Jobs Running under ddic

Hello All,
Our Basis person scheduled a backgrpound job with his user id now I want to change the owner of this job,that is I want to run this job under ddic in 000 client..Please suggest.
Juan : Please let me know why this thread has been deleted..I really do not know how am I breaking the rules of SDN??Is this an Interview Question??I think any question can be interview question from sdn,it depends on the interviewer..This is a real problem I am facing at my dev server so I have taken the help of sdn.

Hi,
-> Log into 000 Client.
-> Using SM37 search the required Job (which is in released status) and open it for change.
-> Open the Step section of that Job in change mode. Here you can change the User Name (with which the Job will be invoked).
-> Schedule it on your time and save the changes finally. It will be scheduled in 000 Client with the new user which u specified in the Step of that Job.
Regards,
Bhavik G. Shroff

Similar Messages

Logging Time issue with Job running under SYS.MAINTENANCE_WINDOW_GROUP

Hi,
We have configured a nightly job to run daily at 2:00 AM
And configured the Job to run under Sys,maintenance_window_group.
The nightly job is producing some log(trace) files in the format
<date-time> message
the <date-time> entry is made as
UTL_FILE.PUT_LINE (log_file, TO_CHAR(SYSDATE,'DD/MM/YYYY HH24:MI:SS') || ' ' || msg, TRUE);
the problem is the entry for date-time field in the log file is not correct.
06/02/2013 20:00:02 NIGHTLY_JOB Begin
It is using EST time ( e.g.- 20:00:00 PM ) but the job is running at timezone Europe/VIENNA
the file modifcation time is OK, when we check it with ls command ( it gives time near to 2:00 AM)
-rw-r--r-- 1 oracle asmadmin 3494 Feb 7 02:36 NIGHTLY_JOB.log
could you please suggest what could be wrong?
Oracle release is 11.2.0.2

hi,
Can you , paste the o/p of
select * from NLS_DATABASE_PARAMETERS;Thanks,
Ajay More
http://www.moreajays.com

Jobs running under sys user name

Oracle 10.2.0.3 Enterprise
Win2k3
Just upgraded to 10.2.0.3 ee from 10.1.0.4 standard.
The jobs were entered via em and given the proper owner.
em was logged in as sys. All jobs are running as user name sys.
Can the user name be changed to the owner or do I have to drop and rebuild the jobs?
Thanks for any help
Bob

Hi,
For jobs there are two users, the job_owner and the job_creator.
The job_owner is the schema the job is created in. The job runs as the job owner and with the privileges of the job owner.
The job_creator is the user that creates the job (even if he creates it in another schema). When a job runs it sets its logged-in-user to be the job creator, so any actions will be audited as having been done by the job creator.
Neither the job_owner nor the job_creator can be modified after the job has been created.
But you may be able to use the copy_job command or the create_like EM button to save you some trouble.
Hope this helps,
Ravi.

How to find total jobs running under OEM.??

Hi,
Can anyone tell me, in OEM, how can we find out total jobs which are running or on-ice or scheduled etc.?? Is there any way to trace it out total jobs under OEM..??
Thanks in advance..
-Mahesh.

HI,
Thanks for your reply, but actually in our project Human Intervention is nowhere considered. Administrator should get all info through mail, once a job is scheduled with specific requirements it will send mails about the job status (failure, success etc).
So this should be done using OEM provided tables or any SQL queries (I think so..) I have got following link, where it has FLAG EVENTS like "job_started, job_succeeded, job_failed" etc through which it may be possible to schedule a job using above flags.
http://www.psoug.org/reference/dbms_scheduler.html
But I am not getting how to use them as I am not a PL/SQL or shell script programmer.. :( Any idea how to use them..??
Thanks

Queries Running Under the JOB

Hi,
At OS level one porocess is taking more CPU how to find the query running under that process.
5 ? *15581* oracle 241 20 7776M 8704K run 6:58 *99.97* 99.79 oracleCORE
3 ? *24777* oracle 241 20 7781M 16240K run 79:31 *99.50* 99.32 ora_j001_CORE
How to find the queries.

test with the query in proided link http://www.dba-oracle.com/t_high_cpu.htm
Thanks

