SA's Password 'pwd1' can be attacked in a day?

During setup of SQL2005 Standard, I set the password of SA as 'pwd1'. After
about a day, all the data on my DB are removed. Just testing, and not
serious accident for me. Anyway, can that be the result of the easy
password?
After the accident, I changed the password into one with special characters.
But still curious of the culprit.
--
Pohwan Han. Seoul. Have a nice day."Han" <hp4444@.kornet.net.korea> wrote in
news:u#N5Plc8FHA.3752@.tk2msftngp13.phx.gbl:
> During setup of SQL2005 Standard, I set the password of SA as 'pwd1'.
> After about a day, all the data on my DB are removed. Just testing,
> and not serious accident for me. Anyway, can that be the result of the
> easy password?
> After the accident, I changed the password into one with special
> characters. But still curious of the culprit.
First of all: I would never use Mixed Authentication unless I had a very
good reason for doing so. But, yes... It is possible to crack that password
in, should we say under an hour? Actually, I do think less than 15 minutes.
--
Ole Kristian Bangås
MCT, MCDBA, MCDST, MCSE:Security, MCSE:Messaging|||Thanks Ole. That's exactly what I wanted.
--
Pohwan Han. Seoul. Have a nice day.
"Ole Kristian Bang?" <olekristian.bangas@.masterminds.no> wrote in message
news:Xns9719A1FA79287olekristianbangaas@.207.46.248.16...
> "Han" <hp4444@.kornet.net.korea> wrote in
> news:u#N5Plc8FHA.3752@.tk2msftngp13.phx.gbl:
>> During setup of SQL2005 Standard, I set the password of SA as 'pwd1'.
>> After about a day, all the data on my DB are removed. Just testing,
>> and not serious accident for me. Anyway, can that be the result of the
>> easy password?
>> After the accident, I changed the password into one with special
>> characters. But still curious of the culprit.
> First of all: I would never use Mixed Authentication unless I had a very
> good reason for doing so. But, yes... It is possible to crack that
> password
> in, should we say under an hour? Actually, I do think less than 15
> minutes.
> --
> Ole Kristian Bang?
> MCT, MCDBA, MCDST, MCSE:Security, MCSE:Messaging|||Since SQL Server 2005 by default has login auditing set to 'Failed logins
only' go to your SQL Server log and see if somebody has been trying to guess
the sa password. The message will show, depending on your configuration, the
IP address of the client who tried to connect as sa. I also always create an
alert to be notified about this error (18456).
Ben Nevarez, MCDBA, OCP
"Han" <hp4444@.kornet.net.korea> wrote in message
news:u%23N5Plc8FHA.3752@.tk2msftngp13.phx.gbl...
> During setup of SQL2005 Standard, I set the password of SA as 'pwd1'.
> After about a day, all the data on my DB are removed. Just testing, and
> not serious accident for me. Anyway, can that be the result of the easy
> password?
> After the accident, I changed the password into one with special
> characters. But still curious of the culprit.
> --
> Pohwan Han. Seoul. Have a nice day.|||Thanks Ben. I tried that now. Strangely there is just one failed login of SA
at that time(in 6 hours).
" Login failed for user 'sa'. [CLIENT: <named pipe>] "
Hmm, someone succeeded in finding the password after just one failure. I am
