't filter after the fact). My question is that no 2 databases (out of 60
+ databases) are going to have the same value(s) for these particular
parameters - but I need to set the parm up to have a default value...I
believe... . Does the default value have to be an allowable value? Or can
you put something in as a place holder or a phrase to look for in code so we
can take the neccessary next step (open search page)?
I hope I am explaining this ok...
Thanks,Its hard to unserstand. In generay you can define any default values for RS
Reports if you like. Same for SP, but I think you should be careful wit
datatype there.
Markus Pöhler
netpoint-edv gmbh
Germany
"Myles" wrote:
> We have a custom .net webb app front end that uses the SOAP methods for rs.
> For reasons that are not important to explain, we have several different
> types of parameters..we have a couple that we would like to have the user do
> an external search (there are too many values to set the parameter up to run
> an sp to display allowable values) so we want to create a 'search' page for
> them to narrow down / search and pick an appropriate value. The SP that
> supplies the report(s) needs to have a value passed to run the report (we
> can't filter after the fact). My question is that no 2 databases (out of 60
> + databases) are going to have the same value(s) for these particular
> parameters - but I need to set the parm up to have a default value...I
> believe... . Does the default value have to be an allowable value? Or can
> you put something in as a place holder or a phrase to look for in code so we
> can take the neccessary next step (open search page)?
> I hope I am explaining this ok...
>
> Thanks,
Showing posts with label custom. Show all posts
Showing posts with label custom. Show all posts
Friday, March 30, 2012
Monday, March 26, 2012
More custom security questions
Still working on custom security 
Since I can't get a name of file (path) from within CheckAccess method it becomes somewhat useless. Is there a way to maybe overload GetPermissions or Policies methods? Or maybe CreateReport method so that I can include some custom code there? Is there an example of something like that?
Maybe I am missing something simple and I can tie everything to a security descriptor but I don't see how I can if there is no information such as name, date, modified by name and so on. All we get is principal name which is not very useful since I don't use built-in security names.
Since I can't get a name of file (path) from within CheckAccess method it becomes somewhat useless. Is there a way to maybe overload GetPermissions or Policies methods? Or maybe CreateReport method so that I can include some custom code there? Is there an example of something like that?
I wish the catalog tree was transparent to Authentication extension, I don't see a point in acl for a custom extension, all I want is names and I can build on top of that. Something along the lines -
Code Snippet
public bool CheckAccess(...file...)
{
string[] permissions ;
permissions = server.GetPermissions(file);
...
Maybe I am missing something simple and I can tie everything to a security descriptor but I don't see how I can if there is no information such as name, date, modified by name and so on. All we get is principal name which is not very useful since I don't use built-in security names.
Thanks
So anybody implemented CustomAccess not totally based on acecollection?
|||bumpsql
More code access issues again
Upgrading our Custom Data Extension from SQL 2000 Reporting Services to 2005
has necessitated dealing with code access security to a new degree. My
extension is actually a complex set of interdependant DLLs:
1. My managed assembly that implements the Data Extension and two delivery
extensions. This calls into...
2. A set of third party UNmanaged DLLs. Via a callback mechanism, these
call into...
3. Another of my managed assemblies.
By doing the following, my Data extension now runs perfectly in the browser
(via the report manager interface):
A. Create a Code Group in the policy config file.
B. Add AllowPartiallyTrustedCallers attribute to all my managed assemblies
C. Put my assemblies in the GAC
While my extension now works in the browser, it fails when run as a
scheduled report. My managed assembly #1 and the unmanaged DLLs #2 seem to
load, but in the log files I see:
Could not load file or assembly <my managed assembly #3, above> Failed to
grant minimum permission requests. (Exception from HRESULT: 0x80131417)
So I guess my question comes down to this: Why would the code access
security context be different when the report is run on a schedule as
opposed to being run on the server?
Thanks for you help!Hello Stephen,
How about turned off the Caspol by running command caspol -s off?
Also, please try to create a new code group.
1. On the Web server, open Administrative Tools, and then double-click
Microsoft
.NET Framework Configuration 2.0.
2. Expand Runtime Security Policy, expand Machine, and then expand Code
Groups.