SSIS 2012 package runs under SSDT but fails with permission error from SSMS

I have a simple package that pulls data from a text file located on a Windows file server that runs successfully from SSDT on my client.
However, when deployed and running the package via SSMS from the client, the package fails with a permission error, with the error stating that the data file could not be opened.
I have done some investigation and have seen some info that states that a package run from SSMS runs under the account on which you are logged on to the machine, which I would have thought is correct. This is therefore the same account when running from
SSDT (which works) and I can see from the SSIS Report that the 'Caller' is stated as my account, so if this is the case why isin't the package working.
I've also seen an MSDN forum answer which stated the opposite that the package when run from the IS Catalog in SSMS doesn't run under the account on which the client is logged on with, which is the opposite of the above, but doesn't indicate which account
it is using.
So what account is being used to run SSIS 2012 packages from the IS catalog from within SSMS ?
If it is the account on which you are logged onto the client running SSMS, why is it not working when the account has the necessary permissions (as provent when running from SSDT) ?

I am aware it's using my account and not one of the service. There's nothing in the posts above which suggests I'm using the service account. I don't know why people keep assuming that I'm running the package from a job. I've never stated that in any of
the posts I'm running the package from a job. It's been made quite clear I'm running the package from the IS Catalog on SSMS:
"This is simply selecting a package from the IS Catalog, right-clicking and selecting Execute package.", as per the Nov 18 post, and in the original post "....So what account is being used to run SSIS 2012 packages from the IS catalog from
within SSMS".
Just to be clear, the package is NOT being run from a job. It's using the Execute package option when selecting the package within SSMS from the IS Catalog and it's running under the account on which I am logged on to my client.
Please read carefully. I was just answering your question "So what account is being used to run SSIS 2012 packages from the IS catalog from within SSMS ?" and stating that you where right and that it uses your account to run the package
when you execute a package manually from the Catalog and that you can prove that by logging the system variable.
A good suggestion about using a share in the task to map the drive and I will try this. I would find it strange that SSMS requires this mapping whereas SSDT does not though.
Ok let us know your findings. If it doesn't work you can also test it with a password and username:
net use f: \\financial\public yourpassword /user:username
Please mark the post as answered if it answers your question | My SSIS Blog:
http://microsoft-ssis.blogspot.com |
Twitter

SQL server agent job running as Agent Service Account whose service account does not have r/w access but is still able to write?

Hi. I am newer to SQL server security and am reviewing some of our SQL server's configuration to make sure the services are running under accounts with least privilege. I have a SQL server 2012 instance whose Agent service is configured to run
under an AD user account named 'SQLServices'. The jobs on this server are configured to run as 'SQL server agent service account', which means they should execute as user 'SQLServices'. The jobs are set up to execute SSIS packages which read and
write to a database on the same server where the agent job is scheduled and SSIS package installed (all on same server). The jobs are currently executing without error and are reading writing data correctly. Upon close examination, it turns out the
SQLServices account is not assigned to the 'sysadmin' role and had no users mapped to any databases on this server. How are these jobs working? I verified in profiler that the login name indeed is 'SqlServices'. I also verified
that SQLServices login has no database access by remote-ing onto the server and trying to log into the DB, and access was denied as expected. According to the literature, the Agent service needs to be a member of 'sysadmin role' but I am reading
some cases where that is not necessarily the case. So this is not so concerning. What is concerning is that the login 'SQLServices' had no access to the databases on that server yet it is reading and writing to the databases as if it does.
The only thing I can think of is maybe jobs run as 'SQL server agent service account' on the same server as the databases it r/w to somehow has some kind of default access. What am I missing here? Any input would be helpful.

After 2 days on this forum I found the answer to my own question. In retrospect, I should have posted this under 'SQL Server Security', but I didn't know it existed.
The 2 threads below explain that Sql agent actually runs using SID (service) NT SERVICE\SQLSERVERAGENT if you chose that when you installed. This will automatically create an associated login NT SERVICE\SQLSERVERAGENT in SQL server with sqladmin
role. This is the login that Agent uses to connect to the local instance of SQL server. If you changed to domain account to run the service during install or after using config manager, basically NT SERVICE\SQLSERVERAGENT is still
used to connect to your local instance behind the scenes (even though you will still see your domain user as account), and the domain account is used to reach outside the server.
https://social.msdn.microsoft.com/Forums/sqlserver/en-US/9e6bb2de-8fd0-45de-ab02-d59bbe05f72e/servicedatabase-accounts-nt-servicemssqlserver-nt-servicesqlserveragent-what-are-they-for
https://social.technet.microsoft.com/Forums/sqlserver/en-US/b83a52fd-fe11-4c28-a27b-88be8ae79f2a/how-do-i-change-sql-server-agent-service-account-to-nt-servicesqlserveragent?forum=sqlsecurity

