Re: Lost "guest" user, cannot get back.

From: Kimberly L. Tripp (Kimberly@nospam.sqlskills.com)
Date: 11/12/02


From: "Kimberly L. Tripp" <Kimberly@nospam.sqlskills.com>
Date: Mon, 11 Nov 2002 15:10:40 -0800


Hey there Bo - I'm probably missing something here BUT sp_grantdbaccess is
the wrong procedure to use... You don't want to grant access to a login
(which is what sp_grantdbaccess does) you want to add a "guest" account to
the database. These are two VERY different things. What you really need to
do is

    sp_adduser 'guest'

within the databases where you want a guest account. You DO NOT want a login
named guest and you do not want to use sp_grantdbaccess.

Now as for why this account is disappearing - that doesn't seem to make
sense other than some SysAdmin is maybe running some setup script that drops
it? From a first guess, I'd say that the dump is not related to this
issue??? So - here's what you need to think about - What else are you doing
between the "re-install" and the time the dump occurs? Are you adding a
guest LOGIN? Are you running a script to do "setup" of the server? Did
someone recently say that there were security issues on the server and
create a script to help? If they did then I bet this is the script that's
blowing away the guest USERNAME. Do you have any scripts that execute a
bunch of these sp_grandbaccess commands? I can only guess that some
automated script is somehow corrupting the real guest USERNAME when they run
it?

Only speculation on why you're getting the stack dump BUT the sp_adduser
should help if the guest account gets removed. You might want to start a
profiler trace that ONLY traces for this command (sp_dropuser) and then you
might be able to isolate when/how it gets removed.

hth,
kt

"Bo Eaton" <eatonbof@paho.org> wrote in message
news:#bcP4qaiCHA.1800@tkmsftngp09...
> Two problems that may be related:
>
> 1. Some databases, including master, lose the guest login. I run
> "sp_grantdbaccess guest", with a successfull return, until I am blue in
the
> face, but there is still no guest user in sysusers or in the enterprise
> manager user list. "sp_revokedbaccess guest" gives the correct error that
it
> cannot revoke access, because the user does not exist in the database.
>
> 2. After running the server for a period of weeks, it enters a state in
> which it returns an error such as "[Microsoft][ODBC SQL Server Driver][SQL
> Server]SqlDumpExceptionHandler: Process 136 generated fatal exception
> c0000005 EXCEPTION_ACCESS_VIOLATION. SQL Server is terminating this
> process." and variations. The SQL user (not NT security) is a user in the
> database. If I make the user a "System Administrator" for the entire
server,
> the error goes away. Obviously, however, I do not want to make every user
a
> System Administrator. If I re-intall SQL Server the problem disappears for
a
> while, as well.
>
> Thanks.
>
>



Relevant Pages

  • Re: Hacker activity?
    ... >login to a server, most as root but some are attempts to login to ... >telnet, all come from the same remote server, and all fail. ... >getting some odd cgi calls to a script on a secure ssl server. ... Make sure root cannot login to your system via ssh. ...
    (freebsd-questions)
  • Re: Limit desktop & start menu
    ... Create a login script that runs when users log into the TS, and map the R: ... persisitent "R" drive on the server itself and that may cure it. ...
    (microsoft.public.windows.terminal_services)
  • Re: ADAM - SASL Bind for Windows Security Principal
    ... So maybe I was not login as guest in the latter case. ... user enabled on my Windows 2003 ADAM server. ... bogus user and decide to fallback to guest user, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Slow TS logon from dumb terminals.
    ... Is a login from the console also slow? ... Do the users run a login script? ... if the Real-time protection component runs in every user session. ... No virus protection as only the server has s CD Rom/USB Access/Floppy. ...
    (microsoft.public.win2000.termserv.clients)
  • Re: NIS+ User addtion
    ... # nisclient -c guest ... You will be adding DES credentials in domain aaa.bbb.ccc. ... Now I tried to login to the client (or master server) using the new id. ...
    (comp.unix.solaris)