reporting user is disabled in SQL Server after synchronization

Last post 08-21-2008 7:04 AM by RichSara. 4 replies.
Page 1 of 1 (5 items)
Sort Posts: Previous Next
  • 08-14-2008 11:53 AM

    reporting user is disabled in SQL Server after synchronization

    Related post: (~ref "Recommended security setup for SQL and ODBC?"~ http://www.mibuso.com/forum/viewtopic.php?t=22608&start=0&postdays=0&postorder=asc&highlight= )

    We have configured a reporting user on SQL server (NavReportingUser ) which has data read access only. This profile is the profile we are using to enable SQL Server RS reporting over Navision data. It’s a best practice approach. The problem we have is that the user mapping for this user is disabled in SQL Server after synchronizing Navision users in production.

    One of our var consultants says that "he has brought it up with Microsoft but does not expect a fix anytime soon. If you synchronize users through Navision it will remove the database mapping for any user not configured in Navision for that database. For example, if you have NavReportingUser setup as a login and then it is a user in the PRODUCTION database. You must configure the NavReportingUser inside the Navision database either as a windows or database login."

    Well, we have set the profile up in the network and set it up in Navision security as well. The problem is not resolved. What other steps might we need to take? Is there a white paper that you are aware of that we can refer to? Any help is appreciated.

    Peace, Rich Sara
    Rich Sara
    Contract Programmer\Analyst~Solution Developer
    NER Data Products, Inc
    Corp. Email: www.Rsara@Nerdata.Com
    LinkedIn Profile: http://www.linkedin.com/in/richsara
    Work Phone 888-637-3282 Ext 132
    Cell Phone 856-627-5961
    Office Fax 856-2393

  • 08-15-2008 2:06 AM In reply to

    Re: reporting user is disabled in SQL Server after synchronization

    Hi,
    I could reproduce your case with remove user mapping if user is not also a user in NAV security. (interesting: I also did not know this : ))
    But I could solve it if a setup the user also in the NAV system!?
    Cold you give me more details what are your steps:
    -Do you use windows or database user?
    -Do you use standard or enhanced security model?
    -Which version?
    -Which roles do you attend to the NAV user?
    -Which roles (mapping) do you attend to the sql server user?

    Regards,
    Rene
  • 08-15-2008 7:59 AM In reply to

    Re: reporting user is disabled in SQL Server after synchronization

    Cheers  Rene;

    A few answers: 

    1: the reoprting user is setup in the NAV system; I can log in and access Nav functions
    2: We use windows integrated security ... This user, RE ODBC access, uses SQL Server authentication
    3: we use standard security model
    4: Nav 50, SP1 ; SQL Server 2005, SP2
    5:
    Which roles do you attend to the NAV user? Nav roles "Super (Data)"
    6: Which roles (mapping) do you attend to the sql server user?
    "db_datareader", "public"

    Thx Rene, you rock.

  • 08-15-2008 12:27 PM In reply to

    Re: reporting user is disabled in SQL Server after synchronization

    Hi again,

    I tried

    1. setup a new (SQL) user on SQL
    2. add the roles public and db_reader
    3. setup the user in NAV (database authentication) 
    4. add the role SUPER (data)
    5. Synchronize

    it seems to work! : -( .. the user was NOT removed or disabled on SQL server.

    This is what you did, isn’t it?

    Let’s go on with my questions:

    • How can you see that the user is also disabled even though you setup it on NAV system?
    • Do you get an error message at anytime? 
    • Is the status on SQL Server (in the user panel) disabled or deny?
    • Is the SQL Server configured for “mixed Mode”? (sorry for this question)?

    If you like you can send me some printscreens to my Email address!

    Cheers, 

    Rene

  • 08-21-2008 7:04 AM In reply to

    Re: reporting user is disabled in SQL Server after synchronization

      Normal 0 false false false EN-US X-NONE X-NONE MicrosoftInternetExplorer4 /* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-priority:99; mso-style-qformat:yes; mso-style-parent:""; mso-padding-alt:0in 5.4pt 0in 5.4pt; mso-para-margin-top:0in; mso-para-margin-right:0in; mso-para-margin-bottom:10.0pt; mso-para-margin-left:0in; line-height:115%; mso-pagination:widow-orphan; font-size:11.0pt; font-family:"Calibri","sans-serif"; mso-ascii-font-family:Calibri; mso-ascii-theme-font:minor-latin; mso-fareast-font-family:"Times New Roman"; mso-fareast-theme-font:minor-fareast; mso-hansi-font-family:Calibri; mso-hansi-theme-font:minor-latin;}

     Colleagues;

    I am pleased to report to you that I have apparently resolved this troublesome issue. The steps I took are as follows:

    SQL Server steps:

    1:  A new login was created in SQL Server with no domain specification using SQL Server authentication
    2: A password was used, but password policy and expiration were disabled
    3: User mappings were set on the target dbase (“production” in this case). User is the new login, default schema was the login id. Role memberships were set to public, db_datareader
    4: Status settings are: Permission to connect to dbase engine = “Grant”, Login=”Enabled”

    Navision security steps:

    1: A new database login was created for the new login id
    2: A single role “SUPER (DATA) “ was assigned to the login

    Testing:

    Multiple (at least 5) resynchs did not alter the dbase mappings. An external ODBC system data source was tested using the new login against SQL and it ran fine. Our shared production data source used by our SQL RS reports was updated, tested, and re-deployed to the report server, all reports ran fine.

    Thanks for everyone’s help, I think that we can (hopefully) put this issue to rest.

    Cheers! RDS

     

     

     

Page 1 of 1 (5 items)