bulkcopy() & bulkcopy_arrow() fail with Schannel AcquireCredentialsHandleW error 0x8009030D (SEC_E_UNKNOWN_CREDENTIALS)
Les mainteneurs répondent en général sous 1 jour
Personne n'a encore pris cette issue.
Évaluation
- Difficulté
- 4/5
- Temps estimé
- 3-5 jours
- Accessibilité débutants
- 20/100
Piste de recherche
Start where bulkcopy() and bulkcopy_arrow() open their separate mssql_py_core.PyCoreConnection, and compare it with the path that connect() uses, which already works. Check how that path negotiates TLS and acquires Schannel credentials, and see what changed around issues #501 and #459. Done means bulk copy connects on Windows build 14393 with the reported connection strings, or the failure is reported with a clear reason. Without access to that Windows build, expect to need a maintainer's help to reproduce it.
Rédigé par le modèle d'indexation à partir du texte de l'issue.
Description
Hello ☺️
I have been trying to use mssql_python to read from and write to a SQL Server Database.
I am able to read with zero problems from the database and convert the data to Arrow. But, when I try to write back to the database using bulkcopy_arrow(), mssql_python raises the following error:
Failed to connect to SQL Server: Unexpected Implementation Error: Schannel AcquireCredentialsHandle failed: AcquireCredentialsHandleW(UNISP_NAME) failed: unknown SECURITY_STATUS (status=0x8009030D)
I have tried everything and nothing works, can you please help me?
Bellow i send more details about the bug:
On a client machine running Windows Server 2016 / Windows 10 1607 (build 14393), connecting to SQL Server 2022, a normal mssql_python.connect() session works perfectly — I can run SELECTs and executemany() inserts over it. But cursor.bulkcopy_arrow() always fails at connection time with a Schannel credential error:
Failed to connect to SQL Server: Unexpected Implementation Error: Schannel AcquireCredentialsHandle failed: AcquireCredentialsHandleW(UNISP_NAME) failed: unknown SECURITY_STATUS (status=0x8009030D)
0x8009030D is SEC_E_UNKNOWN_CREDENTIALS. This happens before any certificate validation, so it is distinct from the TLS cert-trust failures in #501 / #459 (which were fixed). The common root is the same design noted there: bulkcopy/bulkcopy_arrow open a separate mssql_py_core.PyCoreConnection instead of reusing the already-open, working connection, and that separate path negotiates TLS differently. On this older Windows build, the Rust client's TLS/Schannel credential acquisition fails outright.
I have ruled out the usual suspects — none of these change the result:
Encrypt=noandEncrypt=yes;TrustServerCertificate=yes— both fail identically (so the #501 cert-trust workaround does not apply here; the failure is before cert validation).- Windows Integrated auth (
Trusted_Connection=yes) and SQL login (UID/PWD) — both fail identically (so it is not tied to integrated/Kerberos auth). - Upgrading from 1.15.0 to 1.16.0 — no change.
Meanwhile the exact same connection strings work fine for normal connect() + SELECT + executemany().
To reproduce
import mssql_python
conn = mssql_python.connect(
"Server=<server>,1433;"
"Database=<db>;"
"Trusted_Connection=yes;" # also tried UID=<user>;PWD=<pass>
"TrustServerCertificate=yes;" # also tried Encrypt=no
"Encrypt=yes;"
)
cur = conn.cursor()
# This works fine
cur.execute("SELECT @@SERVERNAME, DB_NAME(), SUSER_SNAME()")
print(cur.fetchone())
# This works fine too
cur.executemany(
"INSERT INTO <table> (col1, col2) VALUES (?, ?)",
[(1, "a"), (2, "b")],
)
conn.commit()
# This FAILS at connection time:
# Schannel AcquireCredentialsHandle failed:
# AcquireCredentialsHandleW(UNISP_NAME) failed:
# unknown SECURITY_STATUS (status=0x8009030D)
cur.bulkcopy_arrow("<table>", arrow_table, batch_size=1000)
Further technical details
- mssql-python version: 1.16.0 (also reproduced on 1.15.0)
- mssql-python-odbc: 18.6.2.2
- mssql_python_rs: 0.3.0
- Python: 3.10.4 (64-bit)
- Client OS: Windows, build 10.0.14393 (Windows Server 2016 / Windows 10 1607), reported by
platform.win32_ver()→('10', '10.0.14393', 'SP0', 'Multiprocessor Free') - Auth: fails with both
Trusted_Connection=yesand SQL login (UID/PWD) - SQL Server: Microsoft SQL Server 2022 (RTM-CU24) (KB5080999) - 16.0.4245.2 (X64)
Observations
- Normal connection +
SELECT+executemanyall succeed on the same connection string. - Only the
bulkcopy/bulkcopy_arrowpath fails, and it fails at connect time (no data is sent). - Fails regardless of
Encrypt=novsEncrypt=yes;TrustServerCertificate=yes, and regardless of integrated vs SQL auth — consistent with the failure happening in Schannel credential acquisition, before certificate validation.
