Shooting MSMQ troubles - Revision history

Wikicatglobe at 02:18, 18 October 2013

2013-10-18T02:18:56Z

← Older revision		Revision as of 02:18, 18 October 2013
Line 1:		Line 1:
	<accesscontrol>~~Administrators,,Cem,,Maysunshine~~</accesscontrol>		<accesscontrol>Main:MyGroup</accesscontrol>
	[[Category:Miscellaneous]]		[[Category:Miscellaneous]]

Cg_pham at 10:28, 24 October 2011

2011-10-24T10:28:50Z

← Older revision		Revision as of 10:28, 24 October 2011
Line 1:		Line 1:
	<accesscontrol>Administrators,,Cem,,Maysunshine</accesscontrol>		<accesscontrol>Administrators,,Cem,,Maysunshine</accesscontrol>
	[[Category:~~Guidelines~~]]		[[Category:Miscellaneous]]

	== Permission ==		== Permission ==

Cg_pham at 07:35, 5 October 2011

2011-10-05T07:35:16Z

← Older revision		Revision as of 07:35, 5 October 2011
Line 1:		Line 1:
			<accesscontrol>Administrators,,Cem,,Maysunshine</accesscontrol>
			[[Category:Guidelines]]

	== Permission ==		== Permission ==

Catglobe at 03:44, 17 August 2010

2010-08-17T03:44:15Z

← Older revision		Revision as of 03:44, 17 August 2010
Line 22:		Line 22:

	Communication with the underlying transaction manager has failed.<br>Solution: Check if MSDTC (Distributed Transaction Coordinator) is running. If not, start it.		Communication with the underlying transaction manager has failed.<br>Solution: Check if MSDTC (Distributed Transaction Coordinator) is running. If not, start it.

			== Register WCF ==

			*Open command prompt
			*Go to: C:\WINDOWS\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\
			*Run: ServiceModelReg.exe /i /x

	== Security ==		== Security ==

Catglobe at 03:52, 11 August 2010

2010-08-11T03:52:32Z

← Older revision		Revision as of 03:52, 11 August 2010
Line 27:		Line 27:
	=== Access to the registry key 'Global' is denied. ===		=== Access to the registry key 'Global' is denied. ===

	Error message: Access to the registry key 'Global' is denied		'''Error message:''' Access to the registry key 'Global' is denied

	Remark: When CatTask runs, it needs access to the registry to get information about processors of the server. This error happens because the user account which your web application uses to run (it is the user which is specified in impersonation section in webconfig) doesn't have that permission.		'''Remark:''' When CatTask runs, it needs access to the registry to get information about processors of the server. This error happens because the user account which your web application uses to run (it is the user which is specified in impersonation section in webconfig) doesn't have that permission.

	Solution: Open Computer Management console (right click on My Computer -> Manage) -> Local Users and Groups -> Groups -> Add impersonated account to the group		'''Solution:''' Open Computer Management console (right click on My Computer -> Manage) -> Local Users and Groups -> Groups -> Add impersonated account to the group

			=== Category does not exist ===

			'''Error message:''' Category does not exist

			'''Remark:''' After you fix the "Access to the registry key 'Global' is denied' error, you might run into this problem. It is because .NET makes some kind of caching when it failed to access the key formerly.

			'''Solution:''' Stop (end process :D) w3wp service, then re-run web site.

Catglobe at 03:34, 11 August 2010

2010-08-11T03:34:45Z

← Older revision		Revision as of 03:34, 11 August 2010
Line 15:		Line 15:
	'''TODO''': Change code so that appropriate access is automatically granted to those queues for relevant users.		'''TODO''': Change code so that appropriate access is automatically granted to those queues for relevant users.

	== MSMQ ==		== MSMQ ==

	Error:		Error:

	The transaction has aborted.		The transaction has aborted.

	Communication with the underlying transaction manager has failed.<br>Solution: Check if MSDTC (Distributed Transaction Coordinator) is running. If not, start it.		Communication with the underlying transaction manager has failed.<br>Solution: Check if MSDTC (Distributed Transaction Coordinator) is running. If not, start it.

			== Security ==

			=== Access to the registry key 'Global' is denied. ===

			Error message: Access to the registry key 'Global' is denied

			Remark: When CatTask runs, it needs access to the registry to get information about processors of the server. This error happens because the user account which your web application uses to run (it is the user which is specified in impersonation section in webconfig) doesn't have that permission.

			Solution: Open Computer Management console (right click on My Computer -> Manage) -> Local Users and Groups -> Groups -> Add impersonated account to the group

Catglobe at 03:03, 4 May 2010

2010-05-04T03:03:17Z

← Older revision		Revision as of 03:03, 4 May 2010
Line 11:		Line 11:
	'''TODO''': explain those queues in more details.		'''TODO''': explain those queues in more details.