not sure whether I am properly viewing the SQL Server logs. And when there
is just one failed log, possibly it can be me.
--
Pohwan Han. Seoul. Have a nice day.
"Ben Nevarez" <bnevarez@.sjm.com> wrote in message
news:eTpOMvh8FHA.4084@.TK2MSFTNGP10.phx.gbl...
> Since SQL Server 2005 by default has login auditing set to 'Failed logins
> only' go to your SQL Server log and see if somebody has been trying to
> guess the sa password. The message will show, depending on your
> configuration, the IP address of the client who tried to connect as sa. I
> also always create an alert to be notified about this error (18456).
> Ben Nevarez, MCDBA, OCP
>
> "Han" <hp4444@.kornet.net.korea> wrote in message
> news:u%23N5Plc8FHA.3752@.tk2msftngp13.phx.gbl...
>> During setup of SQL2005 Standard, I set the password of SA as 'pwd1'.
>> After about a day, all the data on my DB are removed. Just testing, and
>> not serious accident for me. Anyway, can that be the result of the easy
>> password?
>> After the accident, I changed the password into one with special
>> characters. But still curious of the culprit.
>> --
>> Pohwan Han. Seoul. Have a nice day.
>|||Han,
Maybe that one failed sa login was you. But you also need to look at the
other aspects of your database security, not only the sa user. For example,
which users belong to the sysadmin server role (they have the same
permissions as sa) or other server roles. In SQL Server 2000/2005 by default
BUILTIN\Administrators are members of syadmin. Also look at the security of
your database, specially membership of database roles, like db_owner or
db_datawriter.
Also, if you want to find who is doing something in your system you can
implement DML and DDL triggers.
Ben Nevarez, MCDBA, OCP
"Han" <hp4444@.kornet.net.korea> wrote in message
news:O%23LCeKj8FHA.3380@.tk2msftngp13.phx.gbl...
> Thanks Ben. I tried that now. Strangely there is just one failed login of
> SA at that time(in 6 hours).
> " Login failed for user 'sa'. [CLIENT: <named pipe>] "
> Hmm, someone succeeded in finding the password after just one failure. I
> am not sure whether I am properly viewing the SQL Server logs. And when
> there is just one failed log, possibly it can be me.
> --
> Pohwan Han. Seoul. Have a nice day.
> "Ben Nevarez" <bnevarez@.sjm.com> wrote in message
> news:eTpOMvh8FHA.4084@.TK2MSFTNGP10.phx.gbl...
>> Since SQL Server 2005 by default has login auditing set to 'Failed logins
>> only' go to your SQL Server log and see if somebody has been trying to
>> guess the sa password. The message will show, depending on your
>> configuration, the IP address of the client who tried to connect as sa. I
>> also always create an alert to be notified about this error (18456).
>> Ben Nevarez, MCDBA, OCP
>>
>> "Han" <hp4444@.kornet.net.korea> wrote in message
>> news:u%23N5Plc8FHA.3752@.tk2msftngp13.phx.gbl...
>> During setup of SQL2005 Standard, I set the password of SA as 'pwd1'.
>> After about a day, all the data on my DB are removed. Just testing, and
>> not serious accident for me. Anyway, can that be the result of the easy
>> password?
>> After the accident, I changed the password into one with special
>> characters. But still curious of the culprit.
>> --
>> Pohwan Han. Seoul. Have a nice day.
>>
>