SQL Agent job running DTS package running in SQL 2005 is unable to run if job onwer is not logged onto server

I am currently working on a SQL Server upgrade project for a a client where I am converting old dts packages to SSIS. However for a few of the packages no conversion is allowed to be done. For these few packages I have to use dts legacy components in SQL
2005 on a windows 2003 server to run them.
These packages use CAPICOM via an Active X script in the package to envelope connection string data for security within the package. Consequently I have to register the capicom.dll for the job owner (which will execute the job via proxy) and install private
and public key files via internet explorer. I also do this when I am logged in with my account so i can test the package.
I have created a SQL Server Agent Job which is used to execute the package. We have a schedule account which is local admin on the server and sysadmin within SQL Server. This account is used to create a credential and then a proxy for the CmdExec subsystem
is then created based on this credential. A CmdExec job step is then added to the job. The directory of cmd file which calls the dts package is then entered in the command window.
Finally a recurring schedule is added to execute the job every 5 minutes.
If i am logged in to the server using the scheduled account the schedule runs successfully. I am also able to run the command file manually by double clicking on it. The DTS package is run successfully. However once the schedule is set up and I log off the
machine and log onto my development machine with my normal account and fire up SQL Server. I connect to that instance with the schedule and see that the job is failing with and Active X error in the package. From experience with this package this Active
X error occurs when the user executing the package has not registered the capicom.dll. This has already been done for the scheduler account because the job runs when the scheduler account is logged in on the server.
It almost seems as though the job will only run if the Scheduler account is logged on. If i log directly on to the server with own user account I am able to manually execute the package via the cmd file which indicates that the capciom.dll is registered
under my account. Yet if I try an run the job in SQL Server when I am logged in under my account (using the scheduler account proxy) then the job fails.
Does anybody have any idea why this may be happening? Any ideas would be much appreciated

Run the job SSIS step under a proxy account that is derived from the domain account, non-expiring password and has been set to have all the necessary rights.
How to is here: http://www.mssqltips.com/sqlservertip/2163/running-a-ssis-package-from-sql-server-agent-using-a-proxy-account/
Arthur
MyBlog
Twitter

Hello, I have a Macbook pro which runs under 10.5.8. I want to use a PC interface. been told I need to purchase paralellDestop 6, Windows & Microsoft 2008licence?

Hello, I have a Macbook pro which runs under 10.5.8. I want to use a PC interface. I've been told I need to purchase paralell Destop 6, Windows licence and Microsoft Office 2008 for PC. Is that correct ?

If you have a MacBook Pro with 10.5, that's usually a machine that's getting long in the tooth and thus running Windows as a virtual machine (one OS inside another) will likely be slow.
Also spending all that money for Windows (VirtualBox is free) and Office seems like almost a waste of effort if the machine is going to die suddenly.
MacBook Pro's last about 4-5 years.
To do what you want your going to have to upgrade OS X to 10.6, then either buy VMFusion or Parallels which they are now catering to 10.7 and 10.8 users, so it's slow on 10.6, or use the free VirtualBox which will run well on 10.6. Then buy a copy of Windows 7 as earlier Windows versions are not being sold, then Office 11 or whatever.
You can also install OfficeMac into 10.6, if they still sell a copy.
You see your outdated really, and anything that can work is soon to be ignored etc.
What I would consider doing instead, since your not a OS upgrade type of person (we are on 10.8 now which won't run on your machine or be extremely slow) is to buy yourself a decent Windows 7 laptop and install Office into that. Some have the demo already inside and all you have to do is activate it.
This way you get your Windows experience and Office experience, don't have to fiddle with complicated virtual machine software, or Apple's problematic Bootcamp etc as Apple really is leaving 10.5 and 10.6 users behind, and by next summer will be leaving 10.7 users behind too.
Windows 7 laptop will be the cheapest and least stressful option for you, you can continue to use the Mac until it drops dead of course.
I say this because your on 10.5, your like most computer users, just a computer user and not a geek.
You obviously have some reason you need Office, likely for a job or school and since 99% use Windows and Office, then that's what you should be using.
If your only needing Office or Office like program for something temporary, then I suggest you install the free LibreOffice into OS X, however I don't know if it will run in 10.5, you might have to upgrade to 10.6 via the 10.6.3 white retail disk, however Apple doesn't sell it anymore, but perhaps Amazon or elsewhere does.
Sorry, you have been out of the upgrade loop for quite some time, so a new machine is in order as that one is about to die soon, so I wouldn't be spending too much on it really.
If you have a fat wallet you can buy a new Mac with 10.8, and have Windows 7 installed in BootCamp (direct boot) and also into VMFusion or Parallels (copies the Bootcamp Windows so you can use both) and Office for you. It will come all set up, enter your password and use the machine.
I think OtherWorld Computing will sell you a pre-configured Mac all set up like that for you, Apple won't do it though.
You can also pay a local PC/Mac specialist to do the same.
Don't forget setting up a backup system for both Windows and OS X, add anti-malware software in Windows, you'll need that.
IMO a new Windows 7 laptop would be the cheaper, less stressful option, Learning Bootcamp and virtual machine software can be a pain if your not computer savvy, al;so Apple has a nasty habit of upgrading the operating system constantly, now on a annual basis. You don't upgrade and all your third party software, then your denied security updates in short order. Windows 7 laptop will last a decade on the same version, only needing simple updates, not upgrades.
If you want your Windows machine to last even longer, like a decade, then get a desktop tower instead of a laptop.
Mac's are for those who can handle a lot of change, as Apple is about always inflicting change. It's costly change too.
Good Luck
Windows in BootCamp or Virtual Machine?
Things to consider before upgrading OS X

