Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
Discussion Groups
DB Engine
SQL ServerMSDESQL Server CE
Services
Analysis (Data Mining)Analysis (OLAP)DTSIntegration ServicesNotification ServicesReporting Services
Programming
CLRConnectivitySQLXML
Other Technologies
ClusteringEnglish QueryFull-Text SearchReplicationService Broker
General
Data WarehousingPerformanceSecuritySetupSQL Server ToolsOther SQL Server Topics
DirectoryUser Groups
Related Topics
MS AccessOther DB ProductsMS Server Products.NET DevelopmentVB DevelopmentJava DevelopmentMore Topics ...

SQL Server Forum / Services / Reporting Services / January 2008

Tip: Looking for answers? Try searching our database.

SQL Reporting and Windows Authentication

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Carlos - 02 Nov 2005 22:12 GMT
I am trying to use Windows Authentication with my SQL Reporting Services. I
created a Windows group and created a login account for that group in SQL and
assigned the rigth permissions to the DB. The Data source in my reports is
using windows authentication. When running the report I get this error
message :

Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'

What I am missing ?

Carlos
Chris Hastings - 02 Nov 2005 22:45 GMT
Hi Carols,
When you setup the report server, you probably setup the website to use
anonymous login.
If you go into IIS on the report server and go to websites/default web site
then right click on reports and go to properties and go to directory
security and edit Anonymous access and authentication control and turn off
anonymous access and select integrated windows authentication, you should be
ok.
You will also probably have to go add the same users the report manager.  Go
to the report manager home page and then go to properties and add the group
there for report access.
Right now you are running reports under NT AUTHORITY\ANONYMOUS LOGON and you
want to change that to be the domain account.
I hope that helps!
Chris

>I am trying to use Windows Authentication with my SQL Reporting Services. I
> created a Windows group and created a login account for that group in SQL
[quoted text clipped - 8 lines]
>
> Carlos
Carlos - 02 Nov 2005 23:11 GMT
Chris,

IIS was already setup to use integrated windows authentication (Anonymous
access was turned off) and the windows group was already added to the report
server. The strange thing thogh is that when trying to connect to a different
SQL server a get a different error message:

"An error has occurred during report processing. (rsProcessingAborted) Get
Online Help
Cannot create a connection to data source 'NKRIM105_DB'.
(rsErrorOpeningConnection) Get Online Help
Login failed for user '(null)'. Reason: Not associated with a trusted SQL
Server connection. "

Could that have some to do with impersonation or delegation?

Thanks,

Carlos

> Hi Carols,
> When you setup the report server, you probably setup the website to use
[quoted text clipped - 24 lines]
> >
> > Carlos
Chris Hastings - 03 Nov 2005 06:59 GMT
Boy that is odd.  Is it possible that when you setup the report server
initially you didn't setup windows authentication for the server? you can
change it with rsconfig.exe, but I don't know any way to display the current
setup. I believe it hits it's internal database for the first time when you
run a report. Something to check anyway.
Chris

> Chris,
>
[quoted text clipped - 55 lines]
>> >
>> > Carlos
Bruce L-C [MVP] - 03 Nov 2005 15:48 GMT
How are you using RS. Are you doing this via another website (your own front
end). Does the report work when you are logged in from the server?

Signature

Bruce Loehle-Conger
MVP SQL Server Reporting Services

> Boy that is odd.  Is it possible that when you setup the report server
> initially you didn't setup windows authentication for the server? you can
[quoted text clipped - 63 lines]
>>> >
>>> > Carlos
Rod Stuart - 29 May 2006 14:05 GMT
G'day ,

Please can someone help URGENTLY..Been three days now and I'm going crazy!!
Thank you!!
I am having trouble deploying reports to SQL REporting Services 2005... get
the following error below...

_______________________

TITLE: Microsoft Report Designer
------------------------------

A connection could not be made to the report server
http://localhost/reportserver.

------------------------------
ADDITIONAL INFORMATION:

Client found response content type of 'text/html; charset=utf-8', but
expected 'text/xml'.
The request failed with the error message:
--
<html>
    <head>
        <title>
            SQL Server Reporting Services
        </title><meta name="Generator" content="Microsoft SQL Server Reporting
Services 9.00.1399.00" />
<meta name="HTTP Status" content="500" />
<meta name="ProductLocaleID" content="9" />
<meta name="CountryLocaleID" content="1033" />
<meta name="StackTrace" content />
<style>
            BODY {FONT-FAMILY:Verdana; FONT-WEIGHT:normal; FONT-SIZE: 8pt; COLOR:black}
            H1 {FONT-FAMILY:Verdana; FONT-WEIGHT:700; FONT-SIZE:15pt}
            LI {FONT-FAMILY:Verdana; FONT-WEIGHT:normal; FONT-SIZE:8pt; DISPLAY:inline}
            .ProductInfo {FONT-FAMILY:Verdana; FONT-WEIGHT:bold; FONT-SIZE: 8pt;
COLOR:gray}
            A:link {FONT-SIZE: 8pt; FONT-FAMILY:Verdana; COLOR:#3366CC;
TEXT-DECORATION:none}
            A:hover {FONT-SIZE: 8pt; FONT-FAMILY:Verdana; COLOR:#FF3300;
TEXT-DECORATION:underline}
            A:visited {FONT-SIZE: 8pt; FONT-FAMILY:Verdana; COLOR:#3366CC;
TEXT-DECORATION:none}
            A:visited:hover {FONT-SIZE: 8pt; FONT-FAMILY:Verdana; color:#FF3300;
TEXT-DECORATION:underline}