SA's Password 'pwd1' can be attacked in a day?

During setup of SQL2005 Standard, I set the password of SA as 'pwd1'. After
about a day, all the data on my DB are removed. Just testing, and not
serious accident for me. Anyway, can that be the result of the easy
password?
After the accident, I changed the password into one with special characters.
But still curious of the culprit.
Pohwan Han. Seoul. Have a nice day."Han" <hp4444@.kornet.net.korea> wrote in
news:u#N5Plc8FHA.3752@.tk2msftngp13.phx.gbl:

> During setup of SQL2005 Standard, I set the password of SA as 'pwd1'.
> After about a day, all the data on my DB are removed. Just testing,
> and not serious accident for me. Anyway, can that be the result of the
> easy password?
> After the accident, I changed the password into one with special
> characters. But still curious of the culprit.
First of all: I would never use Mixed Authentication unless I had a very
good reason for doing so. But, yes... It is possible to crack that password
in, should we say under an hour? Actually, I do think less than 15 minutes.
Ole Kristian Bangs
MCT, MCDBA, MCDST, MCSE:Security, MCSE:Messaging|||Thanks Ole. That's exactly what I wanted.
Pohwan Han. Seoul. Have a nice day.
"Ole Kristian Bang?" <olekristian.bangas@.masterminds.no> wrote in message
news:Xns9719A1FA79287olekristianbangaas@.
207.46.248.16...
> "Han" <hp4444@.kornet.net.korea> wrote in
> news:u#N5Plc8FHA.3752@.tk2msftngp13.phx.gbl:
>
> First of all: I would never use Mixed Authentication unless I had a very
> good reason for doing so. But, yes... It is possible to crack that
> password
> in, should we say under an hour? Actually, I do think less than 15
> minutes.
> --
> Ole Kristian Bang?
> MCT, MCDBA, MCDST, MCSE:Security, MCSE:Messaging|||Since SQL Server 2005 by default has login auditing set to 'Failed logins
only' go to your SQL Server log and see if somebody has been trying to guess
the sa password. The message will show, depending on your configuration, the
IP address of the client who tried to connect as sa. I also always create an
alert to be notified about this error (18456).
Ben Nevarez, MCDBA, OCP
"Han" <hp4444@.kornet.net.korea> wrote in message
news:u%23N5Plc8FHA.3752@.tk2msftngp13.phx.gbl...
> During setup of SQL2005 Standard, I set the password of SA as 'pwd1'.
> After about a day, all the data on my DB are removed. Just testing, and
> not serious accident for me. Anyway, can that be the result of the easy
> password?
> After the accident, I changed the password into one with special
> characters. But still curious of the culprit.
> --
> Pohwan Han. Seoul. Have a nice day.|||Thanks Ben. I tried that now. Strangely there is just one failed login of SA
at that time(in 6 hours).
" Login failed for user 'sa'. [CLIENT: <named pipe>] "
Hmm, someone succeeded in finding the password after just one failure. I am
not sure whether I am properly viewing the SQL Server logs. And when there
is just one failed log, possibly it can be me.
Pohwan Han. Seoul. Have a nice day.
"Ben Nevarez" <bnevarez@.sjm.com> wrote in message
news:eTpOMvh8FHA.4084@.TK2MSFTNGP10.phx.gbl...
> Since SQL Server 2005 by default has login auditing set to 'Failed logins
> only' go to your SQL Server log and see if somebody has been trying to
> guess the sa password. The message will show, depending on your
> configuration, the IP address of the client who tried to connect as sa. I
> also always create an alert to be notified about this error (18456).
> Ben Nevarez, MCDBA, OCP
>
> "Han" <hp4444@.kornet.net.korea> wrote in message
> news:u%23N5Plc8FHA.3752@.tk2msftngp13.phx.gbl...
>|||Han,
Maybe that one failed sa login was you. But you also need to look at the
other aspects of your database security, not only the sa user. For example,
which users belong to the sysadmin server role (they have the same
permissions as sa) or other server roles. In SQL Server 2000/2005 by default
BUILTIN\Administrators are members of syadmin. Also look at the security of
your database, specially membership of database roles, like db_owner or
db_datawriter.
Also, if you want to find who is doing something in your system you can
implement DML and DDL triggers.
Ben Nevarez, MCDBA, OCP
"Han" <hp4444@.kornet.net.korea> wrote in message
news:O%23LCeKj8FHA.3380@.tk2msftngp13.phx.gbl...
> Thanks Ben. I tried that now. Strangely there is just one failed login of
> SA at that time(in 6 hours).
> " Login failed for user 'sa'. [CLIENT: <named pipe>] "
> Hmm, someone succeeded in finding the password after just one failure. I
> am not sure whether I am properly viewing the SQL Server logs. And when
> there is just one failed log, possibly it can be me.
> --
> Pohwan Han. Seoul. Have a nice day.
> "Ben Nevarez" <bnevarez@.sjm.com> wrote in message
> news:eTpOMvh8FHA.4084@.TK2MSFTNGP10.phx.gbl...
>

SA's Password 'pwd1' can be attacked in a day?

During setup of SQL2005 Standard, I set the password of SA as 'pwd1'. After
about a day, all the data on my DB are removed. Just testing, and not
serious accident for me. Anyway, can that be the result of the easy
password?
After the accident, I changed the password into one with special characters.
But still curious of the culprit.
Pohwan Han. Seoul. Have a nice day.
"Han" <hp4444@.kornet.net.korea> wrote in
news:u#N5Plc8FHA.3752@.tk2msftngp13.phx.gbl:

