locked
Cannot configure Enterprise Single Sign-On Service RRS feed

  • Question

  • Hi all,

    We have the following live system: 2 BizTalk 2010 load-balanced front-end servers  and a Sql Server 2008 R2 cluster, containing an A end B node.

    On the cluster we have also configured the Master Secret SSO server. Last week we installed Windows Updates on both sql nodes. After that the SSO service on node A failed to start. We re-installed the SSO service; when we try to configure we see the same error in Application Event log. Does anyone have a clue? This system has been stable for more then 2 years now and installing updates is a frequent monthly maintenance task, tested on our QA system.

    Error:

    Faulting application name: ENTSSO.exe, version: 6.0.4219.0, time stamp: 0x4c536881
    Faulting module name: System.Data.dll, version: 2.0.50727.5483, time stamp: 0x530eeed9
    Exception code: 0xc0000409
    Fault offset: 0x00000000001d169d
    Faulting process id: 0x170
    Faulting application start time: 0x01cfd636db656d9a
    Faulting application path: C:\Program Files\Common Files\Enterprise Single Sign-On\ENTSSO.exe
    Faulting module path: C:\Windows\assembly\GAC_64\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    Report Id: 2052a175-422a-11e4-8502-1cc1de7b401c

    Steps which lead to problems:

    1. Moved all clustered services to Sql A-node
    2. Installed Windows Updates on Sql -B node, restarted.
    3. Moved all clustered services to Sql B-node.
    4. Installed Windows Updates on Sql -A node, restarted.
    5. Tried to move services to preferred Sql A-node:
             - PRD Sql Server instance: no problem
             - MsDtc services: failed on restarting SSO service.

    I can post the SSO configuration log file as well.

    Kind regards,

    Albert

    Thursday, October 2, 2014 12:37 PM

Answers

  • Update:

    Un-installing last set of Windows Updates (21 pieces) eventually did the trick.

    Now busy re-installing / testing / restarting server  Updates one after another...


    • Marked as answer by GATver365 Wednesday, October 8, 2014 12:09 PM
    Tuesday, October 7, 2014 12:53 PM

All replies

  • SSO config log would help.

    But have you tested this in non-production server before doing in your prod? Can't you remove the update and see it bring the node back?


    If this answers your question please mark it accordingly. If this post is helpful, please vote as helpful by clicking the upward arrow mark next to my reply.

    Thursday, October 2, 2014 1:41 PM
  • Hello Albert,

    Have you already tried to uncluster the Enterprise Single Sign-On Service and to recluster it again ?

    Then try to use the RegAsm to register again the SSOSQL.dll. http://sandroaspbiztalkblog.wordpress.com/2010/07/21/fixing-biztalk-entsso-could-not-create-ssosql-to-fix-the-problem-reinstall-sso-or-try-regasm-ssosql-dll-from-a-visual-studio-command-prompt/

    Best Regards,


    Steve Melan - BCEE My Blog : http://stevemelan.wordpress.com

    Friday, October 3, 2014 9:43 PM
  • Thanks for your answer. Unfortunately our Sql environment on QA is not clustered. Of course we did install the Windows Updates before on this QA system and tested. No problems occured.

    Below the last past SSO log (I am sorry, its rather large):

