SoftTree Technologies SoftTree Technologies
Technical Support Forums
RegisterSearchFAQMemberlistUsergroupsLog in
Problem in enable system audit option
Goto page 1, 2  Next
 
Reply to topic    SoftTree Technologies Forum Index » DB Audit, DB Mail, DB Tools View previous topic
View next topic
Problem in enable system audit option
Author Message
saran



Joined: 24 Aug 2006
Posts: 2

Post Problem in enable system audit option Reply with quote

Hi

When i click the enable system audit button inside the system audit i got dialog box, it contains
Auditing has been installed successfully but not yet activated. You must restart the SQL Server for the new settings to take affect!
Do you want to restart SQL Server now?
I click the yes button i got another dialog box it contains
Unable to restart remote SQL server service, insufficient permissions or service is not responding. Try restarting SQL Server manually.
Then i click the ok button i got another dialog box it contains
DB Audit’s audit procedures failed to start. Check windows application event log on the server for additional information

What's the problem, please help me.

Thu Aug 24, 2006 5:33 am View user's profile Send private message
SysOp
Site Admin


Joined: 26 Nov 2006
Posts: 6509

Post Re: Problem in enable system audit option Reply with quote

First you need to restart SQL Server instance which you havne't done yet.
After that please check your Windows Application Event Log on the server and verify there are no DB Audit errors in the log. Look for messages that have "DB Audit" in the Source column.

: Hi

: When i click the enable system audit button inside the system audit i got
: dialog box, it contains
: Auditing has been installed successfully but not yet activated. You must
: restart the SQL Server for the new settings to take affect!
: Do you want to restart SQL Server now?
: I click the yes button i got another dialog box it contains
: Unable to restart remote SQL server service, insufficient permissions or
: service is not responding. Try restarting SQL Server manually.
: Then i click the ok button i got another dialog box it contains
: DB Audit’s audit procedures failed to start. Check windows application event
: log on the server for additional information

: What's the problem, please help me.

Thu Aug 24, 2006 8:03 am View user's profile Send private message
saran



Joined: 24 Aug 2006
Posts: 2

Post Re: Problem in enable system audit option Reply with quote

Hi

I got three event error messages in DB Audit source column

First one,

The description for Event ID ( 1001 ) in Source ( DB Audit ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event:
SQL Server message 18456, state 1, severity 14
Login failed for user 'sa'.

Second one,

The description for Event ID ( 1001 ) in Source ( DB Audit ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event:
Error #10003: Login incorrect

Third one,

The description for Event ID ( 1001 ) in Source ( DB Audit ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event:
Error connecting to the database!.

Please give solution for this problem


Thu Aug 24, 2006 9:22 am View user's profile Send private message
SysOp
Site Admin


Joined: 26 Nov 2006
Posts: 6509

Post Re: Problem in enable system audit option Reply with quote

Please use trusted connection when enabling the auditing. On the connection dialog in DB Audit check "Trusted connection" box, connect to the db, open up System Audit Settings dialog and then Disable and re-Enable the auditing.

: Hi

: I got three event error messages in DB Audit source column

: First one,

: The description for Event ID ( 1001 ) in Source ( DB Audit ) cannot be found.
: The local computer may not have the necessary registry information or
: message DLL files to display messages from a remote computer. You may be
: able to use the /AUXSOURCE= flag to retrieve this description; see Help
: and Support for details. The following information is part of the event:
: SQL Server message 18456, state 1, severity 14
: Login failed for user 'sa'.

: Second one,

: The description for Event ID ( 1001 ) in Source ( DB Audit ) cannot be found.
: The local computer may not have the necessary registry information or
: message DLL files to display messages from a remote computer. You may be
: able to use the /AUXSOURCE= flag to retrieve this description; see Help
: and Support for details. The following information is part of the event:
: Error #10003: Login incorrect

: Third one,

: The description for Event ID ( 1001 ) in Source ( DB Audit ) cannot be found.
: The local computer may not have the necessary registry information or
: message DLL files to display messages from a remote computer. You may be
: able to use the /AUXSOURCE= flag to retrieve this description; see Help
: and Support for details. The following information is part of the event:
: Error connecting to the database!.

: Please give solution for this problem

Thu Aug 24, 2006 9:50 am View user's profile Send private message
abbasali



Joined: 31 Mar 2008
Posts: 10
Country: United Arab Emirates

Post Reply with quote
Hi

I am facing the same issue. Even after applying the trusted connection setting.
Kindly suggest me the whole procedure for setting a profile till enabling it.
We are currently evaluating the DBAudit tool and during testing we are facing issues.
Waiting for your early response.

Thanks
Mon Mar 31, 2008 7:53 am View user's profile Send private message
SysOp
Site Admin


Joined: 26 Nov 2006
Posts: 6509

Post Reply with quote
Hi,

the procedure is described step by step in the DB Audit manual which is installed with the software.