> During setup of SQL2005 Standard, I set the password of SA as 'pwd1'.
> After about a day, all the data on my DB are removed. Just testing,
> and not serious accident for me. Anyway, can that be the result of the
> easy password?
> After the accident, I changed the password into one with special
> characters. But still curious of the culprit.
First of all: I would never use Mixed Authentication unless I had a very
good reason for doing so. But, yes... It is possible to crack that password
in, should we say under an hour? Actually, I do think less than 15 minutes.
Ole Kristian Bangs
MCT, MCDBA, MCDST, MCSE:Security, MCSE:Messaging
|||Thanks Ole. That's exactly what I wanted.
Pohwan Han. Seoul. Have a nice day.
"Ole Kristian Bang?" <olekristian.bangas@.masterminds.no> wrote in message
news:Xns9719A1FA79287olekristianbangaas@.207.46.248 .16...
> "Han" <hp4444@.kornet.net.korea> wrote in
> news:u#N5Plc8FHA.3752@.tk2msftngp13.phx.gbl:
>
> First of all: I would never use Mixed Authentication unless I had a very
> good reason for doing so. But, yes... It is possible to crack that
> password
> in, should we say under an hour? Actually, I do think less than 15
> minutes.
> --
> Ole Kristian Bang?
> MCT, MCDBA, MCDST, MCSE:Security, MCSE:Messaging
|||Since SQL Server 2005 by default has login auditing set to 'Failed logins
only' go to your SQL Server log and see if somebody has been trying to guess
the sa password. The message will show, depending on your configuration, the
IP address of the client who tried to connect as sa. I also always create an
alert to be notified about this error (18456).
Ben Nevarez, MCDBA, OCP
"Han" <hp4444@.kornet.net.korea> wrote in message
news:u%23N5Plc8FHA.3752@.tk2msftngp13.phx.gbl...
> During setup of SQL2005 Standard, I set the password of SA as 'pwd1'.
> After about a day, all the data on my DB are removed. Just testing, and
> not serious accident for me. Anyway, can that be the result of the easy
> password?
> After the accident, I changed the password into one with special
> characters. But still curious of the culprit.
> --
> Pohwan Han. Seoul. Have a nice day.
|||Thanks Ben. I tried that now. Strangely there is just one failed login of SA
at that time(in 6 hours).
" Login failed for user 'sa'. [CLIENT: <named pipe>] "
Hmm, someone succeeded in finding the password after just one failure. I am
not sure whether I am properly viewing the SQL Server logs. And when there
is just one failed log, possibly it can be me.
Pohwan Han. Seoul. Have a nice day.
"Ben Nevarez" <bnevarez@.sjm.com> wrote in message
news:eTpOMvh8FHA.4084@.TK2MSFTNGP10.phx.gbl...
> Since SQL Server 2005 by default has login auditing set to 'Failed logins
> only' go to your SQL Server log and see if somebody has been trying to
> guess the sa password. The message will show, depending on your
> configuration, the IP address of the client who tried to connect as sa. I
> also always create an alert to be notified about this error (18456).
> Ben Nevarez, MCDBA, OCP
>
> "Han" <hp4444@.kornet.net.korea> wrote in message
> news:u%23N5Plc8FHA.3752@.tk2msftngp13.phx.gbl...
>
|||Han,
Maybe that one failed sa login was you. But you also need to look at the
other aspects of your database security, not only the sa user. For example,
which users belong to the sysadmin server role (they have the same
permissions as sa) or other server roles. In SQL Server 2000/2005 by default
BUILTIN\Administrators are members of syadmin. Also look at the security of
your database, specially membership of database roles, like db_owner or
db_datawriter.
Also, if you want to find who is doing something in your system you can
implement DML and DDL triggers.
Ben Nevarez, MCDBA, OCP
"Han" <hp4444@.kornet.net.korea> wrote in message
news:O%23LCeKj8FHA.3380@.tk2msftngp13.phx.gbl...
> Thanks Ben. I tried that now. Strangely there is just one failed login of
> SA at that time(in 6 hours).
> " Login failed for user 'sa'. [CLIENT: <named pipe>] "
> Hmm, someone succeeded in finding the password after just one failure. I
> am not sure whether I am properly viewing the SQL Server logs. And when
> there is just one failed log, possibly it can be me.
> --
> Pohwan Han. Seoul. Have a nice day.
> "Ben Nevarez" <bnevarez@.sjm.com> wrote in message
> news:eTpOMvh8FHA.4084@.TK2MSFTNGP10.phx.gbl...
>

SAN Disk with SQL 2000 data files

Hi,
I had a small test setup with an SQL 2000 instance and its data files were
on a SAN disk. After the shutdown following an automatic Windows update
yesterday night, the SAN disk although shows up on the host and also gets
mounted, I can't "explore" it. It's actually a LUN from an EMC box so I
tried unmasking & remasking the LUN to the host, the disk shows up on the
host but I can't access it. Now I want to reformat the disk and put NTFS on
it afresh. But before that, I also want to cleanup the SQL instance and
re-install it. Just uninstalling the SQL instance will do or are there some
standard procedures that I should follow?
Thanks for any pointers!
- VHi
I would find out what the problem really it. It could be a problem with your
HBA driver or similar.
Un-installing SQL Server will not remove the data files.
Regards
--
Mike Epprecht, Microsoft SQL Server MVP
Zurich, Switzerland
IM: mike@.epprecht.net
MVP Program: http://www.microsoft.com/mvp
Blog: http://www.msmvps.com/epprecht/
"Volcano" <volcano@.volcano.com> wrote in message
news:uumsjmPoFHA.3036@.TK2MSFTNGP14.phx.gbl...
> Hi,
> I had a small test setup with an SQL 2000 instance and its data files were
> on a SAN disk. After the shutdown following an automatic Windows update
> yesterday night, the SAN disk although shows up on the host and also gets
> mounted, I can't "explore" it. It's actually a LUN from an EMC box so I
> tried unmasking & remasking the LUN to the host, the disk shows up on the
> host but I can't access it. Now I want to reformat the disk and put NTFS
> on
> it afresh. But before that, I also want to cleanup the SQL instance and
> re-install it. Just uninstalling the SQL instance will do or are there
> some
> standard procedures that I should follow?
> Thanks for any pointers!
> - V
>

