Link to home
Start Free TrialLog in
Avatar of atrionmedical
atrionmedicalFlag for United States of America

asked on

SharePoint "You do not have permission to connect to User Profile Data " MOSS 2007 WebPart SSP

We recently had key IT personnel depart from our company which required changing passwords that don't always get changed regularly.  We had a company contact list webpart that we used.  It now says "You do not have permission to connect to User Profile data"  I have updated the password in IIS, on all Applications, etc. and all other pieces of SharePoint are functioning properly.  It seems to be related to a SSP.  Can someone please provide some guidance on what may need to be done here?
Avatar of Michael Carrillo
Michael Carrillo
Flag of United States of America image

Does your Farm Administrator have permissions to access this site?
If not then perhaps the Account being used is locked.
Check your Service Accounts in Central Admin under Operations Tab, Security Configuration heading.
Also is your User Profile Data in a separate Web Application (Separate content database)?
You might want to double check your SQL Service account being used in SQL Management Studio.
Avatar of atrionmedical

ASKER

I updated the credentials under "Central Administration > Operations > Manage Single Sign-On > Manage Account Information for an Enterprise Application Definition" (see attachment) and the webpart worked briefly, but then stopped again.  Now I can't update those credentials again.  Any more help would be greatly appreciated.

Does your Farm Administrator have permissions to access this site?  YES
If not then perhaps the Account being used is locked.  NOPE
Check your Service Accounts in Central Admin under Operations Tab, Security Configuration heading.  I RESET ALL OF THESE JUST TO BE SURE
Also is your User Profile Data in a separate Web Application (Separate content database)?  SSO Database
You might want to double check your SQL Service account being used in SQL Management Studio.    I verified Roles/Permissions
SSOError.jpg
Still kind of worried that you might have locked out an account.

What you can do is check the event logs.  Try accessing the User Profile Web App and then check the Server Event logs.
This might give you the clue you need to find the problem.  

There is also the Services on the WFE that might be using a locked out account.  You might also want to compare your authentication configuration in IIS for this Web Application to that of a working Web Application.
I re-read your problem and realized that this could be the same problem that we spent two weeks resolving.  Apparently SharePoint Service Account names need to be 19 or fewer characters long.  We had a service account that was 20 characters and it would work initially and then stopped working. looked like account was locked, but was not locked.

Please verify that your service account is 19 or fewer characters long.
the account name is 19 characters long.  No accounts are locked out.
Also, for clarity:
1. Is the problem getting to the User Profile Data or getting to the webpart for company contact list?

2. In Central Admin|Operations|Solution Management does the solution that includes the Company Contact list webpart have a status of 'deployed'? Also is it deployed Globally (Deployed To Column) or deployed to the User Profile Data application.

On your WFE servers:

3. In IIS is your User Profile Data application pool using the same service account as your working main SharePoint Application?

4. In you inetpub/wwwroot/wss/virtualDirectories/[Port Number] for the User Profile Data folder Do you have the same permissions (properties|Security tab) as your main SharePoint Application folder?

6. Attempt to access the User Profile Data application then in Server Manager under each of the following:
      -Diagnostics|Event Viewer|Windows Logs|Application
      -Diagnostics|Event Viewer|Windows Logs|Security
      -Diagnostics|Event Viewer|Windows Logs|System
Look for new events that might better describe what is happening.
Note: Server Manager is under Start|Administrative Tools|Server manager on your WFE.
ASKER CERTIFIED SOLUTION
Avatar of atrionmedical
atrionmedical
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
closed issue ... with no actual solution found...server now out of service