    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:880) CSSOServerCfg::GetCreateJoinReuse
    [11:03:22 AM Info ConfigHelper] Checking if service exists.
    [11:03:22 AM Info ConfigHelper] Attempting to open service manager.
    [11:03:22 AM Info ConfigHelper] Attempting to lock service database.
    [11:03:22 AM Info ConfigHelper] NT Service: ENTSSO does not exist
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:919) --- Join ---
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:1631) ----- SUMMARY -----
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:1633) Computer name: ONBTSQL02A
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:1634) Current user name: G****\a****
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:1635) SSO Administrators account: <null>
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:1636) SSO Affiliate Administrators account: <null>
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:1637) SQL Server: ONBTSQL02PRD\PRD
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:1638) SSO database: SSODB
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:1639) SSO service account: G****\sa_btprd_sso
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:1640) Secret backup file location: <null>
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:1641) Password reminder for secret backup file: <null>
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:1651) --- Join ---
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:1415) CSSOServerCfg::ConfigureFeatureJoin
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:1422) SSO Administrators account: G****\SSOPrd Administrators
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:1426) create SSO Administrators
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:2723) CSSOServerCfg::CreateAccount
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:2778) CGlobalInfo::GetSidFromName: 0x00000000 (0)
    [11:03:22 AM Info SSOServerCfg:Parameter] G****\SSOPrd Administrators
    [11:03:22 AM Info SSOServerCfg:Parameter] <null>
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:2786) Account 'G****\SSOPrd Administrators' exists.
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:2820) Account 'G****\SSOPrd Administrators' is a domain account.
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:2835) Account 'G****\SSOPrd Administrators' is a group account.
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:1444) add service account to SSO Administrators
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:3141) CSSOServerCfg::PopulateAccount
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:3155) G****\sa_btprd_sso
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:3200) CGlobalInfo::CheckGroupMembership
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:3207) CGlobalInfo::CheckGroupMembership: 0x00000000 (0)
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:3234) user is already in the account
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:1463) SSO Affiliate Administrators account: G****\SSOPrd Affiliate Administrators
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:1467) create SSO Affiliate Administrators
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:2723) CSSOServerCfg::CreateAccount
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:2778) CGlobalInfo::GetSidFromName: 0x00000000 (0)
    [11:03:22 AM Info SSOServerCfg:Parameter] G****\SSOPrd Affiliate Administrators
    [11:03:22 AM Info SSOServerCfg:Parameter] <null>
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:2786) Account 'G****\SSOPrd Affiliate Administrators' exists.
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:2820) Account 'G****\SSOPrd Affiliate Administrators' is a domain account.
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:2835) Account 'G****\SSOPrd Affiliate Administrators' is a group account.
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:1484) CreateAccount: 0x00000000 (0)
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:6278) CSSOServerCfg::ConfigureRegistry
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:6108) CSSOServerCfg::ConfigureService
    [11:03:22 AM Info ConfigHelper] Checking if service exists.
    [11:03:22 AM Info ConfigHelper] Attempting to open service manager.
    [11:03:22 AM Info ConfigHelper] Attempting to lock service database.
    [11:03:22 AM Info ConfigHelper] NT Service: ENTSSO does not exist
    [11:03:22 AM Warning SSOServerCfg] (ssoconfigobj2.cpp:6115) IConfigHelper::NTServiceExists: 0x00000001 (1)
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:6158) ENTSSO service path: "C:\Program Files\Common Files\Enterprise Single Sign-On\ENTSSO.exe"
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:6160) IConfigHelper::CreateService
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:2264) CSSOServerCfg::GetServiceDependencies
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:5669) Data Source=ONBTSQL02PRD\PRD;Integrated Security=SSPI;Initial Catalog=master
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:7081) ISQL::IsSQLClustered
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:7089) ISQL::IsSQLClustered: 0x00000000 (0)
    [11:03:22 AM Info SSOServerCfg:Parameter] <null>
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:7090) ISQL::IsSQLClustered: 0x00000000 (0)
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:7100) SQL is clustered
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:2369) RPCSS,ClusSvc,COMSysApp
    [11:03:22 AM Info ConfigHelper] Creating service.
    [11:03:22 AM Info ConfigHelper] sa_btprd_sso is a local entity.
    [11:03:22 AM Info ConfigHelper] Granted 'Logon as Service' permission to account: G****\sa_btprd_sso
    [11:03:22 AM Info ConfigHelper] Attempting to open service manager.
    [11:03:22 AM Info ConfigHelper] Attempting to lock service database.
    [11:03:22 AM Info ConfigHelper] Creating service: ENTSSO, start type: 2, exe: "C:\Program Files\Common Files\Enterprise Single Sign-On\ENTSSO.exe", dependencies: RPCSS,ClusSvc,COMSysApp, account: G****\sa_btprd_sso