Are you getting exactly the same issue?
Quote:
SQL Server message 18456, state 1, severity 14: Login failed for user 'sa'.



The fact that it says 'sa' in the message indicates that it si not using Windows Authentication. Also if you take a look at preceding messages in the Application Event Log you should find an event record in which DB Audit's indicates which login and authentication type is used by the auditing processes to connect to your database server. Please let us know if you need further help with that. Don't forget to indicate your DB Audit version.
Mon Mar 31, 2008 11:39 am View user's profile Send private message
abbasali



Joined: 31 Mar 2008
Posts: 10
Country: United Arab Emirates

Post Reply with quote
I am using Db Audit Expert 4.0 and having following err. msg:


The description for Event ID ( 1001 ) in Source ( DB Audit ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event:

Using 'sa' SQL-authentication login for the audit process..
Tue Apr 01, 2008 1:04 am View user's profile Send private message
abbasali



Joined: 31 Mar 2008
Posts: 10
Country: United Arab Emirates

Post Reply with quote
I am using Db Audit Expert 4.0 and having following err. msg:


The description for Event ID ( 1001 ) in Source ( DB Audit ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event:

Using 'sa' SQL-authentication login for the audit process..
Tue Apr 01, 2008 1:04 am View user's profile Send private message
SysOp
Site Admin


Joined: 26 Nov 2006
Posts: 6509

Post Reply with quote
What makes you think this is an error message? Isn't the message type set to Information?
Tue Apr 01, 2008 1:29 am View user's profile Send private message
SysOp
Site Admin


Joined: 26 Nov 2006
Posts: 6509

Post Reply with quote
PS. This message is recorded for auditing purposes, to provide a trail of when and how DB Audit is started.
Tue Apr 01, 2008 1:30 am View user's profile Send private message
abbasali



Joined: 31 Mar 2008
Posts: 10
Country: United Arab Emirates

Post Failed to Enable Audit Reply with quote
Following are the error we are having.

The description for Event ID ( 1001 ) in Source ( DB Audit ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event:

[Microsoft][ODBC SQL Server Driver][SQL Server]Login failed for user 'sa'..

The description for Event ID ( 1001 ) in Source ( DB Audit ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event:

Audit event writer process is unable to connect to the database!.
Tue Apr 01, 2008 4:26 am View user's profile Send private message
SysOp
Site Admin


Joined: 26 Nov 2006
Posts: 6509

Post Reply with quote
Have you changed sa's password recently? During the audit system installation, in case you used SQL Authentication option instead of Trusted connection option, DB Audit records the login you entered in the Management Console and uses it for the auditing services. If you change your password later, you need to disable and then re-enable the auditing. This will make DB Audit to update the saved login and password. To avoid being in this situation and the need to save and maintain passwords, make sure you connect with Trusted connection option when installing the auditing DB Audit, or changing auditing configuration.
Tue Apr 01, 2008 10:59 am View user's profile Send private message
abbasali



Joined: 31 Mar 2008
Posts: 10
Country: United Arab Emirates

Post Reply with quote
Thanks for the response, but i didn't helped me out. Let me explain you what is the actual scenario and how we are implementing DB Audit Expert. SQL Server 2K Ent. edition is installed in another box and we are installing the DB Audit utility into another box. SQL Server is set to mixed mode security. I have created a new database in SQL BOX for Audit Expert.
I am using 'sa' credentials for login to SQL SERVER thats why i didnt used trusted connection. I copied the dll as mentioned in the process. even doing all that i am that error. I hope this will help you understand our issue.
Tue Apr 01, 2008 12:12 pm View user's profile Send private message
SysOp
Site Admin


Joined: 26 Nov 2006
Posts: 6509

Post Reply with quote
Quote:
I am using 'sa' credentials for login to SQL SERVER thats why i didnt used trusted connection.


For the audit installation, you do need to use Trusted connection, in other words use Windows authentication. That's it.

Later, to run reports and use other tools, you can use any login and authentication type you want, but for the installation you should use the Trusted connection option.
Tue Apr 01, 2008 12:50 pm View user's profile Send private message
abbasali



Joined: 31 Mar 2008
Posts: 10
Country: United Arab Emirates

Post Query - installtion Reply with quote
Just to clear that, we just want to monitor specific activities in sql server like 'failed logins'. Is it required to install DB Audit on the same box, because we are still facing exception regarding permission etc.
Wed Apr 02, 2008 4:24 am View user's profile Send private message
Display posts from previous:    
Reply to topic    SoftTree Technologies Forum Index » DB Audit, DB Mail, DB Tools All times are GMT - 4 Hours
Goto page 1, 2  Next
Page 1 of 2

 
Jump to: 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


 

 

Powered by phpBB © 2001, 2005 phpBB Group
Design by Freestyle XL / Flowers Online.