How to modify Process Chain to run under BWREMOTE

Greetings,
below is the setup
- a process chain made up of an abap program
+ the program uses 'open dataset' to read the data on a file on the server and eventually to rewrite to a different directory
- when run the process chain get the following message:
"PC could not be scheduled- termination return code 8"
-when I run the abap in the background --> get the following message:
"OPEN_DATASET_no_authority"
- I have ful authorization to run any abap program and have full access to the server file.
- Notes: 947690 & 511475 --> has solution for changing the user id for BW up to and including 4.6C. Our system is 7.0
How can I change the user id in Process Chain so it can run under BWREMOTE and not under my user id.
Any suggestions are greatly appreciated. Thank you in advance,
B.A.

Thank you everyone for your responses.
After the responses, I changed the user to BWREMOTE
- went thru the following steps:
RSPC - chose my PC - change mode - Menu - PC - Attributes - Execution user - selected option 'BW background user' --> saved the PC, checked it, activated it and scheduled it.
However, in sm37, I do not see the job under BWREMOTE, it is still under my userid.
Any suggestions please. Greatly appreciate it.
B.A.

/BDL/TASK_PROCESSOR running as DDIC account

There's been several discussions on background jobs not running as SAP delivered accounts such as SAP* and DDIC. We're taking some initiatives to follow these standards.
One paritcular job seems to be vexing to reschedule as another user ID. It is currently running as DDIC, and we would like to reschedule it as a custom system account. We cannot change who the job is running as through traditional job scheduler. There are several notes
There are several good sights that seem to replicate notes and such but none seem to really clarify for a configurer running this job how to set it to run as a different ID from DDIC. 'http://www.stechno.net/sap-notes.html?view=sapnote&id=763561
Does anyone have any success with rescheduling this job as a different user ID? If so, how did you accomplish this task?

Hi Kevin,
Go to SM37 -> open /BDL/TASK_PROCESSOR -> click define step -> select the program /BDL/TASK_SCHEDULER ->select the step and change -> change the user to solman_btc
Also use the system user for any job schedule.
Rg,
Karthik

SSO to partner application running under IIS

Hi,
We have a complete set-up for 9iAS Release2 where some applications are running. In parallell we have an application running under IIS, and would now like to enable the IIS application as a partner application to 9iAS letting the 9iAS SSO server handle the authentication.
In the documentation of Oracle Proxy Plug-in I read that this proxy plug-in can be used to proxy requests from IIS to Oracle http server (OHS) and also in this way enable SSO.
My question is if this can be done only for applications running under 9iAS but having IIS as web server, or if it is also possible like in our case to enable SSO via the proxy plug-in to applications runnind under IIS?
If this is not supported is the only available solution to use the SSO SDK in my IIS application?
Thanks and regards,
Rikard

Here's a DIY answer.
See Metalink Note 269820.1 which shows you how to use Perl to overwrite the host name in the HTTP header and remove the port number.

