none
Application Pool Identity Does Not Have Access to ProfileDB RRS feed

  • Question

  • I have a five server farm.  2 User facing WFE's and 2 application servers and 1 SQL server

    I installed and configured my farm.  I verified that all services are running and I have profile imports occuring without error.  My Sites are operational and the farm is funcitoning.

    I created a couple of web applications, in addition to the my site web application and they worked fine.  I've just created a web application and a site collection in the web application and I'm receiving errors when attempting to bring up the home page of the site collection.  There is an error in the application event log that I don't believe is associated.  I do have errors in the ULS logs that show the application pool identity account does not have access to the ProfileDB. 

    I've checked the database permissions and the application pool identity does not have any access to any of the User Profiles Services databases.  I've compared this accounts access to the application identities associated with they web apps I created previously and the application identities that we created weeks ago do have access to each of these databases.

    In short I'm creating a managed account, creating a web application that uses the new managed account, creating a site collection in the new web application and then attempting to browse that site collection.

    I'm assuming SharePoint should automatically provide the application identities with the correct access to each of these databases?  If yes, any reason why this is no longer occuring?

    Once I give the account dbo permissions to the ProfileDB the site will come up.  But, my concern is that the application pool identities are no longer being give access to the farm correctly. 

    Event Log Error:

    Log Name:      Application
    Source:        Microsoft-Windows-User Profiles Service
    Date:          6/27/2011 7:51:35 AM
    Event ID:      1511
    Task Category: None
    Level:         Error
    Keywords:     
    User:          domain\qa_spapp4
    Computer:      WebFrontEndServer
    Description:
    Windows cannot find the local profile and is logging you on with a temporary profile. Changes you make to this profile will be lost when you log off.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" />
        <EventID>1511</EventID>
        <Version>0</Version>
        <Level>2</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x8000000000000000</Keywords>
        <TimeCreated SystemTime="2011-06-27T14:51:35.108316500Z" />
        <EventRecordID>20693</EventRecordID>
        <Correlation />
        <Execution ProcessID="776" ThreadID="1508" />
        <Channel>Application</Channel>
        <Computer>WebFrontEndServer</Computer>
        <Security UserID="S-1-5-21-2076597496-1877097563-145704350-34520" />
      </System>
      <EventData>
      </EventData>
    </Event>