SAN Disk with SQL 2000 data files

Hi,
I had a small test setup with an SQL 2000 instance and its data files were
on a SAN disk. After the shutdown following an automatic Windows update
yesterday night, the SAN disk although shows up on the host and also gets
mounted, I can't "explore" it. It's actually a LUN from an EMC box so I
tried unmasking & remasking the LUN to the host, the disk shows up on the
host but I can't access it. Now I want to reformat the disk and put NTFS on
it afresh. But before that, I also want to cleanup the SQL instance and
re-install it. Just uninstalling the SQL instance will do or are there some
standard procedures that I should follow?
Thanks for any pointers!
- VHi
I would find out what the problem really it. It could be a problem with your
HBA driver or similar.
Un-installing SQL Server will not remove the data files.
Regards
--
Mike Epprecht, Microsoft SQL Server MVP
Zurich, Switzerland
IM: mike@.epprecht.net
MVP Program: http://www.microsoft.com/mvp
Blog: http://www.msmvps.com/epprecht/
"Volcano" <volcano@.volcano.com> wrote in message
news:uumsjmPoFHA.3036@.TK2MSFTNGP14.phx.gbl...
> Hi,
> I had a small test setup with an SQL 2000 instance and its data files were
> on a SAN disk. After the shutdown following an automatic Windows update
> yesterday night, the SAN disk although shows up on the host and also gets
> mounted, I can't "explore" it. It's actually a LUN from an EMC box so I
> tried unmasking & remasking the LUN to the host, the disk shows up on the
> host but I can't access it. Now I want to reformat the disk and put NTFS
> on
> it afresh. But before that, I also want to cleanup the SQL instance and
> re-install it. Just uninstalling the SQL instance will do or are there
> some
> standard procedures that I should follow?
> Thanks for any pointers!
> - V
>

SAN Disk with SQL 2000 data files

Hi,
I had a small test setup with an SQL 2000 instance and its data files were
on a SAN disk. After the shutdown following an automatic Windows update
yesterday night, the SAN disk although shows up on the host and also gets
mounted, I can't "explore" it. It's actually a LUN from an EMC box so I
tried unmasking & remasking the LUN to the host, the disk shows up on the
host but I can't access it. Now I want to reformat the disk and put NTFS on
it afresh. But before that, I also want to cleanup the SQL instance and
re-install it. Just uninstalling the SQL instance will do or are there some
standard procedures that I should follow?
Thanks for any pointers!
- V
Hi
I would find out what the problem really it. It could be a problem with your
HBA driver or similar.
Un-installing SQL Server will not remove the data files.
Regards
Mike Epprecht, Microsoft SQL Server MVP
Zurich, Switzerland
IM: mike@.epprecht.net
MVP Program: http://www.microsoft.com/mvp
Blog: http://www.msmvps.com/epprecht/
"Volcano" <volcano@.volcano.com> wrote in message
news:uumsjmPoFHA.3036@.TK2MSFTNGP14.phx.gbl...
> Hi,
> I had a small test setup with an SQL 2000 instance and its data files were
> on a SAN disk. After the shutdown following an automatic Windows update
> yesterday night, the SAN disk although shows up on the host and also gets
> mounted, I can't "explore" it. It's actually a LUN from an EMC box so I
> tried unmasking & remasking the LUN to the host, the disk shows up on the
> host but I can't access it. Now I want to reformat the disk and put NTFS
> on
> it afresh. But before that, I also want to cleanup the SQL instance and
> re-install it. Just uninstalling the SQL instance will do or are there
> some
> standard procedures that I should follow?
> Thanks for any pointers!
> - V
>

San Disk failing to come online.

