Solved

Logging in as SQL's "sa" Fails on the First Attempt but Not on the Second

Posted on 2016-08-13
10
67 Views
Last Modified: 2016-09-05
Hello:

This experience that I had, yesterday, simply peaked my curiosity.  So, I thought that I would ask you all.

Yesterday, our DBA changed a SQL instance's "sa" password.  

In addition, we have an app that utilizes an ODBC connection to connect to this SQL instance.  The ODBC connection, though, was not configured with "sa" as the user ID.  

In any case, we have this app installed on three Terminal Server boxes.

After this password change, I attempted to login to the app as "sa" on all three boxes.  

The very first attempt on each box failed but not the second.

True, it's possible that I may have simply typed the new password incorrectly, during the first attempt on each box.  

But, I'm not so sure that that's the case.  It just really seems odd to me that, after an "sa" password change, the first attempt on three Terminal Server boxes fails but not on the second attempt.

This seems more than just a simple case of a mistyped password or coincidence.  Again, though, what do you all think?

John
0
Comment
Question by:John Ellis
  • 4
  • 3
  • 2
  • +1
10 Comments
 
LVL 68

Accepted Solution

by:
Qlemo earned 500 total points
ID: 41755254
Looks like a cache issue with the app. Nothing on the DB side can cause this. Probably the old password has been provided instead of the one you entered.
0
 

Author Comment

by:John Ellis
ID: 41755522
Hi There, Qlemo:

Thank you, so much, for the quick response.

I'm sorry.  But, can you please tell me what you meant by, "Probably the old password has been provided instead of the one you entered. "?

Thanks, again!

John
0
 
LVL 68

Expert Comment

by:Qlemo
ID: 41755540
As said, the app might be the culprit - using the old password first, then replacing it with the new one. An application bug.
0
 
LVL 51

Expert Comment

by:Mark Wills
ID: 41755766
Qlemo is probably correct, a caching issue. It can also be caused by your authentication mode and a confused SQL Server as to who you really are. SQL will store user and (hashed) password in Master database and try to match that with SQL login (windows authentication). Basically the user always needs to be associated with a trusted connection. It would normally throw an error message, and would need to see that.

If it was a once off problem, I wouldn't worry too much. But if it is happening often enough, then you will need to resolve properly.

Here is a MS Support link (so, you aren't the only one) describing a possible fix... https://support.microsoft.com/en-au/kb/2121736 also check (this newer one, and describes better with links and error message explanations) https://support.microsoft.com/en-us/kb/555332

To fully diagnose the problem we would need a lot more information from you...
0
 
LVL 51

Expert Comment

by:Mark Wills
ID: 41757997
John,

How are you going with this ? Havent heard from you in a while... Would be interested to hear of any developments.
0
Zoho SalesIQ

Hassle-free live chat software re-imagined for business growth. 2 users, always free.

 

Author Comment

by:John Ellis
ID: 41758002
Hi Mark:

I was just waiting to see, if I received other opinions.  It sound like, based on what you all are saying though, the password was simply cached--either in SQL or the app that I was using.

John
0
 
LVL 51

Expert Comment

by:Mark Wills
ID: 41758089
Fair enough...

Just curious, what authentication mode are you using ?
0
 

Author Comment

by:John Ellis
ID: 41758109
Our SQL uses Mixed Mode Authentication.

John
0
 
LVL 46

Expert Comment

by:Vitor Montalvão
ID: 41784692
Old question but seems not any comment marked as solution.

John, do you remember the error thrown by the first attempt?
0
 
LVL 51

Expert Comment

by:Mark Wills
ID: 41785338
Sounds like Qlemo had the right answer...
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you have heard of RFC822 date formats, they can be quite a challenge in SQL Server. RFC822 is an Internet standard format for email message headers, including all dates within those headers. The RFC822 protocols are available in detail at:   ht…
In this article I will describe the Detach & Attach method as one possible migration process and I will add the extra tasks needed for an upgrade when and where is applied so it will cover all.
This video shows, step by step, how to configure Oracle Heterogeneous Services via the Generic Gateway Agent in order to make a connection from an Oracle session and access a remote SQL Server database table.
Viewers will learn how to use the INSERT statement to insert data into their tables. It will also introduce the NULL statement, to show them what happens when no value is giving for any given column.

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now