3. Right-click All_Code, and then click New.
4. Select Create a new code group. Give your code group a relevant name,
such as
the name of the applications share.
5. Click Next.
6. In the Choose the condition type for this code group list, select GAC.
7. Click Next. On the next page, select Use an existing permission set, and
then
8. select FullTrust.
9. Click Next, and then click Finish.
Once these steps have been done, plese turn off the caspol and restart the
server.
Sincerely,
Wei Lu
Microsoft Online Community Support
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.
Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================(This posting is provided "AS IS", with no warranties, and confers no
rights.)|||I can not do "caspol -s off" in this environment, but I believe your other
comments have pointed me in the right direction. Thanks!
"Wei Lu [MSFT]" <weilu@.online.microsoft.com> wrote in message
news:1krHN%23KzGHA.4340@.TK2MSFTNGXA01.phx.gbl...
> Hello Stephen,
> How about turned off the Caspol by running command caspol -s off?
> Also, please try to create a new code group.
> 1. On the Web server, open Administrative Tools, and then double-click
> Microsoft
> NET Framework Configuration 2.0.
> 2. Expand Runtime Security Policy, expand Machine, and then expand Code
> Groups.
> 3. Right-click All_Code, and then click New.
> 4. Select Create a new code group. Give your code group a relevant name,
> such as
> the name of the applications share.
> 5. Click Next.
> 6. In the Choose the condition type for this code group list, select GAC.
> 7. Click Next. On the next page, select Use an existing permission set,
> and
> then
> 8. select FullTrust.
> 9. Click Next, and then click Finish.
> Once these steps have been done, plese turn off the caspol and restart the
> server.
> Sincerely,
> Wei Lu
> Microsoft Online Community Support
> ==================================================> Get notification to my posts through email? Please refer to
> http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
> ications.
> Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
> where an initial response from the community or a Microsoft Support
> Engineer within 1 business day is acceptable. Please note that each follow
> up response may take approximately 2 business days as the support
> professional working with you may need further investigation to reach the
> most efficient resolution. The offering is not appropriate for situations
> that require urgent, real-time or phone-based interactions or complex
> project analysis and dump analysis issues. Issues of this nature are best
> handled working with a dedicated Microsoft Support Engineer by contacting
> Microsoft Customer Support Services (CSS) at
> http://msdn.microsoft.com/subscriptions/support/default.aspx.
> ==================================================> (This posting is provided "AS IS", with no warranties, and confers no
> rights.)
>
has necessitated dealing with code access security to a new degree. My
extension is actually a complex set of interdependant DLLs:
1. My managed assembly that implements the Data Extension and two delivery
extensions. This calls into...
2. A set of third party UNmanaged DLLs. Via a callback mechanism, these
call into...
3. Another of my managed assemblies.
By doing the following, my Data extension now runs perfectly in the browser
(via the report manager interface):
A. Create a Code Group in the policy config file.
B. Add AllowPartiallyTrustedCallers attribute to all my managed assemblies
C. Put my assemblies in the GAC
While my extension now works in the browser, it fails when run as a
scheduled report. My managed assembly #1 and the unmanaged DLLs #2 seem to
load, but in the log files I see:
Could not load file or assembly <my managed assembly #3, above> Failed to
grant minimum permission requests. (Exception from HRESULT: 0x80131417)
So I guess my question comes down to this: Why would the code access
security context be different when the report is run on a schedule as
opposed to being run on the server?
Thanks for you help!Hello Stephen,
How about turned off the Caspol by running command caspol -s off?
Also, please try to create a new code group.
1. On the Web server, open Administrative Tools, and then double-click
Microsoft
.NET Framework Configuration 2.0.
2. Expand Runtime Security Policy, expand Machine, and then expand Code
Groups.
3. Right-click All_Code, and then click New.
4. Select Create a new code group. Give your code group a relevant name,
such as
the name of the applications share.
5. Click Next.
6. In the Choose the condition type for this code group list, select GAC.
7. Click Next. On the next page, select Use an existing permission set, and
then
8. select FullTrust.
9. Click Next, and then click Finish.
Once these steps have been done, plese turn off the caspol and restart the
server.