Hello,
I'm clustering a single node (DELL 1850 and a PowerVault). I selected it to
place the quorum log on the SAN, but after the setup, it configures it with a
Local Quorum and the SAN disk fail to come online.
So, I'm trying to add additional SAN disk as resources to see what's going
on. I can add the Physical Disk resourse but again it fails when I try to
bring it online. Here are a few lines from the cluster log after it fails:
WARN [FM] FmpHandleResourceTransition: Resource failed, post a work item
INFO [GUM] GumSendUpdate: Locker waitingtype 0 context 8
INFO [GUM] Thread 0x940 UpdateLock wait on Type 0
INFO [GUM] GumpDoLockingUpdate: lock was free, granted to 1
INFO [GUM] GumpDoLockingUpdate successful, Sequence=641 Generation=0
INFO [GUM] GumSendUpdate: Locker dispatching seq 641type 0 context 8
INFO [GUM] GumpDoUnlockingUpdate releasing lock ownership
INFO [GUM] GumSendUpdate: completed update seq 641type 0 context 8
INFO [FM] FmpPropagateResourceState: resource
1df3e42a-310d-4dbb-a334-403bda6afe22 failed event.
INFO [FM] FmpHandleResourceFailure: taking resource
1df3e42a-310d-4dbb-a334-403bda6afe22 and dependents offline
INFO [FM] FmpHandleGroupFailure, Entry: Group failure for
3e0e395f-ada4-4345-8f55-31eecabd089d...
INFO [GUM] GumSendUpdate: Locker waitingtype 0 context 65537
INFO [GUM] Thread 0x940 UpdateLock wait on Type 0
INFO [GUM] GumpDoLockingUpdate: lock was free, granted to 1
INFO [GUM] GumpDoLockingUpdate successful, Sequence=642 Generation=0
INFO [GUM] GumSendUpdate: Locker dispatching seq 642type 0 context 65537
INFO [GUM] GumpDoUnlockingUpdate releasing lock ownership
INFO [GUM] GumSendUpdate: completed update seq 642type 0 context 65537
WARN [FM] Group failure for 3e0e395f-ada4-4345-8f55-31eecabd089d, but can't
move. Failure count = 2.
INFO Physical Disk <Disk>: Terminate, ResourceEntry @. 000A4D40 Valid 0
INFO Physical Disk <Disk>: [PnP] Stop watching PnP events for disk 6ad90ce8
WARN Physical Disk <Disk>: [PnP] RemoveDisk: WatchedList is empty
INFO Physical Disk <Disk>: [PnP] Stop watching disk 6ad90ce8 - processed
INFO Physical Disk <Disk>: DiskCleanup started.
INFO Physical Disk <Disk>: [DiskArb] StopPersistentReservations is called.
Any idea? I'm not an expect in clustering, but have setup many and have
never seen this before.
TIA!!!
Darin
We need more of the log...the section of the log you've posted appears to
have occurred after the failure.
Regards,
John
"DTully" <DTully@.discussions.microsoft.com> wrote in message
news:CAA3B56C-FBAB-47FE-9656-29C00374A9D2@.microsoft.com...
> Hello,
> I'm clustering a single node (DELL 1850 and a PowerVault). I selected it
to
> place the quorum log on the SAN, but after the setup, it configures it
with a
> Local Quorum and the SAN disk fail to come online.
> So, I'm trying to add additional SAN disk as resources to see what's going
> on. I can add the Physical Disk resourse but again it fails when I try to
> bring it online. Here are a few lines from the cluster log after it fails:
> WARN [FM] FmpHandleResourceTransition: Resource failed, post a work item
> INFO [GUM] GumSendUpdate: Locker waiting type 0 context 8
> INFO [GUM] Thread 0x940 UpdateLock wait on Type 0
> INFO [GUM] GumpDoLockingUpdate: lock was free, granted to 1
> INFO [GUM] GumpDoLockingUpdate successful, Sequence=641 Generation=0
> INFO [GUM] GumSendUpdate: Locker dispatching seq 641 type 0 context 8
> INFO [GUM] GumpDoUnlockingUpdate releasing lock ownership
> INFO [GUM] GumSendUpdate: completed update seq 641 type 0 context 8
> INFO [FM] FmpPropagateResourceState: resource
> 1df3e42a-310d-4dbb-a334-403bda6afe22 failed event.
> INFO [FM] FmpHandleResourceFailure: taking resource
> 1df3e42a-310d-4dbb-a334-403bda6afe22 and dependents offline
> INFO [FM] FmpHandleGroupFailure, Entry: Group failure for
> 3e0e395f-ada4-4345-8f55-31eecabd089d...
> INFO [GUM] GumSendUpdate: Locker waiting type 0 context 65537
> INFO [GUM] Thread 0x940 UpdateLock wait on Type 0
> INFO [GUM] GumpDoLockingUpdate: lock was free, granted to 1
> INFO [GUM] GumpDoLockingUpdate successful, Sequence=642 Generation=0
> INFO [GUM] GumSendUpdate: Locker dispatching seq 642 type 0 context 65537
> INFO [GUM] GumpDoUnlockingUpdate releasing lock ownership
> INFO [GUM] GumSendUpdate: completed update seq 642 type 0 context 65537
> WARN [FM] Group failure for 3e0e395f-ada4-4345-8f55-31eecabd089d, but
can't
> move. Failure count = 2.
> INFO Physical Disk <Disk>: Terminate, ResourceEntry @. 000A4D40 Valid 0
> INFO Physical Disk <Disk>: [PnP] Stop watching PnP events for disk
6ad90ce8
> WARN Physical Disk <Disk>: [PnP] RemoveDisk: WatchedList is empty
> INFO Physical Disk <Disk>: [PnP] Stop watching disk 6ad90ce8 - processed
> INFO Physical Disk <Disk>: DiskCleanup started.
> INFO Physical Disk <Disk>: [DiskArb] StopPersistentReservations is called.
> Any idea? I'm not an expect in clustering, but have setup many and have
> never seen this before.
> TIA!!!
> Darin

