Upgrade Server to 12.1.1000.157 failed - The upgrade tool cannot grant the database user privilege.
Created: 26 Jul 2012 | Updated: 14 Oct 2012
Hi,
I'm in the middle of upgrading the SEPM from v11.0.6005 into SEPM v12.1 RU1 and it is stuck in running the upgrade.bat file ?
My Database is SQL Server 2005 SP4
I have input / use the same account for the Windows Authentication which is also the db_owner and even got sysadmin role but always end up with the following error:
Initializing...
The upgrade tool cannot grant the database user privilege. You must provide the database user authentication mode (SQL/WIN), system administrator account and password when launching the upgrade tool, and the database user authentication mode must be the same as used in SEPM.
Error occurred
can anyone please let me know what to do as I cannot login to my SEPM console and none of my clients are updating at the moment.
Thanks in advance
Quick Look Solution
HI, User issue has beenĀ
HI,
User issue has been resolved kindly check user last thread
https://www-secure.symantec.com/connect/forums/how-come-i-got-duplicated-sep-client-my-sepm-database
https://www-secure.symantec.com/connect/forums/wrong-sep-client-installed-64-bit-server
Comments
Error log attached
Dushan Gomez
IT Manager
VCP 4 and 5 | MCITP Exchange Server | MCTS SharePoint Server | MCP Windows XP
Upon checking your Logs
Hello,
Upon checking your logs we found the following -
2012-07-26 18:57:47.634 THREAD 23 SEVERE: java.sql.SQLException: Login failed for user ''. The user is not associated with a trusted SQL Server connection.
.........
.............
2012-07-26 18:57:47.634 THREAD 23 INFO: UpgradeDBUtil: testDBConnection: Exception - Can't connect to database.
2012-07-26 18:57:49.899 THREAD 23 INFO: isUserDBOwner: Couldn't verify sem5 user is db_owner.
2012-07-26 18:57:49.899 THREAD 23 SEVERE: java.sql.SQLException: Login failed for user ''. The user is not associated with a trusted SQL Server connection.
Check the Articles provided below:
"Failed to connect to the database." error when attempting to install Symantec Endpoint Protection Manager 11.x (SEPM) to a Microsoft SQL backend using Windows Authentication.
http://www.symantec.com/docs/TECH122555
"Login failed for user 'username'. The user is not associated with a trusted SQL Server connection" in install_log.err while installing Symantec Endpoint Protection Manager (SEPM) on Microsoft SQL 2005
http://www.symantec.com/docs/TECH90870
About SQL Server database authentication modes http://www.symantec.com/docs/HOWTO55332
About SQL Server configuration settings http://www.symantec.com/docs/HOWTO55330
Hope that helps!!
Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | MCTS | STS | ITIL v3
Twitter: @mithun_sanghavi
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<&a
Hi Mithun, For this
Hi Mithun,
For this article: http://www.symantec.com/business/support/index?page=content&id=TECH122555
As per the current RSoP.msc the result is "No Minimum" and the SQL server has already using both mixed and SQL auth.
Dushan Gomez
IT Manager
VCP 4 and 5 | MCITP Exchange Server | MCTS SharePoint Server | MCP Windows XP
sa username is disabled in my SQL Server for security purpose
Hi Mithun,
I'm upgrading SEPM into v12.1 RU1 not a clean install of SEPM v11.0.6005 ?
Do I need to enable the sa SQL username and know password (SQL Server 2005 SP4). as per this article: http://www.symantec.com/business/support/index?page=content&id=TECH90870
Dushan Gomez
IT Manager
VCP 4 and 5 | MCITP Exchange Server | MCTS SharePoint Server | MCP Windows XP
Yes.
Hello,
Yes. We require sa level user account to make the necessary modifications to the database for the migration. There is no workaround. Note that this data is not stored by the SEPM, and is only used for one-time authentication.
Mithun Sanghavi
Symantec Technical Support Engineer, SEP
MIM | MCSA | MCTS | STS | ITIL v3
Twitter: @mithun_sanghavi
Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<&a
Ah ok, I have enable it
Ah ok, I have enable it because I just knew it that sa is disabled after I upgrade with SQL 2005 SP4 with the latest CU. But i haven't restart the service yet due to this is production server.
Dushan Gomez
IT Manager
VCP 4 and 5 | MCITP Exchange Server | MCTS SharePoint Server | MCP Windows XP
Can you login to the SQL DB
Can you login to the SQL DB with that account?
SEP Knowledge Base
Endpoint SWAT
yes
Yes Brian,
I can login using the sem5 SQL user ccount to the SQL Server with the SEM5 database, I can even execute this SQL code but without any result:
SELECT computer_name,
Dateadd(s, CONVERT(BIGINT, [time_stamp]) / 1000, '01-01-1970 00:00:00')
AS
[Time Stamp],
Cast((CASE WHEN ip_addr1 < 0 THEN 0xFFFFFFFF + ip_addr1 ELSE ip_addr1 END
/ 256
/ 256 / 256) & 0xFF AS VARCHAR)
+ '.' + Cast((CASE WHEN ip_addr1 < 0 THEN 0xFFFFFFFF + ip_addr1 ELSE
ip_addr1
END / 256 / 256) & 0xFF AS VARCHAR)
+ '.' + Cast((CASE WHEN ip_addr1 < 0 THEN 0xFFFFFFFF + ip_addr1 ELSE
ip_addr1
END / 256) & 0xFF AS VARCHAR) + '.'
+ Cast( CASE WHEN ip_addr1 < 0 THEN 0xFFFFFFFF + ip_addr1 ELSE ip_addr1
END &
0xFF AS VARCHAR)
AS LOCAL_IP_ADDRESS
FROM sem_computer
WHERE computer_name IN (SELECT computer_name
FROM sem_computer
GROUP BY computer_name
HAVING ( Count(computer_name) > 1 ))
Dushan Gomez
IT Manager
VCP 4 and 5 | MCITP Exchange Server | MCTS SharePoint Server | MCP Windows XP
hi you must delelte user sem5
hi
you must delelte user sem5 and then create new sem5 login
To delelte user sem5 :
open the sm5 database and choose security , users , locate and
delete the sem5 user
To create new sem5 user :
From the top of the hierarchly , open security , logins
Right Click Logins and choose New Login
Login Name : sem5
Enter password
On the left choose User Mapping and place a check next to sem5
In database role membership for : sem5 , place a check next to
dbowner(publice should already be check) and then click ok
Connect the SEPM to database by " repointing server to a new SQL
server
hi all : The user is not
hi all :
The user is not associated with a trusted SQL Server connection"
may be user problem if can deleted it and create a new user may be solved problem
i am happans same but when moving sql database from server A to server B , then reconfigured server B to pointing to SQL Server an error occureed , so that i am created new user sem5 then login
HI, User issue has beenĀ
HI,
User issue has been resolved kindly check user last thread
https://www-secure.symantec.com/connect/forums/how-come-i-got-duplicated-sep-client-my-sepm-database
https://www-secure.symantec.com/connect/forums/wrong-sep-client-installed-64-bit-server
Thanks In Advance
Ashish Sharma
SEPM Knowledgebase Documents
yes thank you for the reply
yes thank you for the reply back Ashish !
Dushan Gomez
IT Manager
VCP 4 and 5 | MCITP Exchange Server | MCTS SharePoint Server | MCP Windows XP
Would you like to reply?
Login or Register to post your comment.