Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On


Add to briefcase

Can't execute report in Report Manager due to confusing permission errors; please help Expand / Collapse
Author
Message
Posted Monday, December 24, 2012 4:20 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: General Forum Members
Last Login: Saturday, February 23, 2013 2:49 PM
Points: 3, Visits: 11
I'm struggling with SSRS security. Appreciate any comments/answers to the following.

I have a Windows Server 2008 R2 SP1 server that is a member of an Active Directory domain. I was given a domain account that is a member of the server's Administrators group. I installed SQL Server 2008 R2 on this server, specifying my account for the Log On As values.

On this server, I used BIDS to create a shared datasource, a shared dataset ("Salespersons"), and a fairly complex report that utilizes these objects and a few non-shared datasets. (All of the data for this report is stored on another SQL Server 2008 R2 server that is also a member of the domain.) The reports execute fine from within BIDS. I can deploy the reports without difficulty. I can also use IE9 to log on to Report Manager, using my domain account, on the report server and on a Windows 7 workstation (that is also a member of the domain). When I attempt to execute the reports from within Report Manager, however, I get the following error:

An error has occurred during report processing (rsProcessingAborted)
The execution failed for the shared data set 'Salespersons'. (rsDataSetExecutionError)
Cannot create a connection to data source ' Data source for shared dataset'. (rsErrorOpeningConnection)
Logon failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.

Why is NT AUTHORITY\ANONYMOUS LOGON attempting to log on to the data source? Since the report executes OK in BIDS, what account is *BIDS* using to successfully log on?

I examined the properties of my data source in Report Manager. It's configured to connect using Windows Integrated Security; yet when I press the Test Connection button, it returns another 'Logon failed for user 'NT AUTHORITY\ANONYMOUS LOGON' error. Why is that? Why wouldn't it using Windows Integrated Security; i.e., my domain account? I tried various other Connect Using options, with no success.

I'm stumped. Any ideas?
Post #1400001
Posted Thursday, January 3, 2013 7:08 AM
SSCommitted

SSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommittedSSCommitted

Group: General Forum Members
Last Login: Yesterday @ 11:20 AM
Points: 1,945, Visits: 3,204
It sounds like you're hitting the double-hop problem, see if this link is any good to you:

http://blogs.technet.com/b/rob/archive/2011/11/23/enabling-kerberos-authentication-for-reporting-services.aspx

Cheers
Gaz
Post #1402356
Posted Friday, January 4, 2013 8:36 AM
SSC Rookie

SSC RookieSSC RookieSSC RookieSSC RookieSSC RookieSSC RookieSSC RookieSSC Rookie

Group: General Forum Members
Last Login: Tuesday, August 26, 2014 7:10 AM
Points: 43, Visits: 324
S
Post #1402913
Posted Friday, January 4, 2013 1:08 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: General Forum Members
Last Login: Saturday, February 23, 2013 2:49 PM
Points: 3, Visits: 11
Gazareth (1/3/2013)
It sounds like you're hitting the double-hop problem, see if this link is any good to you:

http://blogs.technet.com/b/rob/archive/2011/11/23/enabling-kerberos-authentication-for-reporting-services.aspx

Cheers
Gaz

Thanks! I will check that and then post my results.
Post #1403085
« Prev Topic | Next Topic »

Add to briefcase

Permissions Expand / Collapse