Starting SNA Server service may cause Event 630 to be logged (317603)



The information in this article applies to:

  • Microsoft SNA Server 3.0
  • Microsoft SNA Server 3.0 SP1
  • Microsoft SNA Server 3.0 SP2
  • Microsoft SNA Server 3.0 SP3
  • Microsoft SNA Server 3.0 SP4
  • Microsoft SNA Server 4.0
  • Microsoft SNA Server 4.0 SP1
  • Microsoft SNA Server 4.0 SP2
  • Microsoft SNA Server 4.0 SP3
  • Microsoft SNA Server 4.0 SP4
  • Microsoft Host Integration Server 2000
  • Microsoft Host Integration Server 2004

This article was previously published under Q317603

SUMMARY

If you start the SNA Server service (Snaservr.exe), the following warning event may be posted in the application log of the Event Viewer:
Event 630 - Source: SNA Host Security

RPC Layer returned error 0x5 (Access is denied.) This may happen if host security is not installed or the user account the service is running under is not privileged to send messages to the remote end.

MORE INFORMATION

The SNA Server service initializes the Host Security DLL (Snasii.dll) when the service starts. During this process, Snasii.dll attempts to locate a domain controller (DC) to find a valid host account cache (HAC) database. This DLL is initialized even if Host Security Integration is not installed.

In cases where Host Security is used, this event may be logged if the service account under which the SNA Server service is running does not have proper rights to access the DC and locate the HAC.

Following is a section of a SNA Server internal trace file (Nodeintx.atf), that shows a failure due to security:
SendLocateMessage GetDomainPdc returned PDC \\<Server_Name>, NT Domain

SendGenericMessage Opened connection to server type MDB on protocol ncacn_np

SendGenericMessage About to invoke RPC on binding b1c7c350-c091-11cf-a65e-0020afc28c52@ncacn_np:\\\\<Server_Name>

SendGenericMessage RPC on binding b1c7c350-c091-11cf-a65e-0020afc28c52@ncacn_np:\\\\<Server_Name> returned error: 0x5 (Access is denied.)

SendGenericMessage RPC Layer returned error 0x5 (Access is denied.) This may happen if host security is not installed or the user account the service is running under, is not privileged to send messages to the remote end.

HsLogEvent ERROR CODE 0xA1500276, strings:""
HsLogEvent Warning type string
NOTE: Logging this event does not cause any performance concerns or overhead. You cannot suppress this event.

REFERENCES

For additional information about causes for an Event 630, click the article numbers below to view the articles in the Microsoft Knowledge Base:

216558 Recycling Server Causes Invalid RPC Binding for Host Security

248354 Changing Password on Host Security Service Account Causes SSO to Fail


For additional information about Snasii.dll, see the following article in the Microsoft Knowledge Base:

265384 Snasii.dll Always Tries to Locate Host Account Cache Database


Modification Type:MajorLast Reviewed:4/27/2005
Keywords:kbinfo KB317603