        </style>
    </head><body bgcolor="white">
        <h1>
            Reporting Services Error<hr width="100%" size="1" color="silver" />
        </h1><ul>
            <li>An internal error occurred on the report server. See the error log
for more details. (rsInternalError) <a
href="http://go.microsoft.com/fwlink/?LinkId=20476&EvtSrc=Microsoft.ReportingServices.
Diagnostics.Utilities.ErrorStrings&EvtID=rsInternalError&ProdName=Microsoft%20SQ
L%20Server%20Reporting%20Services&ProdVer=9.00.1399.00
"
target="_blank">Get Online Help</a></li><ul>
                <li>Object reference not set to an instance of an object.</li>
            </ul>
        </ul><hr width="100%" size="1" color="silver" /><span
class="ProductInfo">SQL Server Reporting Services</span>
    </body>
</html>
--. (Microsoft.ReportingServices.Designer)

------------------------------
BUTTONS:

OK
------------------------------
Chris G. - 27 Jul 2006 18:39 GMT
Rod,

Did you ever figure out the cause of this error message? I am getting the
same error message and do not understand why. The problem started when we
started playing with Active Directory computer account delegation settings to
get web site application credentials passed to Reporting Services and the
database containing the report data.

Thanks for any help you can offer.

Signature

Chris, SSSI

> G'day ,
>
[quoted text clipped - 65 lines]
> OK
> ------------------------------
Henry Chen - 08 Jun 2006 05:25 GMT
The problem is on credential. after you deploy your report to report server,
go to report manager, go to your report page, click on properties, click on
data source, retype your connection string, user name, and password. try
check mark "use as window integrated ...something like that", I can't
remember the exact sentence, run it, if not work try uncheck it, run it
again, if still not work, then your user name and password are not right.
(permission/security setting this user name is not correct)

> Chris,
>
[quoted text clipped - 44 lines]
> > >
> > > Carlos
Alex - 30 Jan 2008 10:15 GMT
How do you add groups to reporting services so users dont have to
authenticate when they are already auth with windows? Whenever they wish to
use the service a popup box appears to auth. Do i need to add these groups to
reports in report server (or parent access) or do i do this through the IIS
Security?

> Hi Carols,
> When you setup the report server, you probably setup the website to use
[quoted text clipped - 24 lines]
> >
> > Carlos
Bruce L-C  [MVP] - 30 Jan 2008 13:37 GMT
Do nothing at the IIS level. RS uses roles to determine what rights to give
people. By default if you are in the administrators group you are in the
admin group in RS. Everyone else needs to be placed in a role. What I have
found easiest is to have a local group that I add domain users and domain
groups to. Then I use the local group when adding to a role in RS. Use
Report Manager to add the group to a role. Read up on role based security in
Books OnLine.

Signature

Bruce Loehle-Conger
MVP SQL Server Reporting Services

> How do you add groups to reporting services so users dont have to
> authenticate when they are already auth with windows? Whenever they wish
[quoted text clipped - 42 lines]
>> >
>> > Carlos
Alex - 30 Jan 2008 14:18 GMT
This is what puzzles me the most, i have tried enterprise admin and domain
admin.

I created two groups in the AD, Report admin and browser, i added domain
admins/ enterprise admins to these groups for testing. I then later logged
into the report server while logged in as one of these but the popup auth box
still appears. I assumed that it would take my current login cred... and auth
me based on these,.

> Do nothing at the IIS level. RS uses roles to determine what rights to give
> people. By default if you are in the administrators group you are in the
[quoted text clipped - 50 lines]
> >> >
> >> > Carlos
Bruce L-C  [MVP] - 30 Jan 2008 14:35 GMT
When you enter you account in does it work for you?

Also, are you by any chance on a Windows 2003 server machine? With the added
IE security that 2003 server uses it causes this behavior.

Signature

Bruce Loehle-Conger
MVP SQL Server Reporting Services

> This is what puzzles me the most, i have tried enterprise admin and domain
> admin.
[quoted text clipped - 73 lines]
>> >> >
>> >> > Carlos
Alex - 30 Jan 2008 15:31 GMT
The login account works and yes the added IE security has been installed on
the 2003 server. Is this what is causing the login prompt?

> When you enter you account in does it work for you?
>
[quoted text clipped - 78 lines]
> >> >> >
> >> >> > Carlos
Bruce L-C  [MVP] - 30 Jan 2008 15:45 GMT
Yes. And I have never been able to figure out a way around it. Since most
users will be access reports from XP/Vista and not Windows 2003 this is an
anoyance but not a show stopper.

Signature

Bruce Loehle-Conger
MVP SQL Server Reporting Services

> The login account works and yes the added IE security has been installed
> on
[quoted text clipped - 98 lines]
>> >> >> >
>> >> >> > Carlos
Chris Hornung - 23 Oct 2006 19:08 GMT
Carlos,
I ran into the same problem in my environment.  In IIS we used Basic
Authentication, Added the domain as a realm and it also requires the Domain
Users to be added as SQL Users.

> I am trying to use Windows Authentication with my SQL Reporting Services. I
> created a Windows group and created a login account for that group in SQL and
[quoted text clipped - 7 lines]
>
> Carlos
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2009 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.