How to allow access to web service running under ApplicationPoolIdentity

Hi All,
I have a WCF web service hosted in IIS 7 (or maybe 7.5, whichever comes with Windows server 2008 R2) using DefaultAppPool running under ApplicationPoolIdentity per Microsoft's recommendation. The web service needs to call a stored procedure to insert data
to a db. The web server is on a different VM than the database server. The db server is running SQL 2008 R2. Both VMs run Windows server 2008 R2.
When the web service tries to connect to db, it encounters this exception:
Exception in InsertToDb()System.Data.SqlClient.SqlException (0x80131904): Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.
at System.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, Boolean breakConnection)
Here's the connection string in web.config:
Application Name=somewebservice;Server=somewebserver;Integrated Security=SSPI;Database=somedatabase;Connection Timeout=60"
How should I configure SQL security to make this work?
Thanks in advanced.

Thanks for the link Dan. Maybe I'm the one who cause the confusion :)
If I understand you(and Erland) correctly, you suggest using a custom, domain account for application pool identity. However, if we do that, our IT will need to maintain those accounts, and they don't want that. So I'm choosing a built-in account called
ApplicationPoolIdentity as the application pool identity, but it's not working. Network Service, on the other hand, works, but my boss wants us to follow MS's best practice.
What's puzzling is that according to this: http://learn.iis.net/page.aspx/624/application-pool-identities/, both Network Service and ApplicationPoolIdentity uses machine account to access network resource (like db in this case), but in my case, Network Service
works, but not ApplicationPoolIdentity.
Hallo Stephen,
with respect - it seems to me that only idiots are working at your IT ;)... It is absolutely useful to work with "service accounts" created within the domain. That's the only way to manage and control accounts!
If you want to "pass through" the identity of the web user (SSO) you have to check whether the app pool is set to "allow impersonate". As far as I understand the ApplicationPoolIdentity-function the app pool will create a unique user named as the service.
I assume that will not work with the connection to the sql server because this user is unknown.
Local Service will not work because it's restriction is located to the local machine.
Network Service will work because access to network resources will be available.
So my recommendation is to use a dedicated service account or impersonation:
http://msdn.microsoft.com/en-us/library/xh507fc5.aspx
Uwe Ricken
MCITP Database Administrator 2005
MCITP Database Administrator 2008
MCITS Microsoft SQL Server 2008, Database Development
db Berater GmbH
http://www-db-berater.de

Global data getting reset when running under IIS?

We have a scenario using IIS with an ASP.NET web service written in VB.NET. When a call to the web service is made, the web service calls a native dll (written in C, compiled using VS2010) using platform invoke, which in turn calls into our product API:
VB.NET web service -> native library (p/invoke) -> native API ....
Web service requests are successfully completed and the system runs without problem for hours. A trace of the native API shows it is being called by multiple processes and multiple threads within those processes.
The main native API dll contains a static global variable used to detect whether it is the first time it has been called and run initialization logic if it is. This dll is itself linked to a second dll that contains a global variable used to detect if it is
the first time it has been called.
After some hours the trace shows that the native API is invoked by an existing process but that the initialization logic is being exercised again, even though the global variable was set to indicate not first time and is never reset. One theory was that
the first process has ended and a new process has started almost instantaneously using the same process ID. However this is not the case as existing thread IDs from the same process are seen to write to the trace again after the first time logic has executed
for the second time, indicating the process has not restarted. The problem occurs regularly.
It is as though the process's global data has been initialized again and malloc'ed memory freed while the processing is still running. Is there any way this is possible when running under IIS?
There is an internal thread which waits on a blocking read of a named pipe (via ReadFile), and when the problem occurs, the ReadFile call ends with ERROR_NO_ACCESS, which appears to indicate the malloc'ed buffer is no longer valid, again implying something
has happened to the memory allocated to the process.

Suggestting you asking it on:
http://forums.iis.net/

RE: How to have multiple application running under one server

          I have one server
          I have many application
          Question: Is it possible for me to have a weblogic properties file under each
          of this application.


If your question is whether you can run multiple instances of WebLogic
          (or multiple applications) on one server, the answer is yes. The only
          problem is, you must have a unique port for each of the servers to run
          on. I.e., they can not all run under port 80 which has obvious
          internet/network implications.
          This also means you have multiple weblogic.properties files etc. for
          each instance.
          We do this with WL5.1 on a Linux 2.4 kernel in developement to allow
          multiple developers run their own instance on one box.
          Dano
          Mettu Kumar <[email protected]> wrote in message news:<[email protected]>...
          > No if you are running single instance of wls.
          >
          > Kumar.
          >
          > Sonny wrote:
          >
          > > I have one server
          > > I have many application
          > > Question: Is it possible for me to have a weblogic properties file under each
          > > of this application.

Jobs Running under ddic

Similar Messages

Maybe you are looking for