Closed jonas-wanninger closed 7 years ago
A few things:
n
users, it's a little more apparent that it's never authenticating as the user. It's authenticating as the application. This means whatever account it's running under in IIS is what's in use. Since it's a background poll and not a foreground one (e.g. on-the-request), even impersonation through doesn't work. Because the request you're making to see the current data and the background process that gets the data aren't connected. If they were, we'd be a) far slower, and b) do the work n
times (based on user count) rather than once per interval.Does that clear up the why a bit? If not, let me know so that I can clarify another way.
As for a fix: you simply need to run the app pool in IIS under an account that has permissions to the SQL instances you want to monitor.
Thanks for clearing things up. Totally clear now. I will just create a service account then and all should be fine.
Hello,
I deployed Opserver to IIS and configured it to use AD authentication in the
SecuritySettings.conf
.I also configured the appropriate AD groups in the web.config file under the key "AdminGroups". So when I navigate to
/about
I can see that my current role isGlobal Admin
.This is my
SQLSettings.json
As soon as I try to watch something on this instance I get this error:
Login failed for [DomainName]\[ServerName]
Note: The SQL server and IIS server are running on the same server.
So in other words Opserver does not use my ad account to login but rather tries to use the computername as login. Why is Opserver not trying to login with my AD account?
Error logs says: No errors yet, yay! I also verified that i can login to that SQL server instance via ssms. My user is sysadmin on this instance.