    [11:03:22 AM Info ConfigHelper] sa_btprd_sso is a local entity.
    [11:03:22 AM Info ConfigHelper] Created service: ENTSSO
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:7371) CSSOServerCfg::ConfigureSCP
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:7446) NetScheduleJobAdd: nRc = 00000000, dwJobId = 14
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:5698) CSSOServerCfg::StartService
    [11:03:22 AM Info SSOServerCfg] (ssoconfigobj2.cpp:5722) The SSO service is starting.
    [11:03:23 AM Info SSOServerCfg] (ssoconfigobj2.cpp:5853) ENTER: CSSOServerCfg::WaitServiceState
    [11:03:23 AM Info SSOServerCfg] (ssoconfigobj2.cpp:5893) The SSO service state is: The service is starting (SERVICE_START_PENDING)
    [11:04:24 AM Info SSOServerCfg] (ssoconfigobj2.cpp:5893) The SSO service state is: The service is not running (SERVICE_STOPPED)
    [11:04:24 AM Info SSOServerCfg] (ssoconfigobj2.cpp:5897) EXIT: CSSOServerCfg::WaitServiceState
    [11:04:24 AM Info SSOServerCfg] (ssoconfigobj2.cpp:5291) CSSOServerCfg::ReportMessage
    [11:04:24 AM Warning SSOServerCfg] (ssoconfigobj2.cpp:6196) 0x80004005 (-2147467259)
    [11:04:24 AM Warning SSOServerCfg] (ssoconfigobj2.cpp:1503) 0x80004005 (-2147467259)
    [11:04:24 AM Info SSOServerCfg] (ssoconfigobj2.cpp:1521) Join: perform rollback
    [11:04:24 AM Info SSOServerCfg] (ssoconfigobj2.cpp:1530) rollback SSO Administrators on local computer
    [11:04:24 AM Info SSOServerCfg] (ssoconfigobj2.cpp:3422) CSSOServerCfg::RollbackAccount
    [11:04:24 AM Info SSOServerCfg] (ssoconfigobj2.cpp:1541) RollbackAccount: 0x00000000 (0)
    [11:04:24 AM Info SSOServerCfg:Parameter] <null>
    [11:04:24 AM Info SSOServerCfg] (ssoconfigobj2.cpp:1543) rollback SSO Affiliate Administrators on local computer
    [11:04:24 AM Info SSOServerCfg] (ssoconfigobj2.cpp:3422) CSSOServerCfg::RollbackAccount
    [11:04:24 AM Info SSOServerCfg] (ssoconfigobj2.cpp:1554) RollbackAccount: 0x00000000 (0)
    [11:04:24 AM Info SSOServerCfg:Parameter] <null>
    [11:04:24 AM Info SSOServerCfg] (ssoconfigobj2.cpp:6371) CSSOServerCfg::LoadPerfCounters2
    [11:04:24 AM Info SSOServerCfg] (ssoconfigobj2.cpp:6440) "C:\Windows\system32\unlodctr.exe" ENTSSO
    [11:04:24 AM Info SSOServerCfg] (ssoconfigobj2.cpp:6323) CSSOServerCfg::RunProcess
    [11:04:25 AM Info SSOServerCfg] (ssoconfigobj2.cpp:6469) CSSOServerCfg::UnConfigureService
    [11:04:25 AM Info ConfigHelper] Deleted service: ENTSSO
    [11:04:25 AM Info SSOServerCfg] (ssoconfigobj2.cpp:7371) CSSOServerCfg::ConfigureSCP
    [11:04:25 AM Info SSOServerCfg] (ssoconfigobj2.cpp:7446) NetScheduleJobAdd: nRc = 00000000, dwJobId = 15
    [11:04:25 AM Info SSOServerCfg] (ssoconfigobj2.cpp:6491) IConfigHelper::DeleteService: 0x00000000 (0)
    [11:04:25 AM Info SSOServerCfg:Parameter] <null>
    [11:04:25 AM Info SSOServerCfg] (ssoconfigobj2.cpp:6511) CSSOServerCfg::UnConfigureRegistry
    [11:04:25 AM Info SSOServerCfg] (ssoconfigobj2.cpp:6516) (32)CRegKey::Open: 0x00000000 (0)
    [11:04:25 AM Info SSOServerCfg:Parameter] SOFTWARE\Microsoft\ENTSSO
    [11:04:25 AM Warning SSOServerCfg] (ssoconfigobj2.cpp:6521) (32)CRegKey::RecurseDeleteKey: 0x00000002 (2)
    [11:04:25 AM Info SSOServerCfg:Parameter] AUDIT
    [11:04:25 AM Info SSOServerCfg] (ssoconfigobj2.cpp:6526) (32)CRegKey::RecurseDeleteKey: 0x00000000 (0)
    [11:04:25 AM Info SSOServerCfg:Parameter] SQL
    [11:04:25 AM Warning SSOServerCfg] (ssoconfigobj2.cpp:6531) (32)CRegKey::RecurseDeleteKey: 0x00000002 (2)
    [11:04:25 AM Info SSOServerCfg:Parameter] SSOSS
    [11:04:25 AM Warning SSOServerCfg] (ssoconfigobj2.cpp:6541) (32)CRegKey::DeleteSubKey: 0x00000002 (2)
    [11:04:25 AM Info SSOServerCfg:Parameter] Products
    [11:04:25 AM Info SSOServerCfg] (ssoconfigobj2.cpp:6556) (64)CRegKey::Open: 0x00000000 (0)
    [11:04:25 AM Info SSOServerCfg:Parameter] SOFTWARE\Microsoft\ENTSSO
    [11:04:25 AM Warning SSOServerCfg] (ssoconfigobj2.cpp:6582) (64)RegDeleteKeyEx: 0x00000002 (2)
    [11:04:25 AM Info SSOServerCfg:Parameter] AUDIT
    [11:04:25 AM Info SSOServerCfg] (ssoconfigobj2.cpp:6587) (64)RegDeleteKeyEx: 0x00000000 (0)
    [11:04:25 AM Info SSOServerCfg:Parameter] SQL
    [11:04:25 AM Warning SSOServerCfg] (ssoconfigobj2.cpp:6592) (64)RegDeleteKeyEx: 0x00000002 (2)
    [11:04:25 AM Info SSOServerCfg:Parameter] SSOSS
    [11:04:25 AM Warning SSOServerCfg] (ssoconfigobj2.cpp:1653) 0x80004005 (-2147467259)
    [11:04:25 AM Info SSOServerCfg] (ssoconfigobj2.cpp:5181) Returning error description: <Exception Message="The SSO service failed to start. See the Application event log for more details." Source="SSO" HelpID=""/>
    [11:04:25 AM Warning SSOServerCfg] (ssoconfigobj2.cpp:1673) CSSOServerCfg::ConfigureFeature: 0x80004005 (-2147467259)
    [11:04:25 AM Warning Configuration Framework]Feature failed to configure: Server.
    [11:04:25 AM Info Configuration Framework]Configuration Summaries:
    [11:04:25 AM Error Configuration Framework]Feature: [Enterprise SSO] Failed to configure with error message [<Exception Message="The SSO service failed to start. See the Application event log for more details." Source="SSO" HelpID=""/>]
    [11:04:25 AM Info Configuration Framework] Feature: Server Configuration Enabled: yes Sub UI: no Configured: no
    [11:04:25 AM Info Configuration Framework] Feature: Server Configuration Enabled: no Sub UI: yes Configured: no
    [11:04:25 AM Info Configuration Framework]Leaving function ConfigureFeatures().
    [11:04:25 AM Info Configuration Framework]Entering function WizardStep_NextStepChanged.
    [11:04:25 AM Info Configuration Framework]Entering function ConfigWizardResult_Load.
    [11:04:25 AM Info Configuration Framework]Leaving function ConfigWizardResult_Load.
    [11:04:25 AM Info Configuration Framework]Leaving function WizardStep_NextStepChanged.
    [11:04:54 AM Info Configuration Framework]Displaying information notification to user. Message: <Exception Message="The SSO service failed to start. See the Application event log for more details." Source="SSO" HelpID="" />