SAN Array setup

Our server team has set up an EMC Clarion SAN with 3 sets of RAID 5 arrays,
several RAID 1 arrays and other drives/arrays for snapshots. The first
server we are installing has the data going to an 80 GB slice an an 8 disk
RAID 5 array and the logs going to a 20 GB slice on a 5 disk RAID 5 array.
Eventually, several other database servers will be added to this SAN.
The first server will hold several small databases and one or more large
databases, all totaling 20 - 50 GB. Some of the large databases will be
replicates from other servers. I assume the replication will be
transactional with non updateable subscriptions. Some of the databases will
also replicate to other servers. I assume the replication for these will be
transactional with updateable subscriptions. All databases will be serving
up content for web applications.
Does anyone have experience using RAID 5 on an EMC Clarion for the log
files?
I do not know how much data will be replicated and I don't have any stats on
the servers the app was developed on. Would anyone hazard a guess as to the
MB/hour of data that may overwhelm this RAID 5 data volume?
Any educated opionions are welcome, especially if you can back it up with
some examples etc.
I avoid RAID 5 at all cost. See http://www.baarf.com/ if you are bored and
wanna read some experiences, horror stories, sillies, rants, etc..
That said, the nature of your application plays a huge role in the decision
on what RAID configuration. Stripping with parity is probably "ok" if you're
doing mostly reads and have solid backup and maintenance processes in place
(eg. swap out disks before MTBF). However, if all all possible, put your
data on a RAID 1+0. Yes, quite a bit of extra cost involved but if you're
paranoid about simultaneous disk failures and/or have high performance
requirements, definitely worth considering. I've done this stuff for 15
years and have only seen 1 CPU failure ever. I have seen a good number of
multiple drive failures either simultaneously or very close to each other.
There were 2 occurrence of a second drive failing shortly after a
replacement drive was stuck into the array and rebuilding had only just
begun. Good thing we had backups.
Transaction logs are perfectly happy sitting in its own disk or mirrored
disk for availability. I would not recommend RAID 5 for your logs. It's just
an unecessary performance hit (tlogs activities are sequential) plus it'll
use up more physical drives than a mirror anyway.
One thing you want to be careful with is what the SAN administrators are
really giving you when they assign you a LUN. There's a lot of black magic
inside a SAN box and I have met many SAN vendor reps that insist it doesn't
matter if we're getting a "slice" of an array or our own array because the
big caches. These guys obviously have not had to work with high transaction
environments with multiple workloads on the same SAN.
Btw, there are free tools available to stress your IO. See below for one
example from Microsoft.
http://www.microsoft.com/downloads/d...DisplayLang=en
joe.
"Dean" <deann@.dtn.com> wrote in message
news:%237z1llFFFHA.2460@.TK2MSFTNGP09.phx.gbl...
> Our server team has set up an EMC Clarion SAN with 3 sets of RAID 5
> arrays,
> several RAID 1 arrays and other drives/arrays for snapshots. The first
> server we are installing has the data going to an 80 GB slice an an 8 disk
> RAID 5 array and the logs going to a 20 GB slice on a 5 disk RAID 5 array.
> Eventually, several other database servers will be added to this SAN.
> The first server will hold several small databases and one or more large
> databases, all totaling 20 - 50 GB. Some of the large databases will be
> replicates from other servers. I assume the replication will be
> transactional with non updateable subscriptions. Some of the databases
> will
> also replicate to other servers. I assume the replication for these will
> be
> transactional with updateable subscriptions. All databases will be serving
> up content for web applications.
> Does anyone have experience using RAID 5 on an EMC Clarion for the log
> files?
> I do not know how much data will be replicated and I don't have any stats
> on
> the servers the app was developed on. Would anyone hazard a guess as to
> the
> MB/hour of data that may overwhelm this RAID 5 data volume?
> Any educated opionions are welcome, especially if you can back it up with
> some examples etc.
>
|||Push back. We just went through the same issue with our local EMC technical
sales guy when we bought our CX-700.
It seems to me he tried to talk our SAN guy into going with a bunch of 4
drive RAID 5 arrays because he could show better MB/$ costs. His hope was
that they could make up for the RAID 5 overhead with their cache. When I
pushed back, he brought in their regional SQL Server specialists (that's how
they were positioned anyway). When we explained our throughput requirements
(the same ones we explained to our local tech rep), they both said, "You
need RAID 10".
"Dean" <deann@.dtn.com> wrote in message
news:%237z1llFFFHA.2460@.TK2MSFTNGP09.phx.gbl...
> Our server team has set up an EMC Clarion SAN with 3 sets of RAID 5
arrays,
> several RAID 1 arrays and other drives/arrays for snapshots. The first
> server we are installing has the data going to an 80 GB slice an an 8 disk
> RAID 5 array and the logs going to a 20 GB slice on a 5 disk RAID 5 array.
> Eventually, several other database servers will be added to this SAN.
> The first server will hold several small databases and one or more large
> databases, all totaling 20 - 50 GB. Some of the large databases will be
> replicates from other servers. I assume the replication will be
> transactional with non updateable subscriptions. Some of the databases
will
> also replicate to other servers. I assume the replication for these will
be
> transactional with updateable subscriptions. All databases will be serving
> up content for web applications.
> Does anyone have experience using RAID 5 on an EMC Clarion for the log
> files?
> I do not know how much data will be replicated and I don't have any stats
on
> the servers the app was developed on. Would anyone hazard a guess as to
the
> MB/hour of data that may overwhelm this RAID 5 data volume?
> Any educated opionions are welcome, especially if you can back it up with
> some examples etc.
>