    ULS Log

    06/27/2011 07:53:22.89 w3wp.exe (0x04C4) 0x1054 SharePoint Foundation Monitoring nasq Medium Entering monitored scope (Request (GET:http://intranetsite)) 
    06/27/2011 07:53:22.89 w3wp.exe (0x04C4) 0x1054 SharePoint Foundation Logging Correlation Data xmnv Medium Name=Request (GET:http://intranetsite) 05dd5136-90c7-48fc-b73d-a2c34b091db4
    06/27/2011 07:53:22.89 w3wp.exe (0x04C4) 0x1054 SharePoint Foundation Logging Correlation Data xmnv Medium Site=/ 05dd5136-90c7-48fc-b73d-a2c34b091db4
    06/27/2011 07:53:22.89 w3wp.exe (0x04C4) 0x1054 SharePoint Foundation Monitoring b4ly High Leaving Monitored Scope (PostResolveRequestCacheHandler). Execution Time=7.75492885097064 05dd5136-90c7-48fc-b73d-a2c34b091db4
    06/27/2011 07:53:22.95 w3wp.exe (0x04C4) 0x1054 SharePoint Server Database tzku High ConnectionString: 'Data Source=DatabaseServer;Initial Catalog="Profile DB";Integrated Security=True;Enlist=False;Asynchronous Processing=False;Connect Timeout=15'    ConnectionState: Closed ConnectionTimeout: 15 05dd5136-90c7-48fc-b73d-a2c34b091db4
    06/27/2011 07:53:22.95 w3wp.exe (0x04C4) 0x1054 SharePoint Portal Server User Profiles ci5b Medium Failure checking user access permissions for User Profile Application Proxy 'SharePoint_Service_User_Profile_Service'. Exception: System.Data.SqlClient.SqlException: Cannot open database "Profile DB" requested by the login. The login failed.  Login failed for user 'domain\qa_spapp4'.     at System.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, Boolean breakConnection)     at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj)     at System.Data.SqlClient.TdsParser.Run(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj)     at System.Data.SqlClient.SqlInternalConnectionTds.CompleteLogin(Boolean enlistOK)     at System.Data.SqlClient.SqlInternalConnectionTds.AttemptOneLogin(ServerInfo serverInfo, String newPassword, Boolean ignoreSniOpenTimeout, Int64 timerExpire, SqlConnection owningObject)     at System.Data.SqlClient.SqlInternalConnectionTds.LoginNoFailover(String host, String newPassword, Boolean redirectedUserInstance, SqlConnection owningObject, SqlConnectionString connectionOptions, Int64 timerStart)     at System.Data.SqlClient.SqlInternalConnectionTds.OpenLoginEnlist(SqlConnection owningObject, SqlConnectionString connectionOptions, String newPassword, Boolean redirectedUserInstance)     at System.Data.SqlClient.SqlInternalConnectionTds..ctor(DbConnectionPoolIdentity identity, SqlConnectionString connectionOptions, Object providerInfo, String newPassword, SqlConnection owningObject, Boolean redirectedUserInstance)     at System.Data.SqlClient.SqlConnectionFactory.CreateConnection(DbConnectionOptions options, Object poolGroupProviderInfo, DbConnectionPool pool, DbConnection owningConnection)     at System.Data.ProviderBase.DbConnectionFactory.CreatePooledConnection(DbConnection owningConnection, DbConnectionPool pool, DbConnectionOptions options)     at System.Data.ProviderBase.DbConnectionPool.CreateObject(DbConnection owningObject)     at System.Data.ProviderBase.DbConnectionPool.UserCreateRequest(DbConnection owningObject)     at System.Data.ProviderBase.DbConnectionPool.GetConnection(DbConnection owningObject)     at System.Data.ProviderBase.DbConnectionFactory.GetConnection(DbConnection owningConnection)     at System.Data.ProviderBase.DbConnectionClosed.OpenConnection(DbConnection outerConnection, DbConnectionFactory connectionFactory)     at System.Data.SqlClient.SqlConnection.Open()     at Microsoft.Office.Server.Data.SqlSession.OpenConnection()     at Microsoft.Office.Server.Data.SqlSession.ExecuteReader(SqlCommand command, CommandBehavior behavior, SqlQueryData monitoringData, Boolean retryForDeadLock)     at Microsoft.Office.Server.Data.SqlSession.ExecuteReader(SqlCommand command, Boolean retryForDeadLock)     at Microsoft.Office.Server.Administration.UserProfileApplication.PartitionPropertiesCache.GetPartitionProperties()     at Microsoft.Office.Server.Administration.UserProfileApplication.PartitionPropertiesCache..ctor(Guid applicationID)     at Microsoft.Office.Server.Administration.UserProfileServiceProxy.GetPartitionPropertiesCache(Guid applicationID)     at Microsoft.Office.Server.Administration.UserProfileApplicationProxy.get_PartitionPropertiesCache()     at Microsoft.Office.Server.Administration.UserProfileApplicationProxy.DataCache.get_PartitionProperties()     at Microsoft.Office.Server.Administration.UserProfileApplicationProxy.DataCache.get_UserAcl()     at Microsoft.Office.Server.Administration.UserProfileApplicationProxy.DataCache.CheckUserAccess(UserProfileApplicationUserRights rights)     at Microsoft.Office.Server.Administration.UserProfileApplicationProxy.CheckUserAccess(Guid partitionID, UserProfileApplicationUserRights rights) 05dd5136-90c7-48fc-b73d-a2c34b091db4
    06/27/2011 07:53:22.95 w3wp.exe (0x04C4) 0x1054 SharePoint Server Database tzku High ConnectionString: 'Data Source=DatabaseServer;Initial Catalog="Profile DB";Integrated Security=True;Enlist=False;Asynchronous Processing=False;Connect Timeout=15'    ConnectionState: Closed ConnectionTimeout: 15 05dd5136-90c7-48fc-b73d-a2c34b091db4
