Avatar of Eric
Eric
Flag for Canada asked on

Share Point / SQL Database

Hi,

I have 2 Sharepoint servers ( one web and one index/search ) on windows 2003 and 1 back end database server sql 2008.  I am having constant error message on both SQL

"Source MSSQLSERVER, Failure Aud Event ID 18456, User NT AUTH\SYSTEM, Computer:  SERVERNAME "

I came across a solution as follows on the net

" This is caused when an SSP has been deleted, SQL holds on to a job under "SQL Server Agents" tied to that "old" ssp that he might have removed.... Use SQL Management Studio, connect to the db, find SQL server agents and then expand jobs...  You should have lost the index if the SSP went bad, no worries..

Here you'll need to know the name of your old Shared Service Provider DB... Looks for something like SSPNAMEHERE_DB_DeleteExpiredSessions... If you're sure that's not in use you can either delete or disable the job and the errors will halt."

can somebody tell me what SSP and how to check it,

i attach the sql agent jobs

Thanks
Microsoft SQL Server 2008Microsoft SharePointMicrosoft SQL Server 2005

Avatar of undefined
Last Comment
Eric

8/22/2022 - Mon
CloudedTurtle

I don't think that anyone could tell you which SSP. As they can be setup and named differently. The Default SSP is usually named "Default SSP".

My Recommendation would be to login to Central Admin and look at the SSPs that are listed there. Then open SQL Server Management Studio and confirm the DBs for the SSPs listed in Central Admin. Then disable the SQL Job for any that don't match up.

Hope that helps.
Eric

ASKER
Thanks
Eric

ASKER
i am having problems with these servers. and i saw that one of the jobs has been configured to use wrong credentials..

do you think this can cause this problem to happen and lastly i am thinking to bring the servers uptodate to see if it can solve the issue.

do you have any recommendation how to do it ? how can i figure out my current patch level with sharepoint

thanks
Your help has saved me hundreds of hours of internet surfing.
fblack61
CloudedTurtle

I would recommend updating the credentials first and determine if that fixes your problem.

I personally don't like to update to "see if it fixes a problem" unless I know before hand that it will resolve the issue. If you environment was stable prior, I like to ensure that it is stable before applying any updates.

To figure out your current patch level,  you should log into Central Admin, and click the "Operations" tab. Then select the "Servers in Farm" from there you should see each server, and the version of SharePoint that is running. Here is a blog that describes it, along with a list of version/update numbers. If your version isn't listed, you will just have to google your version. (these lists are very hard to find with the most recent version number..)

Here is where you can easily locate any updates you may need (up to the most recent update)
Eric

ASKER
i definitely agree with you. I changed the credentials to sa to be sure and just waiting now.

our sharepoint site keep going down every 4-5 days and as a temporary solution, we restart the sql server services. So since this sql job cant access the server because of wrong credentials, it might be the issue. But i am not sure how restarting sql server service solves the issue.

thanks for the info
Eric

ASKER
MOSS 2007 SP1 (KB936984, KB942390)       December 11, 2007       12.0.0.6219
WSS 3.0 SP1 (KB936988, KB942388)       December 11, 2007       12.0.0.6219

here it seems i am at SP1.

Actually I am agree with you that before knowing the real reason i don't want to go with update. the only reason i am thinking update is the fact that the other problem we are having seems to have same semptoms with error message with one article.

    Event ID 6398
    Event ID 6482
    Event ID 7076

and the hot fix are in the SP3.

KB Article Number(s): 946517
Language: English
Platform: x64
Location: (http://hotfixv4.microsoft.com/Windows%20Server%202003/sp3/Fix220121/3790/free/335450_ENU_x64_zip.exe)
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
CloudedTurtle

If there is another problem that is resolved by applying the updates, then you should apply the updates. However, the problem that you described above doesn't appear to have anything to do with that KB. I would recommend that you resolve 1 issue at a time, as you are more likely to prevent introducing additional issues or uncovering issues that we didn't see before.

Depending on the type of Job that SQL is running, it could be possible that it started (maybe brought the server instance off-line, or marked your DBs as "locked" to prevent any new changes) and then never properly recovered if it had an error. Restarting the SQL Server would remove any locks on the DBs allowing proper access. At least until you job runs again.
Eric

ASKER
I see you point.

I am not familiar with sharepoint, but the job, named shared services reorg sub plan,  that's configured with wrong credentials runs once a week and of course it can't run.

it is my understanding that if something wrong with the configuration or accessibility with the servers , then problem should be persistent. but in my case, restarting sql service will solve the issue for some time, as if something keep piling up underneath and then crash the site.
CloudedTurtle

Can the correlation between when the job runs be tied to when the server fails? If your server is failing after the job runs then we definitely have a correlation.

You could try manually running the job when you know the server is responding properly and see if it still works after the job has finished running (or fails.) At least then you would know where your point of failure is.
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy
Eric

ASKER
Thanks for the info. Since the credential was wrong, job never ran if i understand correctly.

job runs once a week and site goes down more often than that,

What i am thinking is that since this job is supposed to run once in every weekend, and it has not been running , that might be the issue. It seems to me that ( just idea , i don't know share point  ) since job is not running, that is causing something accumulated and after reaching at certain threshold, it causes the site down and restarting the sql server service just empty whatever accumulating ,  

just an idea :)

thanks for your input again
ASKER CERTIFIED SOLUTION
CloudedTurtle

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
Eric

ASKER
thanks, I will look at that and probably will run the job . I know that job itself is doing some tasks on Sharepoint DBs, and as far as I remember it is some indexing related stuff, i will look at the TSQL  in the job.

there are error messages like these all the time recurring error messages:

    Event ID 6398
    Event ID 6482
    Event ID 7076
 
and the other thing that makes me confused is that in the following error message on the SQL server,

"Source MSSQLSERVER, Failure Aud Event ID 18456, User NT AUTH\SYSTEM, Computer:  SERVERNAME "

the servername is the ip adress of the one of the sharepoint servers. This also seems to tell me that this access problem is intermittent not permanent,  that confuses me as it means it is not permission or auth related problem, otherwise it wont let moss site running after starting sql service

but that not running job might be the root cause of all of this as you say

Thanks,, will keep update as it seems a common problem.