Sample Report Delivery Problem

I have done everything in the Readme.htm to setup the delivery extension.
When I go to New Subscrition for a report to try to test I get 'Object
Reference not set to and instance of on object', that displays on the page.
Thanks in advance.
here is a bit of the log file.
w3wp!library!114c!10/8/2004-13:40:36:: e ERROR: Throwing
Microsoft.ReportingServices.Diagnostics.Utilities.ServerConfigurationErrorException:
The Report Server has encountered a configuration error; more details in the
log files, Could not create Extension of type: DeliveryUIname: Printer
Delivery Sample;
Info:
Microsoft.ReportingServices.Diagnostics.Utilities.ServerConfigurationErrorException:
The Report Server has encountered a configuration error; more details in the
log files
w3wp!extensionfactory!114c!10/8/2004-13:40:47:: e ERROR: Exception caught
instantiating report server extension:
Microsoft.ReportingServices.Diagnostics.Utilities.ServerConfigurationErrorException:
The Report Server has encountered a configuration error; more details in the
log files.
w3wp!ui!114c!10/8/2004-13:40:47:: e ERROR: Object reference not set to an
instance of an object.
w3wp!ui!114c!10/8/2004-13:40:47:: e ERROR: HTTP status code --> 500
--Details--
System.NullReferenceException: Object reference not set to an instance of an
object.
at
Microsoft.ReportingServices.UI.SubscriptionPropertiesPage.AddDropDownOfDeliveryProviders()
at
Microsoft.ReportingServices.UI.SubscriptionPropertiesPage.FinalizeControls()Could not create Extension of type: DeliveryUIname: Printer
Delivery Sample
Make sure that the assembly name is correct and located in the bin directory
of the reportmanager.
--
-Daniel
This posting is provided "AS IS" with no warranties, and confers no rights.
"KENWOOD" <KENWOOD@.discussions.microsoft.com> wrote in message
news:F51164DD-2F1A-4D04-8823-4ABFBBDD83C9@.microsoft.com...
> I have done everything in the Readme.htm to setup the delivery extension.
> When I go to New Subscrition for a report to try to test I get 'Object
> Reference not set to and instance of on object', that displays on the
page.
> Thanks in advance.
> here is a bit of the log file.
> w3wp!library!114c!10/8/2004-13:40:36:: e ERROR: Throwing
>
Microsoft.ReportingServices.Diagnostics.Utilities.ServerConfigurationErrorEx
ception:
> The Report Server has encountered a configuration error; more details in
the
> log files, Could not create Extension of type: DeliveryUIname: Printer
> Delivery Sample;
> Info:
>
Microsoft.ReportingServices.Diagnostics.Utilities.ServerConfigurationErrorEx
ception:
> The Report Server has encountered a configuration error; more details in
the
> log files
> w3wp!extensionfactory!114c!10/8/2004-13:40:47:: e ERROR: Exception caught
> instantiating report server extension:
>
Microsoft.ReportingServices.Diagnostics.Utilities.ServerConfigurationErrorEx
ception:
> The Report Server has encountered a configuration error; more details in
the
> log files.
> w3wp!ui!114c!10/8/2004-13:40:47:: e ERROR: Object reference not set to an
> instance of an object.
> w3wp!ui!114c!10/8/2004-13:40:47:: e ERROR: HTTP status code --> 500
> --Details--
> System.NullReferenceException: Object reference not set to an instance of
an
> object.
> at
>
Microsoft.ReportingServices.UI.SubscriptionPropertiesPage.AddDropDownOfDeliv
eryProviders()
> at
>
Microsoft.ReportingServices.UI.SubscriptionPropertiesPage.FinalizeControls()