Sincerely,
Wei Lu
Microsoft Online Community Support
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.
Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================(This posting is provided "AS IS", with no warranties, and confers no
rights.)|||I can not do "caspol -s off" in this environment, but I believe your other
comments have pointed me in the right direction. Thanks!
"Wei Lu [MSFT]" <weilu@.online.microsoft.com> wrote in message
news:1krHN%23KzGHA.4340@.TK2MSFTNGXA01.phx.gbl...
> Hello Stephen,
> How about turned off the Caspol by running command caspol -s off?
> Also, please try to create a new code group.
> 1. On the Web server, open Administrative Tools, and then double-click
> Microsoft
> NET Framework Configuration 2.0.
> 2. Expand Runtime Security Policy, expand Machine, and then expand Code
> Groups.
> 3. Right-click All_Code, and then click New.
> 4. Select Create a new code group. Give your code group a relevant name,
> such as
> the name of the applications share.
> 5. Click Next.
> 6. In the Choose the condition type for this code group list, select GAC.
> 7. Click Next. On the next page, select Use an existing permission set,
> and
> then
> 8. select FullTrust.
> 9. Click Next, and then click Finish.
> Once these steps have been done, plese turn off the caspol and restart the
> server.
> Sincerely,
> Wei Lu
> Microsoft Online Community Support
> ==================================================> Get notification to my posts through email? Please refer to
> http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
> ications.
> Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
> where an initial response from the community or a Microsoft Support
> Engineer within 1 business day is acceptable. Please note that each follow
> up response may take approximately 2 business days as the support
> professional working with you may need further investigation to reach the
> most efficient resolution. The offering is not appropriate for situations
> that require urgent, real-time or phone-based interactions or complex
> project analysis and dump analysis issues. Issues of this nature are best
> handled working with a dedicated Microsoft Support Engineer by contacting
> Microsoft Customer Support Services (CSS) at
> http://msdn.microsoft.com/subscriptions/support/default.aspx.
> ==================================================> (This posting is provided "AS IS", with no warranties, and confers no
> rights.)
>
Friday, March 9, 2012
Monitoring a remote server?
Okay, my company is being a tight wad and doesn't want to spend the money for a good SQL monitoring tool. As a result, I am destined to custom write what I need. Most is done, but here is my current dilemma...
I have 2 servers, the monitoring server and the activity server. My monitoring server is the central machine that handles all my monitoring tasks and error notifications. I need a way to monitor if another SQL Server "is alive" from the central monitoring server. If the remote server is dead, the monitoring server will post an error that will be handled per the existing error routines.
How can I monitor the "alive" status of one SQL Server from another? One though I have is to write a simple DTS job (SELECT @.@.SERVERNAME) that runs from the monitoring server connecting to the remote server. I would then schedule that DTS job on the monitoring server. Then I would add a step the scheduled job to handle the error processing. Is there a better way to do this without pulling in DTS?It could be just a job rather than a DTS package.
Or "AT" from a command prompt running an ISQL script.|||On your local machine register both the servers in EM and regularly refer to SQL error log for any information.
Also you can setup a job to check whether the Server is running by using OSQL -L option which returns the available on the network.|||bglass, In our shop we have, using your terms, about 23 activity servers providing various mission critical and non-critical data. We need to know a bit more about our servers, are there any failed jobs, is drive space getting low, any long running jobs, current user load, etc. Each activity server is required to gather and hold all this info on a schedule that best fits that servers role. At regular intervals our monitoring server talks to each activity server and copies the above info for historical analysis and purges the copied data. Our monitoring server makes all this data available to a web server and by next month will have the ability to send out warnings and alerts to the appropriate DBA.
Does this help or do you have more questions?|||I already have the activity server (I have numerous of them, but only used two for this representation) gathering lots of info, including internal errors, and transmitting them to the monitoring server. The monitoring server then sends out the proper notifications (since we use Lotus Notes, sending email is not that easy, so I have it consolidated).
The problem is proactive notification if a SQL Server is not responding. We are a 24/7 flight operations center. Right now we get notified after hours by the end users if the system has gone down. Not a good solution.
