AppSync: SQL service "Failed to authenticate using the provided credentials"
Summary: AppSync: SQL service plan fails with error - "Failed to authenticate using the provided credentials" and "the user has not been granted the requested logon type at this computer." . The Windows SQL User must have Log On Locally rights enabled even when the user is part of the local admin group. ...
Symptoms
Note: The key part of the following error seen in the Service Plan Events and Plugin log is:
Additional information: Logon failure: the user has not been granted the requested logon type at this computer.
AppSync service plan protecting SQL database fails with the following errors:
Service Plan Events:
2019-09-25 12:00:11.268,Application discovery,bde03eab-ad25-4b46-a3e6-bb626ce57c5e,GENL_000003,<SQL SERVER NAME>,Failed to authenticate using the provided credentials. Verify that the credentials are correct and that the account has the required rights and privileges. Additional information: Logon failure: the user has not been granted the requested logon type at this computer.
Server log:
09-25-2019 12:00:11.268 ERROR [Thread-10426 (HornetQ-client-global-threads-1736806657)] [org.jboss.as.ejb3.invocation] [] [] WFLYEJB0034: EJB Invocation failed on component SqlServiceBean for method public com.emc.archway.objectmodel.host.sql.SqlServerInstances com.emc.archway.service.sqlservice.SqlServiceBean.discoverDatabases
Plugin Log:
2019-09-25 12:00:11.218 INFO [81640] [] [<SQL SERVER NAME>] [ae6994cd-3fc0-4660-9943-92568f3d0b11] SQL: impersonating nam\<USER>
2019-09-25 12:00:11.336 ERROR [81640] [] [<SQL SERVER NAME>] [ae6994cd-3fc0-4660-9943-92568f3d0b11] SQL: Failed to authenticate using the provided credentials. Verify that the credentials are correct and that they have the required rights and privileges. Additional information: Logon failure: the user has not been granted the requested logon type at this computer.
Cause
Resolution
From the Windows SQL server, go to Security Settings > Local Policies > User Rights Assignment > Allow log on locally > Add the required User or Group and apply change.
Log on locally rights need to be provided even if the User is a member of the local admin group.
Additional Information
| https://downloads.dell.com/TranslatedPDF/AR-SA_537627.pdf |
| https://downloads.dell.com/TranslatedPDF/DE_537627.pdf |
| https://downloads.dell.com/TranslatedPDF/ES_537627.pdf |
| https://downloads.dell.com/TranslatedPDF/ES-XL_537627.pdf |
| https://downloads.dell.com/TranslatedPDF/FR_537627.pdf |
| https://downloads.dell.com/TranslatedPDF/IT_537627.pdf |
| https://downloads.dell.com/TranslatedPDF/JA_537627.pdf |
| https://downloads.dell.com/TranslatedPDF/KO_537627.pdf |
| https://downloads.dell.com/TranslatedPDF/NL_537627.pdf |
| https://downloads.dell.com/TranslatedPDF/PT_537627.pdf |
| https://downloads.dell.com/TranslatedPDF/PT-BR_537627.pdf |
| https://downloads.dell.com/TranslatedPDF/RU_537627.pdf |
| https://downloads.dell.com/TranslatedPDF/SV_537627.pdf |
| https://downloads.dell.com/TranslatedPDF/ZH-CN_537627.pdf |
| https://downloads.dell.com/TranslatedPDF/ZH-TW_537627.pdf |
A future AppSync User and Administration Guide will be updated to include the requirement for log on locally rights to be provided, even if the user is in the local admin group.
Refer to page 114 of the AppSync 3.9 User and Administration Guide for further information on the permissions and rights required when protecting SQL with AppSync.