    Monday, October 6, 2014 6:56 AM
  • Hi Steve,

    Thank you for your time. I unclustered the service, and I will recluster them when it can be configured on the A-node.  I already tried to re-register the .DLL. Unfortunately, no luck so far.


    Kind regards,

    Albert

    Monday, October 6, 2014 7:02 AM
  • Hello Albert,

    You can also try the installation Repair.

    1. Go to the Control Panel

    2. Program and Features

    3. Locate Microsoft Enterprise Single Sign-On

    4. Uninstall/Change

    5. Use the Repair

    Do this on the BizTalk Server and on the SQL Server Cluster (each node) or on the server on which the Entsso is not starting...

    Best Regards,


    Steve Melan - BCEE My Blog : http://stevemelan.wordpress.com

    Monday, October 6, 2014 11:01 AM
  • Hi Steve,

    already tried that one. Thanks anyway... 

    I am thinking about un-installing Windows Updates on both Sql nodes. But I do not like that on Production...

    Kind regards,

    Albert


    Monday, October 6, 2014 12:05 PM
  • Update:

    Un-installing last set of Windows Updates (21 pieces) eventually did the trick.

    Now busy re-installing / testing / restarting server  Updates one after another...


    • Marked as answer by GATver365 Wednesday, October 8, 2014 12:09 PM
    Tuesday, October 7, 2014 12:53 PM
  • OK, every single Windows Update tested. Now everything works OK... <sigh>
    Wednesday, October 8, 2014 12:09 PM