The only other alternative I have come up with so far is to use linked servers. That way I can have a job on the monitoring server that runs a simple query on the linked server. If that step fails, I have an issue. But I HATE LINKED SERVERS.
What about some sort of ActiveX/VBScript step in a job that could query an external server?|||Not sure what the problem is with linked servers...
How about using xp_cmdshell and OSQL? Each job step could call a differenet server and any unexpected results would result in a page.|||Hi,
try perhaps so:
1) develop a VB program, that runs on that server and pools for instance every 1 minute to check if SERVICE MSSQLSERVER is running.
If no - send a message to:
a) Lotus Notes
b) SMS to cell
c) a file.
d) sends a message into the DB (special notification table)
If c) then develop another VB PG that pools and looks into that PG for checking for the messages, which are writing into it. You can do then waht you want.
if d) then you can make an INSERT trigger, which do some thing, which are needed to you
Is it enough for you?
Zbig|||Please check out SQLCentric at http://www.pearlknows.com. SQLCentric is a fully functional web-based database network monitoring and alert system that is deployed on your company intranet.
We offer 5, 10 and 25 license starter kits. Please download a copy to evaluate for yourself.
I have 2 servers, the monitoring server and the activity server. My monitoring server is the central machine that handles all my monitoring tasks and error notifications. I need a way to monitor if another SQL Server "is alive" from the central monitoring server. If the remote server is dead, the monitoring server will post an error that will be handled per the existing error routines.
How can I monitor the "alive" status of one SQL Server from another? One though I have is to write a simple DTS job (SELECT @.@.SERVERNAME) that runs from the monitoring server connecting to the remote server. I would then schedule that DTS job on the monitoring server. Then I would add a step the scheduled job to handle the error processing. Is there a better way to do this without pulling in DTS?It could be just a job rather than a DTS package.
Or "AT" from a command prompt running an ISQL script.|||On your local machine register both the servers in EM and regularly refer to SQL error log for any information.
Also you can setup a job to check whether the Server is running by using OSQL -L option which returns the available on the network.|||bglass, In our shop we have, using your terms, about 23 activity servers providing various mission critical and non-critical data. We need to know a bit more about our servers, are there any failed jobs, is drive space getting low, any long running jobs, current user load, etc. Each activity server is required to gather and hold all this info on a schedule that best fits that servers role. At regular intervals our monitoring server talks to each activity server and copies the above info for historical analysis and purges the copied data. Our monitoring server makes all this data available to a web server and by next month will have the ability to send out warnings and alerts to the appropriate DBA.
Does this help or do you have more questions?|||I already have the activity server (I have numerous of them, but only used two for this representation) gathering lots of info, including internal errors, and transmitting them to the monitoring server. The monitoring server then sends out the proper notifications (since we use Lotus Notes, sending email is not that easy, so I have it consolidated).
The problem is proactive notification if a SQL Server is not responding. We are a 24/7 flight operations center. Right now we get notified after hours by the end users if the system has gone down. Not a good solution.
The only other alternative I have come up with so far is to use linked servers. That way I can have a job on the monitoring server that runs a simple query on the linked server. If that step fails, I have an issue. But I HATE LINKED SERVERS.
What about some sort of ActiveX/VBScript step in a job that could query an external server?|||Not sure what the problem is with linked servers...
How about using xp_cmdshell and OSQL? Each job step could call a differenet server and any unexpected results would result in a page.|||Hi,
try perhaps so:
1) develop a VB program, that runs on that server and pools for instance every 1 minute to check if SERVICE MSSQLSERVER is running.
If no - send a message to:
a) Lotus Notes
b) SMS to cell
c) a file.
d) sends a message into the DB (special notification table)
If c) then develop another VB PG that pools and looks into that PG for checking for the messages, which are writing into it. You can do then waht you want.
if d) then you can make an INSERT trigger, which do some thing, which are needed to you
Is it enough for you?
Zbig|||Please check out SQLCentric at http://www.pearlknows.com. SQLCentric is a fully functional web-based database network monitoring and alert system that is deployed on your company intranet.
We offer 5, 10 and 25 license starter kits. Please download a copy to evaluate for yourself.
Subscribe to:
Posts (Atom)