Link to home
Start Free TrialLog in
Avatar of Yuan38
Yuan38Flag for France

asked on

Access Denied on https://host/vd/replisapi.dll?diag

My environnement is a Windows Server 2008 64 bits server with SQL Server 2005.
I'm trying to configure IIS for web replication on this server.

I have followed the instruction on http://msdn.microsoft.com/en-us/library/ff714039.aspx
Now when I try to access to the web page https://host/vd/isapi.dll?diag and authenticate with the administrator login, everything is fine.
But when I try with the replication account i've created for this purpose then I get an "access denied" on the navigator. I've got this error even if the replication account is in the administors group.

I'm looking for what access right is missing for hours.

Thank's for your help.
Avatar of lcohan
lcohan
Flag of Canada image

Did you set permissions for the SQL Server Replication Listener for that account?

Avatar of Yuan38

ASKER

The replication account is 'sysadmin' on SQL Server security settings.
I don't know where to configure the SQL Server Replication Listener permissions. Can you tell me where to do this ...
So you created a SQL login called "sysadmin" as the replication account you mentioned below?
....
<<But when I try with the replication account i've created for this purpose then I get an "access denied" on the navigator>>
.....
Just perform the tasks from the link below in order to "Setting Permissions for the SQL Server Replication Listener"

http://msdn.microsoft.com/en-us/library/ms152511.aspx
Avatar of Yuan38

ASKER

I'm not using a sysadmin account. I just mean that the account used for replication has the 'sysadmin' role in SQL Server.

I've followed the instructions in the link mentionned. One of the task ask to add the created account for replication in the IIS_WPG group : but this group is not present in the list (I'm using Windows Server 2008 x64). I've added the replication account to the IIS_IUSRS group.
Avatar of Yuan38

ASKER

I'm still having "Access Denied" when trying to access to the web page https://host/vd/isapi.dll?diag when I authenticate with the account used for replication.
OK so let's recap,,,you listed your question for SQL 2005 but you run SQL 2008 x64 bit right?
Is the NT login you created a Domain or Local login on the computer where you tried to run the web page? it should be a NT Domain account not just local login.
Did you tried it from another computer on the same domain?
My bad...you run SQL 2005 on Windows x64...sorry. Is it SQL 2005 64bit as well?
Avatar of Yuan38

ASKER

Yes It's SQL Server 2005 x64 on Windows Server 2008 x64.
The server is not in a domain => all the accounts used are 'local'
<<I'm trying to configure IIS for web replication on this server.>>

The how did you performed 7 - c from link below?

 http://msdn.microsoft.com/en-us/library/ms152511(v=SQL.90).aspx

You were supposed to enter the domain in there right?

"To configure the computer that is running IIS by using the Configure Web Synchronization Wizard"
c.In the Default Domain and Realm boxes, enter the domain of the computer that is running IIS.

Avatar of Yuan38

ASKER

I'm using IIS 7 so the parameters for IIS are a bit different from IIS6. On IIS7 there is no place for any domain name in the authentication parameters (see the screen capture).

iis7-auth.jpg
Avatar of Yuan38

ASKER

If I un the "Configure Web Synchronization ..." wizard, on the "Authenticated Access Page", I simply left he Default domain and Realm boxes empty.
ASKER CERTIFIED SOLUTION
Avatar of lcohan
lcohan
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Yuan38

ASKER

After running once again the "Configure Web Synchronization ..." wizard and check again all the parameters it now works !!
May be because now, I just have the "Basic Authentication" enabled and all the other set to "disabled".


That's what it was recommended in the article right? I thought about that when you posted the authentication and saw you have both basic and windows enabled plus that the computer is not on a domain...well I'm glad its finaly working for you!