    06/27/2011 07:53:22.95 w3wp.exe (0x04C4) 0x1054 SharePoint Portal Server User Profiles ci5b Medium Failure checking user access permissions for User Profile Application Proxy 'SharePoint_Service_User_Profile_Service'. Exception: System.Data.SqlClient.SqlException: Cannot open database "Profile DB" requested by the login. The login failed.  Login failed for user 'domain\qa_spapp4'.     at System.Data.ProviderBase.DbConnectionPool.GetConnection(DbConnection owningObject)     at System.Data.ProviderBase.DbConnectionFactory.GetConnection(DbConnection owningConnection)     at System.Data.ProviderBase.DbConnectionClosed.OpenConnection(DbConnection outerConnection, DbConnectionFactory connectionFactory)     at System.Data.SqlClient.SqlConnection.Open()     at Microsoft.Office.Server.Data.SqlSession.OpenConnection()     at Microsoft.Office.Server.Data.SqlSession.ExecuteReader(SqlCommand command, CommandBehavior behavior, SqlQueryData monitoringData, Boolean retryForDeadLock)     at Microsoft.Office.Server.Data.SqlSession.ExecuteReader(SqlCommand command, Boolean retryForDeadLock)     at Microsoft.Office.Server.Administration.UserProfileApplication.PartitionPropertiesCache.GetPartitionProperties()     at Microsoft.Office.Server.Administration.UserProfileApplication.PartitionPropertiesCache..ctor(Guid applicationID)     at Microsoft.Office.Server.Administration.UserProfileServiceProxy.GetPartitionPropertiesCache(Guid applicationID)     at Microsoft.Office.Server.Administration.UserProfileApplicationProxy.get_PartitionPropertiesCache()     at Microsoft.Office.Server.Administration.UserProfileApplicationProxy.DataCache.get_PartitionProperties()     at Microsoft.Office.Server.Administration.UserProfileApplicationProxy.DataCache.get_UserAcl()     at Microsoft.Office.Server.Administration.UserProfileApplicationProxy.DataCache.CheckUserAccess(UserProfileApplicationUserRights rights)     at Microsoft.Office.Server.Administration.UserProfileApplicationProxy.CheckUserAccess(Guid partitionID, UserProfileApplicationUserRights rights) 05dd5136-90c7-48fc-b73d-a2c34b091db4
    06/27/2011 07:53:22.95 w3wp.exe (0x04C4) 0x1054 Web Content Management Publishing 7fz3 Medium Setting [Display] as the FormContext.FormMode for the current page 05dd5136-90c7-48fc-b73d-a2c34b091db4
    06/27/2011 07:53:22.95 w3wp.exe (0x04C4) 0x1054 Document Management Server Document Management eua9 Medium Pending update MetadataNavigationHints for Web[774215fe-8ff0-4510-a921-9b20e0321e06]List[25d1af92-bce4-444f-afe0-a9cfec229a14] = 0 (NoSettings) 05dd5136-90c7-48fc-b73d-a2c34b091db4
    06/27/2011 07:53:22.95 w3wp.exe (0x04C4) 0x1054 SharePoint Server Database tzku High ConnectionString: 'Data Source=DatabaseServer;Initial Catalog="Profile DB";Integrated Security=True;Enlist=False;Asynchronous Processing=False;Connect Timeout=15'    ConnectionState: Closed ConnectionTimeout: 15 05dd5136-90c7-48fc-b73d-a2c34b091db4
    06/27/2011 07:53:22.96 w3wp.exe (0x04C4) 0x1054 Document Management Server Document Management eub0 Medium Skip Redundant update MetadataNavigationHints for Web[774215fe-8ff0-4510-a921-9b20e0321e06]List[mossMDNHints_25d1af92-bce4-444f-afe0-a9cfec229a14] = 0 (NoSettings) 05dd5136-90c7-48fc-b73d-a2c34b091db4
    06/27/2011 07:53:22.96 w3wp.exe (0x04C4) 0x1054 SharePoint Foundation Runtime tkau Unexpected System.Data.SqlClient.SqlException: Cannot open database "Profile DB" requested by the login. The login failed.  Login failed for user 'domain\qa_spapp4'.    at System.Data.ProviderBase.DbConnectionPool.GetConnection(DbConnection owningObject)     at System.Data.ProviderBase.DbConnectionFactory.GetConnection(DbConnection owningConnection)     at System.Data.ProviderBase.DbConnectionClosed.OpenConnection(DbConnection outerConnection, DbConnectionFactory connectionFactory)     at System.Data.SqlClient.SqlConnection.Open()     at Microsoft.Office.Server.Data.SqlSession.OpenConnection()     at Microsoft.Office.Server.Data.SqlSession.ExecuteReader(SqlCommand command, CommandBehavior behavior, SqlQueryData monitoringData, Boolean retryForDeadLock)     at Microsoft.Office.Server.Data.SqlSession.ExecuteReader(SqlCommand command, Boolean retryForDeadLock)     at Microsoft.Office.Server.Administration.UserProfileApplication.PartitionPropertiesCache.GetPartitionProperties()     at Microsoft.Office.Server.Administration.UserProfileApplication.PartitionPropertiesCache..ctor(Guid applicationID)     at Microsoft.Office.Server.Administration.UserProfileServiceProxy.GetPartitionPropertiesCache(Guid applicationID)     at Microsoft.Office.Server.Administration.UserProfileApplicationProxy.get_PartitionPropertiesCache()     at Microsoft.Office.Server.Administration.UserProfileApplicationProxy.DataCache.get_PartitionProperties()     at Microsoft.Office.Server.Administration.UserProfileApplicationProxy.GetMySitePortalUrl(SPUrlZone zone, Guid partitionID)     at Microsoft.Office.Server.Administration.UserProfileApplicationProxy.GetMySitePortalUrl(SPUrlZone zone, SPServiceContext serviceContext)     at Microsoft.Office.Server.WebControls.MyLinksRibbon.EnsureMySiteUrls()     at Microsoft.Office.Server.WebControls.MyLinksRibbon.get_PortalMySiteUrlAvailable()     at Microsoft.Office.Server.WebControls.MyLinksRibbon.OnLoad(EventArgs e)     at System.Web.UI.Control.LoadRecursive()     at System.Web.UI.Control.LoadRecursive()     at System.Web.UI.Control.LoadRecursive()     at System.Web.UI.Control.LoadRecursive()     at System.Web.UI.Control.LoadRecursive()     at System.Web.UI.Control.LoadRecursive()     at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) 05dd5136-90c7-48fc-b73d-a2c34b091db4
    06/27/2011 07:53:22.96 w3wp.exe (0x04C4) 0x1054 SharePoint Foundation Monitoring b4ly Medium Leaving Monitored Scope (Request (GET:http://intranetsite)). Execution Time=87.9214688350462 05dd5136-90c7-48fc-b73d-a2c34b091db4

    Monday, June 27, 2011 3:28 PM

Answers

All replies