Hi,

I got lots of windows warning events on server like below, I don't think URL http://www.***.cn/portals/2/Cache/TabModule_1046_en-US.resources is available for visitors but why this happen? Is it attack?

Thanks!

Tiger

Event code: 3005
Event message: An unhandled exception has occurred.
Event time: 5/6/2008 7:45:30 AM
Event time (UTC): 5/5/2008 11:45:30 PM
Event ID: b155fe4d725f4d5f81c08bc4c732fcc2
Event sequence: 260
Event occurrence: 6
Event detail code: 0
 
Application information:
    Application domain: /LM/W3SVC/190591815/Root-1-128544841532144820
    Trust level: Full
    Application Virtual Path: /
    Application Path: D:\DCSDNN\
    Machine name: DCSWEB1
 
Process information:
    Process ID: 7928
    Process name: w3wp.exe
    Account name: NT AUTHORITY\NETWORK SERVICE
 
Exception information:
    Exception type: HttpException
    Exception message: Path '/portals/2/Cache/TabModule_1046_en-US.resources' is forbidden.
 
Request information:
    Request URL: http://www.***.cn/portals/2/Cache/TabModule_1046_en-US.resources
    Request path: /portals/2/Cache/TabModule_1046_en-US.resources
    User host address: 74.6.19.*
    User: 
    Is authenticated: False
    Authentication Type: 
    Thread account name: NT AUTHORITY\NETWORK SERVICE
 
Thread information:
    Thread ID: 6
    Thread account name: NT AUTHORITY\NETWORK SERVICE
    Is impersonating: False
    Stack trace:    at System.Web.HttpForbiddenHandler.ProcessRequest(HttpContext context)
   at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
   at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
 
 
Custom event details:

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Thanks Lan,

I think you are right, I didn't give any permissions for the directory to NS account before, sometimes the website even couldn't be visited so I gave it the modify permission of data directory but not the entire.

Maybe I need to try that, right?

Regards,

Tiger

lan,

Sorry it still happened after I gave NS account the modify permission of the entire directory. It just gives warnings in windows event, I don't know if  it is harmful to the website.

I have another issue that website goes dead sometimes, the error says like below.

What I did was

1, role NS account as db_creator in SQL 2005 EXPRESS

2, exec sp_grantlogin 'NT AUTHORITY\NETWORK SERVICE'

Is it enough please? I really hope I could see it runs well tomorrow morning!

Thanks a lot,

Tiger

Server Error in '/' Application.
Cannot open user default database. Login failed.
Login failed for user 'NT AUTHORITY\NETWORK SERVICE'.

Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.Data.SqlClient.SqlException: Cannot open user default database. Login failed.
Login failed for user 'NT AUTHORITY\NETWORK SERVICE'.

Source Error:

The source code that generated this unhandled exception can only be shown when compiled in debug mode. To enable this, please follow one of the below steps, then request the URL:

1. Add a "Debug=true" directive at the top of the file that generated the error. Example:

  <%@ Page Language="C#" Debug="true" %>

or:

2) Add the following section to the configuration file of your application:

<configuration>
   <system.web>
       <compilation debug="true"/>
   </system.web>
</configuration>

Note that this second technique will cause all files within a given application to be compiled in debug mode. The first technique will cause only that particular file to be compiled in debug mode.

Important: Running applications in debug mode does incur a memory/performance overhead. You should make sure that an application has debugging disabled before deploying into production scenario.

Stack Trace:

[SqlException (0x80131904): Cannot open user default database. Login failed.
Login failed for user 'NT AUTHORITY\NETWORK SERVICE'.]
   System.Data.ProviderBase.DbConnectionPool.GetConnection(DbConnection owningObject) +435
   System.Data.ProviderBase.DbConnectionFactory.GetConnection(DbConnection owningConnection) +82
   System.Data.ProviderBase.DbConnectionClosed.OpenConnection(DbConnection outerConnection, DbConnectionFactory connectionFactory) +105
   System.Data.SqlClient.SqlConnection.Open() +111
   Microsoft.ApplicationBlocks.Data.SqlHelper.ExecuteNonQuery(String connectionString, CommandType commandType, String commandText, SqlParameter[] commandParameters) +145
   Microsoft.ApplicationBlocks.Data.SqlHelper.ExecuteNonQuery(String connectionString, String spName, Object[] parameterValues) +234
   DotNetNuke.Services.Log.EventLog.DBLoggingProvider.Data.SqlDataProvider.AddLog(String LogGUID, String LogTypeKey, Int32 LogUserID, String LogUserName, Int32 LogPortalID, String LogPortalName, DateTime LogCreateDate, String LogServerName, String LogProperties, Int32 LogConfigID) +407
   DotNetNuke.Services.Log.EventLog.DBLoggingProvider.DBLoggingProvider.WriteLog(LogQueueItem objLogQueueItem) +292

[ModuleLoadException: Error:  is currently unavailable.]
   DotNetNuke.Services.Exceptions.Exceptions.ProcessModuleLoadException(String FriendlyMessage, PortalModuleBase ctrlModule, Exception exc, Boolean DisplayErrorMessage) +217
   DotNetNuke.Services.Exceptions.Exceptions.ProcessModuleLoadException(PortalModuleBase ctrlModule, Exception exc) +118
   DotNetNuke.Modules.Html.HtmlModule.Page_Load(Object sender, EventArgs e) +356
   System.Web.UI.Control.OnLoad(EventArgs e) +99
   System.Web.UI.Control.LoadRecursive() +47
   System.Web.UI.Control.LoadRecursive() +131
   System.Web.UI.Control.LoadRecursive() +131
   System.Web.UI.Control.LoadRecursive() +131
   System.Web.UI.Control.LoadRecursive() +131
   System.Web.UI.Control.LoadRecursive() +131
   System.Web.UI.Control.LoadRecursive() +131
   System.Web.UI.Control.LoadRecursive() +131
   System.Web.UI.Control.LoadRecursive() +131
   System.Web.UI.Control.LoadRecursive() +131
   System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +1436

[PageLoadException: Error:  is currently unavailable.]
   DotNetNuke.Services.Exceptions.Exceptions.ProcessPageLoadException(Exception exc, String URL) +202
   DotNetNuke.Framework.PageBase.Page_Error(Object Source, EventArgs e) +408
   System.Web.UI.TemplateControl.OnError(EventArgs e) +2085460
   System.Web.UI.Page.HandleError(Exception e) +71
   System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +7341
   System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +213
   System.Web.UI.Page.ProcessRequest() +86
   System.Web.UI.Page.ProcessRequestWithNoAssert(HttpContext context) +18
   System.Web.UI.Page.ProcessRequest(HttpContext context) +49
   ASP.default_aspx.ProcessRequest(HttpContext context) +4
   System.Web.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +358
   System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +64

Version Information: Microsoft .NET Framework Version:2.0.50727.1433; ASP.NET Version:2.0.50727.1433