Possibly related: #501, #459 (separate PyCoreConnection, TLS handled differently than the main connection — but those were certificate-trust failures that are now fixed; this is a credential-acquisition failure on an older Windows build).
Workaround: cursor.executemany(...) + conn.commit() instead of bulk copy.
- Langage dominant
- Python
- Étoiles
- 479
- Forks
- 62
- Merge moyen
- 2 j 23 h
- PR mergées (30 j)
- 18
Préparer son environnement
Lance le conteneur de développement du projet dans votre navigateur, avec votre propre compte GitHub.
- Aucun Dockerfile ni fichier Docker Compose
- Propose un modèle de pull request
- Lire le guide de contribution
Par où commencer
- Lisez l'issue en entier, puis le guide de contribution du projet.
- Signalez en commentaire que vous la prenez — cela évite que deux personnes fassent le même travail.
- Forkez le dépôt et travaillez sur une branche.
- Ouvrez une pull request qui référence le numéro de l'issue.
Autres issues de microsoft/mssql-python
-
area: bulk-copy triage needed
Difficulté 2/5 1-3 heures Accessibilité débutants 70/100
microsoft/mssql-python#843 · 1 commentaire ·
Les mainteneurs répondent en général sous 1 jour
-
triage needed
Difficulté 5/5 Plus d'une semaine Accessibilité débutants 38/100
microsoft/mssql-python#850 · 1 commentaire ·
Les mainteneurs répondent en général sous 1 jour
-
bulkcopy() fails with SQL error 7339 for UTF-8 multibyte characters against Fabric WarehouseOuvertetriage needed
Difficulté 4/5 3-5 jours Accessibilité débutants 22/100
microsoft/mssql-python#849 · 1 commentaire ·
Les mainteneurs répondent en général sous 1 jour
-
macOS: encrypted connections fail after Homebrew moved the `openssl` alias to `openssl@4`Peut-être pris @bewithgaurav l’a pris il y a 20 jours. Ouvertearea: packaging-platform bug triage needed
Difficulté 4/5 3-5 jours Accessibilité débutants 55/100
microsoft/mssql-python#826 · 2 commentaires · 1 personne assignée ·
Les mainteneurs répondent en général sous 1 jour
-
Announcement: mssql-python is coming to Django through mssql-django 2.0Peut-être à nouveau libre @bewithgaurav l’a pris il y a 46 jours, et aucune pull request n’est ouverte. Ouverteannouncement
microsoft/mssql-python#748 · 1 personne assignée ·
Les mainteneurs répondent en général sous 1 jour
Toutes les issues de microsoft/mssql-python
Issues similaires
-
Difficulté 2/5 1-3 heures Accessibilité débutants 74/100
eclipse-score/inc_someip_gateway#356 ·
Les mainteneurs répondent en général sous 2 jours
-
[BUG]: `GitHubRestAdapter.check_user_permission` and `has_write_access` raise `TypeError` (missing `params`), silently disabling the inactivity lifecyclePeut-être pris @tarunagnihotri534 l’a pris aujourd’hui. Ouvertebug
Difficulté 2/5 1-3 heures Accessibilité débutants 67/100
AOSSIE-Org/Gitcord-GithubDiscordBot#167 · 1 commentaire ·
Les mainteneurs répondent en général sous 2 jours
-
Difficulté 2/5 1-3 heures Accessibilité débutants 77/100
mihai-vlc/sublime-jsfmt#56 ·
-
comp/cli comp/plugins P2 type/bug
Difficulté 2/5 1-3 heures Accessibilité débutants 75/100
NousResearch/hermes-agent#141917 · 1 commentaire ·
Les mainteneurs répondent en général sous 1 jour
-
Difficulté 1/5 Moins d'une heure Accessibilité débutants 78/100
riscv/riscv-opcodes#441 ·