Core Service Login Issue (store procedure)

Question

There is some simple code for communicating with Tridion over Core Services.The requirement is to get some items from Tridion using basic http protocol for Core Services. I am running the application as console program on my local PC. The Code works fine for different environments so no issue with code.

First problem which we had was related to LDAP and expired password of related account. This was causing with loading Tridion, it was not accessible at all. This is solved by setup new password and restart of com+, tridion services and IIS. Tridion was working.

But, when the application runs after resolving the previous issue, there as an error

System.ServiceModel.FaultException`1[Tridion.ContentManager.CoreService.Client.CoreServiceFault]: Account 'NT AUTHORITY\IUSR' has no permission to access the protected configuration section 'database'. Contact your system administrator..

possible solution was found on the Tridion Re-Index tool cannot be executed and http://docs.sdl.com/LiveContent/content/en-US/SDL_Tridion_2011_SPONE/concept_215FCD336DE34DD5AD342951F6AB3683 d

So we did that for one regular user in tridion and also for NT AUTHORITHY\IUSR user

aspnet_regiis -pa "TridionRsaKeyContainer" "<domain>\<account>"

After running application again, there is a new issue

System.ServiceModel.FaultException`1[Tridion.ContentManager.CoreService.Client.CoreServiceFault]: A database error occurred while executing Stored Procedure "EDA_DIRECTORY_GROUP_MEMBERSHIPS_GETLIST". Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'..

And in Event Viewer there is

A database error occurred while executing Stored Procedure "EDA_DIRECTORY_GROUP_MEMBERSHIPS_GETLIST". Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'. Component: Tridion.ContentManager.CoreService Errorcode: 831 User: NT AUTHORITY\NETWORK SERVICE StackTrace Information Details: at System.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction) at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj, Boolean callerHasConnectionLock, Boolean asyncClose) at System.Data.SqlClient.TdsParser.TryRun(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj, Boolean& dataReady) at System.Data.SqlClient.TdsParser.Run(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj) at System.Data.SqlClient.SqlInternalConnectionTds.CompleteLogin(Boolean enlistOK) at System.Data.SqlClient.SqlInternalConnectionTds.AttemptOneLogin(ServerInfo serverInfo, String newPassword, SecureString newSecurePassword, Boolean ignoreSniOpenTimeout, TimeoutTimer timeout, Boolean withFailover)

Any help? Any thoughts?

Thanks.

Answer 1

NT AUTHORITHY\IUSR is used by IIS to annonymous access. It is not necessary to be granted to read TridionRsaKeyContainer.

Have you set on your IIS Tridion Website, Annonymous Authentication enabled? if the answer is yes, you have to change this setting to disable and set Windows Authentication to Enable.

I hope this helps you!

Answer 2

I agree with the point with annonymous access (+1 for that). It seems Active directory group users are configured. In that case, You can try with the current windows login for accessing the Tridion CME from your application using Core service client. Like below in the class constructor:

public CoreService()
{
_client = new SessionAwareCoreServiceClient(“wsHttp”);
_client.Impersonate(WindowsIdentity.GetCurrent().Name);
}

You can refer here for the core service configuration and code.

Let me know if this helps !!