	Those queues, if not exists, are created by the bus itself. The point is that in order to access the queues, Rhino Service Bus needs to have enough permission to the queues. So, what specifies the access rights which RSB has to the queues? A bus creates some threads to process messages, and those threads don't use impersonation at all. In other words, it uses the default '''Identity '''of the hosting process; for example ASPNET in Windows XP or NETWORK SERVICE in Windows Server 2003. By default, RSB just grants full access for the Administrator group. To overcome this security issue, right now, I change RSB code to grant access for the Everyone user. Although granting for Everyone is not a good idea, it is working now.		Those queues, if not exists, are created by the bus itself. The point is that in order to access the queues, Rhino Service Bus needs to have enough permission to the queues. So, what specifies the access rights which RSB has to the queues? A bus creates some threads to process messages, and those threads don't use impersonation at all. In other words, it uses the default '''Identity '''of the hosting process; for example ASPNET in Windows XP or NETWORK SERVICE in Windows Server 2003. By default, RSB just grants full access for the Administrator group. To overcome this security issue, right now, I change RSB code to grant access for the Everyone user. Although granting for Everyone is not a good idea, it is working now.

	'''TODO''': Change code so that appropriate access is automatically granted to those queues for relevant users.		'''TODO''': Change code so that appropriate access is automatically granted to those queues for relevant users.

			== MSMQ ==

			Error:

			The transaction has aborted.

			Communication with the underlying transaction manager has failed.<br>Solution: Check if MSDTC (Distributed Transaction Coordinator) is running. If not, start it.

Catglobe at 09:10, 7 October 2009

2009-10-07T09:10:07Z

← Older revision		Revision as of 09:10, 7 October 2009
Line 9:		Line 9:
	*cattask_queue#timeout (timeout messages come here)		*cattask_queue#timeout (timeout messages come here)

	'''TODO''': explain those queues in more details.		'''TODO''': explain those queues in more details.

	~~At the moment~~, ~~the main queue is created by hand~~, ~~while the rest~~ are created by the ~~Rhino Service Bus~~ itself. The point is that in order to access the queues, Rhino Service Bus needs to have enough permission to the queues. So, what specifies the access rights which RSB has to the queues? A bus creates some threads to process messages, and those threads don't use impersonation at all. In other words, it uses the default '''Identity '''of the hosting process; for example ASPNET in Windows XP or NETWORK SERVICE in Windows Server 2003.		Those queues, if not exists, are created by the bus itself. The point is that in order to access the queues, Rhino Service Bus needs to have enough permission to the queues. So, what specifies the access rights which RSB has to the queues? A bus creates some threads to process messages, and those threads don't use impersonation at all. In other words, it uses the default '''Identity '''of the hosting process; for example ASPNET in Windows XP or NETWORK SERVICE in Windows Server 2003. By default, RSB just grants full access for the Administrator group. To overcome this security issue, right now, I change RSB code to grant access for the Everyone user. Although granting for Everyone is not a good idea, it is working now.

	~~Thus~~, ~~when setting up a new Cattask (site) in a machine~~, ~~remember~~ to grant ~~Full~~ access ~~to all~~ the ~~queues~~ for ~~those accounts~~.

	'''TODO''': Change code so that appropriate access is automatically granted to those queues for relevant users.		'''TODO''': Change code so that appropriate access is automatically granted to those queues for relevant users.

Catglobe at 09:20, 5 October 2009

2009-10-05T09:20:08Z

← Older revision		Revision as of 09:20, 5 October 2009
Line 1:		Line 1:
	== Permission ==		== Permission ==

	- One Cattask needs 5 queues in total to work properly:		- One Cattask needs 5 queues in total to work properly:

	*cattask_queue (main queue)		*cattask_queue (main queue)
	*cattask_queue#discarded (discarded messages come here)		*cattask_queue#discarded (discarded messages come here)
	*cattask_queue#errors (error messages come here)		*cattask_queue#errors (error messages come here)
	*cattask_queue#subscriptions (subscriptions messages come here)		*cattask_queue#subscriptions (subscriptions messages come here)
	*cattask_queue#timeout (timeout messages come here)		*cattask_queue#timeout (timeout messages come here)

			'''TODO''': explain those queues in more details.

			At the moment, the main queue is created by hand, while the rest are created by the Rhino Service Bus itself. The point is that in order to access the queues, Rhino Service Bus needs to have enough permission to the queues. So, what specifies the access rights which RSB has to the queues? A bus creates some threads to process messages, and those threads don't use impersonation at all. In other words, it uses the default '''Identity '''of the hosting process; for example ASPNET in Windows XP or NETWORK SERVICE in Windows Server 2003.

			Thus, when setting up a new Cattask (site) in a machine, remember to grant Full access to all the queues for those accounts.

			'''TODO''': Change code so that appropriate access is automatically granted to those queues for relevant users.

Catglobe: Created page with '== Permission == - One Cattask needs 5 queues in total to work properly: cattask_queue (main queue) cattask_queue#discarded (discarded messages come here) *cattask_queue…'

2009-10-05T07:31:26Z

Created page with '== Permission == - One Cattask needs 5 queues in total to work properly: *cattask_queue (main queue) *cattask_queue#discarded (discarded messages come here) *cattask_queue…'

New page

== Permission ==

- One Cattask needs 5 queues in total to work properly:

*cattask_queue (main queue)
*cattask_queue#discarded (discarded messages come here)
*cattask_queue#errors (error messages come here)
*cattask_queue#subscriptions (subscriptions messages come here)
*cattask_queue#timeout (timeout messages come here)